Privacy policy

1.1. Data Controller – NOWY STYL Sp. z o.o. with its registered office in Krosno, ul. Pużaka 49, 38-400 Krosno, entered into the Register of Entrepreneurs kept by the District Court in Rzeszów, 12th Commercial Division of the National Court Register under the KRS number [National Court Register Number]: 0000077550, Tax Identification Number: 6840009302, REGON [National Business Registry Number] 370016299.

1.2. Joint Controllers - NOWY STYL Sp. z o.o. with registered office in Krosno, ul. Pużaka 49, 38-400 Krosno, Nowy Styl France S.A.S. with registered office in Saint-Marcellin, Nowy Styl UK Limited with registered office in London, Nowy Styl GmbH with registered office in Ebermannsdorf, Nowy Styl Deutschland GmbH with registered office in Steyerberg, Kusch+Co GmbH with registered office in Hallenberg and Nowy Styl Hungary Zrt. with registered office in Budapest within the scope in which they jointly decide about the processing of the personal data of the Users signing up for a newsletter. Details of the essence of the Joint Controllers’ arrangement are contained in the Policy.

1.3. Personal data - any information related to an identified or identifiable natural person by one or more specific identifiers, including IP address, location data, Internet identifier and information gathered through cookies and other similar technology.

1.4. Policy - this Privacy Policy.

1.5. GDPR - the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

1.6. Website - a site run by the Data Controller at: nowystyl.com.

1.7. User - any natural person visiting the Website or using one or more services or functionalities described herein.

2.1. When a User visits the Website, the Data Controller collects that User’s personal data to the extent necessary to provide the requested individual services, as well as information on the User's activity on the Website. The detailed rules and purposes of the processing of personal data collected while using the Website by the User are described below.

USE OF THE WEBSITE

3.1. Personal data of any persons using the Website (including IP address or other identifiers and information collected via cookies or other similar technologies), is processed by the Data Controller:

3.1.1. in order to provide Users with access to the content available on the Website - the legal basis for processing of personal data is the Data Controller's legitimate interest consisting in enabling the Website to be run and Users to read the content published on the Website (Article 6(1)(f) GDPR);

3.1.2. for analytical and statistical purposes - the legal basis for the processing of personal data is the Data Controller's legitimate interest (Article 6(1)(f) GDPR) consisting in carrying out analyses of the Users' activity on the Website and their preferences in order to improve the functionalities and provided services; based on the User's consent to store cookies in his or her end device and their use by the Data Controller and his or her Partners, the list of which is available here;

3.1.3. in order to establish and seek claims or defend against claims - the legal basis for the processing of personal data is the Data Controller's legitimate interest (Article 6(1)(f) GDPR) consisting in protecting the Data Controller’s rights;

3.1.4. for the Data Controller’s and other entities’ marketing purpose, i.e., subsidiaries of Nowy Styl - the principles of personal data processing for marketing purposes are thoroughly described in the "MARKETING" section.

3.2. The User's activity on the Website, including his or her personal data, is recorded in logs (a special software used to store chronological record of events and activities concerning the IT system, which is used to provide services by the Data Controller). The information recorded in the logs is mainly processed for the provision of services. In addition, the Data Controller processes the information for technical and administrative purposes in order to ensure the security of the IT system and its management, as well as for analytical and statistical purposes - legal basis for processing the personal data is the Data Controller's legitimate interest (Article 6(1)(f) GDPR).

CONTACT FORMS

3.3. The Data Controller may be contacted using electronic contact forms. The User must provide his or her personal data in the contact form in order to contact the User and reply to the request. The User may also provide other data to make the contact or handling of the request easier. The required data must be provided in order to receive and handle the request. Failure to do so will result in being unable to handle the request. The provision of other data is not obligatory.

3.4. Your personal data is processed:

3.4.1. in order to identify the sender and to handle his or her requests sent by the contact form - within the data indicated in the form as required, the legal basis for processing of personal data is the Data Controller's legitimate interest consisting in enabling identification of the sender and efficient handling of the request sent by the contact form by persons interested in services or products of Nowy Styl and its subsidiaries, the list of which is available here (Art 6(1)(f) GDPR);

3.4.2. in order to identify the sender and to handle his or her request sent by the contact form - with regard to data not indicated as required, the legal basis for processing of personal data is the User’s consent (Art. 6(1)(a) GDPR).

4.1. The Users' personal data is processed by the Data Controller for the following marketing purposes:

4.1.1. displaying marketing content to the User without analysing the User's preferences in order to adapt the content to his or her expectations (contextual advertising);

4.1.2. displaying marketing content to the User that is adapted to his or her preferences (behavioural advertising);

4.1.3. performing other activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities)

CONTEXTUAL ADVERTISING

4.2. The Data Controller processes the Users' personal data for marketing purposes in connection with directing contextual advertising to them (i.e., advertising the display of which is not preceded by an analysis of the User's preferences). In this case, the processing of personal data is carried out in connection with the Data Controller's legitimate interest consisting in promoting the services and products of Nowy Styl and its subsidiaries, the list of which is available here (Article 6(1)(f) GDPR).

BEHAVIOURAL ADVERTISING

4.3. The Data Controller and its partners process the Users' personal data, including personal data collected via cookies and other similar technologies, for marketing purposes in connection with behavioural targeting (i.e., advertising that is personalised to the User's preferences). In this case, the processing of personal data may also include the User profiling. In relation to the type of profiling, the legal basis for the processing of the Users' personal data may be the Data Controller's legitimate interest consisting in promoting the services and products of Nowy Styl and its subsidiaries, the list of which is available here (Article 6(1)(f) GDPR), or voluntary consent to the processing of personal data provided by the User (Article 6(1)(a) GDPR).

4.4. A list of the Data Controller's partners can be found here.

NEWSLETTER

4.5. The Joint Controllers provide the newsletter service to persons that have provided their e-mail address (i.e., its customers, subscribers, trade fair participants). The personal data must be given in order to provide the newsletter service. Failure to do so will result in being unable to send the newsletter.

4.6. The provision of the newsletter service requires the joint processing of the User’s personal data by Nowy Styl and NOWY STYL. FR S.A.S. with registered office in Saint-Marcellin, Nowy Styl UK Limited with registered office in London, Nowy Styl GmbH with registered office in Ebermannsdorf, Nowy Styl Deutschland GmbH with registered office in Steyerberg and Nowy Styl Hungary Zrt. with registered office in Budapest and the personal data is jointly controlled by the Joint Controllers pursuant to Article 26 of the GDPR. Therefore, the Joint Controllers have entered into the Joint Controllers’ Agreement whereby they have jointly determined relevant roles and responsibilities that are required to comply with the Users’ Personal Data protection and processing requirements.

4.7. The Joint Controllers have agreed that they shall obtain, via the Website in all its language versions, the consents to the sending of a newsletter and the personal data entered into a newsletter sign-up form, and transfer it to the Joint Controller operating on the Joint Controller’s geographical region, and store the personal data in the database managed and protected by Nowy Styl Sp. z o.o., and send a personalised newsletter depending on a choice made by the User when signing in for newsletter from individual countries. The data is transferred on an ongoing basis from the date of the consent to the sending of a newsletter and the User’s provision of his/her personal data in a newsletter sign-up form throughout the term of the newsletter service or until the date on which the User revokes his/her consent to the sending of a newsletter or objects to the processing of his/her personal data.

4.8. With regard to the activities carried out by the Joint Controllers, the User has the right to access his / her personal data and demand that it be rectified or erased, the right to limit the processing, the right to data portability, the right to object to data processing and the right to lodge a complaint with the supervisory authority.

4.9. The User has the right to object at any time to the processing of the Personal Data by the Joint Controllers.

4.10. Pursuant to Article 26 paragraph 1 of the GDPR, the Joint Controllers designate a contract point the User may refer to on every issue relating to the processing of his / her Personal Data. Nowy Styl sp. z o.o. serves as the contract point. Data subjects may e-mail the contact point at [email protected] or send a traditional letter to the following address: ul. Pużaka 49, 38-400 Krosno, Poland. Notwithstanding this provision, the User may enforce his / her rights under Article 26 paragraph 3 of the GDPR against any Joint Controller jointly liable for the Personal Data processing.

4.11. Your personal data is processed:

4.11.1. in order to send the newsletter - the legal basis for the processing of personal data is the legitimate interest of the Joint Controllers; i.e. promotion of the products offered by Nowy Styl and individual Joint Controllers (Article 6(1)(f) GDPR);

4.11.2. in the case of providing the User with marketing contents within the newsletter - the legal basis for the processing of personal data, including the User profiling, is the Joint Controllers’ legitimate interest (Article 6(1)(f) GDPR) based on the consent to receive marketing information in the form of a newsletter or, in the case of the Joint Controllers’ customers, based on the intention to maintain the current commercial or business relations;

4.11.3. for analytical and statistical purposes - the legal basis for the processing of personal data is the Joint Controllers’ legitimate interest (Article 6(1)(f) GDPR), consisting in conducting analyses of the Users’ activity on the Website in order to improve the functionalities;

4.11.4. in order to establish and seek claims or defend against claims - the legal basis for the processing of personal data is the Joint Controllers’ legitimate interest consisting in establishing and seeking claims or defending against claims (Article 6(1)(f) GDPR).

DIRECT MARKETING

4.12. The User's personal data may also be used by the Data Controller to send marketing content to the User through various communication channels, i.e., via e-mail, MMS / SMS or by phone. Such actions are undertaken by the Data Controller only if the User has provided his or her consent in this respect, which may be withdrawn at any time, or based on the Data Controller's legitimate interest consisting in providing the customers with up-to-date commercial information, including the Data Controller's marketing information, resulting from the current commercial or business relations. The provision of personal data for marketing purposes is voluntary.

5.1. The Data Controller processes the personal data of Users visiting the Data Controller's profiles created on social networking sites (for instance, Facebook, YouTube, Instagram, Twitter). The personal data is processed only in connection with the created profile, including for the purpose of informing the Users about the Data Controller's activities and promoting various events, services and products. The legal basis for the Data Controller's processing of personal data in this respect is its legitimate interest (Article 6(1)(f) GDPR) consisting in promoting its own brands.

5.2. The Data Controller processes the Users' personal data obtained using the following tools: Facebook Ads Manager, Google Ad Manager and LinkedIn Campaign Manager.

5.3. The User's personal data indicated in the contact forms referred to in point 5.2. Is processed:

5.3.1. in order to provide the User with marketing information on the Data Controller's products and services (and within the framework of the newsletter service – on the Joint Controllers’ products and services) - the legal basis for the processing of personal data is the Data Controller's legitimate interest (Article 6(1)(f) GDPR) resulting from the User's order for marketing information by e-mail and/or SMS/MMS or by phone);

5.3.2. in order to make the User's personal data available to subsidiaries of Nowy Styl, the list of which is available here for the marketing purposes - the legal basis for processing of personal data is the User's consent for processing his or her data for this purpose (Article 6(1)(a) GDPR; if the consent is not provided, the User’s personal data will not be processed for this purpose).

5.4. The provision of personal data for marketing purposes is voluntary.

6.1. Cookies are small text files that may be used by websites to make the site better tailored to the Users’ needs.

The Data Controller may store cookies on the User's device, if this is necessary for the proper functioning of the Website. In the case of other types of cookies, the Data Controller must obtain the User's consent.

6.2. The Website uses various types of cookies. Some cookies are placed by third party services that appear on our Website.

The User can at any time withdraw his or her consent from the Cookie Declaration on our Website. The types of cookies described below are used on the Website:

6.2.1. Necessary cookies - help make the Website usable by enabling basic functions like page navigation and access to secure areas of the Website. The Website cannot function properly without these cookies.

6.2.2. Preference cookies - enable the Website to remember choices Users have made in the past, like preferred language or the region the User is in.

6.2.3. Statistic cookies - help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

6.2.4. Marketing cookies - are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual User and thereby more valuable for publishers and third-party advertisers.

6.2.5. Unclassified cookies - are cookies in the process of being classified, along with individual cookie providers.

6.3. Cookies are used in order to:

6.3.1. tailor the content of the Websites to the User's preferences and to optimise the use of websites; in particular, these files make it possible to recognise the User's device and display the website, adapted to his or her individual needs;

6.3.2. create statistics and prepare analyses that help to understand how Users use the websites, allowing for improving their structure and content;

6.3.3. meet the marketing purposes in connection with directing contextual advertising to Users (i.e., advertising the display of which is not preceded by analysis of the Users’ preferences) and behavioural advertising (i.e., advertising that is tailored to the User's preferences)

6.4. The legal basis for the processing of personal data collected by means of cookies is the Data Controller’s legitimate interest (Article 6(1)(f) GDPR). (i) consisting in ensuring the proper functioning of the Website in terms of the necessary cookies and (ii) based on the User's consent to the storage of cookies in his or her end device and their use by the Data Controller and partners, the list of which is available here, consisting in:

6.4.1. keeping statistics and conducting analyses of User’s activity on the Website, as well as User's preferences in order to improve the functionalities and services provided; and

6.4.2. directing contextual advertising to Users (i.e., advertising the display of which is not preceded by analysis of the Users’ preferences) and behavioural advertising (i.e., advertising that is tailored to the User's preferences)

6.5. The Data Controller informs that changes in the cookies settings may affect some of the functionalities available on the Website.

7.1. The Data Controller and its partners use various solutions and tools for analytical and marketing purposes. Basic information about these tools is listed below. Detailed information can be found in the privacy policy of a given partner.

GOOGLE ANALYTICS

7.2. Google Analytics cookies are files used by Google in order to analyse User’s use of the Website, to compile statistics and prepare reports on how the Website works. Google does not use the data collected to identify the User, nor does it combine this information to enable his or her identification. Detailed information on the scope and principles of personal data collection in relation to this service can be found at: https://www.google.com/intl/pl/policies/privacy/partners. The User may block the provision of information about his/her activity to Google Analytics by installing a plug-in available at https://tools.google.com/dlpage/gaoptout.

GOOGLE ADS

7.3. Google ADS is a tool allowing for measuring the performance of advertising campaigns of the Data Controller, allowing for the analysis of the data, such as keywords or the number of unique users. Google ADS makes it possible to show our ads to Users that have visited our Website. Information on the processing of personal data by Google in relation to this service is available at: https://policies.google.com/technologies/ads. The User can manage ads settings directly at Google website: https://adssettings.google.pl/.

FACEBOOK PIXEL

7.4. Facebook Pixel is a tool allowing for measuring the performance of advertising campaigns run by the Data Controller on Facebook. This tool makes it possible to conduct advanced data analytics to optimise the Data Controller's activities, also in using other Facebook tools. Detailed information on the Facebook's personal data processing can be found at: https://pl-pl.facebook.com/help/.

SOCIAL MEDIA PLUG-INS

7.5. Social media plug-ins (Facebook, Google+, LinkedIn, Twitter) are used on the Website. Plug-ins allow the User to share content published on the Website in a social networking site. The use of plug-ins on the Website means that the relevant social networking site receives information on the User's exploitation of the Website and can assign it with the User's profile created on the relevant social networking site. The Data Controller is not aware of the purpose and scope of collection of personal data by social networking sites. More information can be found at the links below:

7.5.1. Facebook: https://www.facebook.com/policy

7.5.2. Google: https://privacy.google.com/take-control

7.5.3. LinkedIn: https://www.linkedin.com/legal/privacy-policy

7.5.4. Twitter: https://twitter.com/en/privacy

7.6. HotJar allows the Data Controller to conduct analyses of the User's activity on the Website, for instance, through questionnaires or satisfaction surveys, and through anonymous collection of information about clicks on particular sections on the Website. The tool does not allow for identification of the User. Detailed information on the data collected by means of HotJar and on how to deactivate User's monitoring is available at: https://www.hotjar.com/privacy.

8.1. The period of the personal data processing by the Data Controller depends on the type of service provided and the purpose of the processing. As a rule, personal data is processed for the time of provision of the service or execution of the order, handling of the request sent via the contact form, until the withdrawal of the consent provided or until an objection is raised to the processing of the personal data in cases where the legal basis of the personal data processing is the Data Controller’s legitimate interest.

8.2. The period of the personal data processing may be extended, if the processing is necessary for establishing or seeking claims or defending against any possible claims, and thereafter only if and to the extent required by law. Upon the expiry of the period in question, the personal data is erased or made anonymous.

9.1. The User has the following rights: to access his or her personal data and to request its rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to the processing of the personal data, as well as the right to lodge a complaint to the supervisory authority for the protection of personal data.

9.2. To the extent that the User's data is processed under his or her consent, the User may withdraw this consent at any time by contacting the Data Controller at the following address: [email protected]. The withdrawal of consent does not affect the lawfulness of the data processing before the withdrawal.

9.3. The User has the right to object, at any time, to the processing of personal data for marketing purposes, if the processing is conducted in connection with the Data Controller’s legitimate interest, and also - for reasons related to the User's specific situation - in other cases where the legal basis of the personal data processing is the Data Controller’s legitimate interest (for instance, due to the analytical and statistical purposes).

9.4. More information about your GDPR rights can be found here.

10.1. As a result of the provision of services, personal data may be disclosed to third-party entities, including in particular, operators of IT systems, IT services, banks and payment operators, accounting and legal services companies, couriers (in connection with the execution of orders), marketing agencies (within the framework of marketing services), mailing services companies, subsidiaries of Nowy Styl, the list of which is available here and the Data Controller's partners (only to the extent of information contained in cookies), the list of which is available here.

10.2. If the User provides his or her consent, then his or her personal data may also be made available to other entities for their own purposes, including marketing purposes.

10.3. The Data Controller reserves the right to disclose selected information about the User to competent authorities or third parties that have requested the provision of such information under the appropriate legal basis and in accordance with the provisions of the applicable law.

11.1. The level of protection of personal data outside the European Economic Area (EEA) is different from that provided by European law. Due to this reason, the Data Controller transfers personal data outside the EEA, only if it is required and at the same time with the provision of an adequate level of protection, mainly by:

11.1.1. cooperation with entities processing personal data in countries for which a relevant EC's decision has been issued,

11.1.2. following the standard contractual clauses issued by the European Commission,

11.1.3. applying binding corporate rules, approved by the relevant supervisory authority,

11.2. The Data Controller always notifies the User of the intention to transfer personal data outside the EEA at the time of its collection.

12.1. The Data Controller conducts a risk analysis on a regular basis in order to ensure that personal data is processed in a safe manner by ensuring, in particular, that only authorised persons have access to the personal data and only to the extent necessary for the performance of their tasks. The Data Controller ensures that all operations associated with personal data are recorded and performed only by authorised employees and collaborators.

12.2. The Data Controller takes all necessary actions to ensure that its subcontractors and other cooperating third-party companies apply the appropriate security measures while processing personal data at the request of the Data Controller.

13.1. Users may contact the Data Controller using the electronic means: [email protected] or by post using the following correspondence address: ul. Pużaka 49, 38-400 Krosno.

14.1. This Policy is reviewed on a regular basis and updated, if needed.

14.2. The current Privacy Policy is valid from 20th May 2024.