Personal data protection is one of the key processes carried out by VEVEZIA Sp. z o.o., ul. Szczęsna 26, 02-454 Warszawa, NIP: 918-218-47-36 (hereinafter referred to as VEVEZIA). We will keep you informed about important changes in the law, including the rights of data subjects. In 2016, the European Parliament published Regulation 2016/679 on the protection of personal data, called the GDPR. It has been applied in the European Union since 25 May 2018.
What is GDPR?
GDPR is an abbreviation of the Personal Data Protection Regulation. GDPR introduces, among others, new rights of natural persons. One of the duties of controllers( including our company) who process personal data is to inform people about the processing of their personal data. Below we have provided information on how we process your personal data in connection with the services that are available on our website www.karko.uk
Who is the Administrator of my personal data?
The administrator of your personal data is VEVEZIA Sp. z o.o., ul. Szczęsna 26, 02-454 Warszawa, NIP: /Tax Identification Number/: 918-218-47-36
In matters related to personal data protection, please can contact VEVEZIA via the contact form available on our website (https://www.karko.uk/contact-us). You can also contact us via e-mail: office@2karko.com
The manner, purpose, legal basis and time of processing your personal data
Provision of Electronic Services via the Online Store
The purpose of personal data processing is to enable you to use the functionality of our online store. At this stage, we will need your basic personal data, age (to determine whether you have the legal capacity, i.e. to place orders and make payments) and e-mail address.
Over time and in connection with your use of the functionality of our online store, we will collect information about you, which will relate to the information you provide voluntarily, such as:
- The delivery addresses for orders placed;
- The history and details of orders being processed;
- Your bills (invoices, receipts and other bills);
- Discount / promotional vouchers that you will receive in connection with the processed orders;
- Your wish lists (for our products).
We are committed to providing you with the services and functionality of our online store, when you sign up for an account. Thus, the so-called contract for the provision of services by electronic means is concluded on the basis of the provisions of the Act on the provision of services by electronic means. The legal basis for processing your personal data shall be Article 6 section 1 letter b) of the GDPR (conclusion of the contract).
By clicking the "Register" button after providing the required personal data on the new user's registration page, you conclude an agreement with us for the provision of electronic services under the terms and conditions set out in the Terms and Conditions.
We will retain your data until your user account is terminated. It is possible for the account to be deleted by us in the event of a violation of the Terms and Conditions of our online store. However, in such an event, we will inform you in advance of such actions.
Providing your personal data at this stage is voluntary, but failure to provide them will prevent the use of the functionality of our online store available to registered users.
Concluding contracts for the purchase and sale of goods offered by our company
The purpose of processing personal data is to enable you to place and process orders through our online store. By placing and confirming an order, a distance purchase and sale agreement is concluded. Thus the legal basis for processing your personal data shall be Article 6 section 1 letter b) of the GDPR (conclusion of the contract).
At this stage, we will need your basic personal data, optional data of your company, address data and telephone number (for the purpose of delivery of ordered goods by courier companies cooperating with us). In addition, we will process payment information about you, such as your bank account number or payment card number or other payment service you choose as your payment method (e.g. Blik).
We will store your data for a period of 5 years from the end of the tax year in accordance with the provisions of the Tax Ordinance Act and the Value Added Tax Act.
Providing your personal data at this stage is voluntary, but failure to provide them will prevent the conclusion of a purchase and sale agreement, and thus the fulfilment of the order.
Consumer Qualification, Warranty and Guarantee
The purpose of personal data processing is to enable you to exercise your consumer rights, including the warranty and guarantee that we grant for the products offered. By submitting a complaint or requesting a refund, you are exercising your consumer rights under the concluded contract. Thus the legal basis for processing your personal data shall be Article 6 section 1 letter b) of the GDPR (handling of rights resulting from the concluded agreement).
At this stage, we will need your basic personal data, optional data of your company, address data and telephone number (for the purpose of delivery of new goods – if the complaint is accepted, by courier companies cooperating with us). At this point, we will need information from you about what constitutes the basis for submitting a complaint or returning the purchased goods.
In addition, we will process payment information about you, such as your bank account number or payment card number or other payment service you choose as a payment method (e.g. blik) for the purpose of returning paid funds, if you are not interested in the new goods and decide for the paid funds to be refunded.
We will store your data for a period of 5 years from the end of the tax year in accordance with the provisions of the Tax Ordinance Act and the Value Added Tax Act.
Providing your personal data at this stage is voluntary, but failure to provide them may prevent or significantly hinder the exercise of your consumer rights. As a result, it will be significantly more difficult to handle your requests or leave them unrecognized.
Contact form
The purpose of processing personal data is to enable you to contact our Customer Service or IT Department in any matter that concerns our business.
If you send us a message, we will process your personal data in the form of your e-mail address in order to respond to the sent message. Thus the legal basis for processing your personal data shall be Article 6 section 1 letter f) of the GDPR (legitimate interest of the administrator in the form of responding to directed messages of Clients or other persons).
It is possible that at this stage we will need other unpredictable categories of data that are necessary to investigate the matter you refer to us.
We will store your data for the entire duration of your user account (if you register it) or for a period of 3 years (if you are not a registered user of our online store).
Providing your personal data at this stage is voluntary, but failure to provide them may prevent handling the message you have sent. This may result in your message being left unrecognized.
Using the loyalty program
The purpose of personal data processing is to enable you to benefit from the purchase preferences (including promotions and discounts) resulting from your participation in the loyalty program.
By submitting a completed application for enrolment in the loyalty program, you consent to the processing of your personal data contained in the application. Thus the legal basis for processing your personal data shall be Article 6 section 1 letter a) of the GDPR (consent expressed through an explicit affirmative action, i.e. by applying to the loyalty program)
The personal data we will process about you are basic personal data and contact details (such as e-mail or phone number).
We will keep your data for the duration of your participation in the loyalty program.
We will retain your data until your participation in the program is withdrawn. It is possible for your data to be deleted by us in advance in the event of a breach of the Program rules. However, in such an event, we will inform you in advance of such actions.
Providing your personal data at this stage is voluntary, but failure to do so may prevent you from participating in the Program. As a result, it will not be possible to benefit from the preferences available under the scheme.
Newsletter
The purpose of processing personal data is to enable you to use the functionality of our online store called "newsletter", which consists in sending you the so-called commercial information to the indicated e-mail address. At this stage, we will only need your email address.
By clicking the "Save" button after providing the required personal data on our website www.karko.uk, you consent to the processing of your personal data and to receiving commercial information. Thus the legal basis for processing your personal data shall be Article 6 section 1 letter a) of the GDPR (consent expressed through explicit confirmatory action, i.e. by pressing the "Save" button).
The provisions of the Act of 18 July 2002 on the provision of electronic services in force as of 04.05.2019 require that the consent to receive commercial information (i.e. within the newsletter) meets the requirements set out in the Regulation of the European Parliament and of the Council 2016/679 (GDPR).
This means that by providing your e-mail address and pressing the "SAVE" button, you consent to the processing of your personal data, and therefore we will be able to send you commercial information as part of the newsletter service. Your consent does not require a written statement (traditional consent), but takes the form of an explicit affirmative action.
Please note that you always have the right to withdraw the consent granted for data processing (without affecting the lawfulness of the processing, which was granted on the basis of consent before its withdrawal).
Your data will be kept until you unsubscribe from the newsletter service. Unsubscribing from the service – thus withdrawing the consent – can be made by clicking the link "Unsubscribe from the newsletter", which can be found on our website or using the contact form.
Providing your personal data at this stage is voluntary, but failure to provide them may prevent the newsletter service from being implemented. As a result, it will not be possible to receive information under the newsletter service.
Can I access my data?
Yes. You can be granted full access to your personal data. You can also manage your personal data processing consents, including marketing consents. Gaining access to your personal data is possible by contacting us via e-mail at: office@2karko.com
How can I contact the person responsible for personal data protection in VEVEZIA?
You can contact the person responsible for personal data protection in VEVEZIA at the following e-mail address: office@2karko.com
Who is the recipient of my data?
Your personal data that we process for the purposes described above may be transferred to recipients of data performing services for VEVEZIA , entities entrusted with the processing of personal data by VEVEZIA on the basis of contracts and entities authorized to obtain personal data on the basis of legal provisions. In particular, they are:
- pl sp. z o.o. – Ceneo.pl sp. z o.o. with its registered office in Poznań, at ul. Grunwaldzka 182, 60-166 Poznań, KRS /National Court Register/: 0000634928, NIP /Tax Identification Number/ 525-26-74-781, REGON /National Business Registry Number/ 365338986 – in the scope of collecting Surveys (or informing about the website on which they are made available) by e-mail, in order to obtain the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Ceneo Website;
- Google Ireland Limited ("Google") with respect to cookies that are provided to Google in connection with the use of its services (Google Adwords, Google Ads, Google Analytics) by VEVEZIA;
- Courier companies cooperating with us in the scope of delivery of products ordered by you and making possible returns.
- Law firms cooperating with us in the scope of recognizing complaints or returns that you can submit to us.
- pl Sp. z o.o. /Limited Liability Company/ (formerly Allegro Group) - with its registered office in Poznań, at ul. Grunwaldzka 182, KRS /National Court Register/: 0000634928, NIP /Tax Identification Number/ 525-26-74-781, REGON /National Business Registry Number/ 365338986 – in the scope of collecting Surveys (or informing about the website on which they are made available) by e-mail, in order to obtain the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Allegro website,
- SHPL Spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ with its registered office in Warsaw, at ul. Towarowa 28, 00-839 Warsaw, KRS / National Court Register/: 0000918384, NIP /Tax Identification Number/: 527-29-65-079, REGON /National Business Registry Number/: 389450687 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Shopee website,
- pl spółka z ograniczoną odpowiedzialnością /Limited Liability Company/, with its registered office at ul. Kopanina 34, 60-105 Poznań, KRS /National Court register/: 0000768895, NIP /Tax Identification Number/: 7851806847, REGON /National Business Registry Number/: 382414961 - in the scope of collecting Surveys (or informing about the website on which they are made available) by e-mail, in order to obtain the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Erli website,
- Empik spółka akcyjna /joint stock company/, with its registered office at ul. Marszałkowska 104/122, 00-017 Warsaw, KRS /National court register/: 0000636785, NIP /Tax Identification Number/: 5260207427, REGON /National Business Registry Number/: 011518197 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Erli website,
- SalesManago Benhauer spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ located at Grzegórzecka 21, 31-532 Kraków - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store.
- LINK Mobility Poland spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ located at Toszecka 101, 44-100 Gliwice, NIP /Tax Identification Number/: 969-156-67-36, REGON /National Business Registry Number/: 241520885 - in the scope of collecting Surveys (or informing about the website on which they are made available) to obtain the Buyer’s opinion on the transaction made by the Buyer in our online store.
- Wirtualna Polska Holding Spółka Akcyjna /joint stock company/ located at ul. Żwirki i Wigury 16, 02-092 Warszawa, NIP /Tax Identification Number/: 5213111513, REGON /National Business Registry Number/: 016366823, KRS /National Court Register/: 0000407130 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store.
- Ringier Axel Springer Polska Spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ located at ul. Domaniewska 49, 02-672 Warsaw, NIP /Tax Identification Number/: 5272677009, REGON /National Business Registry Number/: 146127300, KRS /National Court register/: 0000420780 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store.
Will my personal data be transferred to third countries and international organisations?
Yes. Your personal data may be shared with our partners who provide services that allow you to use the full functionality of our online store. These are:
- pl sp. z o.o. – Ceneo.pl sp. z o.o. /Limited Liability Company/ with its registered office in Poznań, at ul. Grunwaldzka 182, 60-166 Poznań, KRS /National Court Register/: 0000634928, NIP /Tax Identification Number/ 525-26-74-781, REGON /National Business Registry Number/ 365338986 – in the scope of collecting Surveys (or informing about the website on which they are made available) by e-mail, in order to obtain from the Buyer an opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Ceneo Website;
- Google Ireland Limited ("Google") with respect to cookies that are provided to Google in connection with the use of its services (Google Adwords, Google Ads, Google Analytics) by VEVEZIA;
- Courier companies cooperating with us in the scope of delivery of products ordered by you and making possible returns.
- Law firms cooperating with us in the scope of recognizing complaints or returns that you can submit to us.
- pl Sp. z o.o. /Limited Liability Company/ (formerly Allegro Group) - with its registered office in Poznań, at ul. Grunwaldzka 182, KRS /National Court Register/: 0000634928, NIP /Tax Identification Number/ 525-26-74-781, REGON /National Business Registry Number/ 365338986 – in the scope of collecting Surveys (or informing about the website on which they are made available) by e-mail, in order to obtain the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Allegro website,
- SHPL Spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ with its registered office in Warsaw, at ul. Towarowa 28, 00-839 Warsaw, KRS / National Court Register/: 0000918384, NIP /Tax Identification Number/: 527-29-65-079, REGON /National Business Registry Number/: 389450687 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Shopee website,
- pl spółka z ograniczoną odpowiedzialnością /Limited Liability Company/, with its registered office at ul. Kopanina 34, 60-105 Poznań, KRS /National Court register/: 0000768895, NIP /Tax Identification Number/: 7851806847, REGON /National Business Registry Number/: 382414961 - in the scope of collecting Surveys (or informing about the website on which they are made available) by e-mail, in order to obtain the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Erli website,
- Empik spółka akcyjna /joint stock company/, with its registered office at ul. Marszałkowska 104/122, 00-017 Warsaw, KRS /National court register/: 0000636785, NIP /Tax Identification Number/: 5260207427, REGON /National Business Registry Number/: 011518197 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store. Data from the survey completed by the Buyer are posted on the Erli website,
- SalesManago Benhauer spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ located at Grzegórzecka 21, 31-532 Kraków - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store.
- LINK Mobility Poland spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ located at Toszecka 101, 44-100 Gliwice, NIP /Tax Identification Number/: 969-156-67-36, REGON /National Business Registry Number/: 241520885 - in the scope of collecting Surveys (or informing about the website on which they are made available) to obtain the Buyer’s opinion on the transaction made by the Buyer in our online store.
- Wirtualna Polska Holding Spółka Akcyjna /joint stock company/ located at ul. Żwirki i Wigury 16, 02-092 Warszawa, NIP /Tax Identification Number/: 5213111513, REGON /National Business Registry Number/: 016366823, KRS /National Court Register/: 0000407130 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store.
- Ringier Axel Springer Polska Spółka z ograniczoną odpowiedzialnością /Limited Liability Company/ located at ul. Domaniewska 49, 02-672 Warsaw, NIP /Tax Identification Number/: 5272677009, REGON /National Business Registry Number/: 146127300, KRS /National Court register/: 0000420780 - in the scope of collecting Surveys via e-mail (or informing about the website on which they are made available), aimed at obtaining the Buyer’s opinion on the transaction made by the Buyer in our online store.
In the above mentioned instances, the mechanism legalizing the processing and transfer of personal data outside the European Economic Area is the so-called Standard Contractual Clauses in the Administrator – Processor variant adopted by the Decision of the European Commission as of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council (notified under document C(2010) 593).
What rights do I have?
In connection with the processing of personal data by VEVEZIA, you are entitled on the terms set out in the GDPR to:
- access your personal data (Article 15 of the GDPR)
- rectification of data (Article 16. of the GDPR).
- delete data (Article 17 of the GDPR),
- limit the processing of data (Article 18 of the GDPR)
- transfer data (Article 20 of the GDPR)
- object to the processing of your data (Article 21 of the GDPR),
- the right not to be subject to decisions taken in the conditions of automated data processing, including profiling (Article 22 of the GDPR).
Who can I complain to?
In instances where you consider that the processing of your data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory body of the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw (kancelaria@uodo.gov.pl)
How did VEVEZIA get my personal details?
The source of your personal data are application forms and agreements concluded with VEVEZIA, while in the instance of obtaining personal data in a different way than from the data subjects, third parties are the source of data. In such an event, VEVEZIA is obliged to inform you about the source of such data.
Will VEVEZIA make decisions concerning me in an automated manner?
Currently, we allow the possibility that when you use our website, decisions are made in an automated manner. Automated decision making is a situation in which, based on your data, the automatic mechanism makes decisions that concern you – without the participation of the human factor. As far as our website is concerned, we use your cookies in the process of making decisions in an automated manner. You can find more information about what cookies are and how to disable them in our Privacy Policy.
Our website www.karko.uk uses mechanisms based on artificial intelligence and machine learning. These mechanisms work on the basis of your cookies, which we collect in connection with your presence and activity on our website.
As a result of automated decision-making by the mechanisms described above, the following actions are taken by our website based on the analysis of the content you are viewing:
- Displaying messages and content (pop-up, exit pop-up) in the browser window. Example:
When you complete a shopping cart but do not complete an order, we will remind you through the messages displayed on the open website that the order has not been completed.
- Display pop-up notifications in the OS layer. Example:
Even if you do not browse our website, we accept the possibility that, based on your consent, we will show you notifications about new products on our website.
- Sending dynamic e-mails during or after a visit to our website - only if you have provided us with your e-mail address and agreed to its use for marketing purposes. Example:
Based on your activity on the website (your interests, likes, purchases), after analysing cookies, we have gained the knowledge that you are interested in a group or a specific product, but you have not decided to buy it. The tools on our website will be able to take action and send you emails encouraging you to make a purchase or send you more information about the product you are interested in.
Running a live chat with product recommendations. Example:
Based on your activity on the website (your interests, likes, purchases), after analysing cookies, we will send you messages (e.g. product recommendations) via the chat window available on our website.
- Displaying dynamic content or advertisements on our website or on other websites (so-called remarketing, i.e. displaying our advertisements on other websites) through the services of our Partners (e.g. Google). Example:
If you browse other websites that use Google services (our Partners), you will be presented with targeted content in places dedicated to advertising. This will be content relating to our products presented on the basis of your cookies.
If you do not want to be subject to decisions made in an automated manner, you must block the possibility of saving our cookies in your browser. You can find more information about what cookies are and how to disable them in our Privacy Policy.
Will my personal data be subject to profiling?
First, we want to explain what profiling is. Pursuant to the definition published in the GDPR, ‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements".
Due to the mechanisms of artificial intelligence and machine learning functioning on our website, your personal data will be profiled in connection with your activity on our website.
The result of profiling (including automated decision-making, about which we inform above) will be:
- determining your interest in the products offered by VEVEZIA;
- market research and your behaviours and preferences;
- determining the directions and actions necessary to improve the quality of our services (online store) and products.
The only consequence for you will be displaying or sending notifications, messages, text messages, emails or other information / marketing activities through an automatic mechanism. If you opt out of profiling (by blocking the possibility of saving our cookies on your device), you will not suffer any negative consequences. Ads and other marketing communications will continue to be published, but will be less relevant to you.
You can find more information about what cookies are and how to disable them in our Privacy Policy.
Rules for processing requests and/or applications concerning the handling of customer rights in the field of personal data
Our Client (a natural person conducting business activity, a civil partnership, a partnership, a general partnership) is entitled to submit a request and/or application in the scope of servicing the rights under the GDPR, and VEVEZIA is obliged to consider it in accordance with the following rules:
The Customer may submit a request and/or application to VEVEZIA at any time.
- VEVEZIA shall consider the request and/or application submitted by the Customer or a person acting on his behalf:
- within one month from the date of receipt of the request and/or application,
- in the event that the request and/or application or the number of requests and/or applications of the Customer is complicated, the deadline for replying may be extended by another two months; within one month of receiving the request and/or application, VEVEZIA shall inform the Customer by e-mail about the extension of the deadline, stating the reasons for the delay,
- in the event of failure to take action in connection with the Customer's request and/or application, VEVEZIA shall immediately – at the latest within one month of receipt of the request and/or application, inform the Customer by e-mail about the reasons for not taking action and the possibility of lodging a complaint with the supervisory body and using legal remedies before a court.
- The customer may submit a request and/or application for the exercise of their rights and freedoms. The Customer's request and/or application should include address details and the type and details of the request.
- The Customer may submit a request and/or application via e-mail to office@2karko.com
- The period for processing the request and/or application starts from the date of receipt of the Customer's request and/or application by VEVEZIA.
- The Customer is entitled to submit a complaint in the event of failure to meet the deadline for the response by VEVEZIA .
- VEVEZIA provides the Customer with a response to the request via e-mail.
- VEVEZIA does not charge any fees and commissions for accepting and processing the first request and/or application. The provisions of the GDPR shall apply to subsequent requests and/or applications.
- The competent supervisory authority for VEVEZIA in the field of personal data is the President of the Office for Personal Data Protection.
If you have any questions regarding your request and/or application, please contact VEVEZIA at the following
e-mail address: office@2karko.com
Legal basis: the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Journal of Laws UE L 119 of 4 May 2016)