Privacy policy

PRIVACY POLICY
	1.	This Privacy Policy sets out the rules for the processing of personal data obtained through the gilps.es online shop (hereinafter referred to as the "Online Shop").
	2.	The owner of the Online Shop and data controller at the same time is Gilbertson & Page Europe Sp. z o.o. with its registered office in Gdynia (81-372), ul.Świętojańska 36/1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Gdańsk-Północ in Gdańsk, VIII Commercial Department of the National Court Register under the number KRS 0000886102, with the share capital of PLN 5,000, NIP: 5862365742, REGON: 388268302, hereinafter referred to as Gilbertson & Page Europe Sp. z o.o.
	3.	The personal data collected by Gilbertson & Page Europe Sp. z o.o. via the Online Shop are processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016. on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as RODO.
	4.	Gilbertson & Page Europe Sp. z o.o. takes special care to respect the privacy of the Customers visiting the Online Shop.
§ 1 Type of data processed, purposes and legal basis
	1.	1. Gilbertson & Page Europe Sp. z o.o. collects information on natural persons performing a legal action not directly related to their activity, natural persons conducting business or professional activity on their own behalf, as well as natural persons representing legal persons or organisational units which are not legal persons to whom the Act grants legal capacity, hereinafter collectively referred to as the Clients.
	2.	Personal data of the Clients are collected in the case of:
	a)	account registration in the Online Store, in order to create an individual account and manage it. Legal basis: necessity to perform the contract for the provision of Account services (Article 6(1)(b) of the RODO);
	b)	placing an order in the Online Shop, in order to execute the sales agreement. Legal basis: necessity to execute the sales agreement (Article 6(1)(b) of the RODO);
	c)	subscription to a newsletter (Newsletter), for the purpose of performance of an agreement, the subject of which is a service provided electronically. Legal basis - consent of the data subject to the performance of a contract for the provision of Newsletter service (Article 6(1)(a) of the RODO);
	d)	use of the contact form service in the Online Store in order to perform a contract for the provision of services electronically. Legal basis: necessary for the performance of the contract for the provision of the contact form service (Article 6(1)(b) of the RODO).
	3.	In the case of account registration in the Online Shop, the Customer provides:
	a)	e-mail address;
	b)	name and surname;
	c)	telephone number.
	4.	During account registration in the Online Store, the Customer sets an individual password to access his or her account. The Customer may change the password at a later time, according to the rules described at§5.
	5.	When placing an order in the Online Store, the Customer provides the following data:
	a)	e-mail address;
	b)	address details:
	a.	postal code and town;
	b.	country (state);
	c.	street address including house/flat number.
	c)	first name and surname;
	d)	telephone number.
	6.	In case of Entrepreneurs, the above data scope is additionally extended by:
	a)	the business name of the Entrepreneur;
	b)	NIP number.
	7.	In the case of using the Newsletter service, the Customer shall provide only his/her e-mail address.
	8.	In the case of using the contact form service, the Customer shall provide the following data:
	a)	e-mail address;
	b)	name and surname.
	9.	When using the Store's website, additional information may be collected, in particular: the IP address assigned to the Customer's computer or an external IP address of the Internet provider, domain name, browser type, access time, operating system type.
	10.	10. Navigation data may also be collected from Customers, including information about links and references they decide to click on or other actions taken in the Internet Shop. Legal basis - Legally justified interest (Article 6(1)(f) RODO), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
	11.	For the purpose of establishing, investigation and enforcement of claims, some personal data provided by the Customer as part of the use of the functionality of the Online Store may be processed, such as: name, surname, data on the use of services, if the claims arise from the manner in which the Customer uses the services, other data necessary to prove the existence of the claim, including the extent of damage suffered. Legal basis - legally justified interest (Article 6(1)(f) RODO), consisting of the establishment, investigation and enforcement of claims and defense against claims in proceedings before courts and other state authorities.
	12.	Gilbertson & Page Europe Sp. z o.o. processes personal data including: name, surname, e-mail address, as well as answers to prepared questions as part of satisfaction surveys and forms used for satisfaction research. Participation in such actions is voluntary. If the Customer does not agree to participate in them, he or she may at any time inform Gilbertson & Page Europe Sp. z o.o. at the address in accordance with§6, in which case Gilbertson & Page EuropeSp. z o.o. will block the relevant data. Legal basis - legitimate interest (Article 6(1)(f) of the RODO), consisting of improving the functionality of the services provided electronically and assessing satisfaction with the services we provide.
	13.	The provision of personal data to Gilbertson & Page Europe Sp. z o.o. 13. providing personal data to Gilbertson & Page Europe Sp. z o.o. is voluntary in connection with concluded sales agreements or the provision of services via the Shop's website, with the proviso, however, that failing to provide the data specified in the forms during the Registration process prevents the Registration and setting up of a Customer Account, and in the case of placing an order without the Account Registration, prevents the submission and fulfilment of the Customer's order.
§ 2 To whom is the data provided or entrusted and how long is it stored?
	1.	The Customer's personal data is transferred to the service providers used by Gilbertson & Page Europe Sp. z o.o. for the operation of the Online Shop. The service providers to whom the personal data are transferred, depending on the contractual arrangements and circumstances, are either subject to the instructions of Gilbertson & Page Europe Sp. z o.o. as to the purposes and means of processing these data (processors) or determine themselves the purposes and means of processing (controllers).
	a)	Processors. Gilbertson & Page Europe Sp. z o.o. uses suppliers who process personal data exclusively on the instructions of Gilbertson & Page EuropeSp. z o.o.. These include, but are not limited to, providers providing hosting services, accounting services, providing marketing systems, systems for analysing traffic to the Online Shop, systems for analysing the effectiveness of marketing campaigns;
	b)	Administrators. Gilbertson & Page Europe Sp. z o.o. uses providers who do not act solely on instructions and determine themselves the purposes and uses of Customers' personal data. They provide electronic payment and banking services.
	2.	Location. The service providers are located in Poland and in other countries of the European Economic Area (EEA).
	3.	Customers' personal data is stored:
	a)	In the case where the basis for the processing of personal data is consent, the Customer's personal data shall be processed by Gilbertson & Page Europe Sp. z o.o. for as long as the consent has not been revoked, and after revoking the consent for a period of time corresponding to the period of limitation of claims that Gilbertson & Page Europe Sp. z o.o. may raise against it. Unless a specific regulation provides otherwise, the period of limitation shall be six years, and for claims for periodic benefits and claims related to the conduct of business activity - three years.
	b)	Where the basis for data processing is the performance of an agreement, then the Customer's personal data shall be processed by Gilbertson & Page Europe Sp. z o.o. for as long as it is necessary for the performance of the agreement, and thereafter for the period corresponding to the period of limitation of claims. Unless a specific regulation provides otherwise, the limitation period shall be six years, and for claims for periodic performance and claims related to the conduct of business activity - three years.
	4.	If you make a purchase in the Online Store, your personal data may be transferred to a courier company, in order to deliver the ordered goods.
	5.	If the Client chooses to pay via PayU system, his/her personal data are transferred to the extent necessary to execute the payment to PayU S.A. with its seat in Poznań (60-166), at 182 Grunwaldzka Street, entered into the register of entrepreneurs kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Department of the National Court Register under the number KRS 0000274399.
	6.	Navigation data can be used to provide better service for the Customers, analyze statistical data and adjust the Internet Shop to the Customers' preferences as well as to administer the Internet Shop.
	7.	In the event that the Customer subscribes to a newsletter (Newsletter) Gilbertson & Page Europe Sp. z o.o. will send to his or her e-mail address electronic messages containing commercial information on promotions and new products available in the Online Shop.
	8.	In the case of a request Gilbertson & Page EuropeSp. z o.o. shall make the personal data available to authorised state authorities, in particular to organisational units of the Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.
	9.	9.Gilbertson & Page Europe Sp. z o.o. makes available on the Shop's website the "Like" plug-in of the facebook.com social network (administrator Facebook Ireland with its registered office in Ireland), hereinafter referred to as: Facebook. Via the "Like" plugin Facebook collects information regarding the Customer's device, i.e. operating system, hardware and software versions, battery consumption, signal strength, available memory, browser type, application and file names and types as well as installed plugins. In addition, Facebook collects information about actions and behaviors associated with devices, such as whether a window is open in the foreground or background, or information about mouse movements that helps distinguish humans from bots, unique identifiers, device identifiers, and other identifiers, such as those from games, applications, or accounts from which you use your device. We collect unique identifiers, device identifiers and other identifiers such as those from games, applications or accounts you use, family device identifiers (or other identifiers unique to Facebook products associated with the same device or account). Facebook collects information, i.e.: signals from the device, including Bluetooth signals and information about Wi-Fi access points, beacons and cellular network transmitters in the vicinity, data from device settings, including information that, with the Customer's permission, is obtained through the device settings enabled by the Customer, such as access to the Customer's GPS location, camera or photos. In terms of networks and connections Facebook collects information such as: the name of the mobile network operator or internet provider used by the Customer, language, time zone, mobile phone number, IP address, connection speed, and in some cases information about other devices in the vicinity or on the Customer's network.
		If the Customer, while browsing the Gilbertson & Page Europe Sp. z o.o. Website, uses a browser within which he or she is logged into his or her Facebook user account, the "Like" plug-in sends Facebook information about the visit to the Gilbertson & Page Europe Sp. z o.o. Website. The data collected by Facebook includes the Facebook user ID (known only to Facebook), the website visited, the date and time and the data referred to above. The purpose of data collection by Facebook is to use the information obtained to personalize the content presented on Facebook and to improve the services provided by Facebook. If, in addition, the Customer uses the "Like" function provided on the Gilbertson & Page Europe Sp. z o.o. website, this action will be recorded by Facebook as content that the Customer prefers.
		If the Customer, while browsing the Website of Gilbertson & Page Europe Sp. z o.o., uses a browser in which he or she is not logged into his or her Facebook account or does not have a Facebook account, the "Like" plug-in sends Facebook information about the page visited, the date and time of the visit and the data referred to above. The purpose of data collection by Facebook is to improve the services provided by Facebook.
§ 3 Mechanism of cookies, IP address
	1.	The Internet Shop uses small files, called cookies. They are stored by Gilbertson & Page EuropeSp. z o.o. on the end device of the person visiting the Web Shop, if the Internet browser allows it. A cookie file usually contains the name of the domain from which it originates, its "expiry time" and an individual random number identifying the file. The information collected by means of files of this type helps to adjust the products offered by Gilbertson & Page Europe Sp. z o.o. to the individual preferences and real needs of visitors to the Online Shop. They also make it possible to compile general statistics on the visits to the presented products in the Online Shop.
	2.	Gilbertson & Page Europe Sp. z o.o. uses two types of cookies:
	a)	Session cookies: when the session of a given browser ends or the computer is switched off, the stored information is deleted from the device memory. The mechanism of session cookies does not allow collecting any personal data or any confidential information from the Clients' computers.
	b)	Persistent cookies: are stored in the memory of the Customer's terminal equipment and remain there until they are deleted or expire. The mechanism of permanent cookies does not allow collecting any personal data or any confidential information from the Clients' computers.
	3.	Gilbertson & Page Europe Sp. z o.o. uses its own cookies in order to
	a)	a) authenticating the Customer in the Internet Shop and ensuring a Customer session in the Internet Shop (after logging in), thanks to which the Customer does not have to enter his/her login and password again on each subpage of the Internet Shop;
	b)	analysis, research and audience audit, and in particular for creating anonymous statistics, which help to understand how the Clients use the Internet Shop's website, which enables improving its structure and content.
	4.	Gilbertson & Page Europe Sp. z o.o. uses external cookies in order to:
	a)	presenting opinions on the Store's websites which are downloaded from an external website ceneo.pl (the administrator of external cookies: Ceneo.pl sp. z o.o. based in Poznań);
	5.	The cookies mechanism is safe for the Internet Shop Clients' computers. In particular, this way it is not possible for viruses or other unwanted software or malware to get to Customers' computers. Nevertheless, Customers have the possibility to limit or disable access of cookies to their computers in their browsers. If this option is used, the use of the Internet Shop shall be possible, except for the functions which by their nature require cookies.
	6.	Below we present how to change the settings of popular web browsers regarding the use of cookies:
	a)	Internet Explorer browser;
	b)	the Microsoft EDGE browser;
	c)	the Mozilla Firefox browser;
	d)	Chrome browser;
	e)	the Safari browser;
	f)	the Opera browser.
	7.	Gilbertson & Page Europe Sp. z o.o. may collect Clients' IP addresses. The IP address is a number assigned to the computer of the person visiting the Online Shop by the Internet Service Provider. The IP number enables access to the Internet. In the majority of cases it is assigned to the computer dynamically, i.e. it changes with each connection to the Internet. The IP address is used by Gilbertson & Page Europe Sp. z o.o. for the diagnosis of technical problems with the server, the creation of statistical analyses (e.g. determining from which regions we record the highest number of visits), as information useful for administering and improving the Internet Shop, as well as for security purposes and the possible identification of server-overloading, unwanted automatic programmes for browsing the content of the Internet Shop.
	8.	The Internet Shop contains links and references to other websites. Gilbertson & Page Europe Sp. z o.o. is not responsible for the privacy protection rules applicable there.
§ 4 The rights of data subjects
	1.	Right to withdraw consent - legal basis: Article 7(3) of the DPA.
	a)	The customer has the right to withdraw any consent that he/she has given to Gilbertson & Page Europe Ltd.
	b)	Withdrawal of consent has effect from the moment of withdrawal of consent.
	c)	The withdrawal of consent does not affect the processing carried out by Gilbertson & Page EuropeSp. z o.o. in accordance with the law before its withdrawal.
	d)	Withdrawal of consent shall not entail any negative consequences for the Customer, however it may prevent further use of services or functionalities which, in accordance with the law, Gilbertson & Page Europe Sp. z o.o. may provide only with consent.
	2.	The right to object to the processing of data - legal basis: Article 21 RODO.
	a)	The Customer has the right to object at any time - for reasons related to his/her particular situation - to the processing of his/her personal data, including profiling, if Gilbertson & Page Europe Sp. z o.o. processes his/her data on the basis of a legitimate interest, e.g. marketing Gilbertson & Page Europe Sp. z o.o. products and services, conducting statistics on the use of individual functionalities of the On-line store and facilitating the use of the On-line store as well as satisfaction surveys.
	b)	Resignation in the form of an e-mail message from receiving marketing messages concerning products or services will mean that the Customer objects to the processing of his/her personal data, including profiling for these purposes.
	c)	If the Customer's objection proves to be legitimate and Gilbertson & Page Europe Sp. z o.o. has no other legal basis for processing personal data, the Customer's personal data will be deleted against the processing of which the Customer has objected.
	3.	The right to erasure of data ("right to be forgotten") - legal basis: Article 17 RODO.
	a)	The Customer has the right to request the erasure of all or some personal data.
	b)	The Customer has the right to request deletion of personal data if:
	a.	the personal data are no longer necessary for the purposes for which they were collected or for which they were processed;
	b.	has withdrawn specific consent, to the extent that the personal data were processed based on his/her consent;
	c.	has objected to the use of his/her data for marketing purposes;
	d.	the personal data is processed unlawfully;
	e.	the personal data must be erased in order to comply with a legal obligation provided for by Union law or the law of a Member State to which Gilbertson & Page Europe Sp. z o.o. is subject;
	f.	the personal data have been collected in connection with the offering of information society services.
	c)	Despite a request for erasure of personal data, in connection with filing an objection or withdrawing consent, Gilbertson & Page EuropeSp. z o.o. may retain certain personal data to the extent that the processing is necessary for the establishment, assertion or defence of claims, as well as for complying with a legal obligation requiring processing under Union law or the law of a Member State to which Gilbertson & Page Europe Sp. z o.o. is subject. This applies in particular to the following personal data: first name, surname, e-mail address, which data are stored for the purpose of examining complaints and claims connected with the use of the services of Gilbertson & Page EuropeSp. z o.o., or additionally home address/correspondence address, order number, which data are stored for the purpose of examining complaints and claims connected with concluded sales agreements or provision of services.
	4.	The right to restrict data processing - legal basis: Article 18 RODO.
	a)	The Customer has the right to request restriction of the processing of his personal data. The submission of the request, until it is considered, prevents the use of certain functionalities or services, the use of which will be connected with the processing of data covered by the request. Gilbertson & Page Europe Sp. z o.o. will also not send any messages, including marketing messages.
	b)	The Customer has the right to request the restriction of the use of personal data in the following cases:
	a.	if he/she questions the correctness of his/her personal data - then Gilbertson & Page Europe Sp. z o.o. shall limit their use for the time necessary to verify the correctness of the data, however for no longer than 7 days;
	b.	when the processing of the data is unlawful, and instead of deleting the data the Customer requests the restriction of their use;
	c.	when the personal data are no longer necessary for the purposes for which they were collected or used but are needed by the Customer to establish, assert or defend claims;
	d.	when the Client has raised an objection to the use of his/her data - then the restriction shall occur for the time needed to consider whether, due to the particular situation, the protection of the Client's interests, rights and freedoms outweighs the interests pursued by the Administrator while processing the Client's personal data.
	5.	The right of access to the data - legal basis: Article 15 RODO.
	a)	The Customer has the right to obtain confirmation from the Administrator as to whether it is processing personal data, and if this is the case, the Customer has the right:
	a.	gain access to his/her personal data;
	b.	obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the planned period for which the Customer's data are to be stored, or the criteria for determining this period (when it is not possible to determine the planned period of data processing), aboutrights to which the Customer is entitled under RODO and the right to lodge a complaint to the supervisory authority, about the source of these data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of these data outside the European Union;
	c.	obtain a copy of your personal data.
	6.	The right to rectification of data - legal basis: article 16 RODO.
	a)	The Customer has the right to request from the Administrator the immediate rectification of personal data concerning him/her that are incorrect. Taking into account the purposes of the processing, the Customer to whom the data pertains has the right to request the completion of incomplete personal data, including by providing an additional statement, by directing the request to the e-mail address in accordance with§6 of the Privacy Policy.
	7.	Right to data portability - legal basis: Article 20 of the RODO.
	a)	The Customer has the right to receive his/her personal data that he/she has provided to the Administrator and then send it to another personal data controller of his/her choice. The Customer also has the right to request that the personal data be sent by the Administrator directly to such controller, if technically possible. In this case, the Administrator will send the Client's personal data in the form of a file in csv format, which is a commonly used, machine-readable format that allows the received data to be sent to another personal data controller.
	8.	In the situation where the Customer exercises the rights resulting from the above rights, Gilbertson & Page Europe Sp. z o.o. shall fulfil the request or refuse to fulfil it immediately, but no later than within one month of receiving it. If, however, due to the complexity of the demand or the number of demands, Gilbertson & Page Europe Sp. z o.o. is not able to fulfil the demand within one month, it shall fulfil the demand within the following two months, informing the Customer, within one month of receiving the demand, of the intended extension of the deadline and the reasons for it.
	9.	The Client can lodge complaints, inquiries and requests to the Administrator regarding the processing of his/her personal data and the exercise of his/her rights.
	10.	The Customer has the right to request Gilbertson & Page Europe Sp. z o.o. to provide a copy of the standard contractual clauses by sending a request in the manner indicated in§6 of the Privacy Policy.
	11.	The Customer has the right to lodge a complaint with the President of the Office for Personal Data Protection regarding the infringement of its rights to personal data protection or other rights granted under the RODO.
§ 5 Security management - password
	1.	Gilbertson & Page Europe Sp. z o.o. provides Customers with a secure and encrypted connection when transferring personal data and when logging in to the Customer Account on the Website. Gilbertson & Page Europe Sp. z o.o. uses an SSL certificate issued by one of the world's leading companies in the field of security and encryption of data transmitted over the Internet.
	2.	In the event that the Customer holding an account with the Online Shop has lost his/her access password in any way, the Online Shop shall make it possible to generate a new password. Gilbertson & Page Europe Sp. z o.o. does not send password reminders. The password is stored in an encrypted form, in a manner preventing its reading. In order to generate a new password, the e-mail address shall be entered in the form available under the link "You have forgotten your password", provided while logging in to the Online Shop account. The Customer shall receive an e-mail message to the e-mail address provided during registration or saved in the last change of the account profile, containing a redirection to a dedicated form made available on the Store's Website, where the Customer shall have the opportunity to set a new password.
	3.	Gilbertson & Page Europe Sp. z o.o. never sends any correspondence, including electronic correspondence, asking for login data, in particular the password to access the Customer's account.
§ 6 Changes in the Privacy Policy
	1.	The Privacy Policy is subject to change, of which Gilbertson & Page EuropeSp. z o.o. will inform the Customers 7 days in advance.
	2.	Questions related to the Privacy Policy should be sent to the following address: info@gilpa.eu
	3.	Date last modified: 02.05.2021 r.