(hereinafter referred to as the “Policy”)
To ensure your privacy and comfort while using our services, we present the most important information regarding the processing of personal data by By Corel Sp. z o.o. online store.
Considering the regulations of the European Parliament and Council of the European Union 2016/679 of April 27, 2016, on the protection of natural persons concerning the processing of personal data and the free movement of such data (hereinafter “GDPR”) and the repeal of Directive 95/46/EC, we kindly inform you that:
The controller of your personal data is By Corel Spółka z ograniczoną odpowiedzialnością, based in Warsaw (00-052) at ul. Mazowiecka 11/49, registered in the National Court Register under number: 0001044653, holding NIP 5252962391 and REGON 525675237, with a share capital of 5000 PLN (hereinafter “By Corel”, “Controller” or “Store”). You can contact the Controller by mail at the above address or electronically via email at office@bycorel.com.
The Controller has not appointed a Data Protection Officer. However, for all matters related to personal data processing, you can contact the Controller via email at office@bycorel.com or by traditional mail at the By Corel headquarters address indicated above.
Below you will find detailed information on the processing of your data depending on the actions you take.
Purpose: To execute the contract for providing account services in the Store.
Legal Basis: Service contract – based on Article 6(1)(b) GDPR.
Processing Period: Until the account is deleted at your request; the Store reserves the right to process your data until the expiration of the period during which mutual claims can be pursued – based on Article 6(1)(f) GDPR.
Voluntariness of Data Provision: Failure to provide personal data will prevent the creation of an account and the use of its features, such as viewing order history or checking order status.
Purpose: To fulfill the order placed in the Store.
Legal Basis: Sales contract – based on Article 6(1)(b) GDPR; legal obligation related to accounting regulations requiring the Store to process your personal data – based on Article 6(1)(c) GDPR.
Processing Period: During the term of the contract related to the purchase made in the Store and until the legal obligation related to accounting regulations expires; the Store reserves the right to process your data until the expiration of the period during which mutual claims can be pursued – based on Article 6(1)(f) GDPR.
Voluntariness of Data Provision: Failure to provide personal data will prevent the submission and execution of the order by the Store.
Purpose: To handle your inquiries or reports.
Legal Basis: Contract or actions taken at your request, aimed at its conclusion – based on Article 6(1)(b) GDPR – if your inquiry or report concerns a contract to which the Store is or may be a party; legitimate interest in processing your data to communicate – based on Article 6(1)(f) GDPR – if your inquiry or report is not related to a contract.
Processing Period: For the duration of the binding contract or – if the contract is not concluded – until the expiration of the period for pursuing claims or until the Store acknowledges your objection to processing. Depending on which applies in the given case and occurs first.
Voluntariness of Data Provision: Failure to provide personal data will prevent the Store from responding to your question or report.
Purpose: To establish, pursue, or defend against potential claims related to services provided by the Store.
Legal Basis: The Store’s legitimate interest in processing personal data for the above purpose – based on Article 6(1)(f) GDPR.
Processing Period: Until the expiration of the limitation period for claims or until the Store acknowledges your objection to processing – depending on which applies in the given case and occurs first.
Voluntariness of Data Provision: Failure to provide personal data will prevent the establishment, pursuit, or defense of potential claims.
Purpose: To receive emails with newsletters containing commercial information.
Legal Basis: Consent to the processing of your personal data for one or more specific purposes – based on Article 6(1)(a) GDPR.
Processing Period: Until the consent to processing for the above-specified purpose is withdrawn. Exercising this right does not affect the processing carried out before the consent was withdrawn.
Voluntariness of Data Provision: Failure to provide personal data will prevent the Store from distributing newsletters containing commercial information.
Personal data processed by By Corel may be shared with the following entities, which will process your data on behalf of the Controller based on agreements concluded with the Controller (e.g., suppliers of items available in the By Corel online store, courier and postal service providers; hosting, accounting, legal, advisory, IT service providers, and similar).
Personal data is not transferred to third countries (i.e., countries outside the European Economic Area) or international organizations by By Corel or by the Controller’s subcontractors or suppliers.
You have the right to access your data and request its rectification, completion, deletion, restriction of processing, or objection to processing, as well as data portability unless it is contrary to legal provisions. To exercise these rights, please contact us as per point 1 above.
You also have the right to lodge a complaint with a supervisory authority, particularly in your habitual residence, place of work, or place of the alleged infringement if you believe that data processing violates regulations. In Poland, the supervisory authority is the President of the Office for Personal Data Protection (address: ul. Stawki 2, 00-193 Warsaw).
To ensure the security of your personal data, we have developed internal procedures and recommendations to prevent unauthorized access to data. We monitor their implementation and continuously check their compliance with applicable executive acts and community law, especially GDPR regulations.
Communication between your computer or other electronic device and our server, when collecting your personal data, is encrypted using the SSL protocol. Additionally, our databases are secured against third-party access.
Cookies allow the identification of software used by customers on end devices and enable the customization of the Store to the individual preferences of visitors. By Corel uses profiling processes in the form of cookies. Cookies used by the Controller are safe for your devices. The Store uses two types of cookies:
The Store obtains information about customers and their behavior through:
Web browser software usually allows cookies to be stored on the client’s end device by default. You can change the settings to stop collecting and storing cookies. The web browser also allows you to delete cookies. Automatic blocking of cookies is also possible.
Data provided in forms are processed for purposes resulting from the function of a specific form, e.g., to register or place an order. The purposes of processing your personal data by the Store are described in point 3 of the Policy above.
Some of your behaviors are subject to logging at the server level. These data are used only to administer the online store and ensure efficient service provision. These data are not disclosed to third parties.
We reserve the right to make changes to the Store’s Policy, which may be influenced by the development of internet technology, changes in data protection law, and the development of our online services. We will inform about any changes in a visible and understandable manner.