Zamień ten tekst na URL Webhooka

Privacy and Cookie Policy

DESIGN PRACTICE PRIVACY POLICY

1. Introduction

At Design Practice, we take your privacy seriously and are committed to protecting your personal data. This document outlines our principles and practices for handling personal information in connection with our activities, including how we manage data on our website at www.designpractice.. This Privacy Policy complements the terms and conditions of using our website.

We provide this Privacy Policy to comply with our legal obligation to inform you about how we handle your personal data. Reading and accepting this Privacy Policy is necessary when you place an order or use our services (for example, subscribing to our newsletter), as your agreement is assumed upon order placement. We also refer to this Privacy Policy when we request information or consent from you, or in our communications with you.

Please read this document to understand when, what, and why we process your personal data. Our basis for processing your data is not always your consent; more often, it's to fulfil a contract we have with you or to comply with legal obligations. We do this in line with the General Data Protection Regulation (GDPR), the EU regulation on personal data protection, which aims to safeguard personal data and privacy rights.

2. Joint Controllers and Contact Details

Your personal data is jointly controlled by us, Paulina Kacprzak and Agnieszka Naplocha. We operate as a civil partnership under the name Design Practice Paulina Kacprzak, Agnieszka Naplocha Spółka Cywilna (Tax ID: 7451859426, Business ID: 52434027, located at str. Bruna 24/21, 02-594 Warsaw, Poland). Throughout this document, we will refer to ourselves as "Design Practice", "we", "us", or "our".

For any queries or concerns, you can reach us via email at: hello@designpractice.so

3. Personal Data - Categories, Purposes, and Legal Basis for Processing

We typically collect information directly from you when you interact with the Design Practice website, place an order, use our website's features and our electronically delivered services (like subscribing to a newsletter), or when you contact us. Most importantly, we gather data when processing and fulfilling your orders through our online store.

We might also receive your information when you use our website and services, like ordering Design Practice products or subscribing to our newsletter. Occasionally, we may get your data from third parties, such as when we receive information about your account authorization or purchase details from EasyCart, our service provider.

The extent of our relationship with you determines which parts of this Privacy Policy are applicable to you.

A. When You Contact Us

  • What We Collect: Your name, email address, telephone number, and any other information you share with us.
  • Why We Collect It:
  • At your request, which we interpret as your express consent to process this data (Article 6(1)(a) GDPR).
  • On the basis of our legitimate interest to provide answers to the questions you ask us (Article 6(1)(f) GDPR).
  • Your Choice: Sharing your personal data is voluntary, but necessary for us to respond to your queries.
  • How Long We Keep It: We retain your information for as long as we need to resolve your case or until legal claims related to your case can no longer be made.

B. When You Have Ordered a Design Practice Product

  • What We Collect: Your name, email address, tax ID (if you provide it), billing details, and telephone number.
  • Why We Collect It:
  • To prepare and conclude a contract with you for the sale of digital products, or for the provision of electronically delivered services (Article 6(1)(b) GDPR).
  • To comply with tax and legal obligations associated with fulfilling your order and processing payments (Article 6(1)(c) GDPR).
  • For managing the quality of our products and for analytical purposes (Article 6(1)(f) GDPR).
  • Your Choice: Providing this data is voluntary, but necessary to complete your purchase.
  • How Long We Keep It: We store your data for the duration of our contract or until legal claims regarding that contract expire.

C. When You Subscribe to Our Newsletter

  • What We Collect: Your name (and surname, if applicable) and email address.
  • Why We Collect It:
  • In our legitimate interest, which includes building our professional image, promoting digital design initiatives, and direct marketing of our services (Article 6(1)(f) GDPR).
  • Your Choice: Your decision to provide this data is voluntary, but required for us to send you the newsletter.
  • How Long We Keep It: We process this data as long as our business runs, or until you withdraw your consent for us to send the newsletter.

Automated Decision-Making: We do not use your information for automated decision-making processes.

4. Entrusting, Sharing, or Transferring Data

To fulfil the purposes of processing your data for Design Practice products, we may need to entrust the processing of this information to entities that assist us in providing our services, such as cloud service providers. These service providers will only process your personal information based on our instructions under the data processing agreements we have with them.

We may also share your personal data with other entities as separate controllers of your data, for example, EasyCart, which specializes in online store solutions, or with law firms, courts, or public authorities for order processing and protecting our interests.

The specific entities involved may vary depending on the purpose:

  1. For newsletter distribution, this includes IT system providers and email operators.
  2. When you contact us, it may involve email or postal operators, IT service providers, and our consultants and advisers (including legal advisers) as necessary.
  3. For order processing, this extends to include payment operators, our subcontractors, and other entities involved in fulfilling the contract.

Additionally, we may anonymize your personal data (after which it will no longer be considered "personal data") for promoting Design Practice products.

In providing services through the Design Practice website, particularly concerning the technological functionalities available on the website, we may implement data transfers outside the European Economic Area. This is done in compliance with Article 46(2)(c) of the GDPR, primarily based on standard contractual clauses approved by the European Commission. These clauses are a set of obligations ensuring an adequate level of personal data protection.

Our service providers for these activities include reputable companies like Google Inc., who provide cloud solutions and support in building and operating reliable websites and IT processes.

5. Security

We are committed to safeguarding your personal data. To achieve this, we have put in place both organizational and technical security measures that align with top standards and legal requirements. Our information security policy includes detailed instructions and measures to protect your data from destruction, loss, alteration, or unauthorized access. All members of the Design Practice team are legally bound to keep your information confidential.

Your payment details are handled by independent payment service providers, which means we do not have direct access to this data.

Please note that our website may link to other websites or applications. We are not responsible for the content or privacy practices of these third-party sites and apps. We advise you to review their privacy policies before providing any personal data.

6. Your Rights

You have several rights regarding the personal data we hold about you:

  • Access and Copy: You can request access to and a copy of your personal data in our records, subject to certain legal exceptions.
  • Rectification: You have the right to correct outdated or inaccurate personal data.
  • Erasure and Restriction: You can ask us to erase or limit the processing of your personal data, unless we need to keep processing it for legal or tax reasons, or for defending against potential claims or proceedings.
  • Data Portability: In certain situations, you can get your personal data in a structured, machine-readable format and request that we transfer it to another data controller.
  • Withdrawal of Consent: You can withdraw any consent you have given us at any time, but this does not affect the lawfulness of any processing done before you withdrew your consent.

To exercise these rights or if you wish to withdraw your consent, please contact us at hello@designpractice.so.

If you believe we are not adhering to data protection regulations, you are encouraged to contact us. You also have the right to file a complaint with the supervisory authority, the President of the Office for Personal Data Protection in Poland.

7. Cookies

Our website uses "cookies" to ensure it functions properly. Cookies are small information packets stored on your device, based on your browser settings. They can store information like your identification number, IP address, device location, or pages visited, but they do not allow us to identify you personally.

We also use third-party cookies for analytical and statistical purposes (e.g., Google Analytics) and from marketing and social media providers who may access them. 

You can adjust your browser settings to manage cookies. Not adjusting your settings is considered as consent to our use of cookies.

8. Changes to the Personal Data Policy

We may update or change the way we process personal data. Any such changes will be reflected in the latest version of our Privacy Policy, which will be published on the Design Practice website. 

This Privacy Policy is effective as of 6 February 2024.