Privacy Policy of the dr Novicka Shop https://drnovicka.com (“Shop”)

Dear User!

We care about your privacy and want you to feel comfortable while using our services. Therefore, we present you with the most important information about the rules for processing your personal data and the cookies used by our Shop. This information has been prepared in accordance with GDPR, the General Data Protection Regulation.

Personal Data Administrator

HolisticNovi sp. z o.o. based at Al. Piastów 85, 52-424 Wrocław, registered in the National Court Register – business register by the DISTRICT COURT FOR WROCŁAW FABRYCZNY IN WROCŁAW, VI ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER, under KRS number 0001110048, NIP 0001110048, REGON number 0001110048, share capital 5000.00 PLN.

If you wish to contact us regarding the processing of your personal data, please write to us at: sklep@drnovicka.com.

Your Rights

You have the right to request:

• access to your personal data, including obtaining a copy of your data (art. 15 GDPR or – if applicable – art. 13 sec. 1 lit. f GDPR),
• correction (art. 16 GDPR),
• deletion (art. 17 GDPR),
• restriction of processing (art. 18 GDPR),
• data portability to another administrator (art. 20 GDPR).

And also the right to:

• object at any time to the processing of your data:
  • for reasons related to your particular situation – to the processing of your personal data based on art. 6 sec. 1 lit. f GDPR (i.e., based on our legitimate interests) (art. 21 sec. 1 GDPR);
  • if personal data are processed for direct marketing purposes, to the extent that the processing is related to such direct marketing (art. 21 sec. 2 GDPR).

Contact us if you want to exercise your rights. You can express your objection regarding our use of cookies (which you will read about below), especially through the appropriate settings of your browser.

If you believe that your data is being processed unlawfully, you may file a complaint with the President of the Personal Data Protection Office.

Personal Data and Privacy

Below you will find detailed information on the processing of your data depending on the actions you take.

1. Ordering in the Shop – part 1

For what purpose?
execution of your order
On what basis?
sales contract (art. 6 sec. 1 lit. b GDPR)	legal obligation related to accounting, requiring us to process your personal data (art. 6 sec. 1 lit. c GDPR)
How long?
for the duration of the above-mentioned contract	until the expiration of our legal obligation related to accounting
in addition, your data will be processed until the period during which claims can be made – by you or by us (more information on this topic can be found in the last table of this section)
What happens if you do not provide data?
you will not be able to place an order

2. Ordering in the Shop – part 2

For what purpose?
improving the quality of our services based on feedback provided by Users through the satisfaction survey service
On what basis?
our legitimate interest in processing your data to conduct research on your satisfaction with our services (art. 6 sec. 1 lit. f GDPR)
How long?
if you do not express your opinion – for a period of 30 days from your purchase or until we take into account your objection to the processing; if you express your opinion – until its deletion or until we take into account your objection to the processing*
in addition, your data will be processed until the period during which claims can be made – by you or by us (more information on this topic can be found in the last table of this section)
What happens if you do not provide data?
your opinion regarding our services will not be considered in the development of our services

* depending on which applies in the specific case 

3. Creating an Account in the Shop

For what purpose?
execution of the contract for providing account management services in the Shop
On what basis?
service contract (art. 6 sec. 1 lit. b GDPR)
How long?
for the duration of the above-mentioned contract
in addition, your data will be processed until the period during which claims can be made – by you or by us  (more information on this topic can be found in the last table of this section)
What happens if you do not provide data?
you will not be able to create an account and use its features, such as viewing order history or checking order status

4. Contacting Us (e.g., to Ask a Question)

For what purpose?
handling your inquiries or requests
On what basis?
contract or actions taken at your request aimed at concluding it (art. 6 sec. 1 lit. b GDPR) – if your inquiry or request concerns a contract to which we are or may be a party	our legitimate interest in processing your data to communicate with you (art. 6 sec. 1 lit. f GDPR) – if your inquiry or request is not related to a contract
How long?
for the duration of the binding contract or – if the contract is not concluded – until the expiration of the period for making claims – see the last table of this section*	until the expiration of the period for making claims – see the last table of this section – or until we take into account your objection to the processing*
in addition, your data will be processed until the period during which claims can be made – by you or by us  (more information on this topic can be found in the last table of this section)
What happens if you do not provide data?
we will not be able to respond to your inquiry or request

* depending on which applies in the specific case 

5. Browser Settings or Other Similar Actions Allowing for Analytical Activities

For what purpose?
analysis of how you use and navigate through the Shop’s website to improve its functionality  (you can read more about this in the “Analytical Activities” and “Cookies” sections of the Privacy Policy)
On what basis?
our legitimate interest in processing data for the purpose stated above (art. 6 sec. 1 lit. f GDPR)
How long?
until the expiration of validity or deletion of the cookies used for analytical purposes by you*
What happens if you do not provide data?
we will not take into account how you use and navigate the Shop’s website in its development efforts

* depending on which applies in the specific case 

6. Expressing Your Consent to Receive Marketing Content from Us (e.g., Information about Special Offers)

For what purpose?
sending marketing information, especially special offers	analyzing the effectiveness of the messages we send, to determine the general principles regarding effective message delivery in our activities  (you can read more about this in the “Analytical Activities” section of the Privacy Policy)
On what basis?
your consent to our marketing activities (art. 6 sec. 1 lit. a GDPR)	our legitimate interest in processing data for the purpose stated above (art. 6 sec. 1 lit. f GDPR)
How long?
until you withdraw your consent – remember, you can withdraw your consent at any time. Processing data until you withdraw your consent remains lawful.	until we take into account your objection to the processing
in addition, your data will be processed until the period during which claims can be made – by you or by us  (more information on this topic can be found in the last table of this section)
What happens if you do not provide data?
you will not receive our marketing materials, including information about our special offers

7. Taking Action or Failing to Take Action that May Lead to Claims Related to the Shop or Our Services

For what purpose?
determining, pursuing, or defending potential claims related to the concluded contract or services provided
On what basis?
our legitimate interest in processing personal data for the purpose stated above (art. 6 sec. 1 lit. f GDPR)
How long?
until the expiration of the limitation period for claims or until we take into account your objection to the processing*
What happens if you do not provide data?
no possibility to determine, pursue, or defend claims

* depending on which applies in the specific case

Publishing Data

If you decide to publish a comment, its content and your signature will be visible to other Shop users.

We do not disclose your email address to other users unless you do so yourself.

Analytical Activities

As part of the Shop’s website, we conduct analytical activities aimed at increasing its intuitiveness and accessibility – this will apply to you if you allow such activities. In the analysis, we will consider how you navigate through the Shop – e.g., how much time you spend on a given subpage or where you click in the Shop. This will help us optimize its layout, appearance, and content to improve functionality.

In addition, if you express your willingness to receive marketing messages from us, we can analyze the effectiveness of our sending. For example, we can check whether and how it affected your activity in our Shop. Such actions will help us determine general principles regarding the sending of such messages in our activities – e.g., in terms of optimal sending times or how to formulate effective content.

Data Security

We apply organizational and technical measures to process your personal data in accordance with applicable legal regulations, including using SSL/TLS connection encryption.

Cookies

Our Shop, like most websites, uses so-called cookies. These files:

• are saved in the memory of your device (computer, phone, etc.);
• do not change the settings of your device.

In this Shop, cookies are used for:

• remembering your session
• statistical purposes
• marketing purposes
• providing Shop functions

To learn how to manage cookies, including how to disable them in your browser, you can refer to the help file of your browser. You can find information on this topic by pressing the F1 key in your browser. Additionally, you can find appropriate instructions on the following subpages, depending on the browser you are using:

• Google Chrome
• Opera
• Safari
• Mozilla Firefox
• Microsoft Edge

Below you will find information about the functions processed by our cookies and their validity period.

cookie name	cookie validity period	cookie function
_ga	13 months	Traffic tracking

Using the appropriate options in your browser, you can at any time:

• delete cookies,
• block the use of cookies in the future.

In such cases, we will no longer process them.

External Services / Data Recipients

We use the services of external entities that support us in conducting our business. We entrust them with the processing of your data – these entities process data only at our documented request.

Below you will find a list of recipients of your data:

ACTION	DATA RECIPIENTS	DATA TRANSFER OUTSIDE THE EUROPEAN UNION
any action related to the Shop	entity providing us with technical/IT support	not applicable
	software supplier for sales management	not applicable
staying on the Shop’s website with settings allowing for marketing activities	entity providing marketing services	not applicable
staying on the Shop’s website with settings allowing for analytical activities	entity enabling analytical activities on the website	not applicable
placing an order in the Shop	payment provider	not applicable
	entity delivering the product to you	not applicable
	supplier of software facilitating business operations (e.g., accounting software)	not applicable
	supplier of standard office software (including email)	not applicable
	accounting office	not applicable
	entity providing a payment installment system	not applicable
using services provided to us in connection with the Shop by social media	social media	not applicable
participating in a satisfaction survey of our services or products	entities enabling posting opinions about the Shop or products and comparing them	not applicable
contacting us (e.g., asking a question)	supplier of standard office software (including email)	not applicable

Additionally:

appropriate public authorities to the extent that we are obliged to provide them with data.