Privacy Policy of Theía de la Tierra Store
https://theiadelatierra.com
(the “Store”)
Dear User,
We care about your privacy and want you to feel comfortable when using our services. Therefore, below we present the most important information about the rules for processing your personal data by us and about cookies used by our Store. This information has been prepared in accordance with the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
PERSONAL DATA CONTROLLER
AGATA AGNIESZKA BODUCH-MARONA, an entrepreneur conducting business activity under the business name La Tierra Verde Agata Boduch-Marona, entered in the Central Register and Information on Business kept by the minister competent for economy and for maintaining the Central Register and Information on Business, Tax Identification Number NIP 6831937882, REGON No. 542372450, Łęki Górne 333a, 39-221 Łęki Górne, Poland.
If you wish to contact us in relation to the processing of your personal data, please write to us at: hello@theiadelatierra.com.
YOUR RIGHTS
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Article 15 GDPR or, where applicable, Article 13(1)(f) GDPR),
- rectification of your personal data (Article 16 GDPR),
- erasure of your personal data (Article 17 GDPR),
- restriction of processing (Article 18 GDPR),
- transfer of your data to another controller (Article 20 GDPR).
You also have the right to:
- object at any time to the processing of your data:
- on grounds relating to your particular situation – to the processing of personal data concerning you based on Article 6(1)(f) GDPR, i.e. our legitimate interests (Article 21(1) GDPR);
- where personal data are processed for direct marketing purposes, to the extent that the processing is related to such direct marketing (Article 21(2) GDPR).
Please contact us if you wish to exercise your rights. You may object to our use of cookies, which you can read more about below, in particular by using the appropriate settings of your browser.
If you believe that your data are being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office.
PERSONAL DATA AND PRIVACY
Below you will find detailed information on the processing of your data depending on the actions you take.
1. Placing an order in the Store
| For what purpose? | |
|---|---|
| to process your order | |
| On what legal basis? | |
| a sales contract or a contract for the supply of digital content (Article 6(1)(b) GDPR) | a legal obligation, in particular related to accounting, product safety and product compliance with legal requirements, which requires us to process your personal data (Article 6(1)(c) GDPR) |
| For how long? | |
| for the duration of the above-mentioned contract | until the legal obligations imposed on us expire |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the final table of this section) |
|
| What happens if you do not provide the data? | |
| you will not be able to place an order | |
2. Creating an account in the Store
| For what purpose? |
|---|
| to perform the agreement for the provision of the account service in the Store |
| On what legal basis? |
| a service agreement (Article 6(1)(b) GDPR) |
| For how long? |
| for the duration of the above-mentioned agreement |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the final table of this section) |
| What happens if you do not provide the data? |
| you will not be able to create an account or use its features, such as viewing your order history or checking your order status |
3. Contacting us, for example to ask a question
| For what purpose? | |
|---|---|
| to handle your enquiries or requests | |
| On what legal basis? | |
| a contract or actions taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) – where your enquiry or request concerns a contract to which we are or may become a party | our legitimate interest consisting in processing your data in order to communicate with you (Article 6(1)(f) GDPR) – where your enquiry or request is not related to a contract |
| For how long? | |
| for the duration of the contract binding us or – if no contract is concluded – until the expiry of the limitation period for pursuing claims – see the final table of this section* | until the expiry of the limitation period for pursuing claims – see the final table of this section – or until we uphold your objection to the processing* |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the final table of this section) |
|
| What happens if you do not provide the data? | |
| we will not be able to respond to your enquiry or request | |
4. Browser settings or other similar action allowing analytical activities
| For what purpose? |
|---|
| to analyse how you use and navigate the Store’s website in order to improve its functionality (you can read more about this in the “Analytical activities” and “Cookies” sections of this Privacy Policy) |
| On what legal basis? |
| our legitimate interest consisting in processing data for the purpose indicated above (Article 6(1)(f) GDPR) |
| For how long? |
| until the cookies used for analytical purposes expire or are deleted by you* |
| What happens if you do not provide the data? |
| we will not take into account how you use and navigate the Store’s website when working on its development |
5. Giving your consent to receive marketing content from us, for example information about special offers
| For what purpose? | |
|---|---|
| to send marketing information, especially special offers | to analyse the effectiveness of messages we send, in order to establish general principles for effective message delivery in our business (you can read more about this in the “Analytical activities” section of this Privacy Policy) |
| On what legal basis? | |
| your consent to our marketing activities (Article 6(1)(a) GDPR) | our legitimate interest consisting in processing data for the purpose indicated above (Article 6(1)(f) GDPR) |
| For how long? | |
| until you withdraw your consent – please remember that you may withdraw your consent at any time. The processing of data carried out before you withdraw your consent remains lawful. | until we uphold your objection to the processing |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the final table of this section) |
|
| What happens if you do not provide the data? | |
| you will not receive our marketing materials, including information about our special offers | |
6. Subscribing to the newsletter
| For what purpose? | |
|---|---|
| to send the newsletter | to analyse the effectiveness of content we send, in order to establish general principles for effective message delivery in our business (you can read more about this in the “Analytical activities” section of this Privacy Policy) |
| On what legal basis? | |
| an agreement for the provision of the newsletter delivery service (Article 6(1)(b) GDPR) | our legitimate interest consisting in processing data for the purpose indicated above (Article 6(1)(f) GDPR) |
| For how long? | |
| until you unsubscribe from our newsletter | until we uphold your objection to the processing |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the final table of this section) |
|
| What happens if you do not provide the data? | |
| you will not be able to receive information about the Store and our services | |
7. Using services other than those listed above, such as browsing our website or using other features available on it, where such services require data processing
| For what purpose? |
|---|
| to perform the agreement concluded between us |
| On what legal basis? |
| a service agreement (Article 6(1)(b) GDPR) |
| For how long? |
| for the duration of the above-mentioned agreement |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the final table of this section) |
| What happens if you do not provide the data? |
| you will not be able to use those features for which data processing is necessary |
8. Taking action or failing to act in a way that may give rise to claims related to the Store or our services
| For what purpose? |
|---|
| to establish, pursue or defend potential claims related to the concluded contract or services provided |
| On what legal basis? |
| our legitimate interest consisting in processing personal data for the purpose indicated above (Article 6(1)(f) GDPR) |
| For how long? |
| until the expiry of the limitation period for claims or until we uphold your objection to the processing* |
| What happens if you do not provide the data? |
| it will not be possible to establish, pursue or defend claims |
ANALYTICAL ACTIVITIES
Within the Store’s website, we conduct analytical activities aimed at making it more intuitive and accessible – in relation to you, this will take place if you allow such activities. As part of the analysis, we will take into account the way you navigate the Store, for example how much time you spend on a given subpage or where you click within the Store. Thanks to this, when working on the development of the Store, we will be able to optimise its layout, appearance and the content published in it in order to improve its functionality.
In addition, if you express your wish to receive marketing messages or the newsletter from us, we may analyse the effectiveness of the messages we send. For example, we may check whether and how they have affected activity in our Store. Such activities will help us establish general principles for sending this type of message in our business – for example, with regard to optimal sending times or the way effective content is formulated.
DATA SECURITY
When processing your personal data, we apply organisational and technical measures compliant with the applicable provisions of law, including connection encryption using an SSL/TLS certificate.
COOKIES
Our Store, like most websites, uses so-called cookies. These files:
- are stored in the memory of your device, such as your computer, phone, etc.;
- do not change the settings of your device.
In this Store, cookies are used for the following purposes:
- remembering your session
- statistics
- marketing
- providing Store features
To learn how to manage cookies, including how to disable them in your browser, you can use your browser’s help file. You can access information on this by pressing the F1 key in your browser. In addition, you will find relevant guidance on the following pages, depending on the browser you use:
Below you will find information on the functions of the cookies we process and their validity periods.
| cookie name | cookie validity period | cookie function |
|---|---|---|
| "_ga" | session duration | tracking traffic in the Store for statistical purposes |
Using the appropriate options in your browser, you may at any time:
- delete cookies,
- block the use of cookies in the future.
In such cases, we will no longer process them.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities that support us in conducting our business. We entrust them with the processing of your data – these entities process data only on our documented instructions.
Below you will find a list of the recipients of your data:
| ACTIVITY | DATA RECIPIENTS | TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION |
|---|---|---|
| any activity related to the Store | provider of sales management software | does not take place |
| being present on the Store’s website with settings allowing analytical activities | entity enabling analytical activities on the website | does not take place |
| placing an order in the Store | payment provider | yes – United States of America ** |
| entity delivering the product to you | yes – United States of America, United Kingdom, Switzerland ** | |
| provider of software facilitating business operations, such as accounting software | does not take place | |
| provider of standard office software, including email inbox services | does not take place | |
| accounting office | does not take place | |
| contacting us, for example to ask a question | provider of standard office software, including email inbox services | does not take place |
In addition:
competent public authorities, to the extent that we are required to disclose data to them.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
** In connection with the above, your personal data may also be processed by entities from outside the European Union. An appropriate level of protection of your data, including through the use of appropriate safeguards, is ensured by:
- the participation of these entities in the so-called Data Privacy Framework, i.e. a programme established by an implementing decision of the European Commission as a set of principles guaranteeing adequate protection of your privacy – in the case of entities from the United States of America
- the Commission Implementing Decision of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom
- European Commission Decision 2000/518/EC on the adequate protection of personal data in Switzerland