Privacy policy

Dear User!

This Privacy Policy applies to the personal data of the Users of the Website (hereinafter “Users”) operating at https://devaharmony.com/en/ (hereinafter “Website“). Below, we provide you with the most important information about the principles of our processing of personal data and cookies, which are used by our Online Shop (hereinafter the “Shop“). This information has been prepared taking into account the General Data Protection Regulation

PERSONAL DATA CONTROLLER

DH Deva 9 Ltd. Sp. z o. o. with registered office in Rzeszów, ul. Lubelska 29, 35-233 Rzeszów, KRS (National Court Registry) number: 0000862537, NIP number (Taxpayer Identification Number): PL 8133845054, Regon (National Business Registry Number): 387158706

PERSONAL DATA AND PRIVACY

If you are about to use our services, you will be asked to provide your personal data. Your data is processed by us for the purposes indicated below, related to the operation of the Shop and the provision of the services offered therein (hereinafter “Services“).

Depending on what you choose or consent to, this may be:

  1. Provision of the services offered on the Shop – a detailed information clause is attached as Appendix 1 to this Policy.
  2. Completion of your orders – the detailed information clause is appendix number 2 to this Policy.
  3. Direct marketing, other than newsletters, consisting in particular of the display of content tailored to you in the Shop – details of the processing of personal data are integral provisions of this Policy.
  4. Customer satisfaction surveys in the form of customer feedback, comments and ratings on your transactions – details of the processing of personal data are integral to this Policy.
  5. Sending newsletters or commercial information by telephone – details of the processing of personal data are integral provisions of this Policy.
  6. Communicating with the Seller’s partner who organises Indian medicine training courses – the details of the processing of personal data are set out in Appendix 3 to this Policy.
  7. Conducting correspondence – for matters reported via the contact form. Contact details are used for correspondence, responding to enquiries, preparing offers and direct marketing – the detailed information clause is appendix number 4 to this Policy.
  8. Banner advertising. Data obtained during a user’s visit is also used to display so-called banner advertising. Banner advertising is graphic content that redirects to third-party Websites. This advertising mainly uses cookies or pixels. Our aim is to develop an advertising offer that is attractive and useful to users, so within the scope of banner advertising, the user may mainly see products viewed on our Website recently or products similar to those viewed previously (so-called retargeting). Only pseudonymised data is used within the scope of banner advertising, direct information about the user (i.e. name or email address, for example) is not stored in cookies.
  9. Retargeting. Our Website makes use of retargeting technology. The use of this technology allows us to offer the user a more attractive online offer. It enables us to present users interested in our products with relevant advertising on the Websites of our partners. The display of a personalised advertisement is more attractive to the user than an advertisement without an individual link to his or her interests. The display of advertising material on our partners’ Websites is based on cookie technology and the analysis of previous user behaviour. This form of advertising is carried out completelye anonymously. When using our Website, cookies are used to collect, save and use data on user behaviour. Furthermore, the user data contained in the cookies is stored after the end of the browser session and is used during the next visit to the Website.

Without your consent, the purpose of data processing may be:

  1. To ensure that the Website functions correctly and is adapted to the needs of visitors. For this purpose, server logs collect queries directed to the server (including the user’s IP address, date and time of the server, information about the Internet browser and operating system. The server logs constitute supporting material for the administration of the Website and for the compilation of statistics and evaluation of the Website’s usability and its optimisation. The use of the Website involves sending requests to the server on which the Website is stored. Each of the queries sent to the server will be recorded in the server logs. The logs include, but are not limited to, the IP address of the user, the date and time of the server, information about the web browser and the operating system used by the user. The logs are saved and stored on the server. The data stored in the server logs are not associated with individuals using the Website and are not used by our company to identify visitors to the Website. The server logs constitute only material supporting the administration of the Website, and their content is disclosed only to persons authorised to administer the server. The data obtained are also used by our company to create statistics, which are used to assess the Website’s usefulness and its optimisation.

Legal basis for data processing:

  1. Sales contract (article 6(1)(b) GDPR)
  2. Our legal obligation, in particular in relation to accounting in case of orders involving an obligation to pay (Article 6(1)(c) GDPR)
  3. Your consent (Article 6(1)(a) GDPR)
  4. Our legitimate interest to process your data in order to establish, assert or defend possible claims (Article 6(1)(f) GDPR)
  5. Our legitimate interest in profiling for marketing purposes (Art. 6(1)(f) GDPR)
  6. Our legitimate interest to process data for direct marketing purposes [Article 6(1)(f) GDPR in conjunction with Recital (47) GDPR].

Data provision::

The provision of data is entirely voluntary, but in most cases it is necessary for the conclusion of a contract or the provision of services related to the Shop.

Consequence of not providing data:

Depending on the purpose for which the data is provided:

  1. the inability to use the services of the Shop,
  2. the inability to make purchases from the Shop,
  3. the inability to receive information about promotions or special offers offered by the Shop.

The possibility of withdrawal of consent:

You can withdraw your consent at any time. For this purpose, please send an e-mail to sklep@devaharmony.com or call +48 654 987 321.

Data processing remains lawful until you withdraw your consent.

PROFILING

We may automatically personalise certain content within the Shop, i.e. carry out profiling, using your personal data. We do not carry out profiling on our Shop:

  1. having legal effects on you,
  2. affecting you in a similarly significant way.

PROCESSING PERIOD

We will only process your data for as long as we have a legal basis to do so, which is until:

  1. we are no longer under a legal obligation to process your data, or we cease to be able to
  2. assert any claims related to the contract concluded by the Website by either of the parties or
  3. you withdraw your consent to the processing of your data, if it was the basis for the processing of your personal data.

– whichever is applicable in the case and which occurs at the latest.

DATA SECURITY

When processing your personal data, we apply organisational and technical measures in accordance with the relevant legislation, including the use of encryption of the connection using an SSL certificate.

YOUR ENTITLEMENTS

In addition, you have the right to request:

  1. access to your personal data
  2. rectification
  3. erasure or
  4. restriction of processing

And also the right to:

  1. to object to the processing
  2. request data portability to another administrator

Contact us if you wish to benefit by rights. If you consider that your data is being processed unlawfully, you can submit a complaint to the supervisory authority.

COOKIES

Cookie policy

This policy applies to “cookies” and applies to the Website operated by DH Deva 9 Ltd. Limited Partnership (hereinafter: the Website).

1 What are “cookies”?

“Cookies” are understood to be computer data, i.e. in particular files in text format, stored on the users’ terminal equipment (computer, phone, tablet, etc.), transmitted by the Website. These cookies allow the Website to recognise the user’s device and display the Website accordingly, adapted to the user’s individual preferences, enable the Website to be displayed in the user’s language configured by these cookies, and make use of other Website settings selected by the user. “Cookies” as a general rule contain the name of the Website from which they originate, the time they are stored on the terminal device and a unique number.

2 Whether “cookies” contain personal data

As a general rule, “cookies” do not constitute personal data. However, certain information stored in cookies (e.g. as to your preferences), especially when combined with other information about the Website user, may be regarded as personal data. Personal data collected using cookies is only processed for the purpose of performing certain functions for you, as described below in sections 3 and 4. Such data is encrypted in such a way that it cannot be accessed by unauthorised persons.

3 What do we use cookies for?

Cookies are used to adapt the content of the Website to the user’s preferences and device and to optimise the use of the Website. These cookies make it possible to save your choices regarding:

  1. opting out of profiled advertisements,
  2. language,
  3. browser,
  4. settings of selected Website elements,

Cookies are also used to ease logging into a user’s account and to enable switching between sub-pages on the Website without having to log in again on each sub-page.

At the same time, cookies act as an additional layer of security and are used to secure Website pages, for example by preventing unauthorised access.

They are also used to create anonymous, consolidated statistics which help to understand how the user uses the Website so that its structure and content can be improved.

At the same time, there is an exceptional possibility of incidental, personal identification of users whose behaviour contains the signs of a criminal offence.

Cookies also help to ensure the refinement and smooth operation of the Websites, including the testing of Website performance, e.g. by examining traffic and the presence of anomalies such as distributed denial of service (DDoS) attacks.

Cookies are also used to identify which adverts a user has viewed, and to display adverts that are most relevant to the user’s activity on the Website.

4 What cookies do we use?

We use, in principle, two types of cookies – “session” and “permanent” cookies.

The former are temporary files that remain on the user’s device until the user logs off from the Website or shuts down the software (web browser).

“Permanent” files remain on the user’s device for the time indicated in the parameters of the “cookies” or until they are manually deleted by the user.

It is possible to distinguish a detailed division of “cookies”, with regard to:

  1. necessity for the service

Necessary – they are absolutely necessary for the proper functioning of the Website or the functionalities the user wants to benefit from.

Functional – important for the functioning of the Website:

  1. they serve to enrich the functionality of the Websites; without them, the Website will work properly, but will not be adapted to the user’s preferences,
  2. to ensure a high level of functionality of the Website; without them, the level of functionality of the Website may be reduced, but their inability to be used should not prevent the Website from being used at all,
  3. serve the majority of Website functionality; their blocking will result in selected functions not working properly.

Business – they enable the business model on the basis of which the Website is made available; their blocking will not make all functionality unavailable, but may reduce the level of service provision due to the inability of the Website owner to realise revenue to subsidise its operation.

  1. Depending on the length of time that cookies are placed on the user’s terminal equipment

Session cookies – “cookies” placed for the duration of the browser (session) and are deleted when the browser is closed or when the user logs out of the Website.

Persistent cookies – are not deleted when the browser is closed and remain on the user’s device for a specific period of time or without a validity period (depends on the Website owner’s settings).

  1. Due to the origin of the Website administrator, who manages the “cookies”

Own cookies – cookies” placed on the Website directly by DH Deva 9 Ltd. Limited Partnership

External cookies – cookies” placed on the Website by entities other than DH Deva 9 Ltd. Limited Partnership

  1. By purpose

Website configuration – make it possible to set functions and services on the Website.

Website security and reliability – enable you to verify the authenticity and optimise the performance of the Websites.

Authentication – makes it possible to inform when a user is logged in, so that the Website can show relevant information and functions.

Session status – allows information to be recorded about how users use the Website. These may relate to the most frequently visited Website or possible error messages displayed on certain pages. Cookies for storing the so-called “session state” help to improve services and enhance the browsing experience on the Website.

Processes – allow the Website and the functions available on it to function smoothly.

Adverts – allow ads to be displayed that are more interesting to users and at the same time more valuable to publishers and advertisers; cookies can also be used to personalise advertising, as well as to display ads outside the Website.

Analysis and research, audience auditing – allows the Website owner to better understand the preferences of its users and, through analysis, improve and develop products and services.

Typically, the Website owner or a research company collects information anonymously and processes trend data without identifying the personal data of individual users.

  1. Due to interference with user privacy

Harmless – Includes “cookies”:

  1. dnenecessary for the proper functioning of the Website,
  2. needed to enable the Website’s functionality, but their operation has nothing to do with natural the user

Tracking- Used to track users, but not including information allowing (without other data) to identify a specific user.

  1. Deletion of cookies

The entitlement of DH Deva 9 Ltd. Limited Partnership to store and access “cookies” is based on the consent given by the user of the Websites.

This consent is given by the user when configuring the web browser or the selected Website or service. The user has the possibility to return to these settings at any time and to specify the conditions for storing or accessing this information by DH Deva 9 Ltd. Limited Partnership.

By default, your Website browsing software allows cookies to be placed on your terminal device.

These settings can be changed to block the automatic handling of “cookies” in your browser settings or to inform you each time they are sent to your device.

Below are links to the Websites of various browsers with instructions on cookies, including how to delete them:

  1. Chrome
  2. Edge
  3. Opera
  4. Internet Explorer
  5. Safari
  6. Firefox

In order to benefit from the right to object granted by the General Data Protection Regulation, it is necessary to log out of all devices and delete cookies from them.

The update process may take up to 72 hours.

Restricting the use of cookies, may affect some of the functionalities available on the Website.

If the above information is not sufficient for you regarding the use of cookies, we strongly encourage you to consult the Website: http://wszystkoociasteczkach.pl, which synthetically describes the entire process of collecting the aforementioned data.

EXTERNAL SERVICES / DATA RECIPIENTS

We use the services of external entities to whom your data may be transmitted. Below is a list of these entities:

  1. Entities providing the courier service:
    • DPD,
    • InPost,
    • Poczta Polska.
  2. Entities providing postal service:
    • InPost (parcel machines),
    • Poczta Polska.
  3. Entities providing customer satisfaction survey service
  4. Entities providing training in Indian medicine – “Atma” – Akademia Zdrowego Życia Edyta Sicińska, ul. Dostępna 24, 01-490 Warszawa, NIP (Taxpayer Identification Number): 527-23-00-81 https://akademiaatma.com/) and Ajurveda.pl Elżbieta Żuk-Widmańska, ul. Wiosenna 6A, 05-092 Łomianki, NIP (Taxpayer Identification Number): 527-12-40-701 (www.ajurweda.pl).
  5. Provider of the platform for electronic payments.
  6. Administrator of the Shop’s Website.
  7. Hosting provider and server administrator.
  8. Accounting office.
  9. Entities carrying out the day-to-day operation of the Shop.
  10. We use a variety of professional tools, including:
    1. Google Analytics and cookies: We use Google Analytics – which is a tool for analysing Website statistics developed by Google. Google Analytics uses cookies, which are stored on your computer and make it possible to analyse your use of the Website. The information generated by the cookie (including your IP address) is transferred to a Google Inc. server in the USA where it is stored. Google uses the data obtained to evaluate traffic on the Website on the basis of the number of visits, to compile reports on Website activity and to offer other services related to Website usage. It is possible for Google to transfer the information to third parties, insofar as this is in accordance with the law or where third parties process this data on behalf of Google. Google ensures that your IP address will not be associated with other data from Google Inc. Detailed information on the terms of use and the privacy policy can be obtained on the Website: https://www.google.com/analytics/terms/pl.html or https://policies.google.com/privacy/update?hl=pl. The user has the option of blocking the installation of cookies by changing the settings in the browser. However, this may cause some features of the Website to function incorrectly. The User can also prevent the collection and processing of the data generated by the cookie by Google by downloading and installing the plug-in available at: https://tools.google.com/dlpage/gaoptout?hl=pl.
    2. Google AdWords: the Website also uses the free conversion tracking function available from Google AdWords. Google takes care to protect customer and user data in this regard. Google places a cookie on the user’s computer, every time the user clicks on an advertisement the cookie expires after 50 months. This technology allows for remarketing activities. Remarketing is used to display the Website’s advertisements to users who have previously visited the Website when they visit other Websites. If you do not agree to this service, you can refuse to save cookies by changing your browser settings to deactivate the automatic cookies option. It is also possible to deactivate the cookies used by Google to track conversions by making the appropriate browser settings that cause cookies from Google to be blocked. For more information on interest-specific advertising and information on how to opt-out of sharing information from your browser for behavioural advertising, please visit http://youronlinechoices.eu/.
    3. Facebook pixel: on our Website we use the Facebook pixel owned by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Using it, we obtain the ability to track the movements of users visiting the Website by monitoring conversions or by clicking on Facebook adverts. This allows us to determine the effectiveness of advertisements for statistical and market research purposes. The data collected in this way is anonymous to us, which means that the data of individual users is not visible to us. However, this data is collected and processed by Facebook, of which we inform users to the best of our knowledge. Facebook has the option of linking this data to the user’s Facebook account and applying it to certain advertising activities in accordance with Facebook’s privacy policy. Facebook has the ability to use cookies and other data storage technologies from the Website in this regard. Information on data protection and the relevant settings can be obtained from: https://www.facebook.com/about/privacy/.
  11. Other entities that process personal data on our behalf, whereby such entities process data on the basis of a contract concluded with the Shop and only in accordance with our instructions.

CONTACT WITH THE ADMINISTRATOR

Chcesz skorzystać ze swoich uprawnień dotyczących danych osobowych? A może po prostu chcesz Would you like to benefit from your rights regarding your personal data? Or do you just want to ask about something related to our Privacy Policy? Write to the following email address: sklep@devaharmony.com.

ZAŁĄCZNIK NUMER 1

Information clause

For Registered Users

Na podstawPursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we hereby inform you that:

  1. The administrator of your processed personal data is DH Deva 9 Ltd. Limited Partnership with its registered office in Rzeszów at ul. Rzeszów, ul. Lubelska 29, 35-233 Rzeszów, KRS (National Court Registry) number 0000862537, NIP (Taxpayer Identification Number) number: PL 8133845054, Regon (National Business Registry Number): 387158706.
  2. The administrator has not appointed a data protection officer due to the inability to fulfil his/her legal obligation. In matters concerning the processing of personal data, you can contact the Administrator by phone at: +48 654 987 321, by e-mail at: sklep@devaharmony.com and in writing to the address of the Administrator’s registered office.
  3. We obtain your data in the following ways:
  1. during the purchasing process,
  2. contact with the Administrator by phone or e-mail,
  3. during the registration process on the Website,
  4. directly while visiting our Website and while browsing products in our Shop,
  5. when you send us a message.
  6. Your data will be processed for:
  1. for the performance of the contract for reciprocal services, i.e. on the basis of Article 6(1)(b) of the GDPR – processing necessary for the purposes arising from the contractual relationship (additional services and functionalities in return for the reciprocal service in the form of the consents given and personal data provided),
  2. for analytical and statistical purposes and for the assertion of legal claims, i.e. on the basis of Article 6(1)(f) GDPR – processing necessary for purposes deriving from the legitimate interests pursued by the administrator,
  3. profiling of your interest in terms of products viewed and purchased on the Administrator’s Website – based on Article 6(1)(f) GDPR, i.e. our legitimate interest,
  4. for marketing the Administrator’s own services and sending information regarding the current offer (“Newsletter”) – after the express and voluntary consent has been given, i.e. on the basis of Art. 6 par. 1 lit. GDPR,
  5. for the purpose of marketing the services of the administrator’s partners (“Partners”) – upon express and voluntary consent, i.e. on the basis of Article 6(1)(a) GDPR,
  6. The legal basis for the processing of your data is:
  1. the consent you have given, to the extent and for the purpose stated therein, i.e. Article 6(1)(a) GDPR,
  2. the performance of a reciprocal performance contract within the meaning of Article 6(1)(a) of the GDPR in connection with Article 487 et seq. Act of 23 April 1964 Civil Code, i.e. the provision of additional services and functionalities of the Administrator’s Website to you in exchange for your consent and personal data,
  3. the concluded contract for the sale of products found in the Shop (Article 6(1)(b) of the GDPR),
  4. to the remaining extent, the legal basis for the Administrator’s action is the premise of the Administrator’s legitimate interests.
  1. With your consent, the personal data provided may be disclosed to the Administrator’s Partners as well as to entities and authorities whose rights to such disclosure result from the provisions of law.
  2. We would like to inform you that each individual Administrator Partner may have their own privacy policy regarding the processing of personal data.
  3. The Administrator does not plan to share your data with third countries outside the European Economic Area.
  4. You have the possibility to obtain a copy of your data as well as to obtain information on where your data is shared.
  5. Your personal data will be stored until you withdraw your consent, but at least until the statute of limitations for possible claims.
  6. You have the right to request the Administrator to access, rectify, erase or restrict the processing of data concerning you. You have the right to object to the processing and the right to data portability;
  7. You have the right to lodge a complaint with a supervisory authority (i.e. the President of the Personal Data Protection Office);
  8. The provision of your personal data is voluntary, however, it is a necessary condition under the provisions of the Civil Code in relation to the contractual relationship entered into, therefore the inability to provide such data will prevent the proper performance of the contract for mutual services.The provision of personal data by you is voluntary, however, it is a necessary condition resulting from the provisions of the Civil Code in relation to the concluded contractual relationship, therefore the inability to properly perform the contract.
  9. The Administrator may use profiling in the Shop for direct marketing purposes, but the decisions made on its basis by the Administrator do not concern the conclusion or refusal to conclude a Sales Agreement, or the possibility of using Electronic Services in the Shop. The effect of the use of profiling in the Internet Shop may be, for example, to grant a person a discount, send him/her a discount code, remind him/her of unfinished purchases, send him/her a proposal of a Product that may correspond to the person’s interests or preferences or offer better conditions compared to the standard offer of the Internet Shop. Despite the profiling, it is up to the individual to decide freely whether he or she wishes to benefit from the discount or better conditions received in this way and make a purchase from the Online Shop. Profiling in our Online Shop involves the automatic analysis or prediction of a person’s behaviour on the Website of the Online Shop, e.g. by adding a specific Product to the Shopping cart, viewing the Website of a specific Product in the Online Shop, or by analysing the previous purchase history of the Online Shop. The data subject has the right not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects in relation to the data subject or similarly significantly affects the data subject. The profiling that we carry out does not have any negative effects on the persons affected.By subscribing to the newsletter, you consent to the processing of your personal data for commercial and marketing purposes and to the receipt of commercial and marketing information electronically via the email address provided in the newsletter subscription form.
  10. Subscribing to the devaharmony.com.co.uk newsletter is voluntary. Unsubscribing can take place at any time. For this purpose, please write to: sklep@devaharmony.com

ZAŁĄCZNIK NUMER 2

Information clause

For non-registered users making purchases

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we hereby inform you that:

  1. The administrator of your processed personal data is DH Deva 9 Ltd. Limited Partnership with its registered office in Rzeszów at ul. Rzeszów, ul. Lubelska 29, 35-233 Rzeszów, KRS (National Court Registry) number 0000862537, NIP (Taxpayer Identification Number) number: PL 8133845054, Regon (National Business Registry Number): 387158706.
  2. The administrator has not appointed a data protection officer due to the inability to do so. In matters concerning the processing of personal data, you can contact the Administrator by phone at: +48 654 987 321, by e-mail at: sklep@devaharmony.com and in writing to the address of the Administrator’s registered office.
  3. We obtain your data in the following ways:
    • during the purchasing process,
    • by contacting the Administrator by phone or e-mail,
    • during the registration process on the Website,
    • directly during your visit to our Website.
  4. Your data will be processed for:
    • concluding and performing the sales contract (including related services, e.g. warranty and guarantee rights) i.e. based on Article 6(1)(b) GDPR,
    • the assertion of legal claims, i.e. based on Article 6(1)(f) GDPR – processing necessary for the purposes of the legitimate interests pursued by the administrator,
    • profiling of your interest topics in terms of products viewed and purchased on the Administrator’s Website – based on Article 6(1)(f) GDPR, i.e. our legitimate interest,
    • to comply with the Administrator’s legal obligation relating to tax obligations, i.e. based on national law and Article 6(1)(c).
  5. The legal basis for the processing of your data is:
    • the fact of concluding a contract and the provisions of the Value Added Tax Act of 11 March 2004, the Tax Ordinance Act of 29 August 1997 and the Regulation of the Minister of Economy of 27 August 2013 on the criteria and technical conditions to be met by cash registers,
    • in other cases, your personal data are processed exclusively on the basis of your previously granted consent to the extent and purpose specified therein, i.e. Article 6(1)(a) GDPR.
  6. You have the possibility to obtain a copy of your data as well as to obtain information on where your data can be accessed.
  7. Your personal data will be stored for a maximum period of up to 5 or 6 years (due to the requirements of the Accounting Act) and 3 years (due to the concluded sales contract), but no less than until the statute of limitations for possible claims.
  8. You have the right to request the Administrator to access, rectify, erase or restrict the processing of data concerning you. You have the right to object to the processing and the right to data portability;
  9. You have the right to lodge a complaint with a supervisory authority (i.e. the President of the Office for Personal Data Protection);
  10. The provision of your personal data is voluntary, but it is a necessary condition under the provisions of the Civil Code in relation to the contractual relationship entered into, so the inability to provide it will prevent the proper performance of the contract.
  11. The Administrator may use profiling in the Online Shop for direct marketing purposes, but the decisions made on its basis by the Administrator do not concern the conclusion or refusal of a Sales Agreement or the possibility of using Electronic Services in the Online Shop. The effect of the use of profiling in the Internet Shop may be, for example, to grant a person a discount, send him/her a discount code, remind him/her of unfinished purchases, send him/her a proposal of a Product that may correspond to the person’s interests or preferences or offer better conditions compared to the standard offer of the Internet Shop. Despite the profiling, it is up to the individual to decide freely whether he or she wishes to benefit from the discount or better conditions received in this way and make a purchase from the Online Shop. Profiling in our Online Shop involves the automatic analysis or prediction of a person’s behaviour on the Website of the Online Shop, e.g. by adding a specific Product to the Shopping cart, viewing the Website of a specific Product in the Online Shop, or by analysing the previous purchase history of the Online Shop. The data subject has the right not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects in relation to the data subject or similarly significantly affects the data subject. The profiling that we carry out does not have any negative effects on the persons affected.
  12. By subscribing to the newsletter, you consent to the processing of your personal data for commercial and marketing purposes and to receive commercial and marketing information electronically via the email address provided in the newsletter subscription form.
  13. Subscribing to the devaharmony.com.co.uk newsletter is voluntary. Unsubscribing can take place at any time. For this purpose, please write to: sklep@devaharmony.com.

APPENDIX 3

Information clause

Training organised by the partner

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we hereby inform you that:

  1. The administrator of your processed personal data is DH Deva 9 Ltd. Limited Partnership with its registered office in Rzeszów at ul. Rzeszów, ul. Lubelska 29, 35-233 Rzeszów, KRS (National Court Registry) number 0000862537, NIP (Taxpayer Identification Number) number: PL 8133845054, Regon (National Business Registry Number): 387158706.
  2. The administrator has not appointed a data protection officer due to the inability to fulfil his/her legal obligation. In matters concerning the processing of personal data, you can contact the Administrator by phone at: +48 654 987 321, by e-mail at: sklep@devaharmony.com and in writing to the address of the Administrator’s registered office.
  3. We obtain your data in the following ways:
  1. contact with the Administrator – by phone or e-mail,
  2. directly by filling in and sending a form on our Website.
  3. Your data will be processed in order to:
  4. to enable you to communicate with a partner in order to take part in a training course organised by them.
  5. The legal basis for the processing of your data is:
  6. Article 6(1)(a) GDPR consent.
  1. The withdrawal of consent for the use of your personal data does not affect the lawfulness of the use of such data that was made on the basis of this consent before the date of withdrawal
  2. The personal data you provide may be disclosed to entities and authorities whose authority to do so arises from the law, in particular your opinion will be presented on the Administrator’s Website, the Google search engine and the certificate of third parties providing customer satisfaction survey services.
  3. You have the right to request the Administrator to access, rectify, erase or restrict processing of the data concerning you, the right to withdraw consent. You have the right to data portability;
  4. You have the right to lodge a complaint with a supervisory authority (i.e. the President of the Office for Personal Data Protection);
  5. Your provision of personal data is voluntary, but it is a necessary condition for submitting a product or seller review.
  6. Your personal data will not be subject to automated processes and will not be profiled.

APPENDIX 4

Information clause

Contact form

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), we hereby inform you that:

  1. he administrator of your processed personal data is DH Deva 9 Ltd. Limited Partnership with its registered office in Rzeszów at ul. Rzeszów, ul. Lubelska 29, 35-233 Rzeszów, KRS (National Court Registry) number 0000862537, NIP (Taxpayer Identification Number) number: PL 8133845054, Regon (National Business Registry Number): 387158706.
  2. The administrator has not appointed a data protection officer due to the inability to fulfil his/her legal obligation. In matters concerning the processing of personal data, you can contact the Administrator by phone at: +48 654 987 321, by e-mail at: sklep@devaharmony.com and in writing to the address of the Administrator’s registered office.
  3. We obtain your data by the following means:
  1. by contacting the Administrator by phone or e-mail,
  2. by directly filling in and sending the contact form on our Website,
  3. when you send us a message.
  4. Your data will be processed for the following purposes:
  5. for the purpose of corresponding with you, i.e. based on Article 6(1)(f) of the GDPR – processing necessary for the purposes arising from the legitimate interests pursued by the administrator,
  6. The legal basis for the processing of your data is:
  7. the legitimate interests of the Administrator.
  1. The personal data provided may be disclosed to entities and authorities whose authority to do so results from the law.
  2. The Administrator does not plan to share your data with third countries outside the European Economic Area.
  3. You have the possibility to obtain a copy of your data as well as to obtain information on where your data is made available.
  4. You have the right to request the Administrator to access, rectify, erase or restrict the processing of data concerning you. You have the right to object to the processing and the right to data portability;
  5. You have the right to lodge a complaint with a supervisory authority (i.e. the President of the Office for Personal Data Protection);
  6. Your provision of personal data is voluntary, but it is a necessary condition for responding to your contact form.
  7. Your personal data provided for the purpose of correspondence will not be subject to automated processes and will not be profiled.