Privacy Policy

This Privacy Policy defines the rules for collecting, processing, and protecting personal data in connection with the use of the website ubucha.pl or other domains administered by the Administrator of this service: ubucha.pl

Data of the entity processing personal data:

Zieloni Handlowcy Sp. z o. o.
ul. Czereśniowa 13B
02-457 Warsaw
NIP: 5223243877

Michał: +48 796 416 643
michal@zielonihandlowcy.pl

The administrator of personal data of individuals accessing the Service, provided in connection with the use of services, is the Administrator of the service konopnybuch.pl, email address: buch@konopnybuch.pl. 

The administrator processes personal data in accordance with the provisions of law on the protection of personal data, in particular: Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC, the Act of 18 July 2002 on the provision of services by electronic means (consolidated text: Journal of Laws 2013, item 1422); Regulation of the Minister of the Interior and Administration of 29 April 2004 on the documentation of the processing of personal data and the technical and organizational conditions to which devices and information systems used for the processing of personal data should comply (Journal of Laws No. 100, item 1024).

Type of processed data, purposes, and legal basis

2.1. The company collects information about individuals performing legal actions not directly related to their business activity, individuals conducting business or professional activity in their own name, and individuals representing legal entities or organizational units that are not legal persons, which the law grants legal capacity, conducting business or professional activity in their own name, hereinafter collectively referred to as Clients.

2.2. Personal data of Clients are collected in the case of:

1. a) registration of an account in the Online Store, in order to create an individual account and manage that account. Legal basis: necessity for the performance of the contract for the provision of the Account service (art. 6 sec. 1 lit. b GDPR)
2. b) placing an order in the Online Store, in order to perform the sales contract. Legal basis: necessity for the performance of the sales contract (art. 6 sec. 1 lit. b GDPR)
3. c) subscribing to the newsletter, in order to perform the contract for the service provided electronically.

 2.3. In the case of registering an account in the Online Store, the Client provides:

1. a) email address;
   b) address data:
   - postal code and locality;
   - country;
   - street with house/apartment number.
   c) first and last name;
   d) phone number.

2.4. During the registration of an account in the Online Store, the Client independently sets an individual access password to their account. The Client can change the password later, under the rules described in point 7. 

2.5. In the case of placing an order in the Online Store, the Client provides the following data:

1. a) email address;
   b) address data:
   - postal code and locality;
   - country;
   - street with house/apartment number.
   c) first and last name;
   d) phone number.

2.6. In the case of Entrepreneurs, the above scope of data is additionally expanded to include:

1. a) the name of the Entrepreneur;
   b) NIP number.

2.7. In the case of using the Newsletter service, the Client provides only their email address.

1. General Information

1. This policy applies to the website www, operating at the url: konopnybuch.pl
2. The operator of the service and the Administrator of personal data is: ZIELONI HANDLOWCY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ NIP 5223243877 KRS 0001007583 REGON 523906394 buch@konopnybuch.pl +48 796416643
3. The contact email address of the operator: buch@konopnybuch.pl
4. The operator is the Administrator of your personal data in relation to the data provided voluntarily in the Service.
5. The Service uses personal data for the following purposes:
   1. Conducting the newsletter
   2. Conducting the comment system
   3. Conducting the online forum
   4. Conducting online chat conversations
   5. Conducting a classified ads system
   6. Displaying user ads
   7. Preparing, packing, shipping goods
   8. Executing ordered services
   9. Presenting offers or information
6. The Service performs functions of obtaining information about users and their behavior in the following way:
   1. Through voluntarily entered data in forms, which are entered into the Operator’s systems.
   2. By saving cookies on end devices (so-called “cookies”).

2. Selected data protection methods used by the Operator

1. Login and personal data entry points are protected at the transmission layer (SSL certificate). As a result, personal data and login data entered on the site are encrypted on the user’s computer and can only be read on the target server.
2. Personal data stored in the database are encrypted in such a way that only the Operator possessing the key can read them. This protects the data in case the database is stolen from the server.
3. The service uses two-factor authentication, which provides an additional form of protection for logging into the Service.
4. The Operator periodically changes its administrative passwords.
5. To protect data, the Operator regularly performs backups.
6. An essential element of data protection is the regular update of all software used by the Operator to process personal data, which particularly means regular updates of software components.

3. Hosting

1. The service is hosted (technically maintained) on the operator’s server: zenbox.pl

4. Your rights and additional information on the use of data

1. In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill obligations imposed on the Administrator. This applies to such groups of recipients:
   • hosting company on the basis of entrustment
   • couriers
   • operators of the comment system
   • companies providing marketing services on behalf of the Administrator
2. Your personal data processed by the Administrator will not be kept longer than necessary to perform the related activities specified by separate regulations (e.g., accounting). Regarding marketing data, the data will not be processed longer than for 3 years.
3. You have the right to request from the Administrator:
   • access to your personal data,
   • rectification,
   • deletion,
   • restriction of processing,
   • and data portability.
4. You have the right to object to the processing indicated in point 3.3 c) against the processing of personal data for the purposes of legitimate interests pursued by the Administrator, including profiling, provided that the right to object cannot be exercised in the case of the existence of important legally justified grounds for processing, overriding your interests, rights, and freedoms, in particular the establishment, assertion, or defense of claims.
5. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary for the service of the Service.
7. Automated decision-making actions, including profiling, may be taken against you in order to provide services under the concluded contract and for the purpose of direct marketing conducted by the Administrator.
8. Personal data is not transferred from third countries within the meaning of the personal data protection regulations. This means that we do not send them outside the European Union.

5. Information in forms

1. The Service collects information voluntarily provided by the user, including personal data, if they are provided.
2. The Service may save information about connection parameters (timestamp, IP address).
3. In some cases, the Service may save information facilitating the linking of data in the form with the email address of the user filling out the form. In such a case, the user’s email address appears within the URL of the page containing the form.
4. The data provided in the form are processed for the purpose resulting from the function of the specific form, e.g., to carry out the service request process or business contact, registration of services, etc. Each time the context and description of the form clearly inform what it is for.

6. Logs of the Administrator

1. Information about user behavior on the service may be logged. This data is used to administer the service.

7. Significant marketing techniques

1. The Operator uses statistical analysis of traffic on the site through Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user’s end device. Regarding information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
2. The Operator uses remarketing techniques, allowing for the adjustment of advertising messages to user behavior on the site, which may give the illusion that the user’s personal data is being used to track them, however, in practice, no personal data is transferred from the Operator to advertising operators. The technological condition for such actions is that cookie support is enabled.
3. The Operator uses the Facebook pixel. This technology allows Facebook (Facebook Inc. based in the USA) to know that a registered person is using the Service. It is based on data for which it is the administrator itself; the Operator does not transfer any additional personal data to Facebook. The service is based on the use of cookies on the user’s end device.
4. The Operator uses a solution that examines user behavior by creating heat maps and recording behavior on the site. This information is anonymized before being sent to the service operator so that they do not know which individual it concerns. In particular, recorded data does not include entered passwords and other personal data.
5. The Operator uses a solution that automates the operation of the Service concerning users, e.g., it may send an email to the user after visiting a specific subpage, provided that they have consented to receive commercial correspondence from the Operator.

8. Information about cookies

1. The Service uses cookies.
2. Cookies (so-called “cookies”) are IT data, in particular text files, which are stored on the end device of the User of the Service and are intended for use on the websites of the Service. Cookies usually contain the name of the website from which they come, the time of their storage on the end device, and a unique number.
3. The entity placing cookies on the end device of the User of the Service and gaining access to them is the operator of the Service.
4. Cookies are used for the following purposes:
   1. maintaining the session of the User of the Service (after logging in), so that the user does not have to re-enter their login and password on each subpage of the Service;
   2. realizing the purposes specified above in the section “Significant marketing techniques”;
5. Within the Service, two main types of cookies are used: “session” (session cookies) and “persistent” (persistent cookies). “Session” cookies are temporary files that are stored on the User’s end device until they log out, leave the website, or turn off the software (web browser). “Persistent” cookies are stored on the User’s end device for the time specified in the parameters of the cookies or until they are deleted by the User.
6. Web browsing software (web browser) usually allows the storage of cookies on the User’s end device by default. Users of the Service can change their settings in this regard. The web browser allows the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this topic is provided in the help or documentation of the web browser.
7. Restrictions on the use of cookies may affect some functionalities available on the websites of the Service.
8. Cookies placed on the end device of the User of the Service may also be used by entities cooperating with the operator of the Service, particularly concerning companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing cookies - how to express and withdraw consent in practice?

1. If the user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication processes, security, and maintaining user preferences may hinder, and in extreme cases may prevent the use of the websites.
2. To manage cookie settings, select from the list below the web browser you are using and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera
   • Mobile devices:
   • Android
   • Safari (iOS)
   • Windows Phone

We want to ensure that our model of cooperation, involving operations on users’ personal data, is transparent and friendly. According to the principles of using Pixel technology and the principles stemming from GDPR, it is extremely important to provide clear information to your users that all entities of the Virtual Poland capital group operate in your services and participate in the processes of processing user data. We recommend that after implementing the WP Pixel, you implement an information clause on the Privacy Policy page, using, for example, the text below:

On our pages, third parties place information in the form of cookies and other similar technologies on your end device (e.g., computer, smartphone) and gain access to them. These are our trusted partners with whom we constantly cooperate to tailor advertisements on our and their pages to your needs and interests, as well as the services that we and our trusted partners provide. Such a trusted partner is an entity from the Virtual Poland capital group. Detailed information on the processing of your data by Virtual Poland can be found in the privacy policy of Virtual Poland.