INFORMATION ON THE PROCESSING OF PERSONAL DATA
Concerning Article 13 GDPR, i.e., the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals about the processing of personal data (GDPR), this document contains all information on how we collect personal data, including information about how we store, use, transfer, and delete that data. It also explains how our website uses cookies.
DATA CONTROLLER AND CONTACT DETAILS
The Controller of your personal data is VSF Sp. z o.o. (Polish limited liability company) located in Warsaw (00-032), Przeskok 2 Str. entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000870326, NIP (tax ID) 5272942049, with the share capital of PLN 2.550.680,00 zł (“Controller”). To contact us, please send an e-mail to data@vuestorefront.io .
DATA PROTECTION OFFICER
We have appointed a Data Protection Officer (DPO). To contact him, please send an email to data@vuestorefront.io.
PERSONAL DATA
We collect and process your data in the following fields:
I. Usage of the Website
The Controller processes the personal data of users of the website:
for analytical and statistical purposes - in which case the legal basis for processing is a legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR), consisting in conducting analyses of the activity and preferences of Users to improve the functionalities used and services provided;
to possibly establish, investigate, or defend against claims - the legal basis of the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of his rights.
Recipients of your personal data will be: server hosting providers, employees, associates of the Controller, and providers of legal services.
Your personal data will be processed for the duration of the controller's legitimate interest, no longer than you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.
II. Contact form
The contact form allows you to send inquiries about our services.
To answer your inquiry, we collect the following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) company name, vi) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform, viii) annual revenue selected by options from the dropdown menu. Optionally, provide country, shop URL, and additional message.
This data is used to answer your inquiry, provide you with our services, and for marketing purposes, e.g., receive emails about personalized offers and new products.
The legal basis for the processing is the Controller's legitimate interest in marketing of own services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law.
In addition, your personal data may be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of Controller’s right.
If you select the appropriate consent, your personal data will be processed also for delivering our newsletter to you (please see section “Newsletter” below for detailed information).
Recipients of your personal data will be: email and server hosting providers, a provider of mailing tools, employees and associates of the Controller, legal service providers.
If you decide to conclude an agreement for our services with us, your data will be transferred with VSF Inc.located in California, USA, a member of the group company to which VSF Sp. z o.o. belongs, and which is responsible for performing an agreement (please see section “Transfer of data outside the European Economic Area”below for detailed information).
Your personal data will be processed for the duration of the controller's legitimate interest, no longer than you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.
Your provision of your personal data is always voluntary. At the same time, it is necessary for the purposes of communication with you.
III. Demo Request
The demo request form allows you to send a request for a demo of the services we provide.
To answer your inquiry, we collect the following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) country, vi) company name, vii) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform type selected by options from the dropdown menu, viii) annual revenue selected by options from the dropdown menu.
This data is used to answer your request and offer you a demo version of our service, but also for marketing purposes, e.g., to receive emails about personalized offers and new products.
The legal basis for the processing is the Controller's legitimate interest in marketing of own services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law.
In addition, your personal data may be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of the Controller’s rights.
If you select the appropriate consent, your personal data will be processed also for delivering our newsletter to you (please see section “Newsletter” below for detailed information).
Recipients of your personal data will be: email and server hosting providers, employees and associates of the Controller, a provider of mailing tools, legal service providers.
If you decide to conclude an agreement for our services with us, your data will be transferred with VSF Inc.located in California, USA, a member of the group company to which VSF Sp. z o.o. belongs, and which is responsible for performing an agreement (please see section “Transfer of data outside the European Economic Area”below for detailed information).
Your personal data will be processed for the duration of the controller's legitimate interest, no longer than you object. You can object by sending us a message to data@vuestorefront.io . After that, all your data will be erased from our database.
Your provision of your personal data is always voluntary. At the same time, it is necessary for the purposes of communication with you.
IV. Newsletter
We share knowledge and experience in our “#VSF Monthly newsletter.” You can sign up for it by providing your details as an email address and first name.
By sending a request, you confirm that you have read and understood our Privacy Policy and you consent to receive emails with our materials. You also have to accept our Website Terms Use.
The basis for the processing of your data is the contract for the provision of digital content, which you concluded with us by sending the newsletter subscription form (Article 6 item 1 letter b of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law.
In addition, your personal data may be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of the Controller’s rights.
Recipients of your personal data will be email and server hosting providers, a provider of mailing tools, legal service providers.
Your data will be transferred with VSF Inc.located in California, USA, a member of the group company to which VSF Sp. z o.o. belongs, and which is responsible for distribution of our materials (please see section “Transfer of data outside the European Economic Area”below for detailed information).
Your personal data will be processed for the duration of the agreement. You can terminate agreement by using a button "unsubscribe" in each e-mail or sending us a message to data@vuestorefront.io . After that, all your data will be erased from our database.
Your provision of your personal data is always voluntary. At the same time, it is necessary to conclude and perform a contract with us.
V. Ebook
You can download our ebook using dedicated forms by providing your details as your first name, last name, business email, job title, annual revenue.
By sending a request, you confirm that you have read and understood our Privacy Policy and you consent to receive emails with our materials. You also have to accept our Website Terms Use.
The basis for the processing of your data is the contract for the provision of digital content, which you concluded with us by sending the download form Article 6 item 1 letter b of the GDPR)in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law.
In addition, your personal data may be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of the Controller’s rights.
Recipients of your personal data will be email and server hosting providers, a provider of mailing tools, legal service providers.
Your data will be transferred with VSF Inc.located in California, USA, a member of the group company to which VSF Sp. z o.o. belongs, and which is responsible for distribution of our materials (please see section “Transfer of data outside the European Economic Area”below for detailed information).
Your personal data will be processed for the duration of the agreement. You can terminate agreement by using a button "unsubscribe" in each e-mail or sending us a message to data@vuestorefront.io . After that, all your data will be erased from our database.
Your provision of your personal data is always voluntary. At the same time, it is necessary to conclude and perform a contract with us.
VI. Careers
You can apply via the Careers site for the current recruitment processes of your choice by providing your name, email address, optional phone number, LinkedIn profile address, and/or website. You can also attach an external document containing your resume and/or cover letter.
By applying with LinkedIn, you consent to VSF acquiring your additional personal information publicly available on LinkedIn.
The data you provide, referred to in paragraph 1 above, will be processed by the Controller:
Suppose you prefer employment based on an employment contract. In that case, the data will be processed based on Article 6 item 1 letters b. and c. of the GDPR, i.e., to perform obligations arising from legal provisions related to the recruitment process, including in particular Article 22(1) of the Labour Code and to take steps at the request of the data subject before agreeing with VSF sp. z o.o. To carry out the recruitment process in the field of data not required – the legal basis for processing is consent (Article 6 item 1 letter an of the GDPR);
suppose you prefer employment based upon a civil law contract. In that case, the data will be processed on the legal basis of Article 6 item 1 letter b. of the GDPR, i.e., to take steps at the data subject's request before agreeing with VSF sp. z o.o. To carry out the recruitment process in the field of data not required – the legal basis for processing is consent (Article 6 item 1 letter a. of the GDPR);
suppose you have agreed to participate in future recruitments. In that case, the basis for processing your personal data after recruitment will be Article 6, item 1 letter a of the GDPR, i.e., your consent to processing your personal data to consider your candidacy in future recruitments.
To determine or assert any claims or defend against such claims by VSF Sp—z o.o. - the legal basis for data processing is the legitimate interest of the controller (Article 6 item 1 letter f of the GDPR). Your personal data may be provided to subcontractors of VSF Sp. z o.o., such as suppliers of IT systems and IT services, entities providing accounting services, and, where reasonable, legal service providers.
Your data will be stored for the time necessary to complete the recruitment process of VSF Sp. z o.o. If you voluntarily agree to participate in future recruitments, your data will be stored for one year, and we will ask for your consent again.
The processing period may be extended each time by the limitation period for claims if processing your personal data will be necessary to determine or assert possible claims or defense against such claims by the Controller.
You are entitled to withdraw any of your consents at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.
You have the right to access your data, rectify, delete, limit processing, the right to transfer data, right to object to data processing based on the legitimate interest of the Controller, as well as the right to complain to the supervisory authority.
You have the right to object to data processing based on a legitimate interest of the Controller.
Providing personal data by you is required for recruitment, and if you prefer employment based upon employment contract is also required by law, in particular the Polish Labour Code. The consequence of not providing your name, surname, and e-mail address is that your application cannot be considered in the recruitment process. As far as other data is concerned, the provision of such data is voluntary.
Your data might be processed outside the European Economic Area if any of our Recruiters stay in so-called “third countries.” Should this ever occur, we have put in place rigorous procedures and precautions, both organizational and technological, to ensure the security of.
VII. Online Workshop
You can register for our Vue Storefront Online Workshops using dedicated forms by providing your details as your first name, last name,business email, job title, annual revenue.
By sending a request, you confirm that you have read and understood our Privacy Policy and accept our Website Terms Use.
The basis for the processing of your data is the contract for the provision of digital content, which you concluded with us by sending the register form (Article 6 item 1 letter b of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law.
In addition, your personal data may be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of the Controller’s rights.
Recipients of your personal data will be email and server hosting providers, a provider of mailing tools, legal service providers.
Your personal data will be processed for the duration of the agreement.
Your provision of your personal data is always voluntary. At the same time, it is necessary to conclude and perform a contract with us.
VIII. Interacting with the Controller through social network profiles
You can interact with the Controller through our social media. In this case we process your publicly available personal data on the service, such as name, surname, image and, in the case of sending messages, data provided voluntarily in the content of the message.
Your personal data will be processed for the purpose of administering ours profile on social networks, by responding to messages, comments and reactions, as well as for statistical and advertising purposes carried out through the tools provided within these social networks, on the basis of the Controller's legitimate interest (Article 6 item 1 letter f of the GDPR), which is business communication with users of social networks, marketing the Controller's own services and products by providing informational content about the Controller, its services and products, and building the Controller's brand.
If you send to us more information than indicated in item 1, the basis of processing this information will be your consent (article 6 item 1 letter a of the GDPR).
In addition, your personal data may be processed for the purpose of possibly establishing, investigating or defending against claims - the legal basis for the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of your rights by the Controller.
Recipients of your personal data will be: employees and associates of the Controller.
Your personal data will be processed for the duration of the Controller's legitimate interest, no longer than you object. Your personal data which we processed under your consent, we will process no longer than you withdraw your consent which you can withdraw at any time. You can object or withdraw your consent by sending us a message to data@vuestorefront.io.
Your provision of your personal data is always voluntary. At the same time, it is necessary to contact us.
We use the "social plug-in", i.e. the Facebook, X (ex Twitter) or LinkedIn banners posted on the Website, which redirect to, respectively:
The Controller’s page maintained by him on Facebook https://www.facebook.com/vuestorefront /(hereinafter: "Facebook Profile")
The Controller’s page maintained by him on LinkedIn https://www.linkedin.com/company/vue-storefront (hereinafter: "LinkedIn Profile")
The Controller’s page maintained by him on X (ex Twitter) https://twitter.com/VueStorefront (hereinafter: "X Profile").
In connection with the Controller’s Facebook Profile, X Profile and LinkedIn Profile, as well as the posting of social plug-ins on the Site,if you are an EEA user, the co-administrator of the User data is also, respectively:
Meta Platforms Ireland Limited with its registered office in Dublin, Ireland, address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02X525, Ireland (hereinafter: "Facebook"),
LinkedIn Ireland Unlimited Company with registered office in Dublin (Ireland), address: Wilton Place, Dublin 2, Ireland (hereinafter: "LinkedIn"),
Twitter International Unlimited Company Inc. based in Dublin, Ireland, address: Fenian Street Dublin 2, D02 AX07 Ireland (hereinafter: "X")
and together with the Administrator as: "Co-Administrators").
The Co-Administrators include aggregate data analysis, the purpose of which is to display Facebook Profile, X Profile and LinkedIn Profile user activity statistics and advertising activities using the tools available there. For more information about Facebook, Linkedin and X and the arrangements between the Joint Administrators (including their responsibilities), please refer to:
Facebook's privacy policies at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/legal/terms/page_controller_addendum
Linkedin's privacy policy at: https://pl.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com%7Cli-other#other ,
X privacy policy at: https://twitter.com/en/privacy.
TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
The level of personal data protection outside the European Economic Area (EEA) differs from the one ensured by the European law. For the aforementioned reason, the Administrator shall transfer personal data outside the EEA only when this is necessary and assuring a relevant level of protection, in particular by means of:
cooperation with personal data processing entities in countries with respect to which a relevant decision of the European Commission was issued;
the application of standard contractual clauses issued by the European Commission;
the application of binding corporate rules approved by a competent supervision body;
The Administrator always informs about the intention of transferring personal data outside the EEA at the stage of collection thereof.
The Controller transfers personal data to third countries outside the European Economic Area (EEA), i.e.:
VUE STOREFRONT INC., located in California, USA – is an entity belonging to the VUE STOREFRONT Group, a VSF Sp. z o.o. shareholder and applies similar principles of personal data protection as those adopted in our Privacy Policy;
Google LLC with its registered office in California, USA - a processor only of data allowing Website traffic analysis; Privacy standards information: https://policies.google.com/privacy?hl=en-US . Google has stated that it has implemented new standard contractual clauses, which you can read about here: https://business.safety.google/adscontrollerterms/ and https://business.safety.google/adsprocessorterms/.
Meta Platforms Inc. with its registered office in California, USA – the entity that is responsible for the activity of the facebook.com Information about privacy standards: https://www.facebook.com/privacy/explanation. Meta Platforms Inc said he has implemented standard contractual clauses, which you can read about here: https://www.facebook.com/business/help/336550838147603 .
X Corp. with its registered office in San Francisco, USA – the entity that is responsible for the activity of the X.com. Information about privacy policy standards: https://twitter.com/en/privacy.
LinkedIn Corporation with its registered office in California, USA – the entity that is responsible for the activity of the linkedin.com. Information about privacy policy standards: https://www.linkedin.com/help/linkedin/answer/62533.
CookieYes Limited of 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom – the service provider of the cookies tool. The basis for cooperation is the data processing entrustment agreement and standard contractual clauses: https://www.cookieyes.com/dpa/ .
HubSpot, Inc., Two Canal Park, Cambridge, MA 02141 USA – the service provider of the CRM tool for marketing, sales, customer service, and content management. The basis for cooperation is the data processing entrustment agreement and standard contractual clauses: https://legal.hubspot.com/dpa
Netlify, Inc. 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA – the service provider of tool to web development platform. The basis for cooperation is the data processing entrustment agreement and standard contractual clauses: https://www.netlify.com/pdf/netlify-dpa.pdf .
The Controller transfers personal data outside the European Economic Area to other entities only if expressly indicated in this Privacy Policy.
YOUR RIGHTS
Concerning the processing of your personal data by the Controller, you have the right to:
access to your personal data;
correction of your personal data;
erasure of your personal data;
restriction of processing;
data portability;
object to processing;
withdraw consent for processing at any time.
To perform any of your rights, please email us at data@vuestorefront.io.
Your request will be resolved in a timely and effective manner. We might contact you to arrange details of your request.
The withdrawal of your consent will not affect the lawfulness of processing based on consent before that fact.
You have the right to object at any time to processing your data for direct marketing purposes, including profiling, if the processing is for the Controller's legitimate interest.
You may also object at any time to processing your data on grounds relating to your particular situation in cases where the legal basis for the processing is the Controller's legitimate interest.
The complaint can also be lodged with a competent supervisory authority. For Poland, the supervisory authority is the President of the Data Protection Authority (PUODO) in Poland (https://uodo.gov.pl/).
COOKIES
We use various cookies listed on the cookies banner, which may include personal data from your browser (like IP address, unique cookie identifier; unique device identifier and device type; domain, browser type and language, operating system, and system settings; country and time zone; previously visited websites; information about your interaction with our website; and access times and referring URLs).
We use cookies on Website for technical purposes and, with your consent, for functionality, experience, measurement and marketing (personalized ads).
The website does not collect any information automatically except for the information contained in cookies. Cookies necessary for the Site to function properly, which are always active and cannot be turned off. For other cookies we can collect its if you give us your consent by using banner cookies.
Denying consent for other cookies than necessary for the Site may make related features unavailable.
You can change your cookie settings at any time. For this purpose please use the icon visible at the bottom right of the Site, allowing you to go to the cookie settings or by configure your Internet browser.
We use cookies to track your website usage and understand your preferences, to determine whether an email has been opened and acted upon, and to present you with advertising relevant to your interests.
We also may receive reports based on the use of these technologies by our service/analytics providers (like Google Analytics). We use those reports to obtain statistics about traffic and site interaction so that we can improve our website and your experience.
We do not link the information we store in cookies to any personal data you submit on our site.
Third parties may also collect information via our website through cookies, third-party plug-ins, and widgets. These third parties collect data directly from your web browser, and the processing of this data is subject to their privacy policies.
Some cookies will only be used if you use certain features or select specific preferences, and some cookies are essential to the website and will always be used.
SECURITY OF PERSONAL DATA
The Controller conducts a risk analysis on an ongoing basis to ensure that personal data is securely processed by the Controller, ensuring that only authorized persons have access to the data and only to the extent necessary for their tasks. The Controller shall ensure that all operations on personal data are recorded and carried out only by authorized employees and associates.
The Controller shall take all necessary measures to ensure that his subcontractors and other cooperating entities also guarantee appropriate security measures when they process personal data on behalf of the Controller.
CHANGES IN PRIVACY POLICY
We may periodically update our Privacy Policy. We will inform you about the changes. By using vuestorefront.io , you declare that you have familiarized yourself with the privacy policy published at https://vuestorefront.io/privacy-policy .
GOVERNING LAW
Any claim relating to our Privacy Policy shall be governed by the laws of the Republic of Poland without regard to its conflict of law provisions.
QUESTIONS & CONTACT
Contact us with any issues regarding the processing of personal data or the use of cookies by emailing data@vuestorefront.io .