Privacy policy and the use of “cookies” on the website www.on-repeat.com

General information

This document defines the rules of the Privacy Policy on the website www.on-repeat.com (hereinafter referred to as the “Website”). The Website Administrator is Repeat s.c. with its registered office in Kaczory, ul. Jasna 2A, 64-810, NIP (tax identification number): 764-27-03-497, REGON (National Business Registry Number): 387730313.

Dane osobowe zbierane przez Administratora Serwisu Internetowego są Personal data collected by the Website Administrator are processed in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) . (OJ L 119, p. 1) hereinafter referred to as “GDPR”.

The Website Administrator makes special efforts to protect the privacy and information provided to him and concerning the Website Users. The Administrator with due diligence selects and applies appropriate technical measures, including programming and organizational measures, ensuring the protection of the data being processed, in particular, protects the data against unauthorized access, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation of applicable law.

The services available on the website are not addressed to children under 16 years of age. The Personal Data Controller does not provide for the deliberate collection of data on children under 16 years of age.

Personal data

Personal Data Controller

The Controller of your personal data is:

Repeat s.c. with its registered office in Kaczory, ul. Jasna 2A, 64-810, NIP (tax identification number): 764-27-03-497,REGON (National Business Registry Number): 387730313.

In matters regarding your personal data, you can contact the Personal Data Controller via:
• e-mail: rodo@on-repeat.com
• traditional mail: ul. Jasna 2A,64-810 Kaczory.
• our contact form that you can find at: https://www.on-repeat.com/kontakt.

Data Protection Officer (DPO)

The Personal Data Controller has appointed the Data Protection Officer (DPO), whom you can contact regarding the protection of your personal data via:
• e-mail: rodo@on-repeat.com,
• traditional mail:
• our contact form that you can find at:https://www.on-repeat.com/kontakt.

Purposes and legal grounds for the processing of personal data

The Personal Data Controller processes your personal data for the following purposes and in the following scope:
• to provide Services, i.e. browsing the Website, searching for content or Services, process personal data regarding your activity on the Website, including data on the content or Services you are viewing, data related to the submission of Orders and their implementation, setting up an account on the Website, subscribing to the Newsletter, data regarding the session of your device, operating system, browser, location and a unique ID, IP address;
• to enable contact between the User and the Service Provider, process personal data provided by you via the contact form, the e-mail address provided by you for contacts with the Service Provider, the form for adding opinions (statements on the Website) and data regarding your activity on the Website, i.e. the data on the content are viewing, including Ads, as well as data regarding the session, your device and operating system, browser, location and a unique ID. Providing some data is a condition for using individual Services and Website functionalities (mandatory data). Our system automatically marks the mandatory data. The consequence of not providing this data is our inability to provide certain Services. Except for data marked as obligatory, providing other personal data is voluntary;
• in order to create statistics on the use of individual functionalities available on the Website, facilitate the use of the Website and ensure IT security of the Website, we process personal data regarding your activity on the Website and the amount of time spent on each of the subpages on the Website, your search history, location, IP address, device ID, data regarding your web browser and operating system;
• in order to establish, investigate and enforce claims and defend against claims in court proceedings and other enforcement authorities, we may process your personal data provided when ordering services and other data necessary to prove the existence of a claim or which result from a legal requirement, court order or other legal procedure;
• in order to deal with claims under warranty, complaints and requests and answer Users’ questions, we process the personal data provided by you in the contact form, claims under warranty, complaints and requests, or in order to answer questions submitted in a different form, as well as the data regarding the Services provided by us that are the cause of the claim under warranty, complaint or request as well as the data contained in the documents attached to the claims under warranty, complaints and requests;
• in order to conduct marketing of our Services and our partners’ services, including remarketing, we process data on your activity on the Website, including activities that are recorded and stored via cookies, in particular: activity history, ordered services, search history, clicks on the Website, login and registration dates, history and your activity related to our communication with you. In the case of remarketing, we use data on your activity in order to reach you with our marketing messages outside the Website and we use the services of external suppliers for this purpose. These services consist in displaying our messages on websites other than the Website. Details on this subject can be found in the provisions regarding Cookies;
• to research the market and conduct opinion polling by us or our partners, i.e. information about services, your data provided when using the services, e-mail address. We do not use the data collected as part of market research and opinion polling for advertising purposes. Detailed instructions are provided in the information on the survey or where you enter your data.

 

Categories of relevant personal data

The Personal Data Controller processes the following categories of relevant personal data:
• contact details;
• data on activity on the Website;
• data on orders for products or services on the Website;
• data on claims under warranty, complaints and requests;
• data on marketing services.

Voluntary provision of personal data
Providing the required personal data by you is voluntary and is a condition for providing the services by the Personal Data Controller via the Website.

 

Time of data processing

Personal data shall be processed for the period necessary to perform orders, services, marketing activities and other services performed for the User. Personal data shall be erased in the following cases:
• when the data subject requests the deletion of data or withdraws the consent granted;
• when the data subject does not take action for more than 10 years (inactive contact);
• after receiving information that the stored data is out of date or inaccurate.

Some data, such as e-mail address, name and surname, may be stored for the next 3 years for evidence purposes and considering claims under warranty, complaints and other claims related to the services provided by the Website – the data shall not be used for marketing purposes.
Data on orders for paid services, contests and loyalty programs shall be stored for a period of 5 years from the date of order delivery.

We store data on Users who are not logged in for a period of time corresponding to the life cycle of cookies stored on devices or until they are erased on the User’s device by the User.
Your personal data regarding preferences, behaviours and selection of marketing content may be used as a basis for making automated decisions to determine the sales opportunities of the Website.

 

Recipients of personal data

We provide your personal data to the following categories of recipients:
• state authorities, e.g. the prosecutor’s office, the Police, PDPA, the President of the Office of Competition and Consumer Protection, if they ask us for it,
• providers of services that we use to run the Website, e.g. to complete an order. Depending on contractual arrangements and circumstances, these entities act on our behalf or independently define the purposes and methods of data processing.

Rights of the data subject

Under the GDPR, you have the right to:
• request access to your personal data;
• request rectification of your personal data;
• request deletion of your personal data;
• request to limit the processing of personal data;
• object to the processing of personal data;
• request to transfer personal data.

The Personal Data Controller, without undue delay, and in any case within one month of receiving the request, shall provide you with information on the actions taken in connection with your request. If necessary, the monthly period may be extended by another two months due to the complexity of the request or the number of requests.
In any case, the Personal Data Controller shall inform you about such extension within one month of receiving the request, stating the reasons for the delay.

 

The right of access to personal data (Article 15 GDPR)

You have the right to obtain information from the Personal Data Controller as to whether or not your personal data is being processed.
If the Personal Data Controller processes your personal data, you have the right to:
• access your personal data;
• obtain information on the purposes of processing, categories of personal data processed, the recipients or categories of recipients of this data, the planned period of storage of your data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the supervisory authority, the source of the data, automated decision making, including profiling, and the security measures used in connection with the transfer of such data outside the European Union;
• obtain a copy of your personal data.
• If you want to request access to your personal data, please submit your request to: rodo@on-repeat.com or via the contact form at: https://www.on-repeat.com/kontakt.

 

The right to rectify personal data (Article 16 GDPR)

If your personal data is incorrect, you have the right to request the Personal Data Controller to immediately correct your personal data.
You also have the right to request the Personal Data Controller to supplement your personal data.
If you want to rectify or supplement your personal data, please submit your request to: rodo@on-repeat.com or via the contact form at: https://www.on-repeat.com/kontakt.
If you have registered on the Website, you can correct and supplement your personal data yourself after logging in to the Website.

 

The right to erase personal data, the so-called “right to be forgotten” (Article 17 GDPR)

You have the right to request the Personal Data Controller to erase your personal data when:
• your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you have withdrawn your specific consent on which the processing of your personal data is based;
• your personal data have been unlawfully processed;
• you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent to which the processing of personal data is related to direct marketing;
• you have objected to the processing of your personal data in connection with the processing necessary to perform a task carried out in the public interest or the processing necessary for the purposes of the legitimate interests pursued by the Personal Data Controller or a third party.

Despite submitting a request to erase personal data, the Personal Data Controller may process your data further in order to establish, assert or defend claims, about which you shall be informed.
If you want to request the erasure of your personal data, please submit your request to: rodo@on-repeat.com or via the contact form at: https://www.on-repeat.com/kontakt.

 

The right to request the restriction of the processing of personal data (Article 18 GDPR)

You have the right to request the restriction of the processing of your personal data when:
• you contest the correctness of your personal data – the Personal Data Controller shall restrict the processing of your personal data for a period allowing for the correctness of such data to be verified;
• when the processing of your personal data is unlawful, and instead of the erasure of your personal data, you request the restriction of the processing of your personal data;
• your personal data are no longer needed for the purposes of processing, but they are needed to establish, exercise or defend your claims;
• when you have objected to the processing of your personal data pending the verification whether the legitimate grounds of the Personal Data Controller override those indicated in your objection.

If you want to request the restriction of the processing of your personal data, please submit your request to: rodo@on-repeat.com or via the contact form at: https://www.on-repeat.com/kontakt.

 

The right to object to the processing of personal data (Article 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
• the processing necessary to perform a task carried out in the public interest or the processing necessary for the purposes of the legitimate interests pursued by the Personal Data Controller or a third party;
• processing for the purposes of direct marketing.

If you want to object to the processing of your personal data, please submit your request to: rodo@on-repeat.com or via the contact form at: https://www.on-repeat.com/kontakt.

The right to request the transfer of personal data (Article 20 GDPR)

You have the right to receive your personal data from the Personal Data Controller in a structured, commonly used and machine-readable format and to transmit the data to another personal data controller.
You may also request that the Personal Data Controller should send your personal data directly to another controller (where technically feasible).

If you want to request the transfer of your personal data, please submit your request to: rodo@on-repeat.com or via the contact form at: https://www.on-repeat.com/kontakt.

 

The right to withdraw consent

You may withdraw your consent to the processing of your personal data at any time.
Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.
If you want to withdraw your consent to the processing of your personal data, please submit your request to: rodo@on-repeat.com or via the contact form at: https://www.on-repeat.com/kontakt.

 

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
In Poland, the supervisory body under the GDPR is the President of the Personal Data Protection Office.