TUKI®
PRIVACY POLICY
Privacy policy and cookie sharing in websites operated by TUKI Sp. z o.o. based at ul. Przemysłowa 6, Olecko (19-400).
Issue of the privacy policy and cookie sharing document in the tukitoys.com domain.
1. LEGAL BASIS FOR PERSONAL DATA PROCESSING
The privacy policy has been generated based on the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.
2. DATA ADMINISTRATOR
The controller of your personal data is TUKI Sp. z o.o. based in Olecko (19-400) at ul. Przemysłowa 6, KRS: 0000665034, VAT: PL8471617537 REGON: 366619747 (hereinafter referred to as “tukitoys.com/shop”)
3. CATEGORIES OF PROCESSED PERSONAL DATA
What information about users is collected by the Services and how is it accessible?
The Services limit the collection and provision of information about their users to the necessary minimum required to provide their services in accordance with the GDPR and the Act on the provision of electronic services. In cases where the collection of distinguishing personal data is necessary to access electronic services.
We only collect personal data in specific cases, such as subscribing to free newsletters, surveys, or activities collecting more detailed user information, such as email addresses.
The administrator collects detailed personal data of buyers:
• Name and surname, company,
• Business address,
• VAT number,
• Phone number,
• Email address.
Providing personal data is a condition for entering into a sales agreement with the Administrator, hereinafter referred to as the “Agreement”. If the buyer does not provide this data, the agreement cannot be concluded.
4. PURPOSES OF PERSONAL DATA PROCESSING
For what purposes does tukitoys.com/shop process personal data?
The data controller processes personal data for the purposes of: • Connecting the user with the site to deliver goods and handle complaints (Art. 6(1)(b) GDPR – performance of the contract), • Fulfilling legal obligations of the Administrator, such as issuing invoices and other accounting documents (Art. 6(1)(c) GDPR – legal obligation), • Pursuing claims and defense against claims (Art. 6(1)(f) GDPR – legitimate interests of the Administrator), • Detecting and preventing abuse (Art. 6(1)(f) GDPR – legitimate interests of the Administrator), • Direct marketing (Art. 6(1)(a) and 6(1)(f) GDPR – consent of the buyer, legitimate interests of the Administrator), • Analysis and statistics for internal purposes, including reporting, market research, service development planning, and service quality improvement (Art. 6(1)(a) and 6(1)(f) GDPR – consent, legitimate interests of the Administrator), • Compliance with requests related to data subjects, within the scope and purpose covered by the request (Art. 6(1)(a) and 6(1)(f) GDPR – consent, legitimate interests of the Administrator).
5. DATA RETENTION PERIOD
How long does tukitoys.com/shop retain personal data?
The Administrator retains personal data for the following periods:
• During the duration of the contract and settlement after its termination,
• For the period required by legal regulations for issuing invoices and other accounting documents,
• Until the limitation period for claims,
• Until the limitation period for detecting and preventing abuse,
• For the duration of the contract or until the user withdraws consent for direct marketing,
• For the duration of the contract or until the user withdraws consent for analysis and statistics,
• Until the user withdraws consent.
The Administrator entrusts the processing of personal data to entities such as electronic payment service providers, to the extent necessary for executing the contract, and the data is:
• Necessary for service billing and payment collection,
• Required for advertising, market research, and service improvement purposes,
• Essential to prevent unauthorized use of services.
6. RECIPIENTS OF PERSONAL DATA
Who are the recipients of personal data in tukitoys.com/shop?
The Administrator does not disclose users’ personal data except when required by law, requested by the user, or necessary for fulfilling the agreement. The Administrator entrusts personal data to entities such as marketing and advertising service providers, IT system operators, postal, courier, payment, audit, and accounting service providers.
The Administrator ensures data processing agreements are in place with these entities.
7. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES AND INTERNATIONAL ORGANIZATIONS
Does tukitoys.com/shop transfer personal data outside the European Economic Area?
Users’ personal data will not be transferred outside the European Economic Area.
8. BUYERS' RIGHTS
What rights do users have regarding the handling of their personal data on tukitoys.com/shop?
Users have the right to:
- Access their personal data,
- Rectify their personal data,
- Delete their personal data (right to be forgotten),
- Restrict the processing of their personal data,
- Transfer their data to another administrator,
- Object to the processing of their data,
- File complaints with a supervisory authority regarding data protection.
Where data is based on consent, users can withdraw from contacting the Administrator.
9. RIGHT TO OBJECT
Users have the right to immediately object to the processing of their data:
- For direct marketing purposes;
- For reasons related to their significance when data usage is based on our legitimate interest (e.g., our marketing, statistical, or academic purposes), meaning their data is processed under Article 6(1)(f) of the GDPR.
10. PROFILING
During the term of the Agreement, the Administrator may obtain other data about the user, such as the IP address of the device used by the buyer, as well as data regarding the buyer’s use of a specific telecommunications network and the manner in which the Administrator’s website is used.
What actions does tukitoys.com/shop take regarding the information contained in access logs?
We collect information about the use of the Service by its users and their IP addresses based on the analysis of access logs. This information is used to diagnose issues related to server operation, analyze potential security breaches, and manage the website. We also use the IP address for statistical purposes, such as gathering and analyzing demographic data of site visitors (e.g., information about the region from which the connection was made). We ensure, however, that this information is not associated (linked) by tukitoys.com/shop with the personal data of Service users, particularly with the data of email list subscribers and other services provided by this site.
Based on the information obtained as described above, in certain cases, aggregate, general statistical reports are prepared and disclosed to third parties cooperating with us. These reports typically include information about the Service’s viewership but do not contain any data that would allow the identification of a specific user of the Service.
We also inform you that we may be required to disclose information about the IP address of a specific Service user upon the request of authorized state authorities, based on applicable legal regulations.
We assure you that all personal data collected within the framework of the Services is primarily used to fulfill tukitoys.com/shop’s obligations to customers. This information is not shared with third parties unless:
- Prior explicit consent has been obtained from the individuals concerned.
- The obligation to transfer this data arises from legal regulations.
How does tukitoys.com/shop use information from order forms, free newsletters, and other forms and surveys conducted within the Services?
Order forms are provided within the Services, enabling customers to place orders for products and services offered by tukitoys.com/shop. Data collected in this way is mainly used to fulfill these obligations.
Subscribing to electronic and free newsletters published by tukitoys.com/shop requires providing an email address in the appropriate form. This field is mandatory. Data obtained in this way is added to the email list, and the email address is necessary to send the requested newsletter.
Customer contact information is also used to establish communication when necessary (e.g., to confirm an order). At any time, users of the Services who have subscribed to the newsletter can opt out of receiving it.
Other information is used to establish a profile of users of the Services and newsletter subscribers, allowing better customization of the Service and newsletters to meet the needs of users. The processing of this data is always carried out in accordance with GDPR and the Act on the Provision of Electronic Services.
What is a cookie?
Cookies are small text files stored on the user’s computer or other mobile device while using online services. These files serve, among other things, to enable the use of various functions provided on the website or to confirm that the user has seen specific content from a particular website.
For what purposes does tukitoys.com/shop use cookies in its Services?
Among cookies, we can distinguish those that are necessary for the operation of tukitoys.com/shop’s services. Cookies in this category are used to ensure:
- Maintaining the user’s session.
- Saving the user’s session state.
- Enabling authorization using the login service.
- Storing information that allows the user to log in anonymously.
- Storing information necessary for the operation of the online shopping cart in the case of online purchases.
- Monitoring service availability.
The next category of cookies includes those that are not necessary for the use of tukitoys.com/shop’s Services but make it easier to use them. These are used to enable:
- Restoring the last viewed view when logging into the product.
- Remembering the user’s choice regarding the display of selected messages.
- Restoring the user’s session.
- Remembering the last selected category in the product.
- Checking whether the cookie file storage is functioning correctly.
- Enabling automatic login to the product (the “remember me” option).
- Customizing the content of products to user preferences.
- Setting the preferred language, currency, font size, and other properties that facilitate working with the application.
- Restoring the last search result in the product.
- Displaying recently viewed products in the online store.
- Displaying the last selected sorting parameter.
tukitoys.com/shop also uses services from third-party providers, whose list may change, and who use cookies for the following purposes:
- Monitoring traffic on our websites.
- Collecting anonymous, aggregate statistics that help us understand how users use our website and allow us to continuously improve our products.
- Determining the number of anonymous users of our websites.
- Controlling how often selected content is shown to users.
- Controlling how often users choose a particular service.
- Analyzing newsletter sign-ups.
- Utilizing personalized recommendation systems for e-commerce.
- Using communication tools.
- Integration with social media platforms.
- Online payments.
Among these entities at the date of this document’s issuance are:
- PayPro (more information at: www.przelewy24.pl)
- PayPal (more information at: www.paypal.com)
- Google AdWords
- Google Analytics
- Hotjar
How can you manage cookies?
Users can manage cookies used by tukitoys.com/shop or by external providers by changing their internet browser settings.
tukitoys.com/shop also reserves the right to inform users that rejecting cookies may cause some of the features offered by our Services to not function properly and may, in some cases, completely prevent the use of selected Service features.
11. SECURITY OF BUYERS' PERSONAL DATA
What security measures does tukitoys.com/shop implement?
The services are equipped with security measures to protect data under our control from unauthorized access, disclosure, or modification. We commit to maintaining all information disclosed by users in accordance with security and confidentiality standards. Access to user data is restricted to ensure it is not accessible to unauthorized persons. Only selected tukitoys.com/shop employees have access to personal data, in compliance with the GDPR.
The tukitoys.com/shop service offers users the option to remove their information from our database and unsubscribe from mailing lists. This can be done by following the instructions provided in our messages.
12. CONTACT WITH THE ADMINISTRATOR
Users with questions, comments, or concerns regarding tukitoys.com/shop’s privacy policy or the handling of their personal data are encouraged to contact us at: info@tukitoys.com.
