audio bible

Privacy Policy

Privacy Policy of the Audio Bible Online Store

DEFINITIONS

Administrator: "OSORNO MEDIA sp. z o.o. ", based in Warsaw, 109 Zdrojowa St., 02-927 warszawa NIP: 118-219-25-36 REGON: 383-076-414, contact with the Administrator: [email protected].pl;

PersonalData: personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 7, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC;

Account: A collection of information stored on the Site and in the Service Provider's data communications system concerning a given Site User and the orders placed and purchases made by him/her, available after registration on the Site in the https://bibliaaudio.pl/sklep space;

Person whose personal data are processed: hereinafter also referred to as "DataSubject". - any person whose personal data is processed by the Administrator in connection with the operation of the Service;

RODO: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 7, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC;

Service: the Audio Bible website available at https://bibliaaudio.pl/sklep. In the legal sense, it is an electronically provided service for viewing content, concluding distance sales agreements and making payments for purchased products;

Service User: any person using the Service, including registering with the Service or purchasing products offered on the Service.


PERSONAL DATA CONTROLLER

The Administrator of the Service User's Personal Data is "OSORNO MEDIA sp. z o.o. ", with registered office in Warsaw, 109 Zdrojowa St., 02-927 warszawa NIP: 118-219-25-36 REGON: 383-076-414

In all matters related to the processing of Personal Data, the Service User may at any time contact the Administrator at the above address, as well as by email at [email protected].


GENERAL PRINCIPLES OF PERSONAL DATA PROCESSING BY THE CONTROLLER

In connection with its business activities, the Administrator collects and processes Personal Data in accordance with the relevant regulations, including in particular the RODO, and the data processing rules provided therein.

The Administrator ensures transparency in the processing of Personal Data, in particular, always informs about the processing of data at the time of collection, including the purpose and legal basis of processing, such as when concluding a contract for the sale of goods. The Administrator shall ensure that Personal Data is collected only to the extent necessary for the indicated purpose and processed only for the indicated period of time as necessary to fulfill the purpose.

When processing Personal Data, the Administrator shall ensure its security and confidentiality and access to information about such processing for Data Subjects. In the event that, despite the security measures in place, there is a breach of the protection of Personal Data (e.g., data "leakage" or loss), the Administrator shall inform Data Subjects of such event in a manner consistent with the regulations.


GROUNDS FOR PROCESSING PERSONAL DATA

The Administrator processes Personal Data only if it has one of the below-mentioned legal bases provided for by the provisions of the RODO, only for the purposes justified by the given basis and only to the extent necessary to realize these purposes.

1. Personal Data necessary for the performance of the contract for the provision of electronic services (Article 6(1)(b) RODO)

Registration in the Service means concluding an agreement with the Administrator for the provision of electronic services. As a result of concluding this agreement, an Account is created for the Service User in the Service.

In this case, the Service User's Personal Data is processed for:

  • establishment of an Account for him in the Service;
  • to provide him with the service of maintaining the Account and guaranteeing its operation to enable him to use the Account and all functionalities available on the Website, including placing orders and paying for them electronically;
  • To resolve technical problems that may arise in connection with the Service User's use of the Account;
  • handling inquiries, requests and complaints in connection with the provision of services electronically;
  • To contact the Service User in matters related to the provision of electronic services to him/her and in matters related to orders placed by him/her through the Account.

2. Personal Data necessary to perform the contract of sale of products offered through the Service (Art. 6 (1) (b) RODO)

In a situation when Service User places an order in the Service, a contract for sale of a product is concluded between him/her and the Administrator. In such a situation Service User Personal Data is processed by the Administrator in order to:

  • service and fulfillment of a placed order for a product, including for the purpose of delivering the product to the Service User, i.e. the performance of the product sales agreement concluded between him/her and the Administrator;
  • guarantee the operation of payment systems, using which you can pay for the ordered product;
  • complaint handling;
  • handling inquiries and requests related to the concluded product sales contract;
  • To contact the Service User on matters related to the concluded product sales agreement.

3. Personal Data necessary to fulfill legal obligations (Art. 6(1)(c) RODO)

On this basis, the Administrator processes Personal Data for accounting and tax purposes, also for the purpose of issuing an invoice for the purchased product and for the purpose of possible inspections.

4. Personal Data necessary for the purposes of legitimate interests pursued by the Administrator (Article 6(1)(f) RODO)

On this basis, the Administrator processes the Service User's Personal Data when it is justified by its legitimate needs, which are:

  • Handling of requests and inquiries made by the Service User and contacting the Service User on matters not directly related to contracts concluded with the Administrator;
  • Investigation of possible claims of the Administrator or defense against claims;
  • Conducting marketing activities by the Administrator, including promotion of its own products and services, and contacting the Service User in this matter, including, with his/her consent, by telephone and email, also in the form of a Newsletter;
  • Organizing contests and events;
  • Monitoring the services provided by the Administrator and improving their quality;
  • Monitoring and performing evaluation and interests of Service Users and matching products and services to their needs;
  • conducting analysis and statistics;
  • To ensure the security of the services provided by the Administrator.

5. Personal Data processed on the basis of consent given by the Service User (Article 6.1.a) RODO).

In any other case, the basis for the Administrator's processing of Personal Data is the Service User's previously expressed voluntary consent, and the Service User's Personal Data is used only for the purpose and to the extent specified in the content of the consent (Article 6(1)(a) RODO).

The content of the consent for each activity requiring it is presented by the Administrator to the Service User for approval.

SCOPE OF PERSONAL DATA PROCESSED

(1) In order to conclude an agreement for the provision of services electronically with the Administrator in the form of creating an Account on the Website, it is necessary for the Website User to provide the following data:

  • Name, email address and password.

Without providing the above data, it will not be possible to register on the Website and create an Account.

(2) In order to conclude and execute a contract for the sale of a product offered through the Service, and then properly perform the contract, it is necessary for the Service User to provide the following data:

  •  Name, email address and address (street, house number, city, postal code), phone number.

Without providing the above data, it will not be possible to purchase the product on the Website.

(3) In order to purchase a product in the course of business, it is necessary for the Service User to provide the following additional data:

  • company name, address (street, house number, city, postal code) and tax ID number.

For the purchase of a product in the course of business, the obligation to provide the above data arises from the provisions of tax law. Without providing them, it will not be possible to purchase a product on the Website in the course of business.

(4) The Administrator conducts marketing activities including promotion of its own products and services, as well as organizes contests and events, and for this purpose processes the Personal Data provided by the Service User during registration for the Service. However, in order to be able to send promotional materials (including Newsletters) via e-mail, the Administrator is required to obtain the Service User's consent to receive commercial information on a telecommunications terminal device.

Without expressing the aforementioned consent, it will not be possible to send the Service User information about news, offers and promotions of Audio Bible (including in the form of Newsletter).

(5) In order to order the Newsletter by a person who is not a registered and logged-in User of the Service, it is necessary to provide the following data:

- email address;

and consent to the Administrator's processing of the Service User's Personal Data for marketing purposes, including the sending of marketing information (including commercial information) regarding the Administrator via email, among others in the form of a newsletter, as well as consent to receive commercial information on a telecommunications terminal device.

Without providing the above data and expressing the above consents, it will not be possible to send the Service User information about news, offers and promotions of Audio Bible (including in the form of Newsletter).

(6) Whenever the Administrator processes Personal Data on the basis of the Service User's consent, its expression is voluntary.


RECIPIENTS OF PERSONAL DATA

In order to achieve the purposes indicated above for which the Administrator processes Personal Data, the Administrator makes the Personal Data of Service Users available to the following entities:

  • entities by means of which the Administrator provides services electronically and through which the conclusion of a sales agreement for products offered through the Service takes place between the Administrator and the Service User, and which support the Administrator in their performance, i.e. (i) the operator of the Biblia Audio Internet Store, which is currently Shoplo Sp. z o.o. with its registered seat in Warsaw (00-189) at 4 C Inflancka St., (ii) banks and payment operators enabling electronic payment for the product ordered through the Service, (iii) entities with whose help the Administrator uses to realize an order placed through the Service, i.e. e.g. courier companies;
  • the Administrator's employees, associates and subcontractors, including entities providing accounting services to the Administrator, marketing services including, but not limited to, preparation of promotional and advertising materials, including newsletters, archiving and document destruction services, legal services, correspondence delivery services or other entities whose services the Administrator uses in the course of its business;
  • to public administration bodies and other public entities, if required by applicable laws, to the extent and for the purposes arising from those laws
  • Google LLC, headquartered in the United States, which provides the Administrator with tools to make statistics and conduct analysis on the Service User's use of the Service.


COOKIES

The activity of the Service uses cookies, i.e. text-number files, which are recorded by the ICT system in the ICT system of the Service User's device (on the computer, phone or other device from which the connection with the Service was made) while browsing the Service and allow for subsequent identification of the Service User in case of reconnection with the Service.

Cookies collect data on the Website User's use of the Website, and their main purpose is to facilitate the use of the Website and improve its functionality, adapt the Website to the needs and expectations of the Website User, study traffic within the Website and for statistical purposes.

Cookies allow the Service User to display content that may be more appealing to them based on their past behavior.

Information collected using cookies may also be used to collect information for commercial purposes.

Among the cookies used by the Service are:

  • files that are necessary for the operation of the Service; files belonging to this category may be used, for example, for these purposes, to provide: maintaining the session of the Service User, saving the session state of the Service User, or enabling authorization of the Service User;
  • files that improve the functionality of the Website; files belonging to this category may be used, for example, for these purposes, to enable: restoring the last visited view the next time you log in to the product; restoring the Website User's session, or remembering the last selected product category;
  • files that support activities aimed at improving the Administrator's offer and supporting its marketing activities, files belonging to this category may be used, for example, for the following purposes: monitoring traffic on the website of the Service; collecting anonymous, aggregate statistics and analysis that allow understanding how the Service Users use the website of the Service, which enables the improvement of products offered by the Administrator or researching subscriptions to newsletters.

In order to make statistics and analysis of the Website User's use of the Website, the Administrator uses the Google Analytics tool offered by Google LLC, based in the United States, which uses cookies stored on the Website User's device.

The information obtained by the cookie about the Service User's use of the Service is usually transmitted to a Google server in the USA and stored there.

For more information on how Google Analytics processes your data and the steps taken to ensure its confidentiality and security, see the Google Analytics Privacy and Data Security Policy available at HERE.

If a User of the Website does not want cookies to be stored in the memory of his/her device used to use the Website, he/she may at any time change the settings concerning cookies in the settings of his/her browser. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the browser settings or inform about their placement in the device each time.

At the same time, the Administrator stipulates that after rejecting cookies, some of the functions offered by the Website may not function properly, and even in some cases this may involve the complete inability to use some of the Website's functions.

If a Service User does not change the cookie settings in his/her web browser and begins to use the Service by clicking "I agree" or using the "X" button to close the window informing about the Administrator's use of cookies, it will mean that the Service User has consented to the storage of cookies on his/her terminal device and to the Administrator's use of the information stored in cookies for the purposes described above.


PROFILING

The Administrator also processes the Personal Data of Service Users in an automated manner, including may perform profiling, consisting of analyzing the preferences and interests of Service Users in order to present them with offers tailored to them. However, such automated processing does not and will not constitute the exclusive basis for decisions taken against the Person whose Personal Data is processed and will not produce legal effects against him or similarly significantly affect him, and is therefore not profiling within the meaning of Article 22 RODO. If this is not the case, the Administrator will ask the Service User to provide the appropriate consent.


TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Service User Personal Data may be transferred outside the European Economic Area (EEA). In the event that data is transferred outside the EEA, or data is made available outside the EEA, the Administrator shall ensure that it will take all appropriate measures to guarantee adequate protection of Service User Personal Data, and that such data will be processed only by entities that provide data protection adequate to the standards applicable in the European Union.

Personal Data may also be transferred outside the European Economic Area to Google LLC in the United States, meeting all the requirements of the Privacy Shield program, which establishes a framework recognized by the European Commission to ensure an adequate level of protection for personal data transferred from entities in the European Union to entities in the United States.


RETENTION PERIOD OF PERSONAL DATA

Personal Data collected by the Administrator for the purpose of entering into and performing an agreement for the provision of services by electronic means is processed for the duration of the agreement, i.e. for the period in which the Service User uses his/her Account in the Service, as well as after its termination until the expiration of the statute of limitations for claims arising from the agreement.

Personal Data collected by the Administrator for the purpose of entering into and performing a contract for the sale of a product ordered by a Service User through the Service are processed for the period necessary for the execution of the contract and delivery of the product, as well as after its execution until the expiration of the statute of limitations for claims arising from the contract, and data necessary for the performance of obligations provided by law: accounting and tax - until the expiration of time limits specified in the relevant regulations.

If the basis for the processing of Personal Data is the legitimate interest of the Controller, the Data shall be processed for the period of time that allows for its fulfillment or until the Data Subject raises a valid objection to such processing, unless the Controller, pursuant to the RODO, is authorized to continue processing the Personal Data despite the objection raised.

Personal Data processed for contests or events are processed for the duration of the contests or events and the period necessary for tax settlements and for the period provided by law.

In any case of Personal Data processed by the Administrator for accounting and tax purposes, the data shall be processed for the period required by law after the end of the year in which the tax payment deadline has passed.

Personal Data processed on the basis of the Service User's consent will be processed by the Administrator until the Service User withdraws the consent, unless the Administrator can continue to process the Personal Data on another legal basis.


RIGHTS OF THE PERSON WHOSE PERSONAL DATA IS PROCESSED

The Administrator guarantees that all rights of Data Subjects under applicable laws, in particular the RODO, are respected in the processing of Personal Data. A Person whose Personal Data is processed may request from the Administrator access to his/her Personal Data, rectification, erasure or restriction of processing. In addition, he or she has the right to object to the Administrator's processing of his or her Personal Data, the right to request its transfer, and the right not to be subject to automated decision-making, including profiling.

Specific rights of the Person whose Personal Data is processed by the Administrator:

  • The right to obtain confirmation from the Administrator as to whether a person's Personal Data is being processed and, if so, the right to request from the Administrator access to his or her Personal Data and to obtain a copy thereof;
  • The right to request the Administrator to promptly rectify your Personal Data that is inaccurate or to request the completion of incomplete data;
  • The right to request from the Controller the immediate deletion of their Personal Data ("right to be forgotten"). This right is available to the Data Subject, to the extent permitted by the provisions of the RODO, in the following cases:
  • When its Personal Data is no longer necessary for the purposes for which it was collected;
  • when it has withdrawn its consent to the processing of its Personal Data, and there is no other legal basis for its processing;
  •  when she has objected to the processing of her Personal Data and there are no overriding legitimate grounds for the processing or when the objection relates to the processing of Personal Data for direct marketing purposes;
  •  when her personal data was processed unlawfully by the Administrator;
  • when its personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State to which the Administrator is subject;
  • The right to request the Controller to restrict the processing of their Personal Data. The Data Subject has this right in the following cases:
  • when it notices that its Personal Data is inaccurate, in which case it may request the Administrator to restrict the processing of its data for a period of time allowing the Administrator to verify the accuracy of such data;
  •  when its Personal Data is processed unlawfully, and the Data Subject objects to the erasure of its data by the Controller, in which case the Data Subject may request a restriction on its use instead;
  • when the Controller no longer needs to process his or her Personal Data for his or her purposes, but it will be needed by the Data Subject to establish, assert or defend claims;
  • when she raises an objection to the processing of her Personal Data, in which case she may request the Administrator to restrict the processing of her data until it is determined whether the legitimate grounds on the part of the Administrator override the grounds for her objection.

With respect to those Personal Data that the Controller processes on the basis of consent given or on the basis of a contract, and where the processing is carried out by automated means, the Data Subject may request the Controller to transfer his or her Personal Data.


RIGHT TO OBJECT

The Data Subject shall have the right at any time to object to the Administrator to the processing of his/her Personal Data in the following situations:

  • if the processing of Personal Data is necessary for the purposes of legitimate interests pursued by the Controller or a third party, and the objection is justified by the particular situation faced by the Data Subject. In such a situation, the Controller will cease to process the Personal Data for the aforementioned purposes, unless the Controller demonstrates that, with respect to such Personal Data, there are compelling legitimate grounds for processing that override the interests, rights and freedoms of the Data Subject, or if the Personal Data is necessary for the possible establishment, investigation or defense of claims;
  • if the Personal Data is processed for direct marketing purposes, including being profiled for that purpose. In such a situation, the Administrator will stop processing Personal Data for direct marketing purposes.


THE RIGHT TO WITHDRAW CONSENT TO THE PROCESSING OF PERSONAL DATA

Whenever the Controller processes Personal Data on the basis of consent granted, the Data Subject has the right to withdraw consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Consent may be withdrawn by contacting the Administrator in this matter in writing at "OSORNO MEDIA sp. z o.o.", with its registered office in Warsaw, 109 Zdrojowa St., 02-927 warszawa NIP: 118-219-25-36 REGON: 383-076-414 or by sending an email to [email protected] or by using the link that will be included each time in the content of an email or text message sent by the Administrator, if sending this type of correspondence was the subject of consent.


THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Any person who believes that the Administrator's processing of his or her Personal Data violates the provisions of applicable law, including, in particular, the RODO, has the right to lodge a complaint with the competent supervisory authority in charge of personal data protection (in Poland, this is the President of the Office for Personal Data Protection).

    Basket
    Your shopping cart is emptyContinue shopping
      Calculate Shipping