§ 2. TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

3.Wszelkie wyrazy lub wyrażenia pisane w treści niniejszej Polityki Prywatności z dużej litery należy
rozumieć zgodnie z ich definicją zawartą w Regulaminie Sklepu internetowego www.littlebeepublishing.pl.

PERSONAL DATA RETENTION PERIOD. Personal data of Users are stored by the Controller:

§ 3. DISCLOSURE OF PERSONAL DATA

• The Controller's website uses cookies.
• The installation of cookies is necessary for the proper provision of services on the Shop's website. Cookies contain information necessary for the correct functioning of the website (in particular for handling the order placement process in the shopping basket), and also enable the compilation of general statistics on website visits.
• The website uses two types of cookies: "session" cookies and "persistent" cookies.
• "Session" cookies are temporary files stored on the User's end device until the User leaves the website.
• "Persistent" cookies are stored on the User's end device for the time specified in the cookie parameters, or until they are deleted by the User.
• The Controller uses its own cookies to better understand how Users interact with the website's content. These cookies collect information about how the User uses the website, the type of page from which the User was redirected, and the number and duration of the User's visits to the website. This information does not record specific personal data of the User, but is used to compile statistics on website usage.
• The Controller uses third-party cookies to collect general and anonymous statistical data via the Google Analytics analytical tool (controller of third-party cookies: Google LLC, based in the USA).
• Cookies may also be used by advertising networks, in particular the Google and Meta (Facebook) networks, for the purpose of displaying advertisements tailored to the way in which the User uses the Shop. For this purpose, they may retain information about the User's navigation path or the time spent on a given page.
• The User has the right to decide on access of cookies to their computer by making a prior selection in their browser settings or via the consent management mechanism on the website. Detailed information on the options and methods of managing cookies is available in the software (internet browser) settings.

§ 5. PLIKI „COOKIES”

§ 6. ADDITIONAL SERVICES RELATED TO USER ACTIVITY IN THE SHOP

§ 7. FINAL PROVISIONS

1. The Controller applies technical and organisational measures ensuring protection of the personal data being processed that is appropriate to the risks and categories of data covered, and in particular secures data against disclosure to unauthorised persons, removal by an unauthorised person, processing in breach of applicable regulations, and alteration, loss, damage, or destruction.
2. The Controller makes available appropriate technical measures to prevent the acquisition and modification of personal data transmitted electronically by unauthorised persons (including, in particular, an SSL certificate for the domain www.littlebeepublishing.pl).
3. Matters not regulated by this Privacy Policy shall be governed by the applicable provisions of the GDPR and other relevant provisions of Polish law.

1. The Shop uses so-called social plug-ins ("plug-ins") from social networking services. When viewing the website www.littlebeepublishing.pl, which contains such a plug-in, the User's browser will establish a direct connection with the servers of Facebook and Instagram.
2. The content of the plug-in is transmitted by the relevant service provider directly to the User's browser and integrated into the page. As a result of this integration, service providers receive information that the User's browser has displayed the page www.littlebeepublishing.pl, even if the User does not have a profile with the given service provider or is not currently logged in. This information (together with the User's IP address) is transmitted by the browser directly to the server of the relevant service provider (some servers are located in the USA) and stored there.
3. If the User is logged in to one of the above social networking services, that service provider will be able to directly associate the visit to www.littlebeepublishing.pl with the User's profile on that social networking service.
4. If the User uses a given plug-in – for example by clicking the "Like" button or the "Share" button – the relevant information will also be transmitted directly to the server of the relevant service provider and stored there.
5. The purpose and scope of data collection and its further processing and use by service providers, as well as contact options and the User's rights in this regard and the possibility of adjusting settings to ensure the User's privacy protection, are described in the privacy policies of the service providers:
1. https://www.facebook.com/policy.php
2. https://help.instagram.com/519522125107875?helpref=page_content
6. If the User does not wish social networking services to associate data collected during visits to www.littlebeepublishing.pl directly with their profile on a given service, they must log out of that service before visiting www.littlebeepublishing.pl. The User may also entirely prevent plug-ins from loading on the website by using appropriate browser extensions, such as script blocking via "NoScript".
7. The Controller uses remarketing tools on its website, namely Google Ads, which involves the use of cookies from Google LLC relating to the Google Ads service. Through the cookie settings management mechanism, the User has the ability to decide whether the Service Provider may use Google Ads (controller of third-party cookies: Google LLC, based in the USA) in relation to them. An adequate level of protection for data transferred to the USA is ensured by the Data Privacy Framework, to which our service providers (Google, Meta) have acceded.

1. The data subject has the right to access their personal data and the right to rectification, erasure, restriction of processing, data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
2. Legal bases for the User's requests:
1. Access to data – Article 15 of the GDPR.
2. Rectification of data – Article 16 of the GDPR.
3. Erasure of data (the so-called right to be forgotten) – Article 17 of the GDPR.
4. Restriction of processing – Article 18 of the GDPR.
5. Data portability – Article 20 of the GDPR.
6. Objection – Article 21 of the GDPR.
7. Withdrawal of consent – Article 7(3) of the GDPR.
3. In order to exercise the rights referred to in item 2, an appropriate e-mail may be sent to: info@littlebeepublishing.pl.
4. Where a User exercises a right arising from the above, the Controller shall fulfil the request or refuse to do so promptly, and no later than one month of receipt. However, if – owing to the complex nature of the request or the number of requests – the Controller is unable to fulfil the request within one month, it shall do so within the following two months, informing the User within one month of receipt of the request of the intended extension and the reasons for it.
5. Where it is established that the processing of personal data infringes the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych).

§ 4. RIGHT TO CONTROL, ACCESS TO AND RECTIFICATION OF PERSONAL DATA

1. Personal data of Users are transferred to service providers used by the Controller in operating the Shop, and in particular to:
1. entities responsible for delivering Products,
2. payment system providers,
3. an accounting office,
4. a hosting provider,
5. software providers enabling the conduct of business activity,
6. entities providing mailing systems,
7. software providers required for the operation of the online shop.
2. The service providers referred to in item 1 of this section, to whom personal data are transferred, depending on contractual arrangements and circumstances, either act on the instructions of the Controller as regards the purposes and means of processing such data (processors), or independently determine the purposes and means of processing (controllers).
3. Personal data of Users are stored within the European Economic Area (EEA), subject to § 5 and § 6 of the Privacy Policy, which set out in detail the rules for using the services of entities that may process data outside this area (e.g. Google, Meta).

4. During use of the Shop, additional information may be collected, in particular: the IP address assigned to the User's computer or the external IP address of the Internet service provider, domain name, browser type, access time, and operating system type.
5. Upon the provision of separate consent, pursuant to Article 6(1)(a) of the GDPR, data may also be processed for the purpose of sending commercial information electronically or making telephone calls for direct marketing purposes – in connection with Article 10(2) of the Act of 18 July 2002 on the Provision of Electronic Services or Article 172(1) of the Act of 16 July 2004 – Telecommunications Law, including communications resulting from profiling, provided the User has given the relevant consent.
6. Navigational data may also be collected from Users, including information about links and hyperlinks they choose to click, or other actions taken in the Shop. The legal basis for this type of activity is the Controller's legitimate interest (Article 6(1)(f) of the GDPR), consisting in facilitating the use of electronically provided services and improving the functionality of those services.
7. The provision of personal data by the User is voluntary.
8. The Controller takes particular care to protect the interests of the data subjects and, in particular, ensures that the data it collects are:
1. processed in accordance with the law,
2. collected for specified, lawful purposes and not subjected to further processing incompatible with those purposes,
3. factually accurate and adequate in relation to the purposes for which they are processed, and stored in a form that permits identification of the persons to whom they relate, for no longer than is necessary to achieve the purpose of processing.

1. where the legal basis for processing is the performance of a contract, for as long as necessary to perform the contract, and thereafter for a period corresponding to the limitation period for claims. Unless a specific provision states otherwise, the limitation period is six years, and three years for claims for periodic performance and claims related to the conduct of business activity.
2. where the legal basis for processing is consent, until the consent is withdrawn, and after withdrawal for a period corresponding to the limitation period for claims that may be raised by the Controller and against it. Unless a specific provision states otherwise, the limitation period is six years, and three years for claims for periodic performance and claims related to the conduct of business activity.

TYPE OF PERSONAL DATA PROCESSED. The User provides, in the case of:

1. an Order: first and last name, residential/delivery address (street, house/flat number, postcode, town/city), e-mail address, telephone number, and optionally a NIP number (where a VAT invoice is requested),
2. the Newsletter: e-mail address,
3. the Review System: first name (or username).

1. PURPOSE OF PROCESSING AND LEGAL BASIS. The Controller processes personal data of Users of the Shop at www.littlebeepublishing.pl in the following cases:
1. placing an Order in the Shop, for the purpose of performing the Sales Agreement (physical books) or the Agreement for the supply of digital content (PDF files), pursuant to Article 6(1)(b) of the GDPR (performance of a contract),
2. subscribing to the Newsletter for the purpose of sending commercial information electronically, pursuant to Article 6(1)(a) of the GDPR (separate consent),
3. use of the Review System, for the purpose of obtaining the Customer's opinion on purchased Products, pursuant to Article 6(1)(f) of the GDPR (the Controller's legitimate interest in verifying reviews and building brand trust, in accordance with the Omnibus Directive).

2. Personal data collected by the Controller via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR.

§ 1. GENERAL PROVISIONS

1.The controller of personal data collected via the Online Shop at www.littlebeepublishing.pl is LITTLE BEE PUBLISHING SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office at: Plac 3 Maja 9A, 18-507 Grabowo, entered in the register of entrepreneurs of the National Court Register maintained by the District Court competent for its registered office, under KRS number: 0001186130, NIP: 2910236479, REGON: 542319443, e-mail address: info@littlebeepublishing.pl, hereinafter referred to as the "Controller" and acting simultaneously as the "Service Provider".

littlebeepublishing.pl

Privacy Policy of the Online Shop