PRIVACY POLICY

The online store THE MIZURI, available at themizuri.com, is committed to protecting your privacy and personal data while using the Store's website and making purchases. We make every effort to ensure an appropriate level of protection for the information provided. Users can contact the Administrator through the Store's website, subscribe to the Newsletter, browse the offer of THE MIZURI online store, and learn about THE MIZURI brand. They can also create a user profile in the store, which allows for storing user data used when placing orders and entering into purchase agreements for products offered in the store.

Using our website and THE MIZURI online store means accepting the presented conditions.

 

1. Data Administrator

1.1. In fulfilling the obligation arising from Article 13 of the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 ("GDPR"), we inform you that the Data Administrator of the Customers'/Users' personal data of the Online Store is: THE MIZURI Veronika Brzezowska NIP: 7011183887 REGON: 527449686. 1.2. The Data Administrator can be contacted via email at contact@themizuri.com or by mail at: Leszczynowa 18/2, 05-552 Magdalenka.

 

2. Definitions

2.1. User - a natural person visiting the Online Store website or using the services or functionalities described in this Policy.

2.2. Customer - a natural person with full legal capacity, a legal person, or an organizational unit without legal personality, to whom the law grants legal capacity, entering into a distance sales agreement with the Seller.

2.3. Online Store - a service run by the Seller, available at themizuri.com, where the Customer/User can obtain information about Products and their availability, make a Product purchase, or order a service.

2.4. Newsletter - information, including commercial content according to the Act of 18 July 2002 on electronic service provision (Journal of Laws of 2020, item 344), sent by the Seller to the Customer/User electronically; receiving the Newsletter is voluntary and requires the Customer's or User's consent.

2.5. Account - a collection of data stored in the Online Store and the Seller's IT system concerning a given Customer or User, containing information about their orders and agreements, enabling the Customer/User to place orders and enter into agreements.

 

3. Personal Data Processing

3.1. For the purpose of executing a distance Sales Agreement, the Seller processes the following data:

3.1.1. Information about the User's device, such as the computer's IP address, data stored in cookies or other similar technologies, session data, browser data, device data, and data on activity on the Site and individual subpages.

3.1.2. Geolocation information if the User has given consent.

3.1.3. Personal data of Users such as name, surname, business address, mailing address, email address, phone number, VAT ID, bank account number, or other data necessary to complete the purchase, which must be provided during the purchase process in accordance with the Administrator's requirements or for Account registration.

3.2. Purpose, basis, and duration of personal data processing:

3.2.1. Execution of the Sales Agreement or electronic service agreement - processing personal data in accordance with Article 6(1)(b) GDPR to perform the service, i.e., an agreement to which the data subject is a party, or to take action at the request of the data subject before entering into the agreement.

3.2.2. Direct marketing - processing personal data in accordance with Article 6(1)(f) GDPR for purposes resulting from the legitimate interests pursued by the Administrator, including the protection of the Administrator's interests and good name, as well as the pursuit of Product sales.

3.2.3. Marketing - processing personal data in accordance with Article 6(1)(a) GDPR, whereby the data subject has given consent for processing their personal data for marketing purposes and for sending commercial information electronically.

3.2.4. Ensuring the proper operation of services - processing personal data in accordance with Article 6(1)(f) GDPR for purposes resulting from the legitimate interests pursued by the Administrator, including maintaining and running the Online Store website.

3.2.5. Providing more tailored product and service offers - processing personal data in accordance with Article 6(1)(f) GDPR for purposes resulting from the legitimate interests pursued by the Administrator, including conducting statistics and analyzing website traffic to improve its functionality and increase Product sales.

3.2.6. Data are processed until the Customer/User stops using the Online Store.

3.2.7. The Administrator commits to taking all necessary actions to ensure compliance with Article 32 GDPR and confirms that the data collected:

• are processed in accordance with applicable law,
• are collected for specified and lawful purposes and are not further processed in a way that is incompatible with those purposes,
• are factually correct and adequate to the purposes for which they are processed, and stored in a form that allows identification of the data subjects for no longer than necessary to achieve the purpose of processing.

 

5. Recipients of Users' Data

5.1. For the proper functioning of the Store and correct order fulfillment, it is necessary for the Administrator to use external service providers (such as software providers, marketing services, or maintenance services). The Data Administrator discloses Users' personal data to processing entities only based on data processing agreements to perform services on behalf of the Administrator.

 

6. Rights of Data Subjects

6.1. Each data subject has the right to:

6.1.1. Access, rectify, restrict, delete, or transfer data - the data subject can request access to their personal data, rectify them, delete them ("right to be forgotten"), or restrict processing. They also have the right to object to processing and to transfer their data. Detailed rules for exercising these rights are specified in Articles 15-21 GDPR. 6.1.2. Lodge a complaint with a supervisory authority - the data subject whose data is processed by the Administrator has the right to lodge a complaint with a supervisory authority in accordance with GDPR and Polish law, in particular, the Personal Data Protection Act. In Poland, the supervisory authority is the President of the Personal Data Protection Office. 6.1.3. Object - the data subject can, at any time, for reasons related to their particular situation, object to the processing of their personal data based on Article 6(1)(e) (public task or public authority) or (f) (legitimate interests of the administrator), including profiling based on these provisions. In such a case, the Administrator can no longer process the personal data unless they demonstrate compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims. 6.1.4. Object to direct marketing - if personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing purposes, including profiling to the extent that it is related to such direct marketing. 6.1.5. Withdraw consent at any time - if personal data is processed by the Administrator based on consent (in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR), the data subject has the right to withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6.2. To exercise the rights mentioned in this privacy policy section, the data subject can contact the Administrator by sending an appropriate message in writing or by email to the Administrator's address provided at the beginning of this privacy policy or by using the contact form available on the Online Store's website.

 

7. Cookies and Analytics

7.1. Cookies are small text files sent and stored on the device used by the user to browse websites. They are used to recognize user preferences and customize website functionalities to their needs. They usually contain the name of the visited website, the lifespan of the cookie, and its value, usually represented by a randomly generated unique number.

7.2. The Administrator can process data contained in Cookies during the use of the Online Store's website for the following purposes: 7.2.1. Identifying Customers/Users as logged in to the Online Store and maintaining their session (after logging in); 7.2.2. Remembering Products added to the cart for the purpose of placing an Order; 7.2.3. Remembering data from completed Order Forms, surveys, or login data to the Online Store; 7.2.4. Customizing the content of the Online Store's website to the individual preferences of the Customer/User (e.g., regarding font size and page layout) and optimizing the use of the Online Store's pages; 7.2.5. Conducting statistics to help understand how Customers/Users use the Online Store's websites; 7.2.6. Remarketing, i.e., studying the characteristics of the behavior of Online Store visitors through anonymous analysis of their actions to display product recommendations and tailored materials in advertising networks.

7.3. Web browsing software (web browser) usually allows cookies to be stored on the end device by default. Customers/Users can change these settings. The web browser allows the removal of cookies. It is also possible to automatically block cookies, but this may affect some functionalities of the Online Store.

7.4. Web browser settings for cookies are important for granting consent to their use by the Online Store. According to the regulations, this consent may be automatically granted through default browser settings. If there is no such consent, the browser settings regarding cookies should be changed accordingly.

7.5. Detailed information on changing cookie settings and their self-removal in the most popular web browsers can be found in the browser help section and on the following pages:

• Chrome browser
• Firefox browser
• Internet Explorer browser
• Opera browser
• Safari browser
• Microsoft Edge browser

7.6. Cookies placed in the Customer's/User's device and used can also be used by advertisers and partners cooperating with the Online Store.

7.7. The Administrator may use Google Analytics Universal Analytics services provided by Google Ireland Limited to display ads tailored to how the Customer/User uses the Online Store. To do this, they may store information about the user's navigation path or time spent on a given page: https://policies.google.com/technologies/partner-sites.

7.8. A person visiting the Online Store can easily block Google Analytics from sharing information about their activity. To do this, you can install a browser add-on provided by Google Ireland Ltd. available at this link: https://tools.google.com/dlpage/gaoptout?hl=en.

7.9. The Online Store website has installed plugins that can transmit Customer/User data to Administrators such as: Google Maps, Google Analytics, Meta (Facebook), Google Ads, PayPal, Google reCAPTCHA, IdoAccounts, IdoSell, IAI S.A., Google.

7.10. To correctly execute a distance Sales Agreement, the Data Administrator may share Customer/User data with courier companies.

7.11. To correctly execute a distance Sales Agreement, the Administrator may share Customer/User data with online payment systems.

 

8. Changes to the Privacy and Cookies Policy

8.1. The privacy and cookies policy may be supplemented or updated according to the current needs of the Administrator to provide up-to-date and reliable information to Customers/Users.

 

9. Newsletter

9.1. If the Customer consents to subscribe to the Newsletter to receive commercial information about products, promotions, and services via email. 9.2. The Customer can unsubscribe from the Newsletter at any time by clicking the appropriate link in the content of each Newsletter or by contacting Customer Service at the email address: contact@themizuri.com.

 

10. Final Provisions

10.1. The Online Store may contain links to other websites. After switching to these sites, the Administrator recommends familiarizing yourself with their privacy policies. This policy applies only to the Online Store operated by the Administrator.