blue shadow
Privacy policy

PRIVACY POLICY

BLUE SHADOW PRIVACY POLICY

This Privacy Policy (hereinafter: "Policy") contains information about the processing of your personal data in connection with the use of blue shadow online shop, operating at https://blueshadow.pl/ (hereinafter: „Shop”).

Any capitalised terms not otherwise defined in the Policy shall have the meaning given to them in the Terms and Conditions, available at:
https://blueshadow.pl/pl/i/Regulamin-sklepu/23 .

Personal data controller

The administrator of your personal data is ROSAGO spółka z ograniczoną odpowiedzialnością with its registered office in Tychy (registered office address: ul. Ks. Świerzego 8, 43-100 Tychy), entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register under KRS number: 0000297347, holding NIP number: 9691474135. REGON number: 240547340, with a share capital of PLN 400,000.00 (four hundred thousand zloty) (hereinafter: “Controller”).

DATA CONTROLLER CONTACT DETAILS

For all matters relating to the processing of your personal data, you can contact the Controller by email, at: [email protected].

Personal data protection measures

The Controller uses modern organisational and technical safeguards to ensure the best possible protection of your personal data and ensures that it processes your personal data in accordance with provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter: "GDPR"), the Personal Data Protection Act of 10 May 2018 and other personal data protection legislation.

Information on processed personal data

The use of the Shop requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for the processing, as well as the duration of the processing and the obligation or voluntariness to provide this information.

Purpose of processing

Personal data processed

Legal basis

Conclusion and performance of the Account Service Agreement

1) email address;

2) optionally - your data stored in your Google account or Facebook profile.

Article 6 (1) (b) of the GDPR

 

(processing is necessary for the performance of the Agreement for the provision of the Account Service concluded with the data subject or for taking steps to conclude it)

The provision of the aforementioned personal data is a prerequisite for the conclusion and performance of the agreement for the provision of the Account Service (the provision of such data is voluntary, but the consequence of failing to provide such data will be the inability to conclude and perform the aforementioned agreement, including the creation of an Account).

 

The Controller will process the aforementioned personal data until the statute of limitations for claims arising from the agreement for the provision of the Account Service.

 

Purpose of processing

Personal data processed

Legal basis

Conclusion and performance of the Sales agreement

1) name;

2) surname;

3) telephone number;

4) email address;

5) delivery address (street, house number, apartment number, town, postal code, country);

6) company;

7) NIP [TAX IDENTIFICATION NUMBER].

Article 6 (1) (b) of the GDPR

 

(processing is necessary for the performance of the Agreement concluded with the data subject or for taking steps to conclude it)

The provision of the aforementioned personal data is a condition for the conclusion and performance of a Sales Agreement, a Digital Content Agreement or a Mixed Agreement (the provision of such data is voluntary, but the consequence of failing to provide such data will be the inability to conclude and perform the aforementioned Agreement or Agreements).

 

The Controller will process the aforementioned personal data until the statute of limitations for claims arising from the aforementioned Agreement or Agreements.

 

Purpose of processing

Personal data processed

Legal basis

Conduct of the complaints procedure

1) name;

2) surname;

3) e-mail address;

4) telephone number;

5) mailing address (street, house number, apartment number, postal code, town, country).

Article 6 (1) (c) of the GDPR

 

(the processing is necessary for the fulfilment of a legal obligation incumbent on the Controller, including obligations to:

- respond to a complaint - Article 7a of the Consumer Rights Act;

- the exercise of the Buyer's rights under the warranty - art. 556 and further of the Civil Code)

Provision of the aforementioned personal data is a prerequisite for receiving a response to the complaint or exercising the Buyer's rights under the warranty (provision of such data is voluntary, but the consequence of failing to provide such data will be the inability to receive a response to the complaint and exercise rights under the warranty).

 

The Controller will process the aforementioned personal data for the duration of the complaint procedure (however, no longer than 14 days), and in the case of exercising the consumer's rights under the warranty - until they expire.

 

Purpose of processing

Personal data processed

Legal basis

Sending a newsletter

e-mail address

Article 6 (1) (f) of the GDPR

 

(processing is necessary for the Controller's legitimate interest, in this case to inform about news and promotions available in the Shop)

The provision of an e-mail address is voluntary, but necessary in order to receive the Newsletter (the consequence of failure to do so will be the inability to receive the Newsletter).

 

The Controller will process the email address until an objection is successfully lodged or the purpose of the processing is achieved.

 

Purpose of processing

Personal data processed

Legal basis

Sending e-mail notifications

 

(e.g. reporting on the progress of the Order)

e-mail address

Article 6 (1) (f) of the GDPR

 

(processing is necessary for the Controller's legitimate interest, in this case to inform Customers of service provision activities undertaken)

Provision of the aforementioned personal data is voluntary, but necessary in order to receive information on activities related to the provision of services (the consequence of failure to do so will be the inability to receive the aforementioned information).

 

The controller will process the above personal data until an objection is successfully lodged or the purpose of the processing is achieved.

 

Purpose of processing

Personal data processed

Legal basis

Handling the product enquiry form

1) name;

2) e-mail address;

(Article 6 (1) (a) of the GDPR

 

(processing of personal data takes place on the basis of consent given)

The provision of the aforementioned personal data is voluntary, but necessary in order to receive a response to a Product enquiry (the consequence of failing to do so will be that you will be unable to receive a response).

 

The Controller will process the aforementioned personal data until the consent given is withdrawn, but no longer than until the request is answered.

 

Purpose of processing

Personal data processed

Legal basis

Fulfilment of tax obligations (e.g. issuing a VAT invoice, keeping accounting records)

1) name and surname / company name;

2) address of residence/office;

3) NIP [TAX IDENTIFICATION NUMBER];

4) the Order number.

Article 6 (1) (c) of the GDPR

 

(the processing is necessary for the fulfilment of a legal obligation incumbent on the Controller, including obligations under tax law)

The provision of the aforementioned personal data is voluntary, but necessary in order for the Controller to comply with its tax obligations (the consequence of failure to do so will be the Controller's inability to comply with the aforementioned obligations).

 

The Controller will process the above personal data for a period of 5 years from the end of the year in which the deadline for payment of tax for the previous year expired.

 

Purpose of processing

Personal data processed

Legal basis

Compliance with data protection obligations

1) name;

2) surname;

3) the contact details you provide (e-mail address; mailing address; telephone number).

Article 6 (1) (c) of the GDPR

 

(the processing is necessary for the fulfilment of a legal obligation incumbent on the Controller, in this case obligations under data protection legislation)

The provision of the aforementioned personal data is voluntary, but necessary in order for the Controller to properly perform its obligations under data protection legislation, including the exercise of the rights granted to you by the GDPR (the consequence of failing to provide the aforementioned data will be the inability to properly exercise the aforementioned rights).

 

The Controller will process the aforementioned personal data until the expiry of the limitation periods for claims for breach of personal data protection legislation.

 

Purpose of processing

Personal data processed

Legal basis

Establishing, asserting or defending against claims

1) name;

2) surname;

3) e-mail address;

4) address of residence/office;

5) PESEL [personal statistic number] / KRS [National Court Registry number];

6) company;

7) NIP [TAX IDENTIFICATION NUMBER].

Article 6 (1) (f) of the GDPR

 

(processing is necessary for the purposes of the Controller's legitimate interests, including in the case of establishing, investigating or defending against claims that may arise in connection with the performance of the Agreements concluded with the Controller)

Provision of the aforementioned personal data is voluntary, but necessary in order to establish, assert or defend against claims that may arise in connection with the performance of the Agreements concluded with the Controller (the consequence of failing to provide the aforementioned data will be the Controller's inability to take the aforementioned actions)

 

The Controller shall process the aforementioned personal data until the expiry of the limitation periods for claims that may arise in connection with the performance of agreements concluded with the Controller.

 

Purpose of processing

Personal data processed

Legal basis

Analysis of your shop activity

1) Date and time of visits;

2) the IP number of the device;

3) the type of operating system of the device;

4) approximate location;

5) type of web browser;

6) time spent in the Shop;

7) reviewed Products;

8) subpages visited and other actions taken within the Shop.

Article 6 (1) (f) of the GDPR

 

(processing is necessary for the Controller's legitimate interest, in this case to obtain information about your activity in the Shop)

The provision of the aforementioned personal data is voluntary, but necessary in order for the Controller to obtain information about your activity in the Shop (the consequence of failing to do so will be the Controller's inability to obtain the aforementioned information).

 

The controller will process the above personal data until an objection is successfully lodged or the purpose of the processing is achieved.

 

Purpose of processing

Personal data processed

Legal basis

Shop administration

1) IP address;

2) server date and time;

3) browser information;

4) information about the operating system.

 

The above data is saved automatically in so-called server logs every time the Shop is used (administration of the Shop without the use of server logs and automatic saving would not be possible).

Article 6 (1) (f) of the GDPR

 

(processing is necessary for the Controller's legitimate interest, in this case to ensure the proper operation of the Shop)

Provision of the aforementioned personal data is voluntary, but necessary to ensure the proper operation of the Shop (the consequence of failing to provide such data will be the inability to ensure the proper operation of the Shop).

 

The controller will process the above personal data until an objection is successfully lodged or the purpose of the processing is achieved.

 

Profiling

In order to create your profile for marketing purposes and to target you with direct marketing tailored to your preferences, the Controller will process your personal data by automated means, including profiling - but this will not have any legal effect on you or similarly materially affect you.

The extent of the personal data profiled corresponds to that indicated above with regard to the analysis of your activity in the Store and the data you save in your Account.

The legal basis for the processing of personal data for the above purpose is Article 6(1)(f) of the GDPR, according to which the Controller may process personal data in order to pursue its legitimate interest, in this case to carry out marketing activities tailored to the recipients' preferences. The provision of the aforementioned personal data is voluntary, but necessary to fulfil the aforementioned purpose (the consequence of failing to do so will be the Controller's inability to carry out marketing activities tailored to the recipients' preferences).

The Controller will process personal data for profiling purposes until you successfully object or the purpose of the processing is achieved.

Recipients of personal data

The following external entities cooperating with the Controller may be recipients of personal data:

  1. the supplier of the software needed to run the Shop;
  2. logistics operator and courier companies;
  3. providers of online payment systems;
  4. Google and Facebook services;
  5. companies providing tools to analyse Shop activity and direct marketing to the users (e.g. Google Analytics, Yandex LCC);
  6. the Wirtualna Polska Group;
  7. accounting office;
  8. a facilitator to optimise the Shop;
  9. provider of business facilitation software (e.g. accounting software);
  10. newsletter service provider;
  11. SMS/MMS service provider.

In addition, personal data may also be transferred to public or private entities if such an obligation arises from generally applicable law, a final court judgment or a valid administrative decision.

Transfer of personal data to a third country

In connection with the Collector's use of tools such as Google Analytics, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The transfer of data to the aforementioned third countries is based on contractual clauses ensuring an adequate level of protection, in line with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries under Regulation (EU) 2016/679 of the European Parliament and of the Council.

You can obtain from the Controller a copy of the data transferred to a third country.

Authorizations

In connection with the processing of your personal data, you have the following rights:

  • The right to be informed which personal data concerning you is processed by the Controller and to receive a copy of this data (the so-called right of access). Issuing the first copy of the data is free of charge; the Controller may charge a fee for subsequent copies;
  • if the data processed becomes outdated or incomplete (or otherwise incorrect), you have the right to request rectification;
  • In certain situations you may ask the Controller to delete your personal data, e.g. when:
    1. the data will no longer be needed by the Controller for the purposes for which he has informed you;
    2. you have effectively withdrawn your consent to the processing of the data - provided that the Controller is not entitled to process the data on another legal basis;
    3. processing is unlawful;
    4. the need to erase the data arises from a legal obligation incumbent on the Controller;
  • where your personal data is processed by the Controller on the basis of your consent to processing or for the performance of a Agreement with the Controller, you have the right to transfer your data to another Controller;
  • where personal data is processed by the Controller on the basis of your consent to processing, you have the right to withdraw that consent at any time (withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal);
  • if you consider that the personal data being processed is incorrect, the processing is unlawful, or the Controller no longer needs certain data, you may request that for a certain, necessary period of time (e.g. to verify the correctness of the data or to assert claims) the Controller does not perform any operations on the data, but only stores them;
  • you have the right to object to the processing of personal data based on the legitimate interest of the Controller. If an objection is successfully lodged, the Controller will cease to process the personal data for the aforementioned purpose;
  • you have the right to lodge a complaint with the President of the Personal Data Protection Authority if you consider that the processing of your personal data violates the provisions of the GDPR.

Cookies

  1. The Controller informs you that the Shop uses "cookies" (cookie files) installed on your terminal device. These are small text files that can be read by the Controller's system, as well as by systems belonging to other entities whose services are used by the Controller (e.g. Facebook, Google).
  2. The Controller uses cookies for the following purposes:
    1. ensuring proper functioning of the Shop - thanks to cookies, it is possible to ensure proper functioning of the Shop, use its functions and convenient browsing between individual sub-pages;
    2. enhancing the browsing experience of the Shop - cookies make it possible to detect errors on certain pages and to continuously improve them;
    3. creation of statistics -cookies are used to analyse how users use the Shop. This allows us to continuously improve the Shop and adapt its operation to users' preferences;
    4. to carry out marketing activities - thanks to cookies, the Controller can target users with advertisements tailored to their preferences.
  3. The Controller may place both permanent and temporary (session) files on your device. Session files are usually deleted when the browser is closed, while closing the browser does not delete persistent files.
  4. Information about the cookies used by the Controller is displayed in the panel at the bottom of the Shop's website. Depending on your decision, you can enable or disable category-specific cookies (except for essential cookies) and change these settings at any time.
  5. The data collected through cookies does not allow the Controller to identify you.
  6. The Controller uses the following cookies or tools that use them:

TYPE

FILE NAME

SUPPLIER

FILE FUNCTION

PERIOD OF OPERATION

Essential

cf_use_ob

dcsaascdn.net

This cookie is used to detect whether a website is accessible.

1 day

Essential

CONSENT

youtube.com

This cookie is used to verify that the visitor's browser accepts cookies.

2 years

Essential

SERVERID

app3.salesmanago.pl

This cookie is used to assign the visitor to a specific server.

Session

Essential

SERVERID

shoper.salesmanago.com

This cookie is used to assign the visitor to a specific server.

Session

Essential

gdpr

id5-sync.com

This cookie is used to verify that the visitor's browser accepts cookies.

1 day

Preferences

__sak

youtube.com

This cookie is used to store information about the visitor's video settings.

indefinite (until removal)

Statistical

_smvs

app3.salesmanago.pl

This cookie is used to record data on website visitor activity (for internal analysis and website optimisation).

indefinite (until removal)

Statistical

_smvs

blueshadow.pl

This cookie is used to record data on website visitor activity (for internal analysis and website optimisation).

indefinite (until removal)

Statistical

PugT

pubmatic.com

This cookie is used to record data on website visitor activity (for internal analysis and website optimisation).

30 days

Statistical

visitor-id

media.net

This cookie is used to record data on website visitor activity (for internal analysis and website optimisation).

1 year

Marketing

_smvc

app3.salesmanago.pl

This cookie is used to embed pop-up adverts on a website.

3 months

Marketing

DEVICE_INFO

youtube.com

This cookie is used to track a visitor's interaction with content embedded on the website.

indefinite (until removal)

Marketing

LAST_RESULT_ENTRY_KEY

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

180 days

Marketing

NID

google.com

This cookie is used to record the unique identifier of the user's device for advertising purposes.

indefinite (until removal)

Marketing

AdServer/Pug

pubmatic

This cookie is used to record statistical data from multiple visits to the website.

session

Marketing

am_tokens

exchange.mediavine.com

This cookie is used to present the user with relevant content and advertising.

14 days

Marketing

am_tokens_eu-v1

exchange.mediavine.com

This cookie is used to present the user with relevant content and advertising.

14 days

Marketing

callback

id5-sync.com

This cookie is used to record visitor data in order to optimise the relevance of advertisements.

1 day

Marketing

criteo

exchange.mediavine.com

This cookie is used to present the user with relevant content and advertising.

14 days

Marketing

iev

csm.fr.eu.criteo.net

This cookie is used to track whether you have shown an interest in certain products across a number of websites in order to present relevant advertising.

session

Marketing

KRTBCOOKIE_#

pubmatic.com

This cookie is used to record the unique identifier of the user's device for advertising purposes.

30 days

Marketing

match

exchange.mediavine.com

This cookie is used to record the unique identifier of the user's device for advertising purposes.

 

Marketing

demdex

demdex.net

This cookie is used to record the unique identifier of the user's device for advertising purposes.

180 days

Marketing

criteo_write_test

blueshadow.pl

Sets a unique identifier for the visitor, which enables advertisers to target the visitor with relevant advertising.

1 day

Marketing

cto_bundle

criteo.com

This cookie is used to present the user with relevant content and advertising.

indefinite (until removal)

Marketing

remote_sid

youtube.com

This cookie is used for the necessary implementation and operation of the video content embedded on the website.

6 months

Marketing

smg

salesmanago.pl

This cookie is used to record visitor data in order to optimise the relevance of advertisements.

10 years

Marketing

smuuid

app3.salesmanago.pl

This cookie is used to record statistical data from multiple visits to the website.

indefinite (until removal)

Marketing

smuuid

blueshadow.pl

This cookie is used to record statistical data from multiple visits to the website.

10 years

Marketing

smvr

app3.salesmanago.pl

This cookie is used to collect information about the visitor's preferences and their interactions with advertising content.

indefinite (until removal)

Marketing

smvr

blueshadow.pl

This cookie is used to collect information about the visitor's preferences and their interactions with advertising content.

10 years

Essential

test_cookie

doubleclick.net

This cookie is used to verify that the visitor's browser accepts cookies.

1 day

Essential

CONSENT

google.com

This cookie is used to verify that the visitor's browser accepts cookies.

2 years

Essential

CookieConsent

Controller

This cookie is used to verify that the visitor has consented to the use of cookies.

1 year

Essential

is_eu

Controller

This cookie is used to verify that you are located in the European Union and therefore subject to European personal data regulations.

session

Essential

showFullPage

Controller

This cookie is used to store the visitor's preferences for the presentation of the website content.

session

Essential

CONSENT

Controller

This cookie is used to verify that the visitor has consented to the use of cookies.

2 years

Essential

DEVICE_INFO

Controller

This cookie is used to verify that the visitor has consented to the use of cookies.

179 days

Essential

Shop5

Controller

This cookie is used to verify that the visitor has consented to the use of cookies.

session

Essential

cookie_read

Controller

This cookie (used by Shoper) is used to verify that the visitor has consented to the use of cookies.

2 years

Essential

basket

Controller

This cookie (used by Shoper) is used to verify the iteration of the shopping cart.

session

Functional

Shoper5_lp-pl_PL

Controller

This cookie (used by Shoper) is used to remember your last viewed products.

1 year

Functional

product_vote_56

Controller

This cookie (used by Shoper) is used to remember the product rating.

24 hours

Functional

poll_vote_1

Controller

This cookie (used by Shoper) is used to remember survey responses.

24 hours

Functional

ic

Controller

This cookie (used by Shoper) is used to present the content of the website more quickly.

session

Analytical service providers

shop_utm_source

Controller

This cookie (used by Shoper) is used to verify the effects of Google or Facebook campaigns.

90 days

Analytical service providers

shop_utm_medium

Controller

This cookie (used by Shoper) is used to verify the effects of Google or Facebook campaigns.

90 days

Analytical service providers

shop_utm_campaign

Controller

This cookie (used by Shoper) is used to verify the effects of Google or Facebook campaigns.

90 days

Analytical service providers

shop_sc

Controller

This cookie (used by Shoper) is used to verify the effects of Google or Facebook campaigns.

90 days

Statistical

_ga

google.com

This cookie is used to generate statistical data about how a visitor uses the website.

2 years

Statistical

_ga_#

google.com

This cookie (used by Google Analytics) is used to collect data on the number of times a visitor has visited the website and the dates of the first and last visit.

2 years

Marketing

 _fbp

 Service provider

 This cookie (used by Facebook Pixel) is used to present advertising to the visitor within Facebook.

 3 months

Marketing

 _gcl_au

 Service provider

 This cookie (used by Google AdSense) is used to measure the effectiveness of advertisements.

 3 months

Marketing

 IDE

 doubleclick.net

 This cookie (used by Google DoubleClick) to record and report on the actions of a website visitor after viewing or clicking on one of the advertiser's ads in order to measure the effectiveness of the ad and to present targeted ads to the visitor.

 1 year

Marketing

 pagead/landing

 doubleclick.net

 This cookie is used to collect visitor behaviour data from multiple websites in order to present more relevant advertising. In addition, it allows the website to limit the number of times the same ad is displayed.

 session

Marketing

 fr

 facebook.com

 This cookie (used by Facebook Pixel) is used to present marketing advertising to the visitor within Facebook.

 3 months

Marketing

 pagead/1p-user-list/#

 google.com

 This cookie is used to track whether you have shown interest in certain products or events across multiple websites and detects how you move between sites. This is used to measure advertising activity and facilitates the payment of referral fees between sites.

 session

Marketing

 pagead/landing

 google.com

 This cookie is used to collect visitor behaviour data from multiple websites in order to present more relevant advertising. In addition, it allows the website to limit the number of times the same ad is displayed.

 session

Marketing

VISITOR_INFO1_LIVE

youtube.com

This cookie (used by YouTube) is used to measure the number of visitors to a page with an embedded video.

180 days

Marketing

YSC

youtube.com

This cookie (used by YouTube) is used to determine which videos available on YouTube a visitor has viewed.

session

Marketing

ytidb::LAST_RESULT_ENTRY_KEY

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

indefinite (until removal)

Marketing

yt-remote-cast-available

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

session

Marketing

yt-remote-cast-installed

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

session

Marketing

yt-remote-connected-devices

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

indefinite (until removal)

Marketing

yt-remote-device-id

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

indefinite (until removal)

Marketing

yt-remote-fast-check-period

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

session

Marketing

yt-remote-session-app

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

session

Marketing

yt-remote-session-name

youtube.com

This cookie (used by YouTube) is used to store the visitor's viewing preferences.

session

  1. Through most commonly used browsers, you can check whether cookies have been installed on your terminal device, as well as delete installed cookies and block future installation by the Shop. However, disabling or restricting the use of cookies may cause quite serious difficulties in the use of the Shop, e.g. in the form of the need to log on to each subpage, longer loading times of the Shop website, limitations in the use of certain functionalities.

Final Provisions

To the extent not covered by the Policy, the generally applicable personal data protection regulations shall apply.

The policy is effective as of 27.01.2023.

Shop is in view mode
View full version of the site
Sklep internetowy Shoper Premium