Privacy Policy
GENERAL PROVISIONS
1. The controller of personal data collected via the online store www.ivamats.com is EVAMATS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, entered in the Register of Entrepreneurs by the District Court Gdańsk-Północ in Gdańsk, 8th Commercial Division of the National Court Register under KRS number: 0000960954, place of business and address for service: ul. Strzelca 42, 80-299 Gdańsk, Poland, NIP: 5862378667, REGON: 521519084, e-mail address: sklep@ivamats.com
phone number: +48 730 428 913, hereinafter referred to as the "Controller" and simultaneously the "Service Provider".
2. Personal data collected by the Controller via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR.
3. Any words or expressions written with a capital letter in this Privacy Policy shall be understood in accordance with their definition contained in the Terms and Conditions of the online store www.ivamats.com
§2
TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION
1. PURPOSE OF PROCESSING AND LEGAL BASIS. The Controller processes the personal data of Service Users of the www.ivamats.com store in the case of:
1.1. placing an Order in the Store for the purpose of executing the Sales Agreement pursuant to Art. 6(1)(b) of the GDPR (performance of a sales contract),
1.2. using the Quotation Form for the purpose of sending a message to the Controller pursuant to Art. 6(1)(f) of the GDPR (legitimate interest of the entrepreneur),
1.3. subscribing to the Newsletter for the purpose of sending commercial information by electronic means. Personal data are processed after expressing separate consent, pursuant to Art. 6(1)(a) of the GDPR,
1.4. using the Review System for the purpose of enabling the Customer to express their opinion on the Product purchased in the Store and the Sales Agreement concluded with the Seller pursuant to Art. 6(1)(f) of the GDPR (legitimate interest of the entrepreneur),
1.5. using the Contact Form for the purpose of sending a message to the Controller pursuant to Art. 6(1)(f) of the GDPR (legitimate interest of the entrepreneur).
2. TYPE OF PERSONAL DATA PROCESSED. The Service User provides in the case of:
2.1. Order: name and surname, address, NIP, e-mail address, phone number,
2.2. Quotation Form: name and surname, e-mail address, phone number,
2.3. Newsletter: name and surname, e-mail address,
2.4. Review System: name and surname, e-mail address,
2.5. Contact Form: name and surname, e-mail address, phone number.
3. PERSONAL DATA ARCHIVING PERIOD. Personal data of Service Users are stored by the Controller:
3.1. where the basis for data processing is the performance of a contract, for as long as is necessary for the performance of the contract, and thereafter for a period corresponding to the limitation period for claims. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic payments and claims related to the conduct of business activity - three years,
3.2. where the basis for data processing is consent, for as long as the consent is not withdrawn, and after the withdrawal of consent for a period of time corresponding to the limitation period for claims that the Controller may raise and that may be raised against them. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic payments and claims related to the conduct of business activity - three years.
4. When using the Store, additional information may be collected, in particular: the IP address assigned to the Service User's computer or the external IP address of the Internet provider, domain name, browser type, access time, type of operating system.
5. After expressing separate consent pursuant to Art. 6(1)(a) of the GDPR, data may also be processed for the purpose of sending commercial information by electronic means or making telephone calls for direct marketing purposes – respectively in connection with Art. 10(2) of the Act of 18 July 2002 on the provision of services by electronic means or Art. 172(1) of the Act of 16 July 2004 – Telecommunications Law, including those directed as a result of profiling, provided that the Service User has given appropriate consent.
6. Navigation data may also be collected from Service Users, including information about links and references they choose to click on or other activities undertaken in the Store. The legal basis for this type of activity is the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR) consisting in facilitating the use of services provided by electronic means and improving the functionality of these services.
7. Providing personal data by the Service User is voluntary.
8. The Controller exercises special care to protect the interests of the data subjects and, in particular, ensures that the data collected by them are:
8.1. processed lawfully,
8.2. collected for specified, lawful purposes and not subjected to further processing incompatible with those purposes,
8.3. factually correct and adequate in relation to the purposes for which they are processed and stored in a form that allows for the identification of the persons to whom they relate, no longer than is necessary to achieve the purpose of processing.
§3
SHARING OF PERSONAL DATA
- Personal data of Service Users are transferred to service providers used by the Controller in operating the Store, and in particular to:
1.1. entities delivering Products,
1.2. payment system providers,
1.3. review system providers,
1.4. the accounting office,
1.5. the hosting provider,
1.6. the provider of software enabling business operations,
1.7. entities providing the mailing system,
1.8. the CRM system provider,
1.9. the provider of software needed to run the online store,
1.10. the IP telephony system provider. - Service providers (referred to in point 1 of this paragraph) to whom personal data are transferred - depending on contractual arrangements and circumstances - either follow the Controller's instructions regarding the purposes and methods of processing this data (processors) or independently determine the purposes and methods of their processing (controllers).
3. Personal data of Service Users are stored exclusively within the European Economic Area (EEA), subject to § 5 point 5 and § 6 of the Privacy Policy.
4. The Seller may share the Customer's phone number or e-mail address with an entity providing IT support in the scope of issuing, maintaining, and ensuring access to e-receipts, which may be processed for the purposes of:
a. verifying whether a given phone number or e-mail address has been registered in the service provider's own products, and in the case of positive verification, sharing the view of e-receipts and additional information derived from the process of their issuance with the Customer within these products
b. sending SMS and other notifications to Customers confirming the issuance of an e-receipt to the system in
§4
RIGHT TO CONTROL, ACCESS THE CONTENT OF ONE'S OWN DATA AND CORRECT IT
1. The data subject has the right to access the content of their personal data and the right to rectify, erase, restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
2. Legal bases for the Service User's request:
2.1. access to data – Art. 15 GDPR,
2.2. rectification of data – Art. 16 GDPR,
2.3. erasure of data (the so-called right to be forgotten) – Art. 17 GDPR,
2.4. restriction of processing – Art. 18 GDPR,
2.5. data portability – Art. 20 GDPR,
2.6. objection – Art. 21 GDPR,
2.7. withdrawal of consent – Art. 7(3) GDPR.
3. In order to exercise the rights referred to in point 2, you can send an appropriate e-mail to the address: sklep@ivamats.com
4. In the event of the Service User exercising a right resulting from the above rights, the Controller shall comply with the request or refuse to comply with it immediately, but no later than within one month of receiving it. However, if - due to the complex nature of the request or the number of requests – the Controller is unable to comply with the request within one month, they will comply with it within the next two months, informing the Service User in advance within one month of receiving the request - about the intended extension of the deadline and its reasons.
5. In the event of finding that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office.
COOKIES
1. The Controller's website uses "cookies".
2. The installation of "cookies" is necessary for the proper provision of services on the Store's website. "Cookies" contain information necessary for the proper functioning of the website, and they also provide the possibility of developing general statistics on website visits.
3. Two types of "cookies" are used within the website: "session" and "persistent".
3.1. "Session" cookies are temporary files that are stored in the Service User's end device until logging out (leaving the website),
3.2. "Persistent" cookies are stored in the Service User's end device for the time specified in the "cookies" parameters or until they are deleted by the Service User.
4. The Controller uses their own cookies to better understand how Service Users interact with the website content. The files collect information about how the Service User uses the website, the type of site from which the Service User was redirected, and the number of visits and the duration of the Service User's visit to the website. This information does not record specific personal data of the Service User, but is used to develop statistics on website usage.
5. The Controller also uses external cookies to collect general and anonymous static data via Google Analytics analytical tools (external cookie controller: Google LLC. based in the USA).
6. Cookies may also be used by advertising networks (in particular the Google network) to display advertisements tailored to the way the Service User uses the Store. For this purpose, they may retain information about the Service User's navigation path or time spent on a given page.
7. The Service User has the right to decide on the access of "cookies" to their computer by:
7.1. selecting the types of cookies they consent to be collected immediately after entering the Store's website and the appearance of the cookie notice,
7.2. changing settings in their browser window. Detailed information about the possibility and methods of handling "cookies" is also available in the software (web browser) settings.
§6
ADDITIONAL SERVICES RELATED TO USER ACTIVITY IN THE STORE
1. The Store uses so-called social plugins ("plugins") of social networking sites. By displaying the website www.ivamats.com, which contains such a plugin, the Service User's browser will establish a direct connection with the servers of Facebook, Meta, Tiktok, Pinterest, Microsoft Clarity, Youtube, and Instagram.
2. The content of the plugin is transmitted by the given service provider directly to the Service User's browser and integrated with the website. Thanks to this integration, service providers receive information that the Service User's browser has displayed the website www.ivamats.com, even if the Service User does not have a profile with the given service provider or is not currently logged in. Such information (along with the Service User's IP address) is sent by the browser directly to the given service provider's server (some servers are located in the USA) and stored there.
3. If the Service User logs in to one of the above social networking sites, this service provider will be able to directly assign the visit to the website www.ivamats.com to the Service User's profile on the given social networking site.
4. If the service user uses the online store www.ivamats.com, the appropriate information will also be sent directly to the server of the service provider whose plugins are on the website www.ivamats.com and stored there.
5. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and the Service User's rights in this regard and the possibility of making settings ensuring the Service User's privacy protection have been described in the service providers' privacy policies:
5.1. https://www.facebook.com/policy.php
5.2. https://policy.pinterest.com/pl/privacy-policy
5.3. https://help.twitter.com/en/rules-and-policies
5.4. https://help.instagram.com/519522125107875
5.5. https://policies.google.com/privacy
5.6. https://www.tiktok.com/legal/page/eea/privacy-policy
5.7. https://privacy.microsoft.com/privacystatement
6. The Service User can prevent the loading of plugins on the website by using appropriate browser extensions, e.g., blocking scripts using "NoScript".
7. The Controller uses remarketing tools on their website, i.e., Google Ads, Facebook, Meta, Pinterest, Instagram, TikTok, Microsoft Clarity. Their use involves the use of cookies of companies that are controllers of the mentioned services. Within the mechanism for managing cookie settings, the Service User has the possibility to decide whether the Service Provider will be able to use remarketing tools (external cookie controller: Google LLC. based in the USA) in relation to them.
§7
FINAL PROVISIONS
1. The Controller applies technical and organisational measures ensuring the protection of processed personal data appropriate to the risks and categories of data covered by protection, and in particular secures the data against disclosure to unauthorised persons, removal by an unauthorised person, processing in violation of applicable regulations, and alteration, loss, damage, or destruction.
2. The Controller provides appropriate technical measures to prevent the acquisition and modification by unauthorised persons of personal data transmitted by electronic means.
3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.
Exact colour reproduction is an art, not an exact science.
We make every effort to show the colours of our materials accurately. However, several technical and environmental factors can affect how a shade appears:
Screen settings.
Every phone, tablet and monitor displays colour differently depending on its technology, brightness, contrast and colour temperature. For example, OLED screens often show colours more vividly than LCD screens.
Lighting and surroundings.
A colour may look different under natural and artificial light, and at different light intensities. A shade can appear lighter in daylight than under indoor lighting.
Material texture.
The EVA material used for our mats has a distinctive texture and relief. This can create optical effects that make the colour look different depending on the viewing angle.
Every mat is made with close attention to detail and quality. If you are unsure which shade to choose, contact us and we will be happy to help.