Privacy policy

Privacy Policy sets out the rules for the processing and protection of personal data provided by Users of the website krakil.pl, hereinafter referred to as the Website.

1. The administrator of personal data contained on the Website is the company Museum of Illusions l.l.c. (Muzeum iluzji sp. z o.o.) with registered office in Cracow, Straszewskiego Street 15, NIP 6762552646, REGON 380835747, hereinafter referred to as the Administrator.
2. The website processes your personal data for the following purposes:

• To provide information about Users entered in the forms based on their consent
• To transfer your personal data to ING Bank Śląski S.A. (“Bank”) in regard to:
  • The provision of the Bank to the Website of the service for providing infrastructure for servicing payments via the Internet  (legal basis: Article 6(1)(f) of the Regulation).
  • The Bank’s handling and settlement of payments made by customers of the Website via the internet using payment instruments (legal basis: Article 6(1)(f) of the Regulation).
  • In order to have the Bank verify proper performance of agreements concluded in the Online Store, in particular to ensure the protection of the interests of payers in connection with their complaints (legal basis: Article 6(1)(f) of the Regulation).
• To provide your personal data to Twisto Polska sp. z o.o. in relation to the possibility of offering payment for the purchased goods or services by Twisto Polska sp. z o.o. under the contract of mandate covering the  “Buy with Twisto” („Kup z Twisto”) purchasing formula and making the purchasing formula available by the Online Store, as well as for verification by Twisto Polska sp. z o.o. of proper performance of such contracts of mandate (legal basis: Article 6(1)(f) of the Regulation)

3. The scope of the personal data processed: name and surname, e-mail address.
4. The data provided is processed for the purpose related to the function of a specific form, e.g. to answer a given question, to register the User on the Website or to pay via the payment operator.
5. In regard to the processing of personal data for the purposes set out in paras. 2-4, your personal data may be made available by the Online Store to other  recipients or categories of recipients of personal data, which may be:
   • ING Bank Śląski S.A.
   • Twisto Polska sp. z o.o.
6. The User who has entered the data in the form has the right to:

• view, modify, delete, personal data,
• limit processing and request to stop processing their data at any time,
• withdraw consent at any time – withdrawal of consent does not affect the legality of the processing carried out before the withdrawal,
• transfer data to another personal data administrator,
• submit a complaint to a supervising authority.

7. The User who has entered an agreement in accordance with the Website’s regulations has the right to:

• view, modify, delete, personal data,
• limit processing and request to stop processing their data at any time,
• withdraw consent at any time – withdrawal of consent does not affect the legality of the processing carried out before the withdrawal,
• transfer data to another personal data administrator,
• submit a complaint to a supervising authority.

8. Personal data provided by the User in the form will be processed for a period no longer than it is necessary for the purposes which they were provided for, and until the Administrator’s legal, accounting and tax obligations exist, and until any claims are time-barred. If consent has been given to the processing of personal data – until the consent is withdrawn.
9. The Administrator exercises due diligence in order to adequately secure the personal data provided, in particular, against the disclosure to unauthorized persons.
10. Personal data provided may be made available only to entities that have a legal basis resulting from the provisions of Polish law.
11. The entities collecting and processing personal data on the Website are largely from Poland and the countries of the European Economic Area (EEA). Some of the providers are based outside the EEA (e.g. Google Inc. is based in the USA and provides a website statistics service called Google Analytics). These entities are required to comply with the principles set out in the EU-US Privacy Shield program regarding the collection, use and storage of personal data of European Union citizens (Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of protection provided by the EU-US Privacy Shield) and contractual clauses adopted by the EU Commission.
12. In the event that the personal data is provided for the entry into an agreement with the Website, provision of personal data is a requirement for the conclusion of such agreement. Providing personal data is voluntary. Notwithstanding, failure to provide the necessary personal data will result in the inability to conclude an agreement with the Website.

• In the event that you provide your personal data in order to transfer your personal data to Twisto Polska sp. z o.o. before concluding the agreement for the sale of goods or services purchased on the Website, the provision of this data is a condition for the conclusion of a sales agreement in connection with the business model adopted by the Website.
• If your personal data is transferred to the Bank in connection with the handling and settlement of your payments to the Website, the provision of data is required in order for the payment to be made and the confirmation of the payment to be provided by the Bank in regard to the Website.
• If your personal data is transferred to the Bank for the purpose of the verification by the Bank of the proper performance of contracts concluded with the Website, in particular to ensure the protection of payers’ interests in connection with their complaints, the provision of this data is required to enable the performance of the contract concluded between the Website and the Bank.
• If your personal data is transferred to Twisto Polska sp.z.o.o. in relation to the possibility of having Twisto Polska sp.z.o.o. offer you a payment for the price of the service you purchased under the contract of mandate which includes the “Buy with Twisto” purchasing formula, and making this formula available via the Website, providing this data and processing it for this  purpose is necessary in regard to the business model of running the business adopted by the Website, and in order to implement the contract concluded between the Website and Twisto Polska sp.z.o.o.

13. Legal grounds regarding the processing of personal data:

• Provision of Electronic Services Act of 18 July 2002;
• Telecommunications Law (PrTel) Act of 16 July 2004;
• EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

Contact

Questions regarding the privacy policy should be addressed to: [email protected].
The Administrator reserves the right to change the privacy policy. Any changes will be made available on the Website without delay.

Cookies policy

Cookies are IT data stored on Users’ end devices, intended for the use of websites.

1. The Website krakil.pl does not automatically collect any information, except for that contained in cookies. That includes: IP address, domain name, browser type, operating system type and data on the User’s navigation path and the time spent on specific subpages.
2. The Administrator may use cookies to:

• increase the usability of the website and adjust its content  to the individual preferences of the User
• create anonymous statistics based on the Google Analytics system (analysis of Users’ activities on the website and demographic data), excluding the possibility of identifying the User
• display remarketing ads via the Google AdWords system to Users who visited the website
• display personalized advertisements, tailored to the interests of users and their online behavior

3. Detailed information on managing cookies may be found in the web browser settings. With the help of these settings, it is possible to define the scope of the User’s consent to place such files in their browser. However, limiting or preventing the use of cookies may affect some of the functionalities of the Website.

Contact

Questions regarding the use of cookies should be addressed to: [email protected]. The Administrator reserves the right to change the cookies policy. Any changes will be made available on the Website without delay.

Safety rules

1. Users should be mindful of the security of their devices with internet access. The device should have an anti-virus program with an up-to-date virus definition database, an up-to-date and secure version of the web browser and “firewall” enabled.
2. It is advised to turn on anti-phishing filters (tools) in the web browser, which check whether the displayed website is authentic and is not intended to be phishing, e.g. by impersonating an institution or an economic entity.
3. It is advised to take caution when opening attachments or clicking links in e-mail messages that the User did not expect, e.g. from unknown senders. In case of doubt, it is worth contacting the sender, e.g. by phone.
4. Files should only be downloaded from trusted sources. Installing a software from an unverified source is very risky.The User using a home Wi-Fi network should set a strong and secure password to access the network.
5. It is also advised to use the highest possible standards of encryption of Wi-Fi wireless networks, which are able to run on the User’s equipment, e.g. WPA2.