Ntguilty - Be unapologetically you. Be Ntguilty. - Privacy policy

Privacy policy and Cookies

This Privacy Policy (hereafter: the “Policy”) provides information about the processing of your personal data in connection with the use of the NTGUILTY Online Store operating at www.ntguilty.pl (hereinafter: the “Store”).

Any capitalised terms that are not otherwise defined in the Policy have the meanings specified in the Terms and Conditions available at https://ntguilty.com/shop-rules/

Personal Data Controller

The Controller of your personal data is NTGUILTY spółka z ograniczoną odpowiedzialnością [limited liability company] with its registered office in Warsaw (registered address: ul. Puławska 39 lok. 40, 02-508 Warsaw), entered into the Register of Entrepreneurs of the National Court Register by the District Court for the capital city of Warsaw, 13th Commercial Division of the National Court Register, under the KRS number: 0000854581, NIP [Tax ID]: 5213903941, REGON [National Official Business Register Number]: 386754990 (hereinafter: the “Controller”).

Contact with the Controller

In all matters related to the processing of personal data, you can contact the Controller electronically by sending an email to: contact@ntguilty.com or kontakt@ntguilty.pl.

Personal data protection measures

The Controller uses modern technical and organisational safeguards in order to ensure the best protection of your personal data and guarantees their processing in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation) (hereinafter: the “GDPR”), Act of 10 May 2018 on the protection of personal data and other personal data protection regulations.

Information about personal data processed

Using the Store requires processing of your personal data. Below you will find detailed information about the purposes and legal bases of the processing, duration of the processing, as well as mandatory or voluntary provision of your personal data.

Profiling

In order to create your profile for marketing purposes and to provide you with direct marketing tailored to your preferences, the Controller will process your personal data by automated means, including profiling – but this will not produce any legal effect on you or have a similar effect on your situation.

The range of personal data profiling corresponds to the range indicated above for analysing your activity at the Store and the data you save to your Account.

The legal basis for the processing of personal data for this purpose is Article 6(1)(f) of the GDPR, according to which the Controller can process personal data for its legitimate interest, in this case – carrying out marketing activities tailored to the preferences of the recipients. The provision of such personal data is voluntary, but it is necessary for the achievement of that purpose (if they are not provided, the Controller will not be able to carry out marketing activities tailored to the preferences of the recipients).

The Controller will process the personal data for the purposes of their profiling until an objection is effectively filed or until the purpose of the processing is achieved.

Purpose of processingPersonal data processedLegal basis
Entering into or performance of the Account Service agreementEmail address;Optional – first and last name, address, telephone number and business name.Article 6(1)(b) of the GDPR   (processing is necessary for the performance of the Account Service agreement to which the data subject is party or in order to take steps to enter into it)
The provision of such personal data is required for entering into and performance of the Account Service agreement (their provision is voluntary, but if they are not provided, it will not be possible to enter into and perform this agreement, including to create the Account).   The Controller will process the personal data referred to above until the end of the limitation period for claims related to the Account Service agreement.

Purpose of processingPersonal data processedLegal basis
Entering into and performance of the Product selling agreementFirst name;Last name;Email address;Phone number;Billing address;Shipping address;Business name;Tax ID.Article 6(1)(b) of the GDPR   (processing is necessary for the performance of the Product selling agreement to which the data subject is party or in order to take steps to enter into it)
The provision of such personal data is required for entering into and performance of the Product selling agreement (their provision is voluntary, but if they are not provided, it will not be possible to enter into and perform this agreement).   The Controller will process the personal data referred to above until the end of the limitation period for claims related to the Product selling agreement.

Purpose of processingPersonal data processedLegal basis
Handling complaintsFirst name;Last name;Email address;Phone number;Mailing address (street name, house number, apartment number, postal code, town/city, country).Article 6(1)(c) of the GDPR   (processing is necessary for compliance with a legal obligation to which the Controller is subject, in this case: To respond to a complaint – article 7a of the Consumer Rights Act;To exercise the Consumer’s rights under statutory warranty – Article 556 et seq. of the Civil Code)
The provision of such personal data is required for receiving a response to a complaint or to exercise the Consumer’s rights under statutory warranty (their provision is voluntary, but if they are not provided, it will not be possible to receive a response to a complaint and exercise the rights under statutory warranty).   The Controller will process these personal data for the duration of the complaint procedure (however, for not more than 14 days) and, in the event of the exercise of the Consumer’s rights under statutory warranty, until the end of the limitation period.

Purpose of processingPersonal data processedLegal basis
Sending the newsletterFirst name;Email address.Article 6(1)(f) of the GDPR   (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case – informing about the news and promotions available at the Store)
The provision of such personal data is voluntary, but it is necessary to receive the newsletter (if they are not provided, it will not be possible to receive the newsletter).   The Controller will process these personal data until an objection is effectively filed or until the purpose of the processing is achieved.

Purpose of processingPersonal data processedLegal basis
Sending email notifications   (e.g. information on the progress in the Order fulfilment)First name;Last name;Email address.Article 6(1)(f) of the GDPR   (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case – informing Customers about the steps taken in relation to the provision of services)
The provision of such personal data is voluntary, but it is necessary to receive information about the steps taken in relation to the provision of services (if they are not provided, it will not be possible to receive this information).   The Controller will process these personal data until an objection is effectively filed or until the purpose of the processing is achieved.

Purpose of processingPersonal data processedLegal basis
Compliance with tax obligations (for example, issuing VAT invoices, keeping accounting records)Name and surname/business name;Address of residence/registered address;Tax ID;Order numberArticle 6(1)(c) of the GDPR   (processing is necessary for compliance with a legal obligation to which the Controller is subject, in this case the obligations arising from tax law)
The provision of such personal data is voluntary, but it is necessary for the Controller to comply with the tax obligations to which it is subject (if they are not provided, the Controller will not be able to comply with these obligations).   The Controller will process these personal data for a period of five years from the end of the year in which the tax payment for the preceding year is due.

Purpose of processingPersonal data processedLegal basis
Comply with the obligations related to the protection of personal dataFirst name;Last name;The contact information you provided (email address; mailing address; telephone number).Article 6(1)(c) of the GDPR   (processing is necessary for compliance with a legal obligation to which the Controller is subject, in this case the obligations arising from personal data protection regulations)
The provision of such personal data is voluntary, but it is necessary for the Controller to perform properly the obligations arising from personal data protection regulations, including to exercise your rights stipulated by the GDPR (if these data are not provided, it will not be possible to exercise these rights properly). The Controller will process these personal data until the end of the limitation periods for claims concerning a breach of the personal data protection regulations.

Purpose of processingPersonal data processedLegal basis
establishment, exercise or defence of legal claimsFirst name;Last name;Business name;Email address;Address of residence/registered address;National identification number [PESEL]/National Court Register number [KRS];Tax ID.Article 6(1)(f) of the GDPR   (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case – for the establishment, exercise or defence of legal claims which may arise in connection with the performance of agreements entered into with the Controller)
The provision of such personal data is voluntary, but it is necessary for the establishment, exercise or defence of legal claims which may arise in connection with the performance of agreements entered into with the Controller (if these data are not provided, the Controller will not be able to take such action). The Controller will process these personal data until the end of the limitation periods for claims which may arise in connection with the performance of the agreements entered into with the Controller.

Purpose of processingPersonal data processedLegal basis
Analysis of your activity at the Storeat the Store.Article 6(1)(f) of the GDPR   (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case – obtaining information about your activity at the Store)
The provision of such personal data is voluntary, but it is necessary for the Controller to obtain information about your activity at the Store (if they are not provided, the Controller will not be able to obtain such information).  The Controller will process these personal data until an objection is effectively filed or until the purpose of the processing is achieved.

Purpose of processingPersonal data processedLegal basis
Store operationIP address;Server date and time;Information about the browser,Operating system information.   The above data are automatically saved in so-called server logs each time the Store is used (operating it without the use of server logs and automatic saving would not be possible).Article 6(1)(f) of the GDPR   (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case – to ensure proper functioning of the Store)
The provision of these data is voluntary, but it is necessary to ensure proper functioning of the Store (if they are not provided, it will not be possible to ensure proper functioning of the Store).   The Controller will process these personal data until an objection is effectively filed or until the purpose of the processing is achieved.

Recipients of personal data

Recipients of personal data will be the following third parties cooperating with the Controller:

  • Hosting company;
  • Logistics operator and courier companies;
  • Online payment system providers;
  • Companies providing tools for analysing the activity at the Store and delivering direct marketing to relevant persons (e.g. Google Analytics);
  • Accounting services company.

In addition, personal data may also be transferred to public or private entities if such an obligation arises under generally applicable laws.

Transfer of personal data to a third country

As the Controller uses tools such as Google Analytics, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The transfer of data to these third countries is based on contractual clauses providing an adequate level of protection, consistent with the standard contractual clauses set out in the European Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council.

You can obtain from the Controller a copy of the data transmitted to a third country.

Rights

In connection with the processing of personal data, you have the following rights:

  1. The right to information about which of your personal data are processed by the Controller and to receive a copy of such data (so-called right of access). The issue of the first copy of the data is free of charge; the Controller may charge for subsequent copies;
  2. If the data processed become obsolete or incomplete (or otherwise incorrect), you have the right to request their rectification;
  3. In some situations, you can request the Controller to erase your data, for example if:
    – The Controller no longer needs the data for the purposes it has notified;
    – You have effectively withdrawn your consent to the processing of data – unless the Controller has the right to process data on another legal basis;
    – The processing is unlawful;
    – The need to erase data is due to the legal obligation to which the Controller is subject;
  4. Where personal data are processed by the Controller on the basis of consent given to the processing or for the performance of the agreement entered into with it, you have the right to transfer your data to another controller;
  5. Where personal data are processed by the Controller on the basis of your consent to the processing, you have the right to withdraw that consent at any time (withdrawal of consent does not affect the lawfulness of the processing carried out on its basis before withdrawal);
  6. If you believe that the personal data being processed are incorrect, their processing is unlawful, or the Controller no longer needs specific data, you may request the Controller not to perform any operations on the data but only keep it for a specified period of time required (e.g. to verify the correctness of data or to exercise claims);
  7. You have the right to object to the processing of personal data which is based on the legitimate interest of the Controller. If an objection is effectively filed, the Controller will discontinue the processing of personal data for the purpose concerned;
  8. You have the right to lodge a complaint with the President of the Personal Data Protection Office if you decide that the processing of personal data is in breach of the provisions of the GDPR.

Cookies

  1. The Controller hereby informs that it uses cookies installed on your terminal equipment. These are small text files that can be read by the Controller’s system and by the systems of other parties whose services are used by the Controller (e.g. Facebook, Google).
  2. The Controller uses cookies for the following purposes:
    • To ensure proper functioning of the Store – with cookies, the Store can be functioning smoothly, its functions can be used and navigation among its pages is convenient;
    • To improve the convenience of browsing the Store – with cookies, it is possible to detect errors on certain pages and continually improve them;
    • To create statistics – cookies are used to analyse how Users use the Store. This ensures that the Store can be continuously improved and adapted to the users’ preferences;
    • To carry out marketing activities – with cookies, the Controller can deliver ads tailored to the preferences of specific users.
  3. The Controller can place both persistent and temporary (session) files on your device. Unlike persistent files, session files are typically deleted when the browser is closed.
  4. Information about the cookies used by the Controller is displayed in the panel at the bottom of the Store website. Depending on your decision, you can enable or disable cookies in each category (except essential cookies) and change these settings at any time.
  5. The data collected using cookies do not allow the Controller to identify you.
  6. The Controller uses the following cookies or tools that use them:
TOOLSOURCEFUNCTIONS AND SCOPE OF THE DATA DOWNLOADEDDESCRIPTION
Essential cookiesControllerThese files are essential to the proper functioning of the Store’s website, so you cannot disable them. With these files (which download, among others, the IP number of your device) it is for example possible to inform you about the cookies operating on the Store’s websiteMost essential cookies are session cookies, but some remain on your end device for […] months or until they are deleted;
Google AnalyticsGoogleThis tool allows to collect statistical data about how Customers use the Store, including the number and duration of visits, search engine used, location. The data collected helps to improve the Store and make it more customer-friendly.For up to 2 years or until deleted (whichever occurs first)
Facebook PixelFacebookThis tools allows to determine that you have visited the Store, and to deliver you ads displayed on Facebook and Instagram, as well as to measure their effectiveness.For up to 3 months or until deleted (whichever occurs first)
[…][…][…][…]

Most of common browsers can be used to see whether cookies have been installed on your terminal equipment, to remove installed cookies, and to block the Store from installing cookies in the future. However, disabling or restricting the use of cookies may cause considerable difficulties in using the Store, such as having to log in on every page, longer loading of the Store’s page, limited availability of some functionalities.

Final provisions

The matters not provided for in this Policy are governed by generally applicable regulations concerning the protection of personal data.

The Policy applies from13 July 2021

newsletter

By standing strong and linking arms, together we can change the world.

Join our Newsletter

    No products in the basket.

    Shipment

    Welcome to ntguilty

    Ready

    To ensure the best possible shipping experience, please choose your destination country.