PRIVACY POLICY
1. General provisions
1.1 These regulations define the terms and conditions of the Personal Data Processing Agreement, including in particular the subject matter and duration of the personal data processing, the nature and purpose of the personal data processing, the type of personal data, the categories of data subjects, the terms and conditions of the personal data processing, and the obligations of the Parties to the Agreement.
1.2 The Terms and Conditions define the terms and conditions of the Personal Data Processing Agreement under which the Controller entrusts the Processor with the processing of Customers' personal data in connection with the Processor's performance of a dropshipping order for the Controller.
1.3 The terms used in the Regulations shall be understood as follows:
Processor: Seller, i.e. KIK Sp. z o.o. Sp. k.
Aleja 1000-lecia Państwa Polskiego 8,
15-111 Białystok
NIP: 5423089180
Regon: 200218804
KRS: 0000613970;
Administrator: Buyer, i.e. the entity placing an order – requesting shipment of goods to a specific address;
Customer: an entity that has concluded a contract with the Administrator for the sale of goods originating from the Processing Entity, to be performed using the dropshipping formula, as well as persons acting on behalf of the Customer in connection with the performance of the above-mentioned sales contract;
Dropshipping: a form of performance of a sales agreement concluded between the Processing Entity and the Administrator, consisting in the fulfillment of an order placed by the Administrator directly for its Customer;
Personal data: personal data within the meaning of the generally applicable regulations in Poland aimed at protecting the personal data of natural persons.
2. Terms and conditions for entrusting the processing of personal data
2.1 Given that the proper execution of the Administrator's order in the dropshipping formula requires the processing of the Customer's personal data, the Administrator entrusts the Processing Entity with the processing of the Customer's personal data, including their company name, first and last name, address, email address, and telephone number.
2.2 In connection with the fulfillment of the Administrator's order in the dropshipping formula, the Processor accepts for processing the personal data specified in point 2.1 and undertakes to process this personal data only to the extent necessary to fulfill the sales contract in the dropshipping formula, i.e., for the purpose of delivering the goods directly to the Customer. The processor undertakes not to use this personal data for any other purpose.
2.3 The processor undertakes to process and secure the personal data provided to it in accordance with the generally applicable regulations in Poland regarding the protection of personal data of natural persons. The processor undertakes to apply technical and organizational measures when processing personal data to ensure an adequate level of security for the processing of personal data.
2.4 Subject to point 2.5, the processor shall in particular not distribute, make available, disclose or use the personal data provided to it for its own purposes.
2.5 The processor may disclose the Customer's personal data provided to it to a courier, transport, or postal service provider entrusted with the delivery of goods to the Customer.
2.6 The Controller agrees to the Processing Entity entrusting personal data to an entity providing IT services on its behalf, to the extent necessary to maintain the sales platform. In such a case, the Processor undertakes to oblige that entity to process and secure personal data in accordance with the applicable provisions on the protection of personal data and to process data solely for the purposes of providing hosting services.
2.7 Further entrusting of data processing or disclosure of data may take place under conditions guaranteeing security measures for the processing of personal data that are no less stringent than those established in these Terms and Conditions, and only to the extent specified in points 2.5 and 2.6. Further processing of personal data by another entity may only take place in accordance with applicable regulations on the protection of personal data of natural persons.
2.8 The processor shall ensure that persons authorized to process personal data undertake to maintain confidentiality or are subject to an appropriate statutory obligation of confidentiality.
2.9 The Administrator entrusts the Processing Entity with the processing of personal data for a period equal to the limitation period for claims for a given order fulfilled using the dropshipping formula. After the expiry of the limitation period for claims and in the event of expiry or withdrawal of one of the Parties from a given sales contract carried out in the dropshipping formula, the Processor shall be obliged to return the personal data entrusted to it or to delete all copies of such data in its possession and take appropriate measures to eliminate the possibility of further processing of the data entrusted to it under the Agreement.
2.10 The Processor undertakes to immediately notify the Controller of:
1) any legally authorized request to disclose personal data to the competent state authority, unless the prohibition of notification results from legal provisions, in particular from criminal procedure provisions, where the prohibition is intended to ensure the confidentiality of an investigation that has been initiated,
2) any unauthorized access to personal data,
3) any request received from the person whose data is being processed, while refraining from responding to the request.
2.11 The processor shall provide the controller with all information necessary to demonstrate compliance with the obligations laid down in the contract and shall allow and contribute to audits, including inspections, conducted by the controller or an auditor authorized by the controller.
3. Final provisions
3.1 In matters not covered by these Terms and Conditions, the provisions of generally applicable law in Poland shall apply, in particular the Civil Code and other provisions relating to the protection of personal data.
3.2 The Controller undertakes to provide the Processor, within 14 days of the conclusion of the Personal Data Processing Agreement, where applicable, with the names and addresses of the representative of the controller or joint controller of personal data and the data protection officer. Failure to provide the above information shall be tantamount to a statement that the entities in question do not exist or have not been appointed.
3.3 The court competent for disputes arising from the Personal Data Processing Agreement shall be the court competent for the seat of the Processor.
4. Personal Data Processing Agreement
Please download the document, have it signed by an authorized person and send it back to us. We will then send you a signed copy of the document.
UMOWA O POWIERZENIE DANYCH OSOBOWYCH DO POBRANIA - TUTAJ