PRIVACY POLICY

Welcome to the www.canaconcept.com website. The confidentiality policy presented here aims to outline our methods of collecting, using, and sharing your data. Please read the entire document before using our services or providing any data. In accordance with Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/WE (General Data Protection Regulation or GDPR), we inform you that:

Personal Data Administrator

The administrator of your personal data is Optimum Sp. z.o.o, located at ul. Balicka 125B, Krakow, registered in the business register kept by the District Court for Krakow-Śródmieście in Krakow, XI Economic Department of the National Court Register, under the KRS number 0000408575, NIP 6772366856, REGON 122472977.

Scope of Collected Personal Data

1. Contact details included in forms, which are necessary for the proper use of the service or contract execution: Name and surname – when placing a one-time order or during the registration for a customer account, you will be asked to provide your name and surname to send the order, complete the registration for an account on our website, and for potential contact from Cana Concept, Residential address, and possibly delivery address: this information is necessary for the execution and delivery of the ordered goods, Phone number: if necessary, Cana Concept may contact the customer to confirm the order or in case of unexpected circumstances, such as product unavailability, while simultaneously proposing a favorable solution to the customer, Email address: through email, Cana Concept sends order confirmation and may contact the customer regarding order fulfillment. The email address is also used to create an account on the Cana Concept website. Additionally, if the customer wishes to receive a newsletter, commercial information will be sent to this email address. The administrator may also use the customer’s email address to send a satisfaction survey regarding Cana Concept’s services.
2. Personal data used to manage purchases made at Cana Concept, including contact details such as name and surname, address, email address, and phone number, payment information and payment history, bank account number, credit information, and information about orders.
3. Personal data related to managing a customer account at Cana Concept includes contact details such as name and surname, address, phone number, account settings, and, additionally, in the case of purchases, purchase history, delivery information, and payment history. Cana Concept will also process the following personal data related to cookies: click history, navigation history, and browsing history.
4. Personal data used for customer service purposes at Cana Concept includes contact details such as name and surname, address, email address, and phone number. It also involves data and payment history, credit information, order information, delivery information, account number, and all correspondence on a given topic.
5. Personal data related to direct marketing at Cana Concept includes contact details such as name and surname, address, email address, phone number, and postal code. It also involves information about products and offers clicked by the customer, order history, navigation on the website, and clicked elements.
6. Personal data related to participation in contests/discount actions organized by Cana Concept includes contact details such as name and surname, address, email address, and phone number, as well as information provided during the contest/discount actions.
7. Personal data related to the development and improvement of services and products offered by Cana Concept includes contact details such as name and surname, email address, account settings, and, additionally, in the case of purchases, purchase history, delivery information, and payment history. Cana Concept will also process the following personal data related to cookies: click history, navigation history, and browsing history.
8. Personal data related to legal obligations at Cana Concept includes order number, name and surname, address, postal address, transaction amount, and transaction date. Personal data related to preventing crimes and using data unlawfully includes contact details such as name and surname, address, phone number, and email address, call recordings, order history, delivery information, and payment history.
9. Data related to browsing the Cana Concept website includes information about interactions with individual services on www.canaconcept.com, including system logs containing: date, time of visit, IP address of the connecting computer, domain name, browser type, operating system type, information about website viewing statistics, traffic to and from individual pages, etc.

Purpose and Legal Basis for Processing Personal Data

Customer support, purchases

1. The administrator will use personal data to manage purchases made at Cana Concept to process customer orders and returns, send notifications about delivery status, or in case of any issues with product delivery. The administrator will use customer personal data to manage payments and process complaints and warranty claims related to products.
2. The administrator will process customer personal data to address their inquiries, complaints, warranty claims related to products, and technical questions submitted via email, chat, phone, and social media. The administrator may also contact the customer in case of any issues with their order.
3. The administrator will process customer personal data for the purpose of purchasing on the basis of Art. 6(1)(b) GDPR, and for customer service on the basis of Art. 6(1)(f) GDPR, i.e., the legitimate interest of the administrator.

Direct marketing, customer account, discount actions/contests

1. The administrator may send commercial information about products and services provided by Cana Concept to customers, including newsletters, to the email addresses provided by them, provided that the customer consents to this, based on Art. 6(1)(a) GDPR, i.e., the customer’s consent.
2. The administrator will use personal data to establish and manage customer accounts and to provide personalized services on the www.canaconcept.com website, based on Art. 6(1)(a) GDPR, i.e., the customer’s consent.
3. The administrator will process personal data when a customer participates in a contest/discount action organized by them. Personal data will be used to contact participants before and after the event, to confirm the identity of participants and verify their age, contact winners, deliver prizes/discounts, and determine the method of delivery, based on Art. 6(1)(a) GDPR, i.e., the customer’s consent.

Fulfillment of Legal Obligations

1. The administrator will process personal data based on Art. 6(1)(f) GDPR, i.e., to prevent the improper use of our services and to pursue the legitimate interests of the administrator.
2. The administrator will use customer personal data to prevent losses, detect and prevent the use of online services in a manner inconsistent with the rules and regulations, check such cases, prevent losses and fraud by analyzing customer behavior on www.canaconcept.com.
3. Prevention of Crimes and Use of Data Unlawfully
4. The administrator will use customer personal data to fulfill legal provisions or court orders and comply with other provisions of authorities. Additionally, the administrator will use customer personal data to collect and confirm financial data to comply with accounting principles.
5. The administrator will process customer personal data in the above scope based on Art. 6(1)(b) and (c) GDPR, i.e., to perform the contract and fulfill legal obligations imposed on the administrator.

Personal data processed based on the user’s consent in the above cases.

The user expresses consent to the processing of personal data by checking the appropriate box in the form during the registration procedure or another procedure allowing them to use Cana Concept services. Each customer has the choice of whether and to what extent they want to use our services and provide information about themselves. Please note that failure to provide certain data in specific cases may prevent the use of our services. The user can withdraw their consent to the collection and processing of their personal data at any time.

The period during which personal data will be stored:

1. Personal data processed for the purpose of entering into or performing a contract and fulfilling the legal obligation of the Administrator, i.e., based on Article 6(1)(b) and (c) of the GDPR, will be stored for the duration of the contract, and after its expiration, for the period necessary for:
   a. post-sales customer service (e.g., handling complaints),
   b. securing or pursuing any legal claims available to the Administrator or the Customer (up to a maximum of 10 years from the date of contract performance),
   c. fulfilling the legal obligation of the Administrator (e.g., arising from tax or accounting regulations),
   d. statistical and archival purposes.
2. Personal data processed on the basis of the legitimate legal interest, i.e., based on Article 6(1)(f) of the GDPR, will be processed until objection is raised by the person to whom the data relates, unless the Administrator can find a lawful justification for this process that overrides the interests or rights of the Customer, or due to legal claims.
3. Personal data processed on the basis of separate consent will be stored until the consent is withdrawn.
4. For accountability, i.e., proving compliance with regulations regarding the processing of personal data, the Administrator will retain data for the period during which the Administrator is obligated to retain the data or documents containing them to document compliance with legal requirements and enable their verification by public authorities.

Your Rights Related to the Collection and Processing of Personal Data:

1. Right of access to data: The customer has the right to request information about which personal data are processed by the Administrator, i.e., the right to obtain confirmation of whether the Administrator processes data and information about such processing.
2. Right to data portability: The customer has the right to receive a copy of their data in a structured, commonly used, and machine-readable format. This copy can be sent to the customer or to another entity. This applies exclusively to personal data that has been provided to the Administrator.
3. Right to rectify data: The customer has the right to request the correction of their personal data if it is incorrect, as well as to supplement incomplete data.
4. Right to erasure of data: The customer has the right to request the deletion of data processed by the Administrator at any time. However, the Administrator has the right to refuse data deletion in cases specified by law.
5. Right to object to direct marketing: The customer has the right to refuse to receive direct marketing materials, including the preparation of a customer profile analysis for the purpose of generating such materials. The customer can opt out of receiving direct marketing materials in the following ways:
   a. By following the instructions in each email message in the case of newsletters.
   b. By contacting the Administrator at the business address or directly at the email address contact@canaconcept.com.
6. Right to lodge a complaint: The customer has the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another EU member state, competent due to the place of habitual residence or work of the person to whom the data pertains or due to the presumed violation of the GDPR.
7. Right to restriction of processing: The customer has the right to request the Administrator to restrict the processing of their personal data by indicating which data should be restricted in terms of processing.
8. Right to object to processing based on the legitimate interest of the Administrator: The customer has the right to object to the processing of their data based on the legitimate interest of the Administrator.
9. The rights mentioned above, except for the right described in point 6, can be exercised through written contact with the Administrator at the business address or directly at the email address contact@canaconcept.com.

Transmitting and Sharing Personal Data

The use of certain services on www.canaconcept.com may involve sharing the customer’s personal data with other entities. If, as a result, personal data is transferred to another entity, the processing of such data will be subject to the privacy policy applied by that entity. The transfer of data to another entity may occur for the purpose of order fulfillment (payment processing, delivery), to manufacturers of offered products for the purpose of handling warranty claims, to entities providing technical support for the website and sales system, and to entities supporting the promotion of offers and participating in marketing campaigns.

Contact Regarding Personal Data

For any questions regarding the processing of personal data, please contact the Administrator at the business address of the Administrator at 30-149 Kraków, ul. Balicka 125B, or at the email address contact@canaconcept.com.