Privacy Policy of Nordibook.com
https://nordibook.com
("Store")

Dear User!
We care about your privacy and want you to feel comfortable while using our services. Therefore, we present below the most important information regarding the processing of your personal data and cookies used by our Store. These details have been prepared in accordance with GDPR (General Data Protection Regulation).

PERSONAL DATA ADMINISTRATOR

KATARZYNA KESJA HASIEWICZ-OBARZANEK, a business owner operating under the name KATARZYNA HASIEWICZ-OBARZANEK, registered in the Central Register and Information on Economic Activity maintained by the minister responsible for the economy, NIP: 8522539682, REGON: 385084790, ul. Mazowiecka 17/23, 70-526 Szczecin.

If you wish to contact us regarding the processing of your personal data, please write to us at: biuro@ksiazkiposzwedzku.pl.

YOUR RIGHTS

You have the right to request:

• Access to your personal data, including obtaining a copy (Article 15 GDPR or, if applicable, Article 13(1)(f) GDPR),
• Correction of your data (Article 16 GDPR),
• Deletion of your data (Article 17 GDPR),
• Restriction of data processing (Article 18 GDPR),
• Transfer of your data to another administrator (Article 20 GDPR).

You also have the right to:

• Object to the processing of your data due to reasons related to your particular situation, based on Article 6(1)(f) GDPR (legitimate interests pursued by us), including profiling (Article 21(1) GDPR);
• Object to the processing of your data for direct marketing purposes, including profiling (Article 21(2) GDPR).

Please contact us if you wish to exercise your rights. You can also express your objection to cookies (described below) through your browser settings.

If you believe your data is being processed unlawfully, you can file a complaint with the President of the Personal Data Protection Office.

PERSONAL DATA AND PRIVACY

Below you will find detailed information on how we process your data depending on your actions.

1. Placing an order in the Store - Part 1

Purpose:

• Fulfilling your order
  Legal Basis:
• Sales contract or contract for the provision of digital content (Article 6(1)(b) GDPR)
• Legal obligation related to accounting and product safety (Article 6(1)(c) GDPR)
  Retention Period:
• For the duration of the aforementioned contract
• Until the expiration of our legal obligations
• Additionally, your data will be stored until the expiry of the period in which claims can be made by you or us (more details in the last table of this section)
  What happens if you do not provide your data?
• You will not be able to place an order

2. Placing an order in the Store - Part 2

Purpose:

• Improving the quality of our services through user feedback via a satisfaction survey platform
  Legal Basis:
• Our legitimate interest in processing your data to conduct satisfaction surveys (Article 6(1)(f) GDPR)
  Retention Period:
• If you do not provide feedback – for 30 days after your purchase or until we consider your objection
• If you provide feedback – until its deletion or until we consider your objection
• Additionally, your data will be stored until the expiry of the period in which claims can be made by you or us (more details in the last table of this section)
  What happens if you do not provide your data?
• Your feedback on our services will not be considered for future improvements

(depending on which applies in a given case)

For more details, please refer to our complete Privacy Policy.

1. Creating an Account in the Store

For what purpose? To execute the agreement for the provision of account management services in the Store.

On what basis? Agreement for the provision of services (Article 6(1)(b) of the GDPR).

For how long? For the duration of the aforementioned agreement. Additionally, your data will be processed until the expiration of the period in which claims may be pursued—by you or by us. (More information on this can be found in the last table of this section.)

What happens if you do not provide data? You will not be able to create an account and use its functions, such as browsing order history or checking order status.

1. Contacting Us (e.g., to ask a question)

For what purpose? To handle your inquiries or requests.

On what basis? Agreement or actions taken at your request to conclude an agreement (Article 6(1)(b) of the GDPR) – if your inquiry or request concerns an agreement we are or may be a party to. Our legitimate interest in processing your data to communicate with you (Article 6(1)(f) of the GDPR) – if your inquiry or request is unrelated to an agreement.

For how long? For the duration of the agreement binding us or—if no agreement is concluded—until the expiration of the claim period (see the last table of this section). Until the expiration of the claim period (see the last table of this section) or until we consider your objection to processing. Additionally, your data will be processed until the expiration of the period in which claims may be pursued—by you or by us. (More information on this can be found in the last table of this section.)

What happens if you do not provide data? We will not be able to respond to your inquiry or request. *Depending on which applies in a given case.

1. Browser Settings or Other Similar Actions Allowing Marketing Activities

For what purpose? Direct marketing through personalized advertising. (More on this in the "Profiling" and "Cookies" sections of the Privacy Policy.)

On what basis? Our legitimate interest in processing data for the above purpose (Article 6(1)(f) of the GDPR).

For how long? Until the expiration or deletion of cookies used for marketing purposes.*

What happens if you do not provide data? You will not receive product or service suggestions that may interest you. *Depending on which applies in a given case.

1. Browser Settings or Other Similar Actions Allowing Analytical Activities

For what purpose? To analyze how you use and navigate the Store's website to improve its functionality. (More on this in the "Analytical Activities" and "Cookies" sections of the Privacy Policy.)

On what basis? Our legitimate interest in processing data for the above purpose (Article 6(1)(f) of the GDPR).

For how long? Until the expiration or deletion of cookies used for analytical purposes.*

What happens if you do not provide data? We will not consider how you use and navigate the Store's website in development work. *Depending on which applies in a given case.

1. Your Consent to Receive Marketing Content from Us (e.g., Special Offer Information)

For what purpose? Sending marketing information, particularly special offers. Analyzing the effectiveness of our messages to establish general principles for effective communication. (More on this in the "Analytical Activities" section of the Privacy Policy.)

On what basis? Your consent to our marketing activities (Article 6(1)(a) of the GDPR). Our legitimate interest in processing data for the above purpose (Article 6(1)(f) of the GDPR).

For how long? Until you withdraw your consent – remember, you can withdraw consent at any time. Data processing before you withdraw consent remains lawful. Until we consider your objection to processing. Additionally, your data will be processed until the expiration of the period in which claims may be pursued—by you or by us. (More information on this can be found in the last table of this section.)

What happens if you do not provide data? You will not receive our marketing materials, including special offer information.

1. Subscribing to the Newsletter

For what purpose? Sending the newsletter. Analyzing the effectiveness of our messages to establish general principles for effective communication. (More on this in the "Analytical Activities" section of the Privacy Policy.)

On what basis? Agreement for the provision of the newsletter service (Article 6(1)(b) of the GDPR). Our legitimate interest in processing data for the above purpose (Article 6(1)(f) of the GDPR).

For how long? Until you unsubscribe from our newsletter. Until we consider your objection to processing. Additionally, your data will be processed until the expiration of the period in which claims may be pursued—by you or by us. (More information on this can be found in the last table of this section.)

What happens if you do not provide data? You will not be able to receive information about the Store and our services.

1. Taking Action or Omitting Action That May Give Rise to Claims Related to the Store or Our Services

For what purpose? To establish, pursue, or defend potential claims related to a concluded agreement or provided services.

On what basis? Our legitimate interest in processing personal data for the above purpose (Article 6(1)(f) of the GDPR).

For how long? Until the expiration of the limitation period for claims or until we consider your objection to processing.*

What happens if you do not provide data? We will not be able to establish, pursue, or defend claims. *Depending on which applies in a given case.

PROFILING

We conduct profiling in the Store – this will apply to you if you allow such activities. Profiling involves automatically assessing which products or services you may be interested in based on the content you view. As a result, product or service advertisements displayed as part of the online services you use will be more tailored to you and your needs.

The profiling we conduct does not result in decisions that produce legal effects concerning you or similarly significantly affect you.

ANALYTICAL ACTIVITIES

We conduct analytical activities on the Store’s website to enhance its intuitiveness and accessibility – this will apply to you if you allow such activities. As part of the analysis, we will consider how you navigate the Store – for example, how much time you spend on a given page or where you click. Thanks to this, we can optimize the Store’s layout, appearance, and content to improve its functionality.

Additionally, if you agree to receive marketing messages or newsletters, we may analyze the effectiveness of our communications. For example, we may check if and how they influenced activity in our Store. These actions help us establish general principles for sending such messages – for example, in terms of optimal sending times or effective message formulation.

DATA SECURITY

When processing your personal data, we apply organizational and technical measures in compliance with applicable legal provisions, including encrypting connections using an SSL/TLS certificate.

COOKIES

Our Store, like most websites, uses cookies. These files:

• Are stored in your device’s memory (computer, phone, etc.).
• Do not cause changes in your device settings.

In this Store, cookies are used for:

• Statistical purposes
• Marketing purposes

To learn how to manage cookies, including how to disable them in your browser, you can use your browser's help file. You can read information about this by pressing the F1 key in your browser. Additionally, you will find relevant tips on the following subpages, depending on the browser you are using:

Google Chrome

Opera

Safari

Mozilla Firefox

Microsoft Edge

Below you will find information about the functions of the cookies we process and their validity period.

cookie name cookie validity period cookie function

_ga duration of the session tracking traffic in the store for statistical purposes

By using the appropriate options of your browser, you can at any time:

delete cookies,

block the use of cookies in the future.

In such cases, we will no longer process it.

EXTERNAL SERVICES/DATA RECIPIENTS

We use the services of external entities that support us in running our business. We entrust them with processing your data - these entities process data only on our documented instructions.

Below you will find a list of recipients of your data:

TRANSFER OF DATA OUTSID
 THE EUROPEAN UNION