Privacy Policy

The data controller responsible for the processing of personal data is:

MONTCLAIR POLONIA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ NIP: 8133769749 ul. Akacjowa 47 35-113 Rzeszów nopal@nopal.pl

Thank you for your interest in our online store. Protecting your privacy is of utmost importance to us. Below, you will find detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our website without providing personal data. When you access our website, the server automatically records only server logs, such as the requested file name, your IP address, date and time of access, the amount of data transferred, and the requesting service provider (access logs), documenting your visit.

This data is analyzed solely to ensure the proper functioning of our website and to enhance our offerings. This serves, in accordance with Art. 6 para. 1 lit. f GDPR, to protect our legitimate interests in presenting our website and offerings in an optimal and correct manner. All access data is deleted within seven days after your visit.

Hosting

Hosting services and displaying the website are partially provided on our behalf by our service providers as data processors. Unless otherwise stated in this privacy policy, all access data and data collected in forms provided for this purpose on our website will be processed on their servers. For inquiries about our service providers and the basis of cooperation with them, please contact us. You can reach us through the "Contact" section on our website or by emailing directly at: nopal@nopal.pl

2. Collection and Processing of Data for Contractual and Contact Purposes, and Account Creation

We collect personal data only when you voluntarily provide it to us when placing an order or contacting us (e.g., using a contact form or email). Mandatory fields are marked as such because the data contained in them is necessary to fulfill a contract or process the matter in which you contact us. Without this information, we cannot complete your order or respond to your inquiry. The data collected depends directly on the forms in which you provide your data. We use the data you provide in accordance with Art. 6 para. 1 lit. b GDPR to fulfill the contract and respond to your queries.

3. Data Transfer for Order Fulfillment

To fulfill the contract (Art. 6 para. 1 lit. b GDPR), we will pass on your data to the shipping company you have chosen to deliver the products you ordered.

4. Data Processing for Payment Purposes

To process payments on our online store, we collaborate with external service providers for electronic payment processing and transmit your data to the payment service provider you selected during the order process. This is done to fulfill the contract (Art. 6 para. 1 lit. b GDPR). In some cases, we may provide additional information to our service providers, which may be used in conjunction with information required to process payments, such as invoicing, analyzing disputed payments, and accounting support. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to pursue our legitimate interests in preventing misuse and fraud and efficiently managing payments.

5. Cookies and Similar Technologies

General Information

To improve your visit to our website and enable you to use its essential features, we use technological tools, including cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after closing your web browser (session cookies), while others are retained on your end device, allowing us to recognize your browser when you visit again (persistent cookies). We use technologies that are absolutely necessary to ensure the proper and optimal use of essential functions of our website (e.g., shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about your device and browser, and your use of our website. This is done in accordance with Art. 6 para. 1 lit. f GDPR to pursue our legitimate interest in optimizing our offerings.

We also use technological tools for legal obligations we are subject to (e.g., to demonstrate your consent to the processing of your personal data) and for web analytics and online marketing. If your consent has been given for the use of certain technological tools (Art. 6 para. 1 lit. a GDPR), you can withdraw it at any time. To withdraw your consent, please contact us directly through the "CONTACT" section or by emailing us at nopal@nopal.pl

6. Use of Cookies and Similar Technological Tools for Web Analytics and Marketing

If you have given your consent (Art. 6 para. 1 lit. a GDPR), we use the cookies and other similar technological tools provided by external service providers on our website for web analytics and online marketing purposes. Once the processing purpose is fulfilled, and you have finished using a specific technological tool, the data collected through these tools will be deleted. You can withdraw your consent at any time. For information on how to withdraw your consent and your right to object, please see the "Cookies and Similar Technologies" section. Additional information about our service providers can be found on their respective websites. If you have questions about our service providers and the basis of our cooperation with them, please contact us through the "Contact" section on our website or by emailing us at nopal@nopal.pl

Using Google Services

We use specific technological tools provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information collected automatically by Google's technologies regarding your use of our website is typically transmitted to Google LLC servers, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed when using Google's technological tools, it will be shortened before being saved on Google servers. In general, your IP address is not combined with other data collected by Google.

For using Google services, such as Google Analytics, we rely on your consent to comply with the General Data Protection Regulation (GDPR).

Google Analytics

For the purpose of analyzing the usage of our website, we use Google Analytics, a web analytics tool provided by Google. Google Analytics automatically processes your data (IP address, time of visit to the website, information about your device and browser, and your use of our website) to create pseudonymous user profiles. Cookies may be used for this purpose. Your IP address is not generally associated with other data collected by Google. Data processing in the Google Analytics service is carried out based on the contract data processing agreement with Google.

Using Facebook Services

Facebook Pixel

We use Facebook Pixel, a tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). Facebook Pixel automatically collects and stores data (your IP address, time of visit to the website, information about your device and browser, and your use of our website, e.g., visiting our website or subscribing to our newsletter). These data are used to create pseudonymous user profiles. When you visit our website, Facebook Pixel stores a cookie on your device, allowing the recognition of your browser when you visit other websites. Facebook connects this information with other data from your Facebook account and uses it to create reports on website activity and provide other services related to your use of websites, especially for personalized advertising purposes. Facebook data is stored on servers located in the USA. The European Commission has not issued an adequacy decision for data protection in the USA. Data transfers to the USA are subject to standard data protection clauses adopted by the European Commission.

7. Our Contact Information and Your Rights

If your data is processed, you have the following rights:

• According to Art. 15 GDPR, the right to receive information about the processing of data as described in this article.
• According to Art. 16 GDPR, the right to correct your incorrect or incomplete personal data.
• According to Art. 17 GDPR, the "right to be forgotten," i.e., the right to have your personal data deleted by us, provided further processing is not required:
  • To exercise the right to freedom of expression and information;
  • To fulfill a legal obligation;
  • For reasons of public interest; or
  • To assert, exercise, or defend legal claims.
• According to Art. 18 GDPR, the right to restrict the processing of personal data, provided:
  • The accuracy of the personal data is contested by you;
  • The processing is unlawful, but you object to their erasure;
  • We no longer need the data, but you need them to assert, exercise, or defend legal claims; or
  • You have objected to the processing under Art. 21 GDPR.
• According to Art. 20 GDPR, the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another controller.
• According to Art. 77 GDPR, the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection "UODO").

If you have any questions about the collection, processing, and use of your personal data or wish to request information, correction, restriction of processing, deletion of data, or the withdrawal of consent or object to the use of specific data, please contact the data controller as indicated at the beginning of this privacy policy.

Right to Object

If we process personal data for the protection of our legitimate interests, you may object to the processing of your data in the future, as described in this privacy policy. If the processing takes place for direct marketing purposes, you may exercise this right at any time. If the processing takes place for other purposes, you only have the right to object due to reasons arising from your particular situation.

After exercising your right to object, we will not continue to process your personal data, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or unless the processing serves the assertion, exercise, or defense of legal claims.

The above does not apply if the processing is for direct marketing purposes. In that case, we will always stop processing your personal data once you object.