PRIVACY POLICY

Data protection declaration

1) Information on the collection of personal data and contact details of the responsible person.

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dido Tuning Biegańska-Gajda Edyta company

Huberman 27

42-209 Częstochowa Poland

NIP 9491612584

E-mail: dido@didotuning.pl

+48 506 4233 919

 The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 The responsible person has appointed a data protection officer who can be contacted as follows:

E-mail: dido@didotuning.pl

+48 506 4233 919

1.4 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or. TLS encryption. You can recognize an encrypted connection by the string "https: //" and the padlock symbol in the browser line.

2) Data collection when visiting our website

When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website:

• Our visited website

• Date and time when access was granted

• The amount of data transferred in bytes

• Source / reference from which you came to the site

• Browser used

• The operating system being used

• IP address used (if applicable: in anonymous form)

The data is processed in accordance with Art. 6 sec. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be transferred or used in any other way. However, we reserve the right to check the server log files afterwards if there are concrete indications of illegal use.

3) Cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. cookies. These are small text files that are stored on your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain information about the user, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual basket for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 sec. 1 lit. b GDPR either for the performance of the contract or in accordance with Art. 6 sec. 1 lit. f GDPR in order to protect our legitimate interests, as well as the best possible website functionality and a customer-friendly and efficient website visit design.

We may work with advertising partners to help us make our website more attractive. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third party cookies). If we cooperate with the above-mentioned advertising partners, you will be individually and separately informed about the use of such cookies and the scope of the information collected in the following points.

Please note that you can set your browser so that it is informed about the setting of cookies and can decide individually whether to accept them or to disable the acceptance of cookies in certain cases or in general. Each browser has a different method of managing cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. They can be found for the respective browser at the following links:

- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

- Firefox: https://support.mozilla.org/de/kb/cookies-allow-and-reject

- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

- Safari: https://support.apple.com/kb/ph21411?locale=de_DE

- Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

Information on the cookies used:

4) Communicating

When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected for a contact form can be seen in the corresponding contact form. These data are stored and used exclusively for the purpose of answering your inquiry or establishing contact and the related technical administration. The legal basis for data processing is our legitimate interest in answering your inquiry in accordance with art. 6 sec. 1 lit. f GDPR. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 sec. 1 lit. b GDPR. Your data will be deleted after the final consideration of your request;

5) Data processing when opening a customer account and contract processing

Pursuant to Art. 6 sec. 1 lit. b GDPR, personal data will still be collected and processed if you provide them to us for the purpose of performing the contract or opening a customer account. Which data is collected can be seen in the respective input forms. It is possible to delete a customer account at any time and can be done by sending a message to the above address of the responsible person. We store and use the data that you have provided to perform the contract. After the contract has been fully processed or the customer account deleted, your data will be blocked with due regard to tax and commercial retention periods, and will be deleted upon expiry of these periods,

6) Comment function

As part of the commenting function on this website, in addition to your comment, information about the time the comment was created as well as the name and surname of the commentator selected by you are saved and published on the website. Your IP address is also logged and saved. The IP address is stored for security reasons and in the event that a person infringes the rights of third parties by submitting a comment or posting illegal content. We need your e-mail address to contact you if a third party objects to your content as unlawful. The legal basis for the storage of your data is Art. 6 sec. 1 lit. b and f GDPR. We reserve the right to delete comments if third parties complain that they are illegal.

7) Use of your data for direct mail

7.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing any further data is voluntary and is for personal contact. We use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to the sending of the newsletter. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in the future.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 sec. 1 lit. a GDPR. When registering for the newsletter, we save your IP address entered by your Internet Service Provider (ISP) and the date and time of registration in order to be able to track any misuse of your e-mail address in good time. The data collected by us when registering for the newsletter is used solely for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending a message to the person responsible referred to above. Upon unsubscribing, your e-mail address will be immediately removed from our newsletter distribution list,

7.2 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by e-mail. We do not need to obtain any separate consent from you for this. In this regard, data processing is carried out exclusively on the basis of our legitimate interest in personalized direct correspondence in accordance with Art. 6 sec. 1 lit. f GDPR. If you initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You have the right to object to the use of your e-mail address for the above-mentioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning.

8) Data processing for the purpose of order fulfillment

8.1 To fulfill your order, we work with the following service providers who support us in whole or in part in the implementation of concluded contracts. Some personal data is transferred to these service providers as set out below.

The personal data collected by us will be forwarded to the shipping company commissioned to deliver in the context of the contract, insofar as this is necessary for the delivery of the goods. We will forward your payment details to the commissioned credit institution as part of payment processing, if this is necessary for payment processing. When using the services of payment service providers, we will inform you clearly below. The legal basis for the transfer of data is Art. 6 sec. 1 lit. b GDPR.

8.2 Disclosure of personal data to shipping service providers

SPRING, DPD POLAND, UPS, POCZTA POLSKA

If the goods are delivered by a shipping service provider

SPRING, DPD POLAND, UPS, POCZTA POLSKA

, prior to the delivery of the goods, we will provide you with your e-mail address in accordance with Art. 6 sec. 1 a GDPR in order to agree a delivery date or announce a delivery to SPRING, DPD POLAND, UPS, POCZTA POLSKA, provided that you have expressly consented to it in the ordering process. Otherwise, we will only provide UPS with the name of the recipient and the delivery address for delivery in accordance with Art. 6 sec. 1 lit. b GDPR. The handover takes place only to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with SPRING, DPD POLAND, UPS, POCZTA POLSKA or provide information on the delivery status of the shipment.

The consent may be revoked at any time with future effect against the responsible person or against the transport service provider SPRING, DPD POLAND, UPS, POCZTA POLSKA

- PayPal

When you pay with PayPal, by credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we transfer your payment details to PayPal (Europe) Sarl et Cie., SCA, 22 -24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). The transfer takes place in accordance with Art. 6 sec. 1 lit. b GDPR and only insofar as it is necessary for payment processing.

PayPal reserves the right to check the creditworthiness of the method of payment via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, payment data may be passed on to credit agencies in accordance with Art. 6 sec. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check against the statistical probability of default to decide whether or not to provide an appropriate payment method. The credit report may contain probability values (so-called scoring values). While the score values are included in the result of the credit report, they are based on a scientifically recognized mathematical and statistical procedure. The calculation of the score value includes, but is not limited to, address data. More information on data protection, including the credit agencies used, can be found in the PayPal privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to the processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.

9.2 Facebook as standard plugin

Our website uses so-called social plugins ("plugins") of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). The plugins are marked with the Facebook logo or with the addition of "Facebook social plug-in" or "Facebook social plug-in". An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

When you visit a page on our website that contains such a plug-in, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transferred directly from Facebook to your browser and integrated with the website. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is sent directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can immediately associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by pressing the "Like" button or leaving a comment, this information is also sent directly to the Facebook server and stored there. The information is also published on your Facebook profile and shown to your Facebook friends.

The described data processing operations are carried out in accordance with Art. 6 sec. 1 lit. f GDPR based on the legitimate interests of Facebook consisting in displaying personalized advertisements in order to inform other users of the social network about your activities on our website and to adapt the service to your needs.

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can object to the loading of Facebook plugins and thus the data processing operations described above with add-ons for your browser for the future, eg with the script blocker "NoScript" (http://noscript.net/).

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, can be found in Facebook's data protection notices:

https://www.facebook.com/policy.php

9.3 Instagram

In order to advertise our products and services, and to communicate with interested parties or customers, we maintain the company's presence on the Instagram platform.

The data protection officer on Instagram can be contacted via the contact form: https://www.facebook.com/help/contact/540977946302970

We have regulated this co-liability in an agreement on relevant obligations within the meaning of the GDPR. This contract, from which mutual obligations arise, is available at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the resulting and then duplicated processing of personal data is Art. 6 sec. 1 lit. f GDPR. Our legitimate interest is in the analysis, communication, sale and promotion of our products and services.

The legal basis may also be the user's consent pursuant to Art. 6 sec. 1 lit. GDPR to the platform operator. Pursuant to Art. 7 sec. 3 GDPR, the user may withdraw his consent at any time by notifying the platform operator for the future.

When you visit our online presence on the Instagram platform, Facebook Ireland Ltd., as the platform operator in the EU, processes your data (e.g. personal data, IP address, etc.).

This user data is used for statistical information regarding the use of our company's presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd., for example, is able to advertise users within and outside of Instagram based on their interests. If the user is logged into his Instagram account at the time of access, Facebook Ireland Ltd. also links the data to the corresponding user account.

If the user makes contact via Instagram, the personal data entered by him on this occasion will be used to process the request. We will delete your data, provided that a final response is given to your request and there are no legal storage requirements, such as the subsequent processing of a contract.

For data processing, Facebook Ireland Ltd. may also set cookies.

If the user does not consent to such processing, it is possible to prevent the installation of cookies by appropriate browser settings. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, their processing cannot be prevented through the browser settings, but by a corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be used to their full extent.

For more information on the processing, prevention and deletion of data processed by Instagram, see Instagram's data policy:

https://help.instagram.com/519522125107875

It cannot be ruled out that processing by Facebook Ireland Ltd. also via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

10) Use of social media: movies

Use of YouTube videos

This website uses the embedding function of YouTube to display and play videos from the provider "YouTube", which belongs to Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

It uses an enhanced data protection mode which, according to the provider, does not start storing user information until the video is played. If embedded YouTube videos start playing, the provider "YouTube" uses cookies to collect information about user behavior. According to the information from "YouTube", they are used, inter alia, to record video statistics, improve user-friendliness and prevent abuse. If you are logged in with Google, your data will be assigned directly to your account when you click on the video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even of users who are not logged in) as usage profiles and evaluates them. This assessment is carried out in accordance with Art. 6 sec. 1 lit. f GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research and / or designing its website based on needs. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Regardless of whether the embedded videos are played or not, a connection to the Google network "DoubleClick" is established each time this website is called up, which may result in further data processing operations over which we have no influence.

Further information on data protection can be found under "YouTube" in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy

15) Contact via the hotline

By contacting us via our hotline, personal data may be collected and processed. The telephone number you use when calling may be recorded.

In addition, our hotline staff may ask for your name and e-mail address. If you have created a customer account with us at the e-mail address provided, our hotline staff can associate your e-mail address with that customer account and access the data stored in your customer account. The data stored includes your name, address, payment details, orders, products you have saved as favorites, as well as notes on previous inquiries and previous correspondence.

The main content of the conversation regarding your application may be recorded by our hotline in the form of a written note for the further consideration of your application, which we may access if we contact you again.

The data collected when contacting us via our hotline is collected and processed solely for the purpose of processing your inquiry, including related further communication and administration / technical support.

The legal basis for data processing is our legitimate interest in responding to your inquiry in accordance with art. 6 (1) lights up. f DSGVO. If the purpose of your connection is to conclude a contract with us or you have questions about an existing contract with us, the additional legal basis for processing is Art. 6 (1) lights up. b DSGVO.

Your data will be deleted after the processing of your request is completed.

This is the case if it is clear from the circumstances that the case in question has been finally resolved and provided that there are no conflicting statutory retention obligations.

Protecting the privacy of people under the age of 16 on the Internet

Personal data of minors (under the age of 16) is not knowingly collected or used in any form by the sample company. As a rule, we do not find out about the age of the visitor to our website. However, we have not taken any specific measures to protect such data to a certain extent. Persons under the age of 16 may not provide any personal data without the express consent of their parents or guardians.

16) Rights of the data subject

15.1 The applicable data protection law grants the user comprehensive rights of data subjects (right to information and intervention) vis-à-vis the person responsible for the processing of personal data, which we will inform about below:

Right to information under Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of processing, categories of personal data processed, recipients or categories of recipients to whom your data has been or will be disclosed, the planned period of storage or criteria for determining the storage period, the existence of the right to rectify, delete, limit processing, object to processing, submit a complaint to the supervisory body, the origin of your data, if we have not collected it from you, Existence of automated decision-making, including profiling and, if necessary, relevant information about the logic and scope used and the intended effects of such processing, as well as your right to obtain information about guarantees in accordance with Art.

Right to rectification in accordance with Art. 16 GDPR: You have the right to immediately rectify incorrect data concerning you and / or complete incomplete data stored by us;

Right to erasure in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 sec. 1 GDPR are met. However, this right does not exist, in particular, when the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data, provided that you verify the correctness of your data, if you refuse to delete the data due to unacceptable data processing and instead request the restriction of the processing of your data, if you need the data to assert, assert or defend claims, when we no longer need the data after the purpose has been achieved or if you have objected due to your particular situation, unless it is certain whether our legitimate reasons prevail;

Right to information under Art. 19 GDPR: In the event of exercising the right to rectification, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom personal data concerning you has been disclosed about the correction or deletion of the data or to inform about the restriction of processing, unless this turns out to be impossible or requires disproportionate effort. You have the right to be informed about these recipients.

The right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to have it sent to another responsible person, insofar as it is technically feasible;

The right to withdraw consent granted in accordance with Art. 7 sec. 3 GDPR: You have the right to revoke your consent to data processing at any time with effect for the future. If you withdraw your consent, we will immediately delete the data concerned, unless the basis for further processing may be a legal basis for processing without consent. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent until its withdrawal;

The right to file a complaint in accordance with Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your place of residence, place of work or place of the alleged violation.

17) Duration of personal data storage

The duration of the storage of personal data depends on the respective statutory retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided that it is no longer required for the fulfillment of the contract or the conclusion of the contract and / or we have no legitimate interest in further storage.

Security of your data

The data that you provide to DIDO TUNING is protected by appropriate technical and organizational measures to protect the data against accidental or intentional manipulation, loss, destruction, access by unauthorized persons or unauthorized disclosure to third parties. Our security measures are constantly monitored and improved in line with technological developments and organizational possibilities.