Privacy Policy

PRIVACY POLICY
GENERAL PROVISIONS
This Privacy Policy of the On-line shop is of informative nature, which means that it is not a source of obligations for the Customers or Clients of the On-line shop.
The administrator of personal data collected through the Internet Shop is Agnieszka Chmielewska LITTLE DREAMS" Wczasowa 4, 66-446 Karnin, hereinafter referred to as the "Administrator" and being both the Service Provider of the Internet Shop and the Seller.
The Service Recipient's and Client's personal data are processed in accordance with the Personal Data Protection Act of 29 August 1997. (Journal of Laws of 1997 No. 133, item 883 as amended) (hereinafter referred to as the "Personal Data Protection Act") and the Act on the Provision of Electronic Services of 18 July 2002. (Journal of Laws of 2002 No. 144, item 1204 as amended).
The controller shall exercise due diligence in order to protect the interests of the data subjects, and in particular shall ensure that the data collected by the controller are processed in accordance with the law; collected for designated, lawful purposes and not subjected to further processing not in accordance with those purposes; substantially correct and adequate in relation to the purposes for which they are processed and stored in a form allowing the identification of the data subjects for no longer than necessary to achieve the purpose of the processing.
All words, expressions and acronyms appearing on this website and beginning with a capital letter (e.g. Seller, Online Shop, Electronic Service) shall be understood in accordance with their definition contained in the Regulations of the Online Shop available on the Online Shop pages.
PURPOSE AND SCOPE OF DATA COLLECTION AND DATA RECIPIENT
Each time the purpose, scope and recipients of the data processed by the Administrator result from actions taken by the Service Recipient or Client in the Online Shop. For example, if, when placing an Order, the Client chooses personal collection instead of courier service, his personal data will be processed for the purpose of concluding and performing the Sales Agreement, but will no longer be made available to the carrier performing shipments on the Administrator's order.
Possible purposes of collecting personal data of the Service Recipients or Customers by the Admin:
conclusion and performance of a Sales Agreement or an agreement for the provision of an Electronic Service (e.g. Account);
direct marketing of the Admin's own products or services.
Possible recipients of personal data of the Customers of the On-line shop:
in the case of a Customer who uses the Online Store's delivery method by courier service, the Administrator shall make the collected Customer's personal data available to a selected carrier or intermediary carrying out shipments on the Administrator's order;
in the case of a Customer who uses the method of payment by credit card in the On-line shop, the Administrator shall make the collected personal data of the Customer available to a selected entity handling the above payments in the On-line shop.
The Administrator may process the following personal data of the Customers or Clients using the Online Shop: first and last name; e-mail address; contact telephone number; delivery address (street, house number, apartment number, postcode, town, country), address of residence/business/seat (if different from the delivery address). In the case of Service Recipients or Clients who are not consumers, the Administrator may additionally process the name of the company and the tax identification number (NIP) of the Service Recipient or Client.
Providing personal data referred to in the above point may be necessary for the conclusion and performance of the Sales Agreement or the agreement for the provision of an Electronic Service in the On-line shop. Each time the scope of data required to conclude an agreement is indicated in advance on the Online Shop's website and in the Online Shop Regulations.
COOKIES AND OPERATING DATA
Cookies are small text information in the form of text files, sent by the server and saved on the side of the person visiting the website of the Internet Shop (e.g. on the hard drive of a computer, laptop or on the memory card of a smartphone - depending on which device the person visiting our Internet Shop uses). Detailed information about Cookies, as well as their history can be found here: http://pl.wikipedia.org/wiki/Ciasteczko.
The Administrator may process the data contained in the Cookies files when visitors use the website of the Internet Shop for the following purposes:
identifying the Customers as logged in to the Online Shop and showing that they are logged in;
remembering the Products added to the basket in order to place an Order

remembering data from completed Order Forms, surveys or login data to the Online Shop;
adjusting the content of the On-line shop's website to the Customer's individual preferences (e.g. concerning colours, font size, page layout) and optimising the use of the On-line shop's pages;
keeping anonymous statistics showing the use of the On-line shop's website.
By default, most Internet browsers available on the market accept saving cookies by default. Everyone has the possibility to determine the conditions of use of the cookies using the settings of their own web browser. This means that it is possible, for example, to partially limit (e.g. temporarily) or completely disable the possibility of saving cookies - in the latter case, however, it may affect some functionalities of the Online Shop (for example, it may not be possible to pass the Order path through the Order Form due to not remembering the Products in the basket during the subsequent steps of placing an Order).
The settings of your Internet browser regarding cookies are important from the point of view of your consent to the use of cookies by our Internet Shop - according to the regulations, such consent may also be given by the settings of your Internet browser. In the absence of such consent, it is necessary to change the settings of your Internet browser in the scope of cookies accordingly.
Detailed information on changing the settings for cookies and their independent deletion in the most popular web browsers is available in the help section of your web browser and on the following pages (just click on a given link):
in the Chrome browser
in a Firefox browser
in an Internet Explorer
in the Opera browser
in the Safari browser
The administrator also processes anonymised operating data related to the use of the On-line shop (so-called logs - IP address, domain) to generate statistics helpful in administering the On-line shop. These data are of an aggregate and anonymous nature, i.e. they do not contain features identifying the persons visiting the website of the On-line shop. Logs are not disclosed to third parties.
BASIS OF DATA PROCESSING
The provision of personal data by the Service Recipient or the Client is voluntary, although failure to provide the personal data necessary to conclude and perform a Sales Agreement or an agreement for the provision of an Electronic Service shall result in the impossibility of concluding such an agreement.
The basis for processing the Customer's or Client's personal data is the need to perform the agreement to which he or she is a party or to take action at his or her request before concluding it. If the data is processed for the purpose of direct marketing of the Administrator's own products or services, such processing shall be based on (1) the prior consent of the Client or Service Recipient or (2) the fulfilment of legally justified purposes pursued by the Administrator (pursuant to Article 23(4) of the Personal Data Protection Act, direct marketing of the Administrator's own products or services shall be considered a legally justified purpose in particular).
THE RIGHT TO CONTROL, ACCESS AND CORRECT THEIR CONTENT
The Client or the Client has the right to access and correct their personal data.
Each person shall have the right to control the processing of the data concerning them contained in the Administrator's data filing system, in particular the right to: request the completion, update, rectification of personal data, temporary or permanent suspension of their processing or their deletion if they are incomplete, outdated, untrue or have been collected in violation of the Act or are no longer necessary for the purpose for which they were collected.
In the event that the Service Recipient or the Client grants consent to the processing of data for direct marketing of the Administrator's own products or services, the consent may be revoked at any time.
If the Controller intends to process or processes the Client's or the Client's data for the purpose of direct marketing of the Controller's own products or services, the data subject shall also be entitled to (1) submit a written reasoned request to cease the processing of his/her data due to his/her particular situation or to (2) object to the processing of his/her data.
In order to exercise the rights referred to above, the Administrator may be contacted by sending an appropriate message in writing or by e-mail to the address of the Administrator indicated at the beginning of this privacy policy.

GOOGLE ANALYTICS, OPTIMIZELY AND HOTJAR WEB ANALYTICS
The Administrator uses Google Analytics services provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), HotJar services provided by Hotjar Ltd (Malta) and Optimizely services provided by Optimizely Inc. (631 Howard Street, Suite 100, San Francisco, CA 94105). These services help the Administrator to analyse the use of the Online Shop.
Google Analytics, HotJar and Optimizely use Cookies to analyze your use of the Webshop. Cookies are small text information in the form of text files, sent by a server and saved on the website of the person using the Online Shop (e.g. on the hard drive of a computer, laptop or smartphone memory card - depending on which device the person using the Online Shop is using).
Information obtained by means of Cookies is stored on servers used by Google Inc., HotJar Ltd and Optimizely Inc., including in the United States. If IP anonymisation is activated when using the Online Shop, the IP address will be shortened in Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to the United States and shortened there.
On behalf of the Administrator of Google Inc., HotJar Ltd I Optimizely Inc. will use this information to evaluate your use of the Online Shop, to compile reports on website traffic and to provide other services related to the use of the Online Shop.
The collected data is processed within the framework of the above services in an anonymised manner (these are the so-called operational data which make it impossible to identify the person). These data are of an aggregate and anonymous nature, i.e. they do not contain features that identify the persons using the Online Shop.
By default, most web browsers and devices available on the market accept saving Cookies files. Everyone has the possibility to determine the conditions of use of cookies by means of the settings of their own web browser or their own device. This means that you can, for example, partially limit (e.g. temporarily) or completely disable the possibility of saving cookies - in the latter case, however, this may affect some features of the Webshop.
The settings of your web browser or device regarding cookies are important from the point of view of your consent to the use of cookies by the Webshop - according to the regulations, such consent may also be given by the settings of your web browser or device. In the absence of such consent, the settings of the Internet browser or device in the scope of cookies should be changed accordingly.
HotJar may record mouse clicks, mouse movements, scrolling activity and information entered that is not personal data.
It is also possible to generally prevent the transfer of data from the User's device to Google Analytics, HotJar Ltd and Optimizely using Cookies (including IP address transfer) by downloading the browser plug-in provided by Google Inc., HotJar Ltd and Optimizely Inc. and installing it: https://tools.google.com/dlpage/gaoptout?hl=pl , https://www.hotjar.com/contact and http://www.optimizely.com/opt_out.
Detailed information on the terms of the above services, including the data collection and processing rules, is available here: www.google.com/intl/pl/policies/privacy/partners/.
FINAL PROVISIONS
The Internet shop may contain links to other websites. The Administrator encourages you to read the privacy policy set out there when you go to other sites. This privacy policy applies only to this Webshop.
The Administrator shall apply technical and organisational measures to ensure the protection of the processed personal data appropriate to the risks and categories of data subject to protection, and in particular shall protect the data from being made available to unauthorised persons, from being taken away by an unauthorised person, from being processed in breach of the applicable regulations and from being altered, lost, damaged or destroyed.
The Administrator shall make the following technical measures available to prevent the acquisition and modification by unauthorized persons of personal data sent electronically:
Protection of a data set against unauthorised access.
Access to the Account only after providing an individual login and password.
SSL certificate.