Personal Data Protection

GDPR Information Clause

Pursuant to Article 13 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as “GDPR”, we kindly inform you that:

1. Personal data administrator

The administrator of your personal data is Botanyo Sp. z o.o. with its seat in Warsaw, Poland, at 29 Dluga Street, 00-238, registered in the National Court Register XII Economic Department of the District Court for the Capital City of Warsaw under the number: 0001134878, NIP (Tax Identification Number): 5253022098, REGON (National Business Registry): 54000388. You can contact us using the e-mail address: hello@botanyo.com or by phone at: +48 222 95 1234.

2. Goals and bases for data processing

Your personal data will be processed for the following purposes:

1. Order processing – in order to conclude and execute the sales contract (Article 6(1)(b) GDPR),
2. Financial Settlements – to fulfill accounting and tax obligations (Article 6(1)(c) GDPR),
3. Handling of complaints and returns – to enable the exercise of the right of complaint and return (Article 6(1)(b) and (c) of the GDPR),
4. Direct marketing – for the purpose of sending information about products, services and promotions, provided you have consented to receive such information (Article 6(1)(a) GDPR),
5. Conducting analysis and statistics – in order to improve our offer and adjust it to the needs of our clients (Article 6(1)(f) GDPR).

3. Recipients of data

Your personal data may be shared with the following categories of recipients:

1. to entities providing courier and postal services – for the purpose of delivery of ordered goods,
2. entities providing payment services – for the purpose of payment processing,
3. entities that support the administrator in providing services, such as IT service providers, marketing and accounting companies.

4. Data retention period

1. Your personal data processed for the purpose of order processing will be stored for the period necessary for the execution of the contract and for the time required by law (e.g. under accounting and tax regulations) for a maximum of five full accounting years.
2. Data processed for marketing purposes will be processed until you withdraw your consent to their processing.
3. Data processed for the purpose of establishing, asserting or defending claims will be stored for the period of limitation of claims under the law.

5. Rights of data subjects

You have the right to:

1. access your personal data and to rectify, erase, restrict processing or transfer them,
2. object to data processing to the extent of processing on the basis of legitimate interest,
3. withdraw consent at any time, if processing is based on consent, without affecting the lawfulness of processing before its withdrawal,
4. lodge a complaint to the President of the Office for Personal Data Protection (2 Stawki Street, 00-193 Warsaw, Poland), if you consider that the processing of personal data violates the provisions of the GDPR.

6. Obligation to provide data

Provision of personal data is voluntary, but necessary for the execution of the order and other related services. In case of failure to provide data, it will be impossible to perform the above purposes.

7. Processing of data by automated means

Your personal data will not be processed by automated means or subject to profiling.

8. Transfer of personal data to a third country

Your personal data will not be transferred to third countries.