DESIGN PRACTICE PRIVACY POLICY
1. Introduction
At Design Practice, we take your privacy seriously and are committed to protecting your personal data. This document outlines our principles and practices for handling personal information in connection with our activities, including how we manage data on our website at www.designpractice.. This Privacy Policy complements the terms and conditions of using our website.
We provide this Privacy Policy to comply with our legal obligation to inform you about how we handle your personal data. Reading and accepting this Privacy Policy is necessary when you place an order or use our services (for example, subscribing to our newsletter), as your agreement is assumed upon order placement. We also refer to this Privacy Policy when we request information or consent from you, or in our communications with you.
Please read this document to understand when, what, and why we process your personal data. Our basis for processing your data is not always your consent; more often, it's to fulfil a contract we have with you or to comply with legal obligations. We do this in line with the General Data Protection Regulation (GDPR), the EU regulation on personal data protection, which aims to safeguard personal data and privacy rights.
2. Joint Controllers and Contact Details
Your personal data is jointly controlled by us, Paulina Kacprzak and Agnieszka Naplocha. We operate as a civil partnership under the name Design Practice Paulina Kacprzak, Agnieszka Naplocha Spółka Cywilna (Tax ID: 7451859426, Business ID: 52434027, located at str. Bruna 24/21, 02-594 Warsaw, Poland). Throughout this document, we will refer to ourselves as "Design Practice", "we", "us", or "our".
For any queries or concerns, you can reach us via email at: hello@designpractice.so
3. Personal Data - Categories, Purposes, and Legal Basis for Processing
We typically collect information directly from you when you interact with the Design Practice website, place an order, use our website's features and our electronically delivered services (like subscribing to a newsletter), or when you contact us. Most importantly, we gather data when processing and fulfilling your orders through our online store.
We might also receive your information when you use our website and services, like ordering Design Practice products or subscribing to our newsletter. Occasionally, we may get your data from third parties, such as when we receive information about your account authorization or purchase details from EasyCart, our service provider.
The extent of our relationship with you determines which parts of this Privacy Policy are applicable to you.
A. When You Contact Us
B. When You Have Ordered a Design Practice Product
C. When You Subscribe to Our Newsletter
Automated Decision-Making: We do not use your information for automated decision-making processes.
4. Entrusting, Sharing, or Transferring Data
To fulfil the purposes of processing your data for Design Practice products, we may need to entrust the processing of this information to entities that assist us in providing our services, such as cloud service providers. These service providers will only process your personal information based on our instructions under the data processing agreements we have with them.
We may also share your personal data with other entities as separate controllers of your data, for example, EasyCart, which specializes in online store solutions, or with law firms, courts, or public authorities for order processing and protecting our interests.
The specific entities involved may vary depending on the purpose:
Additionally, we may anonymize your personal data (after which it will no longer be considered "personal data") for promoting Design Practice products.
In providing services through the Design Practice website, particularly concerning the technological functionalities available on the website, we may implement data transfers outside the European Economic Area. This is done in compliance with Article 46(2)(c) of the GDPR, primarily based on standard contractual clauses approved by the European Commission. These clauses are a set of obligations ensuring an adequate level of personal data protection.
Our service providers for these activities include reputable companies like Google Inc., who provide cloud solutions and support in building and operating reliable websites and IT processes.
5. Security
We are committed to safeguarding your personal data. To achieve this, we have put in place both organizational and technical security measures that align with top standards and legal requirements. Our information security policy includes detailed instructions and measures to protect your data from destruction, loss, alteration, or unauthorized access. All members of the Design Practice team are legally bound to keep your information confidential.
Your payment details are handled by independent payment service providers, which means we do not have direct access to this data.
Please note that our website may link to other websites or applications. We are not responsible for the content or privacy practices of these third-party sites and apps. We advise you to review their privacy policies before providing any personal data.
6. Your Rights
You have several rights regarding the personal data we hold about you:
To exercise these rights or if you wish to withdraw your consent, please contact us at hello@designpractice.so.
If you believe we are not adhering to data protection regulations, you are encouraged to contact us. You also have the right to file a complaint with the supervisory authority, the President of the Office for Personal Data Protection in Poland.
7. Cookies
Our website uses "cookies" to ensure it functions properly. Cookies are small information packets stored on your device, based on your browser settings. They can store information like your identification number, IP address, device location, or pages visited, but they do not allow us to identify you personally.
We also use third-party cookies for analytical and statistical purposes (e.g., Google Analytics) and from marketing and social media providers who may access them.
You can adjust your browser settings to manage cookies. Not adjusting your settings is considered as consent to our use of cookies.
8. Changes to the Personal Data Policy
We may update or change the way we process personal data. Any such changes will be reflected in the latest version of our Privacy Policy, which will be published on the Design Practice website.
This Privacy Policy is effective as of 6 February 2024.