Privacy Policy

Valid from February 1, 2021

Preliminary information

Ensuring the privacy and security of personal data of users of our website, as well as customers who make purchases or services on it, is a priority in the actions taken by the brand owner. DESIVA Furniture, Ie. Desiva Sp. z o. o. hereinafter also referred to as "CompanyWe understand how much you value your privacy, which is why we take the utmost care to ensure the proper protection of your personal data. This document has been developed taking into account the principles and provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as Privacy Policy "GDPR”, as well as other generally applicable legal provisions in the Republic of Poland.

Our goal is to provide you with comprehensive and factual information related to the tasks entrusted to you. The company personal data, so that you can be sure that your data is properly protected and secure.

In this document we would like to present to you in particular:

all circumstances related to the process and method of processing your personal data;
the scope and type of data collected by The company personal data;
the purpose and legal basis for processing your personal data;
the period of time for which your personal data will be stored The company stored;
circumstances related to the possible transfer of your personal data to other entities cooperating with Company, within the limits specified in generally applicable legal provisions;
Your rights related to the processing of personal data.

On our website (www.desiva.pl) we offer you a wide range of products and services, which is why the basis of our business Company is to provide you with efficient service, as well as transparency of our procedures and operating rules, especially in the field of collecting, using and sharing personal data that you provided to us during our cooperation or use of our services. Service.

Please remember that this Privacy Policy applies and is binding on everyone who uses our website www.desiva.pl, hereinafter referred to as "Service", or:

makes purchases of goods or services from the assortment Company directly at its headquarters or store;
makes purchases of goods or services from the assortment Company through the online store operating within the Website;
uses the Website and the online store operating within Service;
uses profiles Company on social media;
he/she has subscribed to the electronic direct marketing communication system, i.e. the Newsletter, and receives relevant messages from us via e-mail, to the e-mail address he/she has provided or through another communication channel to which he/she has consented;
contacts us in connection with our business activities.

Each of you should, before using Service (including the online store operating within the Website) or services offered by The company, read this Privacy policy.

Personal Data Administrator

The administrator of personal data (hereinafter referred to as "Administrator”), provided by you in the cases referred to in this Privacy policy, is Desiva Sp. z o. o. with its registered office in (26-052) Nowiny at ul. Przemysłowa No. 35, entered into the Register of Entrepreneurs of the National Court Register by the District Court in Kielce, XNUMXth Commercial Division of the National Court Register, under number KRS: 0001096491, NIP: 9592071641, REGON: 528212503.

If you have any doubts, questions or reservations regarding this document (Privacy Policy), you can freely contact us in the manner and in accordance with the contact details indicated below:

by mail to the following address: Desiva Sp. z o. o. ul. Przemysłowa nr 35, 26-052 Nowiny;
by phone: +48 517 234 660;
by e-mail to the following address: biuro@desiva.pl.

The terms we use for the purposes of this document

For the purposes of this document (hereinafter referred to as "Privacy Policy”) we present to you the definitions of the terms we use within this document:

personal data – means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
processing of personal data – means an operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, matching or combining, restricting, erasing or destroying;
pseudonymization – means the processing of personal data in such a way that they can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that they are not attributed to an identified or identifiable natural person;
personal data administrator – means the natural or legal person, public authority, agency or other body that alone or jointly with others determines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller or the specific criteria for determining it may be laid down in Union law or in the law of a Member State;
the entity processing – means a natural or legal person, public authority, agency or other entity that processes personal data on behalf of the controller;
genetic data – means personal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information about the physiology or health of that person and which result, in particular, from an analysis of a biological sample from the natural person;
biometric data – means personal data resulting from special technical processing, relating to the physical, physiological or behavioural characteristics of a natural person and enabling or confirming the unique identification of that person, such as facial images or fingerprint data.

What personal data do we process?

In connection with our business activities and operation Service and an online store operating within Service, we collect personal data in the following cases:

A visit to the Company's headquarters or to a (stationary) store run by it – during a visit to the headquarters Company or in its store, your image may be recorded by a video monitoring system, which will be stored in our electronic systems (under the conditions described in detail in the information on video monitoring, publicly available at the registered office of Company or in its store – provided that the given facility has video surveillance), furthermore, if you decide to submit an inquiry about the availability or features of the product or service you have selected, as well as other information related to our activities, you may be asked to provide the following personal data: name and surname, telephone number, e-mail address. Please remember that providing the above personal data is voluntary. However, if you wish to obtain the requested information and it is not possible to provide it at the time of submitting the inquiry, your personal data will be required to provide you with the necessary information through the communication channel you indicated.
Purchases at the Company's headquarters or in a (stationary) store operated by it – you can purchase goods or services provided by us in person at our office Company or at its brick-and-mortar store. If you choose this option, you may be asked to provide the following personal data: name and surname, telephone number, email address, and home address. Please note that providing the above personal data is voluntary. However, in some situations, failure to provide it will result in the inability to conclude a sales agreement or place and fulfill your order. This data may be necessary to issue the appropriate accounting document (VAT invoice, personal invoice, advance payment invoice), as well as to place and fulfill your order. If you are an entrepreneur and intend to place an order or purchase goods or services, we may additionally ask you for your Tax Identification Number (NIP) and National Business Registry Number (REGON). Providing such personal data is voluntary and solely at your discretion. However, in some situations, failure to provide this data will result in the inability to conclude a sales agreement, issue the appropriate accounting document, or place and fulfill your order.
Shopping in the online store operating within the Website – you can purchase goods or services provided by us by concluding a distance contract, through our online store, operating within ServiceIf you choose this option, we will require you to provide the following personal data: name and surname, telephone number, email address, home address, delivery address, and, if you are a business owner, your Tax Identification Number (NIP) and National Business Registry Number (REGON). Please note that providing the above personal data is voluntary, but failure to provide the above data will result in the inability to conclude a sales contract, issue an appropriate accounting document, or place and fulfill your order through the online store.
Purchases made as part of an order placed via email – in certain situations, including the so-called "special order", i.e. for example the sale of furniture or equipment prepared according to the individual design of the Client or according to a special design prepared by The company at the Customer's request, according to his guidelines and indications, and the sale of which is not possible via the online store operating within the framework of Service, it is possible to conduct such a transaction via email. In such a situation, we will require you to provide the following personal data: name and surname, telephone number, email address, home address, delivery address, and, if you are a business owner, also your Tax Identification Number (NIP) and National Business Registry Number (REGON). Please note that providing the above personal data is voluntary, but failure to provide the above data will result in the inability to conclude a sales contract, issue an appropriate accounting document, or place and fulfill your order. Furthermore, if you do not provide us with this personal data, we will not be able to contact you regarding so-called "special orders," e.g., to coordinate a project.
Using the Website – as part of the use of Our services via Our website, passive data is collected in the form of further information that may be of a personal nature (i.e. IP address, domain name, browser type, operating system type). Our website uses cookies and navigation data (as discussed in more detail in the Cookie Policy). The above data is collected automatically during your visit to ServicePlease note that you can set your browser to warn you when a cookie is being sent or to block the sending of such files altogether. However, please note that if you block cookies, some features of Our Site may not be available. Service may function in a limited way or not at all.
Using the Newsletter service – if you give your consent, Company will process your personal data in the form of an e-mail address in order to provide you with additional services, consisting in sending You commercial information regarding the promotion of products, services or image Company or its brands, as well as about the ones in force in The company Promotional or discount campaigns. Please remember that providing the above personal data is voluntary, and any processing of your personal data in this regard requires your consent. You can withdraw your consent to receive the Newsletter at any time. In such a case, we will cease processing your personal data in connection with the Newsletter service, and your data will be removed from the mailing list. Administrator.
Contact with the Company or the store (stationary and online) operated by it – If you choose to contact us via communication channels (e.g., for customer service purposes), such as telephone, email, or social media messaging, we may ask you to provide the following personal data: name, phone number, and email address. Please note that providing the above personal data is voluntary, but failure to provide it may, in some cases, prevent us from responding to your inquiry, request, or statement.
Using the Company's profiles available on social media Company may maintain profiles on certain social media, where information about its activities and current offers of goods or services will be posted. If you decide to visit such a profile and interact with it (post a hashtag, leave a comment, add an opinion, like) via your own profile, this will mean sharing your personal data with us (e.g., name and surname, nickname, user ID, profile picture, your post or likes). Please remember that providing the above-mentioned personal data is voluntary and it is your decision whether to interact with our profile. In some cases, providing the personal data (interaction) referred to above may be necessary to participate in competitions organized by The company competitions or promotional campaigns.
Correspondence with the Company via the contact form available on the Website – if you decide to use the communication channel available in Service (contact form), when completing it, you will be asked to provide the following personal data: name, email address, contact subject, and (optionally, at your discretion) surname and phone number. Please note that providing the above personal data is voluntary, however, failure to provide the data provided in the form may result in the inability to respond to your inquiry.

We do not process any personal data related to so-called sensitive data, i.e. genetic or biometric data.

For what purpose and on what legal basis do we process your personal data?

Please remember that we process your personal data only on the basis of the legal basis established in GDPR and other generally applicable laws. Below, you can learn why we collect your personal data, as well as the legal basis for collecting and processing the data.

Based on Article 6(1)(a) GDPR we process your personal data:

based on your consent in order to send you current marketing information (Newsletter) about the current offer Company in the field of goods and services, promotional campaigns organized by The company, as well as about discount campaigns;
only for marketing purposes, through communication channels to which you have consented;
in terms of name, surname, telephone number or e-mail address.

Please remember that the consent referred to above is voluntary and depends solely on your decision, as your consent constitutes the legal basis for our direct marketing activities. You may withdraw your consent at any time, but withdrawing consent does not affect the lawfulness of personal data processing that occurred prior to your withdrawal. Upon withdrawal of your consent, we will immediately cease processing your personal data on the basis and to the extent specified above.

Based on Article 6(1)(b) GDPR we process your personal data:

necessary to perform the contract concluded with you (in the scope of the sale of goods or provision of services) or to take steps at your request before concluding the contract and aimed at concluding the legal relationship in question;
only for purposes related to the preparation, conclusion and performance of the contract (in the scope of the sale of goods or provision of services), including the placement of an order, its execution and delivery of goods or services;
in terms of name and surname, telephone number or e-mail address, residential address, and in the case of an entrepreneur also the NIP and REGON numbers.

Please remember that providing your personal data referred to above is voluntary and depends solely on your decision, however, in some situations, failure to provide the data in question will result in the inability to conclude a sales contract, issue an appropriate accounting document or place and fulfill your order.

Based on Article 6(1)(c) GDPR we process your personal data:

necessary to be completed by The company legal obligation imposed on it by generally applicable provisions of law;
solely for the purpose of properly documenting commercial transactions and maintaining tax and settlement books;
in terms of name and surname, address of residence, and in the case of an entrepreneur also the NIP and REGON numbers.

Based on Article 6 paragraph 1 letter f) GDPR we process your personal data:

necessary for the purposes of legitimate interests pursued by The company (Administrator);
in order to ensure your and our safety (including that of employees and property) Company);
for the purpose of determining, pursuing or defending against any claims;
to offer products and services (direct marketing);
improving our goods and services;
to measure customer satisfaction;
in terms of data obtained from the Client during contact, cooperation or use Service.

How long do we store your personal data?

We store and process personal data only for the period necessary to fulfill the contract or the purposes specified in this document, as well as to meet applicable legal requirements and regulations. After the storage and processing period has elapsed, personal data is deleted or anonymized.

Detailed information on the period of storage of personal data:

we store personal data obtained from video surveillance for a period of 30 days, after which time they are overwritten and cannot be opened;
we store personal data obtained in connection with the conclusion and performance of the contract for the period resulting from generally applicable legal provisions (until the limitation period for claims in accordance with the Civil Code – 2, 3 or 6 years depending on the nature and basis of the claim, as well as for the period related to the need to store tax documentation – 5 years);
We store personal data obtained in connection with direct marketing for the duration of the legitimate interest Administrator, but not longer than the limitation period for claims;
We store personal data obtained in connection with the Newsletter service until the Customer withdraws consent to their processing for this purpose;
personal data obtained in connection with the use of Service and an online store operating within Service, we store it for the duration of the legitimate interest Administrator, but not longer than the limitation period for claims.

In the case of personal data for which the law requires immediate deletion, this process is carried out immediately.

Where is personal data stored?

Your personal data is stored at the registered office Company in electronic and paper form. When processing your personal data, we use organizational and technical measures consistent with the relevant provisions of generally applicable law. Our IT systems have appropriate security measures in the form of firewalls and antivirus software. Data in paper form is secured by appropriate physical security measures. We apply confidentiality clauses to our employees who have access to personal data to ensure the security of this data.

The personal data collected, processed and stored by us are not transferred outside the European Economic Area.

Entrusting personal data to other entities.

In some situations, your personal data may be shared with third parties cooperating with CompanyWe want you to know that whenever we share your personal data with other entities, we do so only within the limits of generally applicable law, and based on a personal data processing agreement with an appropriate confidentiality clause. We require our partners to ensure that the personal data transferred to them is adequately protected and secured, in a manner consistent with the standards applied by The companyWe do not allow personal data entrusted to our partners to be used by them for marketing purposes.

Your personal data may be shared:

the HR and accounting company cooperating with us, dealing with our services Company;
a law firm cooperating with us, providing services to our clients Company;
courier and postal companies cooperating with us, delivering goods to our customers;
IT companies cooperating with us, dealing with the operation and maintenance of our technical and IT infrastructure.

The method of processing personal data and its protection

The processing of your personal data is carried out manually and automatically in electronic IT systems, in electronic and paper form.

To ensure appropriate levels of security and protection of your personal data, we have taken appropriate organizational and technical measures to protect it against accidental loss, destruction, misuse, damage, or unauthorized or illegal access.

We process personal data ourselves, using our employees (who have appropriate confidentiality clauses), and in some cases through our business partners, such as accounting and legal service providers, courier companies, IT providers, hosting providers, database providers, and other software tools. Before commencing cooperation with our partner, we conduct appropriate verification of their security and protection levels to ensure we select the best providers on the market. Before commencing cooperation, we always conclude an appropriate confidentiality agreement with our partner regarding the transferred personal data.

What rights do you have in relation to the processing of your personal data by the Company?

Pursuant to generally applicable legal provisions, in particular GDPR, you have a number of rights regarding the processing of your personal data by Personal data administratorIt is extremely important to us that you are aware of them and can use them whenever you deem it appropriate, within the limits of applicable law. Please also remember that we are always open to contacting you on all matters related to personal data protection, especially if you have any doubts or reservations regarding the content. Privacy Policy, including your rights indicated therein. For your safety, we have also implemented appropriate procedures along with descriptions of their implementation options, which you will be able to use when exercising your rights. Details can be found in the tab Documents.

First of all, you need to know that the data subject is entitled to:

request access to your personal data;
request rectification of your personal data;
request the deletion of your personal data;
request to limit the processing of your personal data;
requests to transfer your personal data;
object to the processing of your personal data.

You have the right to access your personal data at any time. You can submit a request to us for access to your data and for information regarding this matter.

Furthermore, the data subject has the right to request from Administrator to immediately rectify any inaccurate personal data concerning them. Taking into account the purposes of processing, the data subject has the right to request that incomplete personal data be completed, including by providing an additional statement.

The data subject has the right to request Administrator immediate deletion of personal data concerning her, and Administrator is obliged to delete personal data without undue delay if one of the following circumstances occurs:

personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
the data subject withdraws consent to which the processing is based pursuant to point (a) of Article 6(1) or point (a) of Article 9(2), GDPR, and there is no other legal basis for processing;
the data subject objects pursuant to Article 21(1) GDPR to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR regarding processing;
the personal data has been processed unlawfully;
personal data must be erased in order to comply with a legal obligation under Union law or the law of the Member State to which they are subject Administrator;
personal data were collected in connection with the provision of information society services referred to in Article 8(1) GDPR.

The data subject has the right to request Administrator restrictions on processing in the following cases:

the data subject questions the accuracy of the personal data – for a period allowing To the Administrator check the accuracy of this data;
the processing is unlawful and the data subject opposes the erasure of personal data, requesting instead the restriction of their use;
Administrator no longer needs the personal data for the purposes of processing, but the data subject requires them to establish, pursue or defend legal claims;
the data subject has objected under Article 21(1) GDPR regarding processing – until it is determined whether there are legitimate grounds on the part of Administrator override the data subject's grounds for objection.

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) of the GDPR. GDPR, including profiling based on these provisions. To the Administrator the personal data may no longer be processed unless he demonstrates compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject or grounds for establishing, pursuing or defending legal claims.

If personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.

If you believe that your personal data is being processed by Administrator inappropriately or unlawfully, you have the right to lodge a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection. Correspondence regarding such a complaint can be addressed to the Office for Personal Data Protection, which has its registered office in (00-193) Warsaw, at ul. Stawki No. 2.

Throughout our operations, we strive to raise standards in the area of security and protection of your personal data, therefore we will be very grateful if you share your comments or reservations in this regard with us, which in no way excludes or limits your right to lodge a complaint with the supervisory authority.

Cookies Policy

using Service You should be aware that the website www.desiva.pl uses small files called cookies. Cookies are small pieces of information in the form of text files (IT data) containing a unique identifier, sent by a web server and saved on the hard drive of a device (computer, laptop, smartphone, or other mobile device) while using the website, if the web browser allows it. We use cookies to Service and the tools made available on it functioned correctly.

The Administrator uses "session" cookies stored on the Customer's end device until logging out, closing the website or closing the web browser, and "persistent" cookies stored on the Customer's end device for the time specified in the cookie parameters or until they are deleted by the Customer.
The Administrator uses the following types of cookies within the Website:
- “essential” cookies, enabling the use of services available on the Website,
- cookies used to ensure security,
- “performance” cookies, used to obtain information about how Users use the Website,
- "advertising" cookies, enabling the provision of advertising content to Users that is more tailored to their interests,
- “functional” cookies, enabling “remembering” the settings selected by the User and adapting the Website to the User.
The service administrator uses external cookies for the following purposes:
- collecting general and anonymous statistical data via analytical tools: Google Analytics (the cookie administrator is Google Inc. based in the United States),
- using interactive functions to popularize the Website via the social networking site www.facebook.com (the cookie administrator is Facebook Inc. based in the United States or Facebook Ireland based in Ireland).
Cookies customize and optimize the Website and its offerings to meet Customer needs through activities such as generating page view statistics and ensuring user security. Cookies are also necessary to maintain a Customer's session after they leave the Website.
The customer may change cookie settings at any time using their web browser, including blocking the ability to collect cookies.
Blocking the ability to collect cookies or making other changes to the cookie settings on the Customer's device may make it difficult or impossible to use the services and tools of the Website, including the ability to place an Order.
Customers who do not wish to use cookies for the purposes described above may delete them manually at any time. For detailed instructions, please visit the website of the manufacturer of the web browser the Customer is currently using. More information about cookies is available in the help menu of each web browser. Examples of web browsers that support these cookies include Internet Explorer, Mozilla Firefox, Google Chrome, and Opera.
The Administrator may enable third-party entities, such as advertising providers or analytics providers, to collect information using these technologies directly on the website. Data collected in this way is subject to the privacy policies of these entities.
Some third parties operating within the Service allow users to opt out of their collection and use of data for activity-based advertising. More information and options for opting out can be found, for example, on the website: www.youronlinechoices.com.

Changes to the Privacy Policy

Our company is constantly developing, adapting its offer to the current and future needs of our clients and contractors, hence both the range of products we offer and the services we provide The company Services may be subject to periodic changes. We are also aware that generally applicable data protection laws may change in the future, therefore Privacy Policy is subject to systematic legal audits to ensure the legality of the solutions adopted therein. For the above reasons, we hereby inform you that the content of the document in question (Privacy Policy) may be subject to changes or updates at a later date, about which we will immediately inform you on Our Service, posting new content there Privacy PolicyWhenever possible, we will endeavor to provide notice of changes to the content of this document in a timely manner through the communication channels to which you have consented. We encourage you to regularly follow our Service and all documents related to its operation that are located there. We believe that this will not only keep you up to date with our offer, but also familiarize you with the rules and processes related to our operations. Service.