Privacy policy

This privacy policy describes the principles of how we process information about you, including personal data and cookies.

1. General information

  1. This policy applies to the Konturovnia Beauty online store.
  2. The operator of the store and the Controller of personal data is: Ratajczak Investments spółka z o.o. with its registered office in Poznań, at ul. Morawskiego 2/85, 60-239 Poznań, entered into the National Court Register by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register, under KRS number 0001007986, NIP (Tax Identification Number) 7792548383, REGON 523917050.
  3. The operator's contact email address: sklep@konturovniabeauty.com
  4. The Operator is the Controller of your personal data regarding the data provided voluntarily in the Store.
  5. The Store uses personal data for the following purposes:
  • Newsletter management
  • Handling inquiries via the form
  • Preparation, packaging, and shipping of goods
  • Execution of ordered services
  • Debt collection
  • Presentation of offers or information

The Store performs functions of obtaining information about users and their behavior in the following way:

  1. Through data voluntarily entered into forms, which is then submitted to the Operator's systems.
  2. By storing cookies on end devices.

2. Selected data protection methods applied by the Operator

  1. Login and personal data entry areas are protected at the transmission layer (SSL certificate). Thanks to this, personal data and login credentials entered on the website are encrypted on the user's computer and can only be read on the target server.
  2. User passwords are stored in a hashed form. The hashing function works in one direction – it is not possible to reverse its operation, which is currently the modern standard for storing user passwords.
  3. The Operator periodically changes its administrative passwords.
  4. To protect data, the Operator regularly performs backups.
  5. An important element of data protection is the regular updating of all software used by the Operator to process personal data.

3. Hosting

  1. The store is hosted (technically maintained) on the Shopify platform, provided by Shopify International Limited (Ireland) and Shopify Inc. (Canada), which act as entities processing data on behalf of the Controller.

4. Your rights and additional information on data usage

  1. In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform a contract concluded with you or to fulfill the Controller's obligations. This applies to the following groups of recipients:
    • the store platform provider (Shopify) on a data entrustment basis
    • couriers (InPost)
    • postal operators
    • banks
    • payment operators
    • authorized employees and associates who use the data to fulfill the store's operational goals
    • companies providing marketing services for the Controller
  2. Your personal data is processed by the Controller no longer than is necessary to perform related activities defined by separate regulations (e.g., accounting). Regarding marketing data, the data will not be processed for longer than 3 years.
  3. You have the right to request the following from the Controller:
    • access to your personal data,
    • rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing of personal data for the purpose of fulfilling legitimate interests pursued by the Controller, including profiling; however, the right to object cannot be exercised in the event of valid legitimate grounds for processing that override your interests, rights, and freedoms, in particular for the establishment, assertion, or defense of claims.
  5. You have the right to lodge a complaint against the Controller's actions with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
  6. Providing personal data is voluntary but necessary to use the Store.
  7. Automated decision-making, including profiling, may be performed in relation to you for the purpose of providing services under the concluded contract and for the Controller's direct marketing purposes.
  8. Due to the use of the Shopify platform and analytical and advertising tools, your data may be transferred to third countries outside the European Economic Area (in particular to Canada and the United States). The transfer takes place on the basis of standard contractual clauses approved by the European Commission or an adequacy decision.

5. Information in forms

  1. The Store collects information provided voluntarily by the user, including personal data, if provided.
  2. The Store may save information about connection parameters (timestamp, IP address).
  3. Data provided in a form is processed for the purpose resulting from the specific form's function, e.g., to process a service request or business contact. In each case, the context and description of the form clearly indicate what it is for.

6. Administrator Logs

  1. Information about user behavior in the store may be logged. This data is used for store administration.

7. Important marketing techniques

  1. The Operator uses statistical analysis of website traffic, e.g., through Google Analytics (Google LLC) and Shopify platform analytical tools. The services are based on the use of cookies on the user's end device. Regarding information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
  2. The Operator uses remarketing techniques (including Meta Pixel – Meta Platforms Ireland Ltd.), which allow for tailoring advertising messages to the user's behavior on the site. A technological condition for such activities is the enabled support for cookies.

8. Information about cookies

  1. The Store uses cookies.
  2. Cookies are IT data, in particular text files, which are stored on the User's end device and are intended for use with the Store's websites. Cookies usually contain the name of the website they come from, the duration of their storage on the end device, and a unique number.
  3. Cookies are used for the following purposes:
    1. maintaining the user's session (cart, login), so that the user does not have to re-enter their login and password on every subpage;
    2. realizing the purposes defined above in the "Important marketing techniques" section.
  4. Two basic types of cookies are used within the Store: "session" cookies and "persistent" cookies.
  5. Web browsing software (web browser) usually allows the storage of cookies on the User's end device by default. Users can change settings in this regard. The web browser allows for the deletion of cookies as well as their automatic blocking.
  6. Restrictions on the use of cookies may affect some functionalities available on the Store's pages.
  7. Cookies placed on the User's end device may also be used by entities cooperating with the Store operator, in particular: Shopify, Google, Meta (Facebook, Instagram).

9. Cookie management

  1. If a user does not want to receive cookies, they can change their browser settings. We reserve that disabling cookies necessary for authentication, security, and maintenance of user preferences may make it difficult, and in extreme cases, impossible to use the Store.
  2. Detailed instructions for managing cookies can be found in the help or documentation of the web browser being used (Chrome, Safari, Firefox, Edge, Opera, Android, iOS).