PRIVACY AND COOKIES POLICY

I. General Principles of our Privacy Policy

1. We care about the privacy and security of the personal data of the users of the website hosted at makingmoneycleaning.com (hereinafter: online shop, Service). In this respect, we are guided in particular by the principles arising from the following laws and regulations issued on their basis:

Personal Data Protection Act of 10.05.2018. (Journal of Laws of 2018, item 1000 as amended).

• Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws No. 144, item 1204 as amended);
• Act of 16 July 2004. - Telecommunications Law (Journal of Laws No. 171, item 1800 as amended);
• Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (RODO),

1. The administrator of the personal data of persons using the Website is Joanna Krzyżanowska based at 3 Wharncliffe Grove, Shipley, registered with HM Revenue & Customs in the UK.
2. The privacy policy sets out, among other things:

• the scope and modalities of our processing of personal data of users of the Website
• the ability to access this data,
• the ways in which these data can be used,
• the Shop's policy on the use of cookies.

II. Means of collecting user data

1. We are committed to making the services we provide as relevant to your situation as possible and to making it easy for you to contact us. To this end, we collect a variety of data about you. However, we only collect and process data that you provide to us yourself (with the exception of - in certain situations - data that is automatically collected via cookies and login data, as discussed below).
2. The basis for the processing of the User's personal data is the User's consent to the processing of his/her personal data. Consent is given by filling in the relevant contact form and ticking the appropriate box in the purchase process. The data provided in the form are processed for the purposes specified in the respective form, most often to enable the Website to contact the User by e-mail or other commercial contact. Consent to data processing may also be given for marketing purposes and such consent may be withdrawn at any time.

In connection with the processing of your personal data, you have the following rights:

1. Right of access to personal data. You have the right to obtain information from us about the processing of your personal data. You also have the right to obtain access to that personal data, a copy of the data, as well as information as detailed in Article 15(1) of the DPA.
2. Right to rectification of personal data. You have the right to request that we immediately rectify your personal data that is inaccurate. You also have the right to request that we complete incomplete personal data.
3. Right to erasure of personal data. You have the right at any time to request that we delete your personal data immediately. The processing of your data remains lawful until you withdraw your consent. Data shall be erased when your personal data is no longer necessary for the purposes for which it was collected or is being processed, you have objected to the processing of your personal data and we have no legitimate, overriding grounds for processing, we have unlawfully processed your personal data, we need to erase your personal data to comply with a legally imposed obligation on us; you withdraw the consent on which the processing is based and there is no other legal basis for the processing.
4. Right to restrict the processing of your personal data. You have the right to request that we restrict the processing of your personal data in the following cases:
   1. i) if you dispute the accuracy of your personal data that we process, ii) if we process your personal data unlawfully and you object to us erasing it, requesting instead that we restrict its use, iii) if we no longer need your personal data for the purposes of the processing, but you need it to establish, assert or defend your claims iv) if you have objected to our processing of your personal data.
5. Right to data portability. You have the right to receive your personal data from us or to authorise us to send your personal data to another controller in a structured commonly used format if the transfer is technically possible.
6. You can exercise these rights by contacting us by e-mail at: info@makingmoneycleaning.com or by post to the Administrator's registered office, stating the reason and content of the request, e.g. in the case of a request for deletion or modification of data, indicating the new e-mail address to which the newsletter service is to be provided.
7. The request shall be dealt with without undue delay, but no later than 30 days from the date of receipt of the request. If you choose to exercise the above rights, we will respond to you as to the processing of the request without undue delay, but no later than 30 days after receipt of the request.
8. Right to lodge a complaint with a supervisory authority. If you believe that the processing of your personal data violates the law, you have the right to lodge a complaint with the supervisory authority - the President of the Office for Personal Data Protection
9. When you visit our website, data on your visit is automatically collected, e.g. your IP address, domain name, browser type, operating system type, etc. (login data). The automatically collected data may be used to analyse user behaviour on our website, to collect demographic data about our users or to personalise the content of our websites in order to improve its content. However, this data is processed solely for the purposes of administering the Website and providing an efficient hosting service and is not associated with the data of individual users.

III. Scope of data collected about you through the Shop and how it is used

1. The extent of data processing depends on the extent of your consent or the fulfilment of another type of premise that legalises the processing of personal data. These prerequisites are, in particular, the performance of the contract between us and the user or the marketing of our own products, in accordance with the principles set out in the legal acts indicated in point. I.
2. If consent is given for the processing of personal data, the user shall provide data enabling him/her to be identified and contacted, as indicated in Section IV, subsection 3 data, i.e. at least name, surname, e-mail address. The provision of other personal data is voluntary and dependent on the will of the person granting consent to their processing.
3. For some products and services, it may become necessary to provide a more detailed range of personal data. In this case, the purposes of the processing will be indicated at the same time as the corresponding form for the user to register the relevant personal data.
4. The customer's personal data may be used in particular for the following purposes:

• order processing,
• marketing activities, including by means of electronic communication, including analysis of user behaviour and needs, market analysis, provided that you have explicitly given your consent and that your consent is valid.
• sending newsletters or SMS messages with your consent,
• to create user databases solely for the use of the contracted entity or a subcontractor, subject to entering into a contract for the co-management of personal data with the controller,
• to improve our product offering and the content of the Shop,
• for the other purposes set out in this privacy policy or in the rules of procedure

1. As a controller of personal data, we may transfer Users' personal data on the basis of a separate Contract on entrustment of personal data processing, this applies only to services such as a hosting provider, an entity providing e-mail service, systems for direct marketing, public authorities - to the extent to which the Administrator is obliged to make the data available. In addition, the data obtained from the forms, registration and orders may be transferred outside the European Economic Area on the basis of a Contract for the entrustment of personal data processing. An appropriate level of protection of the User's data, including through the application of appropriate safeguards, is ensured by the participation of these entities in the EU-US Privacy Shield, established by an executive decision of the European Commission as a set of principles guaranteeing an adequate protection of the User's privacy, and by the Administrator's agreement with this entity which ensures an adequate protection of the User's personal data in accordance with the applicable legislation. The User acknowledges that his or her personal data may also be provided to authorised state authorities in connection with their proceedings, at their request and upon fulfilment of the prerequisites confirming the necessity of obtaining such data from us.
2. Failure to provide personal data, depending on the purpose for which they are provided, results in the impossibility of using the services offered by the Administrator (e.g. online sales, order processing), the impossibility of receiving information about promotions or special offers offered by the Administrator.

IV. Data protection measures

User information is processed by the ADO with the observance of appropriate technical and organisational measures that meet the requirements of Polish law, in particular the Personal Data Protection Act and the regulations issued on its basis. These measures are primarily aimed at securing users' personal data from access by unauthorised persons in order to maintain its security. In particular, only authorised persons (ADO employees and contractors) have access to users' personal data, and they are obliged to keep such data confidential. The collection of personal data of the Store's users (potential customers) may serve to create a database and is treated as a personal database.

V. Processing period 

Your personal data will only be processed for as long as there is a legal basis for doing so, i.e. until :

- the controller is no longer under a legal obligation to process your personal data

- the possibility of asserting claims relating to the contract entered into by the parties ceases

- consent shall be withdrawn where consent was the basis for the processing

depending on what is applicable in the case and what comes next.

VI. Amendments to the Policy

Expansion or change in the scope or content of the services we provide, as well as changes in legislation, may make it necessary to amend the Privacy and Cookies Policy. As the version of the Policy changes, a date will appear to indicate the date of implementation and a signature will appear to indicate the particular version of the Policy. No change will adversely affect your fundamental right to control the data we process.

VII. Cookie Policy/Profiling

1. The website does not collect any information automatically, except for the information contained in cookies.
2. Cookies (so-called "cookies") are IT data, in particular text files, which are stored in the Service User's terminal equipment and are intended for use on the Website. Cookies usually contain the name of the website they come from, the time they are stored on the terminal equipment and a unique number.
3. The entity placing cookies on the Service User's terminal equipment and accessing them is the Service Operator.
4. Cookies are used for:

• adapting the content of the Website pages to User preferences and optimising the use of the websites; in particular, these files allow for recognition of the Website User's device and appropriate display of the website, adapted to his/her individual needs;
• the creation of statistics that help us understand how visitors to the Website use the websites, which enables us to improve their structure and content;
• maintaining a session of the Service User (after logging in), thanks to which the User does not have to re-enter his/her login and password on each sub-page of the Service.

1. There are two main types of cookies used on the Website: "session" (session cookies) and "fixed" (persistent cookies). "Session" cookies are temporary files that are stored on the User's terminal equipment until the User logs out, leaves the website or switches off the software (web browser). "Permanent" cookies are stored on the User's terminal equipment for the time specified in the parameters of the cookies or until they are deleted by the User.
2. In many cases, the web browsing software (web browser) allows cookies to be stored on the User's terminal device by default. Users of the Website may change their settings regarding cookies at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of a web browser or inform on their each time placing in the equipment of a User of the Service. Detailed information on the possibility and methods of using cookies is available in the settings of your software (web browser).
3. The Operator of the Website informs you that restrictions on the use of cookies may affect some of the functionalities available on the Website.
4. In the event that the use of cookies could result in decisions that produce legal effects for the User or affect the User in a similarly significant manner, they will only be carried out with the User's express consent.
5. Cookies are placed in the Service User's terminal equipment and may also be used by partners cooperating with the Service Operator.
6. More information on cookies is available in the "Help" section of your browser menu.

Version dated 03.01.2024.