Privacy Policy

“Dragnarok Paweł Jurczyk,” located in Warsaw, Poland, with NIP/TAX ID: 1181697228, is committed to protecting your privacy. If you have any questions or concerns about your personal data, please contact us at [email protected]. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website. By using our site or services, you consent to the processing of your personal data as described in this Privacy Policy.

Table of Contents

1. Definitions used in this Policy
2. Data protection principles we follow
3. What rights do you have regarding your Personal Data
4. What Personal Data we gather about you
5. How we use your Personal Data
6. Marketing Services
7. Who else has access to your Personal Data
8. How we secure your data
9. Information about cookies
10. Privacy policies of other websites
11. Contact information

Definitions

Policy - this Privacy Policy. Personal Data – any information relating to an identified or identifiable natural person. Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data. Data subject - a natural person whose Personal Data is being Processed. Child - a natural person under 16 years of age. User - any natural person visiting the Service or using one or more services or functionalities described in the Policy. Dragnarok/We/us/our company/our organization (either capitalized or not) – "Dragnarok Paweł Jurczyk" Controller - The entity that determines the purposes and means of processing personal data. Processor - The entity that processes personal data on behalf of the controller. Website - The website operated by Dragnarok at https://dragnarok.com. Consent: Any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them. Third Party: Any entity other than the Data Subject, Controller, Processor, and persons who, under the direct authority of the Controller or Processor, are authorized to process Personal Data.

Data Protection Principles

We promise to follow the following data protection principles:

• Processing is lawful, fair and transparent. Our Processing activities have lawful grounds. We always consider your rights before Processing Personal Data. We will provide you information regarding Processing upon request.
• Processing is limited to the purpose. Our Processing activities fit the purpose for which Personal Data was gathered.
• Processing is done with minimal data. We only gather and Process the minimal amount of Personal Data required for any purpose.
• Processing is limited with a time period. We will not store your personal data for longer than needed.
• We will do our best to ensure the accuracy of data.
• We will do our best to ensure the integrity and confidentiality of data.
• We do not knowingly collect personal data from children under the age of 16. If we become aware that we have inadvertently received personal data from a child under the age of 16, we will delete such information from our records.

Data Subject's rights

We want to ensure you are fully aware of all your data protection rights. Every user is entitled to the following:

• Right to Information: You have the right to know whether your Personal Data is being processed, what data is gathered, from where it is obtained, and why and by whom it is processed.
• Right to Access: You have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data.
• Right to Rectification: You have the right to request the correction of any information you believe is inaccurate or incomplete.
• Right to Erasure: You have the right to request that our company erase your personal data under certain conditions.
• Right to Restrict Processing: You have the right to request that our company restrict the processing of your personal data under certain conditions.
• Right to Object to Processing: You have the right to object to the processing of your personal data, for example, in the case of direct marketing.
• Right to Object to Automated Processing: You have the right to object to automated processing, including profiling, and not to be subject to a decision based solely on automated processing.
• Right to Data Portability: You have the right to obtain your personal data in a machine-readable format or, if feasible, as a direct transfer from one processor to another.
• Right to Lodge a Complaint: If we refuse your request under the Rights of Access, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled, please contact us.
• Right to the Help of Supervisory Authority: You have the right to seek the help of a supervisory authority and the right for other legal remedies such as claiming damages.
• Right to Withdraw Consent: You have the right to withdraw any given consent for the processing of your personal data. The withdrawal of consent does not affect data processing carried out before its withdrawal. Consents may be revoked at any time without affecting the lawfulness of the processing.

If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Each request will be processed as soon as possible, but not later than within 30 days. If you would like to exercise any of these rights, please use our privacy tools or contact us at [email protected].

What personal data we collect?

Information you have provided us with You directly provide our company with most of the data we collect. We collect data and process data when you:

• Register online or place an order for any of our products or services.
• Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
• Contact us via email or any contact form on our website.

This might be your e-mail address, names, phone number, addresses, home address etc – mainly information that is necessary for delivering you a product/service or to enhance your customer experience with us. We save the information you provide us with in order for you to comment or perform other activities on the website. This information includes, for example, your name and e-mail address. Information automatically collected about you This includes information that is automatically stored by cookies and other session tools. For example, your shopping cart information, your IP address, your shopping history (if there is any), newsletter: opens, clicks, opt-ins, etc. This information is used to improve your customer experience. When you use our services or look at the contents of our website, your activities may be logged. Information from our partners We gather information from our trusted partners with confirmation that they have legal grounds to share that information with us. This is either information you have provided them directly with or that they have gathered about you on other legal grounds. See the list of our partners here. Publicly available information We might gather information about you that is publicly available. We collect information about you during the checkout process on our store. While you visit our site, we’ll track:

• Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
• Location, IP address and browser type: we’ll use this for purposes like estimating taxes and shipping
• Shipping address: we’ll ask you to enter this so we can, for instance, estimate shipping before you place an order, and send you the order!

When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

• Send you information about your account and order
• Respond to your requests, including refunds and complaints
• Process payments and prevent fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as calculating taxes
• Improve our store offerings
• Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders. We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 5 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses. We will also store comments or reviews if you choose to leave them.

How we use your Personal Data

We use your Personal Data in order to:

• provide our service to you. This includes, for example, registering your account; providing you with other products and services that you have requested; providing you with promotional items at your request and communicating with you in relation to those products and services; communicating and interacting with you; and notifying you of changes to any services.
• process your order and manage your account;
• email you with special offers on other products and services we think you might like;
• enhance your customer experience;
• fulfil an obligation under law or contract;

When Our company processes your order, it may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases. We use your Personal Data on legitimate grounds and/or with your Consent. On the grounds of entering into a contract or fulfilling contractual obligations, we Process your Personal Data for the following purposes:

• to identify you;
• to provide you a service or to send/offer you a product;
• to communicate either for sales or invoicing;

On the ground of legitimate interest, we Process your Personal Data for the following purposes:

• to send you personalized offers* (from us and/or our carefully selected partners);
• to administer and analyse our client base (purchasing behaviour and history) in order to improve the quality, variety, and availability of products/ services offered/provided;
• to conduct questionnaires concerning client satisfaction;

As long as you have not informed us otherwise, we consider offering you products/services that are similar or same to your purchasing history/browsing behaviour to be our legitimate interest. With your consent we Process your Personal Data for the following purposes:

• to send you newsletters and campaign offers (from us and/or our carefully selected partners);
• for other purposes we have asked your consent for;

We Process your Personal Data in order to fulfil obligation rising from law and/or use your Personal Data for options provided by law. We reserve the right to anonymise Personal Data gathered and to use any such data. We will use data outside the scope of this Policy only when it is anonymised. We save your billing information and other information gathered about you for as long as needed for accounting purposes or other obligations deriving from law, but not longer than 5 years. We might process your Personal Data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was gathered. To do this, we will ensure that:

• the link between purposes, context and nature of Personal Data is suitable for further Processing;
• the further Processing would not harm your interests and
• there would be appropriate safeguard for Processing.

We will inform you of any further Processing and purposes.

How long we retain your data

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Personal Data will be processed: - Contractual Basis: For the duration of the contract, if the processing is based on a contract. - Correspondence: For the duration of the correspondence with the User. The processing period may be extended if necessary for the establishment, investigation, or defense of possible claims, and thereafter only if and to the extent required by law. - Consent Basis: Until the withdrawal of the consent given or an effective objection to the processing in cases where the legal basis for the processing is the legitimate interest of the Administrator. The period of data processing may be extended where necessary for the establishment and assertion of possible claims or the defense against claims, and thereafter only where and to the extent required by law. After the expiry of the processing period, the data shall be irreversibly deleted or anonymized. If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

How we secure your data

We do our best to keep your Personal Data safe. We use safe protocols for communication and transferring data (such as HTTPS). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and attacks. Even though we try our best we can not guarantee the security of information. However, we promise to notify suitable authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur. If you have an account with us, note that you have to keep your username and password secret. Media If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Who else can access your Personal Data

We do not share your Personal Data with strangers. Personal Data about you is in some cases provided to our trusted partners in order to either make providing the service to you possible or to enhance your customer experience. We only work with Processing partners who are able to ensure adequate level of protection to your Personal Data. We disclose your Personal Data to third parties or public officials when we are legally obliged to do so. We might disclose your Personal Data to third parties if you have consented to it or if there are other legal grounds for it. Payment Processors

• Stripe: We accept payments through Stripe. When processing payments, some of your data will be passed to Stripe, including information required to process or support the payment, such as the purchase total and billing information. Please see the Stripe Privacy Policy for more details.

Email Service Providers

• AWS SES: We use Amazon Web Services Simple Email Service (AWS SES) to send emails. When sending emails, some of your data will be passed to AWS SES, including your email address and any information contained in the email. Please see the AWS Privacy Policy for more details.

Cookies and other technologies we use

We use cookies and/or similar technologies to analyse customer behaviour, administer the website, track users' movements, and to collect information about users. This is done in order to personalise and enhance your experience with us. We use cookies in a range of ways to improve your experience on our website, including:

• Essential Cookies: Necessary for the website to function properly. These cookies do not collect personal information.
• Analytical/Performance Cookies: Help us understand how visitors interact with our site by collecting and reporting information anonymously.
• Functional Cookies: Allow us to remember your preferences and personalize your experience, such as language and location settings.
• Targeting/Advertising Cookies: Track your browsing habits to deliver personalized advertisements. These cookies may be placed by advertising networks with our permission and may collect information about your browser, device, and IP address.

We use third-party cookies from our trusted partners for these purposes, including analytics services, advertising networks, and social media plugins. We use an external tool to manage cookie consent preferences. This tool sets a cookie to remember your consent preferences. It is necessary for the cookie banner to work properly. You can also manage your cookie preferences through your browser settings or our cookie consent management tool. Removing or disabling cookies may affect some features of our website. For more information about cookies, visit allaboutcookies.org. Alternatively, you can control third-party cookies using privacy enhancement platforms such as optout.aboutads.info or youronlinechoices.com.

Marketing Services

Our partners with third-party service providers that may use various Cookie Technologies to permit us and them to learn about which ads you see and click when you visit our site, the Apps, and affiliated sites or to show you ads on and off our site. These may include things such as:

• Frequency capping, which limits the number of times a user’s browser or mobile device displays the same ad;
• Attribution tracking, which estimates which advertising or marketing source brought someone to us, or determines which marketing source led to actions like a visit or a purchase;
• Remarketing and retargeting, which shows relevant ads to an audience based on prior shopping and browsing patterns on our website;
• Audience targeting, which refers to targeting advertisements to a large audience based on the audience’s known or inferred demographics; and
• Cross-device recognition, which recognizes actions across multiple devices or browsers.

Some third-party service providers may provide information like demographics, cross-device information, or interest categories from a combination of sources that, while not identifying you personally, permit us to provide you with more relevant and useful advertising. In some cases, this information may have non-marketing performance analytics uses as well. These technologies allow a partner to recognize your computer, mobile device or network device (like an IoT device such as a voice-activated assistant or smart TV), each time you visit our website or other websites and mobile applications based on data like a cookie, your IP address, or device ID, but do not allow access to other personal information from us. However, these technologies may allow us or a third party to recognize you, either from a single device or across devices, over time. These third parties are required to follow applicable laws, self-regulatory programs, and our data protection rules where applicable. We do not have control over these third parties, who each have their own privacy policies and privacy practices. For audience targeting, we may share hashed identifiers that represent an email address or name with partners Google and/or Facebook so they can provide us with audiences interested in specific types of products and services. Google and/or Facebook will only provide this information, and can only identify you, based on their separate policies and agreements with their users. If you have subscribed to our newsletter or if you are a member of our website (you can log in) or if you have purchased on our website, there is a good chance you will receive emails from us. We will only send you emails which you have signed up to receive, or which pertain to the services we provided to you. To send you emails, we use the name and email address you provide us. Our site also logs the IP address you used when you signed up for the service to prevent abuse of the system. This website can send emails through the MailPoet sending service. This service allows us to track opens and clicks on our emails. We use this information to improve the content of our newsletters. No identifiable information is otherwise tracked outside this website except for the email address. We would like to send you information about products and services of ours that we think you might like. If you have agreed to receive marketing, you may always opt-out at a later date. You have the right at any time to stop our company from contacting you for marketing purposes or giving your data to other members of the our company Group. If you no longer wish to be contacted for marketing purposes, please contact us at our email: [email protected].

Automated Decision-Making and Profiling

We may use automated decision-making and profiling to provide you with personalized content, offers, and services. These processes help us understand your preferences and improve your experience with us. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. If you wish to exercise this right, please refer to our data protection rights section for more information.

Privacy policies of other websites

The Our company website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy. Social Media Technologies When you use social media platforms with our website, each platform has its own technologies and policies to be aware of. For information on limiting the use of widgets and sharing functions with social networks, see below: For Twitter widgets, you can find more information here. For Facebook widgets, you can find more information here. For Pinterest widgets, you can find more information here. Embedded content from other websites Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Data Breach Notification

In the event of a data breach, we will notify the appropriate supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.

Contact Information

If you have any questions about our privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at our email: [email protected]. Supervisory Authority Website: https://www.uodo.gov.pl/ Email: [email protected]