Privacy policy and protection and processing of personal data
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (referred to as "GDPR", "ORODO", "GDPR" or "General Data Protection Regulation"), we inform Users about the processing of their personal data and the principles on which it takes place.
1.1. The controller of Users' personal data is Mustangclinic Adam Gertig with its registered office in Dąbrówka 62-070, Widok Street 1, registered in CEIDG under the Tax Identification Number (NIP): 7791592206, hereinafter referred to as the Controller.
1.2. The Administrator attaches great importance to protecting the privacy of Users and, as a data controller, protects and secures them against access by unauthorized persons.
1.3. User data is used for purposes related to the operation of the website, including sales records, to contact the User in matters relating to orders, to fulfill orders placed by the User, to tailor the content of the website to the User's preferences, to ensure the security of services, to make measurements that enable the improvement of services, for statistical purposes and for marketing purposes such as mailing and remarketing.
1.4. User data collected by the Administrator for the purposes listed in section 1.3 includes: first name, last name, address, email address, telephone number, and optionally: IP address, browser type and session ID, bank account number, date of birth. In the case of Sellers, these also include: company name, Tax Identification Number (NIP), and company registered office address.
1.6. Your personal data may be transferred to our subcontractors, in particular IT solution providers and other entities with whom the Controller cooperates, solely in connection with the achievement of our goals.
1.7. In accordance with applicable law, pseudonymous User data is transferred to entities processing it on behalf of the Controller, e.g. marketing agencies and entities providing statistical services.
1.8. User data may be made available to state authorities authorized to receive them under applicable law and, in the event of unpaid amounts due to the Administrator, to entities conducting debt recovery proceedings on its behalf.
1.9. The legal basis for processing User data for the provision of services is the necessity to perform the contracts for their provision (such a contract is the Terms and Conditions). The legal basis for tailoring the content of services to User preferences, ensuring their security, and improving the services, as well as the Controller's internal marketing, is the Controller's legitimate interest.
1.10. The User has the right to access the content of their data and to rectify, delete or limit their processing. The user may also withdraw consent to the processing of personal data.
1.11. The User's personal data is stored by the Administrator indefinitely, until the User expresses a wish to delete it.
1.12 If you have any questions regarding the processing of your personal data, you may contact the Controller for information. You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.