PRIVACY AND COOKIES POLICY

WEBSHOP 

https://mymuse.ai/ 

I. General information

This document sets out the privacy policy of the Online Store https:// mymuse.ai / (hereinafter referred to as the "Online Store"). The administrator of personal data in the Online Store is 

MINDOPEN SP. Z O.O.

Address: OŻAROWSKA 40/42/F

05-850 DUCHNICE

NIP: 1182226778

KRS: 0000912289

REGON:389507482

Share capital: PLN 50,000.00

kontakt@mymuse.ai

Bank account no.

18 1870 1045 2078 1070 6181 0001 Nest Bank

II. Personal Data

(1) Personal data collected by the Administrator is processed on the basis of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (hereinafter RODO).

(2) The Administrator collects information provided voluntarily, by the Customers of the Online Store. However, providing the marked personal data is a condition for placing an order, while the consequence of not providing it will be the inability to order products from the store. The store will collect the following customer data: surname, first name, e-mail address, telephone number, address of residence for delivery of products. 

(3) In addition, the Administrator may record information about connection parameters such as IP addresses for technical purposes related to server administration and to collect general, statistical demographic information (e.g. about the region from which the connection is made), as well as for security purposes.

(4) The Administrator makes special efforts to protect the privacy and information provided to him and concerning the Customers of the Online Store. The Administrator shall exercise due diligence in the selection and use of appropriate technical measures, including those of a programming and organizational nature, to ensure the protection of the processed data, in particular to protect the data against unauthorized access, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation of applicable laws.

(5) Personal data will be processed in accordance with the principles of Article 5 (RODO).

Personal data will be:

(a) processed lawfully, fairly and transparently for the data subject ("lawfulness, fairness and transparency");

(b) collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes; further processing for archival purposes in the public interest, for scientific or historical research, or for statistical purposes shall not be deemed incompatible with the original purposes under Article 89(1) of the RODO ("purpose limitation");

(c) adequate, relevant and limited to what is necessary for the purposes for which they are processed ("data minimization");

(d) correct and updated as necessary ("accuracy");

(e) kept in a form that allows identification of the data subject for no longer than is necessary for the purposes for which the data are processed; personal data may be kept for longer periods as long as they will be processed exclusively for archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the RODO, provided that appropriate technical and organizational measures required by this Regulation are implemented to protect the rights and freedoms of data subjects ("storage limitation");

(f) processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures ("integrity and confidentiality").

(6) As part of the Administrator's use of tools to support its day-to-day operations provided, for example, by Google, Customer Personal Data may be transferred to a country outside the European Economic Area, in particular to the United States of America (USA) or any other country in which an entity cooperating with it maintains tools for processing Personal Data in cooperation with the Administrator. 

(7) We do not use profiling, which involves automated decision-making to display advertisements to you. 

III. Personal Data we collect and use

1 We ensure that the collection and use of your personal data is lawful. Accordingly, we use your personal information for the purposes listed below only if one of the following conditions is met:

(a) You have given your consent;

b) We need your personal information to perform a contract you enter into with us, such as when you purchase a product through the website;

c) We need to comply with legal obligations;

d) We need to protect your vital interests;

e) Your data is necessary for the public interest; or

f) We have a legitimate interest in processing your personal data.

(2) The Administrator may process the following personal data of the Customers necessary to establish, shape the content, change or terminate the legal relationship concerning the services provided electronically, among others:

(a) surname and first names of the Customer;

b) the address of the Customer's residence and delivery address;

c) mailing address, if different from the address referred to in point b;

(d) electronic addresses of the Customer;

e) telephone number;

f) IP address;

g) information about the Internet browser, the device on which the online store is viewed;

IV. Legal grounds for processing personal data

1 The legal bases for the processing of personal data derive from the provisions of the RODO (Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data on the free movement of such data and the repeal of Directive 95/46/EC - the General Data Protection Regulation). When we inform you about the processing of personal data on the basis of:

(a) Art.6.1(a) RODO - this means that we process personal data on the basis of consent received,

b) Art.6.1.b) RODO - this means that we process personal data because they are necessary for the performance of a contract or for taking action prior to entering into a contract, at the request received,

c) Art.6(1)(c) RODO - this means that we process personal data in order to fulfill a legal obligation,

d) Art.6.1.f) RODO - this means that we process personal data in order to carry out legitimate interests.

V. Purposes of personal data processing

1. performance of the Agreement. The basis for the processing of the Customer's personal data is primarily the need to perform the Sales Agreement or the contract for the provision of Electronic Services to which the Customer is a party or the need to take action at the Customer's request prior to its conclusion (Article 6.1.b) RODO).

2 Marketing. Upon separate consent, pursuant to Article 6(1)(a) RODO, data may also be processed for marketing purposes by the Administrator.

3 Direct marketing. Pursuant to Article 6(1)(f) of the RODO Regulation, processing is necessary for purposes arising from the legitimate interests of the Administrator - consisting of caring for the good image of the Administrator, the Online Store and striving to sell Products or Services. 

(4) For other purposes, the Customer's personal data may be processed on the basis of:

(a) applicable laws - when the processing is necessary for the fulfillment of a legal obligation incumbent on the Administrator, e.g. when, on the basis of tax or accounting regulations, the Administrator settles concluded sales contracts (Article 6(1)(c) RODO);

b) indispensability for purposes other than those mentioned above arising from legitimate interests pursued by the Administrator or by a third party, in particular to establish, assert or defend claims, correspondence with Customers, including through contact forms (including responding to Customers' messages), market analysis and statistics (Article 6(1)(f) RODO).

VI. Period of processing of personal data

(1) Data processed for the purpose of contract execution shall be stored for the period necessary for the execution, termination or otherwise expiration of the concluded Sales Agreement or Electronic Service Agreement.

2) Data processed on the basis of applicable laws and regulations shall be stored for the period required by law mandating the Administrator, e.g. to keep tax books (until the expiration of the statute of limitations for tax liabilities, unless otherwise provided by tax laws).

(3) Data processed for purposes arising from the legitimate interests of the Administrator shall be kept for the period of existence of the legitimate interest pursued by the Administrator, but no longer than the period of the statute of limitations for claims. 

(4) Personal data processed for purposes covered by the statement of consent will be processed until the consent is revoked.

VII. Recipients of personal data

(1) Recipients of the Customer's data may be entities executing the order on behalf of the Seller and handling it: shipping companies, accounting companies, suppliers of goods, suppliers of IT solutions, payment processing companies, banks, companies providing marketing services, storage service providers, telecommunications service providers, law firms, authorized state authorities.

(2) Electronic and card payment service is provided by PayU SA, 186 Grunwaldzka St., 60-166 Poznań, NIP 779-23-08-495, REGON 300523444, District Court Poznań - Nowe Miasto and Wilda in Poznań, VIII Economic Department of the National Court Register, KRS 0000274399, Share capital: PLN 4,944,000 fully paid up.

VIII. Your rights in personal data protection

(1) Due to the voluntary nature of providing your personal data, you have the right:

(a) access to your personal data (Article 15 RODO);

(b) rectification of your personal data (Article 16 RODO);

(c) erasure of your personal data ("right to be forgotten" - Article 17 RODO);

(d) restriction of the processing of your personal data (Article 18 RODO);

(e) to portability of your personal data (Art. 20 RODO);

(f) to object - Art. 21 RODO);

(2) If you find that the processing of your personal data violates the provisions of the RODO, you have the right to file a complaint with the President of the Office for Personal Data Protection.

President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw, tel. 22 531 03 00, fax. 22 531 03 01, e-mail: kancelaria@uodo.gov.pl

(3) Consent for the processing of personal data may be withdrawn at any time. Withdrawal of consent for data processing shall not affect the legality of data processing performed by the Administrator on the basis of consent before its withdrawal.

IX. Violation of personal data protection

(1) In the event of a breach of personal data protection, the Administrator shall, without undue delay, no later than 72 hours after discovery of the breach - report it to the supervisory authority -(President of the Office for Personal Data Protection), unless the breach is unlikely to result in a risk of violation of the rights or freedoms of individuals. To the notification submitted to the supervisory authority after 72 hours, the Administrator shall attach an explanation of the reasons for the delay. If a personal data breach is likely to result in a high risk of violation of the rights or freedoms of individuals, the Administrator shall notify the data subject of such breach without undue delay.

COOKIES POLICY

1 The Administrator uses cookies. 

(2) Cookies are computer data, in particular text files, stored on the Users' devices and intended for use on the websites. 

(3) Cookies used by the Administrator are safe for the User's devices. In particular, by this means it is not possible for viruses or other unwanted software or malware to enter the Users' devices. These files allow to identify the software used by the User and customize the Services individually for each User. Cookies usually contain the name of the domain from which they originate, the time they are stored on the device and the assigned value.

(4) With regard to the purpose of collection, we distinguish the following Cookies:

(a) essential: necessary for the proper functioning of the site - files processed based on the legitimate interest of the administrator (Article 6(1)(f) RODO);

b) statistical: they allow us to study website traffic, learn about our users' preferences, analyze their behavior on the site, and enable interactions with external networks and platforms - files processed based on the user's voluntary consent (art.6(1)(a) RODO);

(c) marketing: they allow us to tailor the ads and content displayed to our users' preferences and run personalized marketing campaigns - files processed based on the user's voluntary consent (Article 6(1)(a) RODO).

(5) In terms of the duration of their validity, we distinguish two categories of cookies:

(a) session files - existing until the end of a given session,

b) permanent files - existing after the end of the session.

6. In terms of distinguishing the entity administering cookies, we distinguish:

(a) our cookies,

b) third-party cookies.

7. cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the Customer uses the Online Store. For this purpose, information about the Customer's navigation path or time spent on a given page may be stored.

(8) In terms of information about the Customer's preferences collected by the Google advertising network, the Customer can view and edit the information resulting from "cookies" using the tool: https://www.google.com/ads/preferences/.

(9) The User may independently and at any time change the settings regarding "cookies", specifying the conditions for their storage and access by "cookies" to the User's device. Changes to the settings referred to in the preceding sentence can be made by the User through the settings of the Internet browser or through the configuration of the service. These settings can be changed, in particular, in such a way as to block the automatic handling of "cookies" in the settings of the Internet browser or inform about their placement on the User's device each time. Detailed information about the possibility and methods of handling "cookies" is available in the settings of your software (web browser).

10. to find out how to manage cookies, including how to disable them in your browser, you can use your browser's help file. You can read about this information by pressing the F1 key in your browser. In addition, you will find relevant tips on the following subpages, depending on the browser you are using:

Firefox

Chrome

Safari

Internet Explorer / Microsoft Edge

11. restricting the use of cookies, may affect some of the functionality available on the website of the service. 

12.The website also collects External Cookies, so-called third party cookies, which come from external servers.

13. we use the services of:

(a) Google Analytics 4, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyze traffic on the Website. Based on it, we obtain statistics showing how you and other users use the Website.

b) Google Ads provided by Google Ireland Ltd. | Gordon House, Barrow Street, Dublin 4, Ireland for the purpose of optimizing the display of ads, remarketing and popularizing the Service.

(c) Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

14 Restricting the use of cookies, may affect some of the functionality available on the website of the Online Store.

The Administrator reserves the right to change this privacy policy with cookies.