This Privacy Policy sets out the rules for processing and protecting personal data provided by Users in connection with their use of the services of the online store madronucci.com

General Information

The administrator of your personal data collected via the online store is:
FIRENZE Magdalena Florencka, ul. Kazimierza Srokowskiego 11e/1, 41-300 Dąbrowa Górnicza, NIP number / VAT UE PL6292409057

You can contact us:

  • by email: [email protected]
  • by post:
    FIRENZE Magdalena Florencka
    ul. Kazimierza Srokowskiego 11e/1
    41-300 Dąbrowa Górnicza
    Poland

To ensure the security of the data entrusted to us, we have developed internal procedures and recommendations to prevent unauthorized access to data. We monitor their implementation and constantly check their compliance with relevant legal acts – the Personal Data Protection Act, the Act on the Provision of Electronic Services, as well as all types of implementing acts and EU law.

Personal data is processed based on the consent expressed by the User and in cases where legal regulations authorize the Administrator to process personal data based on law or to perform a contract concluded between the parties.

We reserve the right to change the privacy protection policy of the service, which may be influenced by the development of internet technology, possible changes in the law regarding personal data protection, and the development of our online service. We will inform about any changes in a visible and understandable way.

The Service may contain links to other websites. Such websites operate independently of the Service and are not supervised in any way by the madronucci.com online store. These sites may have their own privacy policies and regulations, which we recommend reviewing. If you have any doubts regarding any provisions of this privacy policy, we are at your disposal – our contact details can be found in the CONTACT DETAILS section at the bottom of the page.

In matters not regulated by the regulations, the provisions of the Civil Code and relevant Polish laws, as well as European Union law, in particular the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC), shall apply.

Scope of Processing Your Data

Direct Marketing, Including Profiling

If you make purchases in our online store, Madronucci processes your personal data for direct marketing purposes, including profiling. Profiling does not increase the number of displayed ads/sent commercial information, but only makes them better tailored to your needs. Thanks to profiling, based on collected data from devices, such as viewed product pages in our online store, saved cookies, and personal data provided to us, the ads displayed to you and commercial information sent (if you have given separate consent to receive them) will be more useful. We do not make any automated decisions about you (decisions without human involvement).

Personal data we process for this purpose:

  • Customer's first and last name
  • email address
  • IP address
  • cookie identifiers

Most browsers accept cookies by default. You can set your browser to reject requests to store cookies entirely or selectively. This can be done via browser settings. Before changing the default settings, remember that many cookies improve the convenience of using the site. Disabling cookies may affect how our site displays in your browser and may cause problems logging into your Customer Account. More information about cookies can be found in the Cookie Policy.

Legal basis for data processing

  • legitimate interest of the administrator – for the use of data for direct marketing purposes, including profiling [Art. 6(1)(f) GDPR]
  • legitimate interest of the administrator – for the purpose of defense/pursuit of claims [Art. 6(1)(f) GDPR]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Registered Customer Account of the Online Store

If you give consent and create a Customer Account, Madronucci processes your personal data provided in the Customer Account registration form and in the section containing personal data on the Customer Account, for the purpose of creating and using your Customer Account in the online store.

Personal data we process for this purpose:

  • Customer's first and last name (required)
  • email address (required)
  • address details (optional)
  • shipping address (optional)
  • phone number (optional)
  • for entrepreneurs and for invoicing: company name and VAT ID (required for entrepreneurs)
  • purchase history (including online withdrawal from contract)

Providing the above required personal data is voluntary, however, failure to provide this data will prevent the creation of a Customer Account.
Failure to provide optional data will prevent the use of additional options that require such data.

Legal basis for data processing

  • performance of a contract concluded with you [Art. 6(1)(b) GDPR]
  • consent of the data subject [Art. 6(1)(a) GDPR]
  • legitimate interest of the administrator – for direct marketing purposes, including profiling and customer satisfaction surveys [Art. 6(1)(f) GDPR]
  • legitimate interest of the administrator – for the purpose of defense/pursuit of claims [Art. 6(1)(f) GDPR]
  • fulfillment of legal obligations by the administrator [Art. 6(1)(c) GDPR in connection with the Accounting Act]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Customer Service

If you contact our Customer Service Office with a question or request for assistance, Madronucci processes your personal data to handle your inquiry.

Personal data we process for this purpose:

  • Customer's first and last name (required)
  • address details (required)
  • email address (required)
  • phone number (optional)
  • bank account number (optional)
  • payment details
  • purchase history (including withdrawal from contract, complaints)

Providing the above required personal data is voluntary, but failure to do so will prevent us from accepting and handling your inquiry. Failure to provide optional data will prevent the use of additional options that require such data (e.g., not providing a phone number will prevent contact via phone during the withdrawal process).

Legal basis for data processing

  • performance of a contract [Art. 6(1)(b) GDPR]
  • consent of the data subject [Art. 6(1)(a) GDPR]
  • legitimate interest of the administrator – for direct marketing, profiling, and customer satisfaction surveys [Art. 6(1)(f) GDPR]
  • legitimate interest of the administrator – for defense/pursuit of claims [Art. 6(1)(f) GDPR]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Order Fulfillment

When placing an order in our online store, we use your personal data provided during the ordering process to fulfill the order, enable payment, and send you notifications about the order status and delivery.

Personal data we process for this purpose:

  • Customer's first and last name (required)
  • address details (required)
  • email address (required)
  • phone number (required)
  • IP address (required)
  • for entrepreneurs and invoicing: company name and VAT ID (required for entrepreneurs)
  • alternative shipping address (optional)
  • if another person is designated for delivery: their name, address, and phone number (optional)
  • payment details

Providing the above required personal data is voluntary, but failure to do so will prevent order placement.
Failure to provide optional data will prevent the use of additional options that require such data (e.g., alternative shipping address or company details for invoicing).

Legal basis for data processing

  • performance of a contract [Art. 6(1)(b) GDPR]
  • legitimate interest of the administrator – for direct marketing, profiling, and customer satisfaction surveys [Art. 6(1)(f) GDPR]
  • legitimate interest of the administrator – for defense/pursuit of claims [Art. 6(1)(f) GDPR]
  • fulfillment of legal obligations by the administrator [Art. 6(1)(c) GDPR in connection with the Accounting Act]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Handling Withdrawal from Distance Contracts – Returns

If you withdraw from a contract concluded in our online store (return), Madronucci processes your personal data to handle the withdrawal from the distance contract.

Personal data we process for this purpose:

  • Customer's first and last name (required)
  • address details (required)
  • email address (optional)
  • phone number (optional)
  • bank account number (optional)
  • purchase history (including returns)

Providing the above required personal data is voluntary, but failure to do so will prevent us from accepting and processing your withdrawal from the distance contract. Failure to provide optional data will prevent the use of additional options that require such data (e.g., not providing a bank account number will prevent payment via bank transfer if such payment is due to the Customer; not providing a phone number/email address will prevent contact via those channels during the withdrawal process).

Legal basis for data processing

  • fulfillment of legal obligations by the administrator [Art. 6(1)(c) GDPR in connection with Articles 27–38 of the Consumer Rights Act]
  • legitimate interest of the administrator – for defense/pursuit of claims [Art. 6(1)(f) GDPR]
  • fulfillment of legal obligations by the administrator [Art. 6(1)(c) GDPR in connection with the Accounting Act]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Handling Complaints

If you submit a complaint, Madronucci processes your personal data during the handling of the submitted complaint.

Personal data we process for this purpose:

  • Customer's first and last name (required)
  • address details (required)
  • email address (optional)
  • phone number (optional)
  • bank account number (optional)
  • purchase history (including complaints)

Providing the above required personal data is voluntary, but failure to do so will prevent us from accepting and processing the complaint. Failure to provide optional data will prevent the use of additional options that require such data (e.g., not providing a bank account number will prevent payment via bank transfer if such payment is due to the Customer; not providing a phone number/email address will prevent contact via those channels during the complaint process).

Legal basis for data processing

  • performance of a contract concluded with you [Art. 6(1)(b) GDPR]
  • fulfillment of legal obligations by the administrator [Art. 6(1)(c) GDPR in connection with Articles 556–576 of the Civil Code]
  • legitimate interest of the administrator – for defense/pursuit of claims [Art. 6(1)(f) GDPR]
  • fulfillment of legal obligations by the administrator [Art. 6(1)(c) GDPR in connection with the Accounting Act]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Issuing Invoices

If an invoice/note is issued, Madronucci processes your personal data for the purpose of issuing an accounting document.

Personal data we process for this purpose:

  • Customer's first and last name (required)
  • address details (required)
  • company name and VAT ID (required for entrepreneurs)
  • email address (optional)
  • phone number (optional)

Providing the above required personal data is voluntary, but failure to do so will prevent us from issuing an invoice/note. Failure to provide optional data will prevent the use of additional options that require such data (e.g., not providing a phone number/email address will prevent contact via those channels for sending the accounting document).

Legal basis for data processing

  • legitimate interest of the administrator – for defense/pursuit of claims [Art. 6(1)(f) GDPR]
  • fulfillment of legal obligations by the administrator [Art. 6(1)(c) GDPR in connection with the Accounting Act]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Sending Commercial Information via Electronic Means

If you give consent, Madronucci processes your personal data to send you commercial information via email.

Personal data we process for this purpose:

  • Customer's first and last name (required)
  • email address (optional)

Providing the above required personal data is voluntary, but failure to do so will prevent us from sending you information about the latest collections and promotions in our online store.

Legal basis for data processing

  • consent of the data subject [Art. 6(1)(a) GDPR]
  • legitimate interest of the administrator – for defense/pursuit of claims [Art. 6(1)(f) GDPR]

Data retention period:

Your data will be stored for up to 11 years due to the length of limitation periods for claims (Art. 118 Civil Code, Art. 86 §1 of the Tax Ordinance Act). In the case of ongoing proceedings regarding claims, your data may be processed longer – until the final conclusion of such proceedings.

Twisto.pl – Buy Now, Pay Later

If you choose the “Buy now, pay later” option, Madronucci processes and transfers your data to the Twisto.pl service to execute the deferred payment instruction.

In connection with the entry into force and the necessity to apply Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation”), FIRENZE Magdalena Florencka, ul. Kazimierza Srokowskiego 11e/1, 41-300 Dąbrowa Górnicza, NIP number / VAT UE PL6292409057 (hereinafter also referred to as the “Online Store”), owner of the domain https://madronucci.com, presents the following information regarding the principles of processing your personal data.

The online store processes your personal data for the following purposes:

  • transferring your personal data to ING Bank Śląski S.A. (“Bank”) in connection with:
    • providing the Online Store with infrastructure for online payment processing [Art. 6(1)(f) GDPR]
    • handling and settling online payments made by customers using payment instruments [Art. 6(1)(f) GDPR]
    • verifying proper execution of contracts concluded with the Online Store, in particular ensuring protection of payers’ interests in connection with submitted complaints [Art. 6(1)(f) GDPR]
  • transferring your personal data to Twisto Polska sp. z o.o. in connection with the possibility of offering payment for purchased goods or services by Twisto Polska sp. z o.o. under a commission agreement including the “Buy with Twisto” formula and making this formula available by the Online Store, as well as verifying proper execution of such commission agreements [Art. 6(1)(f) GDPR]

In connection with the processing of personal data for the purposes specified in items 3 and 4, your personal data may be shared by the Online Store with other recipients or categories of recipients of personal data, which may include:

  • ING Bank Śląski S.A.
  • Twisto Polska sp. z o.o.

If you provide personal data for the purpose of concluding a contract with the Online Store, providing such data is a condition for concluding the contract. Providing personal data in this situation is voluntary, but failure to do so will prevent the conclusion of a contract with the Online Store.

If you provide personal data for the purpose of transferring it to Twisto Polska sp. z o.o. before concluding a sales contract for goods (or services) purchased in the Online Store, such transfer is a condition for concluding the sales contract due to the business model adopted by the Online Store.

If you provide your personal data for the purpose of concluding a contract with the Online Store, providing such data is a condition for concluding the contract. Providing personal data in this situation is voluntary, but failure to do so will prevent the conclusion of a contract with the Online Store.

If you provide your personal data for the purpose of transferring it to Twisto Polska sp. z o.o. before concluding a sales contract for goods (or services) purchased in the Online Store, such transfer is a condition for concluding the sales contract due to the business model adopted by the Online Store.

Your Personal Data

In accordance with the Regulation, you have the following rights regarding your personal data:

  • the right to access your personal data
  • the right to rectify your personal data
  • the right to delete your personal data
  • the right to restrict the processing of your personal data
  • the right to object to the processing of your personal data
  • the right to transfer your personal data
  • the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal
  • the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office

Your personal data will not be processed in an automated manner (including profiling) in a way that would result in decisions having legal effects or similarly significantly affecting you.

The Online Store makes every effort to protect your personal data and ensure its security. If you have any questions or concerns regarding the processing of your personal data, please contact us using the contact details provided in the “General Information” section.

If your personal data is transferred to the Bank in connection with the processing and settlement of payments made by you to the Online Store via the Internet using payment instruments, providing the data is required to complete the payment and to confirm its execution by the Bank to the Online Store.

If your personal data is transferred to the Bank for the purpose of verifying the proper performance of contracts concluded with the Online Store, in particular to ensure the protection of payers' interests in connection with complaints submitted by them, providing this data is required to enable the execution of the agreement between the Online Store and the Bank.

If your personal data is transferred to Twisto Polska sp. z o.o. in connection with the possibility of offering you the option to pay for the goods or services purchased by you through Twisto Polska sp. z o.o. under a commission agreement including the "Buy with Twisto" purchase formula and the availability of this formula by the Online Store, providing and processing this data for this purpose is required due to the business model adopted by the Online Store and to execute the agreement between the Online Store and Twisto Polska Sp. z o.o.

Your Personal Data

Who Has Access to Your Personal Data

We do not sell your data or share it commercially with third parties. Your personal data is shared only to the necessary extent with our partners who help us fulfill your order or other services we provide to you in our store – electronic payment operators, courier companies, accounting, legal, IT service providers, etc.

Below you can find the entities/groups of recipients to whom your personal data will be shared:

  • our employees – access to your data is granted to employees/associates authorized by us to process specific personal data,
  • payment operators – if you make a purchase in our online store, your data necessary to complete the payment will be received by the payment operator you selected,
  • courier company – if you make a purchase in our online store, your data necessary to deliver the shipment will be received by the courier company you selected,
  • IT and technical service providers – companies providing IT and technical services necessary for the proper functioning and development of our website, IT systems, and technical infrastructure may access your data,
  • marketing service providers – if you give your consent, companies providing marketing services to us, including sending our commercial information electronically (e.g., newsletter), profiling, and customer satisfaction surveys, may access your data,
  • other service providers – companies providing other necessary services for our operation and development (e.g., accounting, legal, consulting, etc.) may access your data

Your Rights

Right to Access Data

You have the right to access your data at any time. To exercise this right, contact our Customer Service Office.

Right to Rectify Data

You have the right to request the correction of your personal data if it is incorrect. To exercise this right, contact our Customer Service Office.

Right to Erasure

You have the right to request the deletion of your data if:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
  • You have withdrawn your consent to the processing of personal data and there is no other legal basis for processing this data by Madronucci,
  • You have objected to the processing of your data for purposes arising from legitimate interests pursued by the controller or a third party,
  • The personal data was processed unlawfully,
  • The personal data must be deleted to comply with a legal obligation under Union law or the law of a Member State to which Madronucci is subject,
  • The personal data was collected in connection with offering information society services to a child

In such cases, Madronucci is obliged to delete your personal data without undue delay, unless one of the exceptions specified by law applies. To exercise this right, contact the Customer Service Office.

Right to Restrict Data Processing

You have the right to request that Madronucci restrict the processing of your personal data if:

  • You contest the accuracy of the personal data – for a period allowing Madronucci to verify the accuracy of the data;
  • The processing of data by Madronucci is unlawful (when you prefer Madronucci to restrict the use of your data instead of deleting it)
  • Madronucci no longer needs the personal data for processing purposes, but you need it to establish, exercise, or defend legal claims,
  • You object to the processing of your data for purposes arising from legitimate interests pursued by the controller or a third party – until it is determined whether the legitimate grounds of the controller override your objection

If processing is restricted, your personal data may be processed (except for storage) only with your consent or if a reason specified by law applies.

Right to Object to Processing Based on Madronucci's Legitimate Interest

You have the right to object – for reasons related to your particular situation – to the processing of your personal data by Madronucci due to its legitimate interest (including profiling). In such cases, Madronucci will stop processing your personal data unless there are compelling and legally justified grounds for processing that override your objection or it is necessary to establish or defend legal claims. To exercise this right, contact the Customer Service Office.

Right to Object to Processing for Direct Marketing, Including Profiling

  • You also have the right to object to the processing of your data by Madronucci for direct marketing purposes, including profiling and/or customer satisfaction surveys. To exercise this right, contact the Customer Service Office,
  • Profiling does not increase the number of displayed ads/sent commercial information, but only makes them better tailored to your needs. Thanks to profiling, based on collected data from devices such as product pages opened in our online store, saved cookies, and personal data provided to us, the ads displayed and commercial information sent to you (if you have given separate consent to receive them) will be more useful. We do not make any automated decisions about you (decisions without human involvement).

Right to Withdraw Consent to Data Processing

Regarding data processed by us based on your consent, you have the right to withdraw your consent to the processing of personal data at any time (withdrawal of consent does not apply retroactively). To exercise this right, please contact our Customer Service Office.

Right to Data Portability

Regarding data processed by us in an automated manner based on your consent or in performance of a contract concluded with you, you have the right to data portability, meaning you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format. This copy may be sent to you or to another entity.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that Madronucci is processing your personal data improperly, you may contact us. You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office – if our processing of your personal data violates data protection regulations.