Privacy Policy

1Summary – most important information

We care of your privacy and of your time. That is why, we prepared for you a summary of the most important information regarding privacy protection.

• By creating an account, placing an order, filing a complaint, withdrawing from the agreement, subscribing to newsletter, or simply by contacting us, you provide us with your personal data, and we guarantee that your data will remain confidential, safe and will not be made available to any third party without your explicit consent.
• We delegate the processing of personal data only to reliable and proven entities providing services involving the processing of personal data.
• We utilise Google Analytics analytical tools which collect data on your visits to website, such as subsites you viewed, time you spent on the site and re-directions between individual subsites. To this end, cookies by Google LLC company regarding Google Analytics service are used.
• We use own cookies for proper the functioning of the website, in particular user’s account, process of placing an order. Besides, own cookies can be used for tracking your actions taken within the shop, in particular for displaying prompts regarding previously browsed products.

If the above information is insufficient to you, below you can find more detailed data.

2Personal data

Your personal data controller, under the provisions of personal data protection, are Lukasz and Boguslawa Depkun, who jointly run the business activity in the form of a civil law partnership under the name “GROSIK S.C. Lukasz i Boguslawa Depkun”, Degucie 4, 16-500 Sejny, VAT ID NO.: PL8442351410, REG ID NO.: 200764814.

Purpose, legal basis and term of processing of personal data are indicated independently from each purpose of processing (see below: description of individual purposes of processing of personal data).

Rights. Under the GDPR, you have the potential rights related to the processing of your personal data:

1. right of access to personal data,
2. right to rectify personal data,
3. right to remove personal data,
4. right to restrictions on the processing of personal data,
5. right to raise an objection against the processing of personal data,
6. right to data portability,
7. right to bring an action to supervisory authority,
8. right to your withdraw consent to the processing of personal data, of you consented so.

Rules related to the performance of the indicated rights are described in detail in art. 16-21 of the GDPR. We kindly invite you to take a look at those regulations. For our part, we find it necessary to explain that the rights set out above are not absolute and you will not have them in relation to all actions concerning the processing of your personal data. For your convenience, we made every effort that every description of processing operations on personal data indicate your rights resulting from those operations.

It should be noted that you have the right to one of the above right at all times - if you find that when processing of your personal data we were in breach of the regulations on personal data protection, you may bring a complaint to the supervisory authority (President of the Personal Data Protection Office).

You can always require from us to provide you with information which data we are holding about you and the purpose for which it is processed. All you need to do is send us e-mail on info@mysilvertreasure.com. Still, we use best efforts that all the desired information is fairly presented in this privacy policy. You can also send any questions related to the processing of your personal data on the above e-mail address.

Security. We guarantee complete confidentiality of personal data submitted to us. We ensure that all appropriate security and safety measures are taken under provisions on the protection of personal data. Personal data is collected with due diligence and properly protected from access by unauthorised persons.

Data recipients. Your data may be processed by our subcontractors, i.e. entities whose services we make use of while processing of data and providing services electronically to you or while completing orders in the online shop.

1. hosting provider - for the purpose of storing personal data on a server processed within the shop,
2. invoicing software provider - for the purposes of using invoicing system that is used to processing of personal data of shop clients for whom the invoice is issued,
3. accountancy office - for the purposes of use of external accountancy office which processes data of online shop clients presented on invoices documenting purchases made in the shop,
4. courier company - for the purposes of use of postal and courier services to the extent necessary to deliver orders

All entities whom we delegate the processing of personal data guarantee applying proper means of safety and protection of personal data as required by law.

Purposes and processing activities

User account. By creating user account, you need to provide data necessary to create the account, such as e-mail address, full name and password. Providing data is voluntary, but necessary to create the account. In the account edition process, you can provide further data.

Data provided by you in relation to the creation of an account are processed for the purpose and keeping account under the agreement for provision services by electronic means through registration of account (art. 6 paragraph 1 point b of the GDPR).

Data contained in the account will be processed as long as the account is functioning. If you decide to remove the account, we will also remove data contained in it. It should be noted that removing an account does not mean removing information on orders placed by you with the use of the account.

You can rectify your data in the account at any time. You can remove the account at any time. You also have the right to data portability, referred to in art. 20 of the GDPR.

Orders. By placing an order, you need to provide data necessary to create the account, such as full name, billing address, e-mail address and phone number. Providing data is voluntary, but necessary to place an order.

Data provided by you in relation to an order are processed for the purpose of performance of the order (art. 6 paragraph 1 point b of the GDPR), issuing an invoice (art. 6 paragraph 1 point c of the GDPR), recognising invoice in our accounting records (art. 6 paragraph 1 point b of the GDPR) and for archival and statistical purposes (art. 6 paragraph 1 point f of the GDPR).

Data on orders are processed for the period necessary to complete the order, and then until the expiry date of the limitation period of the claims due to the agreement concluded. Besides, after the expiry of that period, data will also be processed by us for statistical purposes. Please note that we have an obligation to keep invoices with your personal data for 5 years from the end of a tax year in which the tax obligation arose.

In case of data on orders, you do not have a possibility of rectifying it after the order is completed. You also may not object to the processing of data and demand its erasure until the expiry of limitation period of the claims due to the agreement concluded. Similarly, you also may not object to the processing of data and demand erasure of data in invoices. After the expiry of limitation period of the claims due to the agreement concluded, you can however object to processing of your data by us for statistical purposes, you can also request your data be erased from our database.

In relation to data on orders, you also have the right to data portability, referred to in art. 20 of the GDPR.

Newsletter. If you wish to subscribe to newsletter, you need to provide us with your e-mail address via newsletter subscription form. Providing data is voluntary, but necessary to subscribe to newsletter.

Data provided to us when subscribing to newsletter is processed for the purpose of sending you newsletter, and the legal basis to process it is your consent (art. 6 paragraph 1 point a of the GDPR), granted when subscribing to newsletter.

You can resign from receiving newsletter at any time. However, it will not result in erasure of your data from database, but only in stopping sending messages to you. Your data will still be available in our database due to legitimate interest (art. 6 paragraph 1 point f of the GDPR) as potential defence against claims and related to sending newsletter to you, and in particular for the purpose of presenting the fact that you have granted your consent to newsletter and the moment of withdrawing that consent.

You can rectify your data stored in the newsletter database at any time. You also have the right to data portability, referred to in art. 20 of the GDPR.

Complaints and withdrawal from the agreement. If you lodge a complaint or if you withdraw from the agreement, you provide us with personal data included in the contents of a complaint or in statement of withdrawal from the agreement, which includes your full name, address of residence, phone number, e-mail address, bank account number. Providing data is voluntary, but necessary to lodge a complaint or to withdraw from the agreement.

Data provided by you in relation to lodging a complaint or withdrawal from the agreement is used for the purpose of performing the complaint procedure or withdrawal from the agreement procedure (art. 6 paragraph 1 point c of the GDPR).

Data will be processed for the period necessary to perform the complaint or withdrawal procedure. Complaints and statements of withdrawal from the agreement can also be archived for statistical purposes.

In case of data contained in complaints and statements of withdrawal from the agreement you do not have a possibility of rectifying it. You also may not object to the processing of data and demand its erasure until the expiry of limitation period of the claims due to the agreement concluded. After the expiry of limitation period of the complaints due to the agreement concluded, you may object to processing of your data for statistical purposes, and require your data be erased from our database.

Contact. By contacting us via electronic mail, including when sending an inquiry through contact form, you naturally present us your e-mail address as the sender address. Besides, you can include other personal data in the e-mail. Providing data is voluntary, but necessary to establish contact.

In this case, your data is processed to contact you, and the legal basis for processing is art. 6 paragraph 1 point a of the GDPR, i.e. your consent resulting from initiating a contact with us. The legal basis after the finalisation of a contact is the legitimate purpose as archiving of correspondence for internal purposes (art. 6 paragraph 1 point c of the GDPR).

The contents of the correspondence can be subject to archiving and we are not able precisely state when it will be erased. You have the right to request the history of correspondence you had with us be presented (if it was archived), and to request its erasure, unless its archiving is legitimate due to our overriding interests, such as defence against potential claims brought by you.

3Cookies and other tracking technologies

Our shop, just like almost every websites uses cookies.

Cookies are units of information in text form, stored on your final device (e.g. computer, tablet, smartphone) which can be read by our IT system (own cookies), or third parties IT system (third parties cookies).

Some cookies used by us are erased after browser session ends, i.e. after it is closed (so called session cookies). Other cookies are archived on your final device and allow us for identifying your browser each time you visit the website (long live cookies).

More detailed information is available below:

Consent to cookies. When you visit our website for the first time, information on using cookies is displayed. You can always change your cookies settings in your Internet browser or completely remove cookies. Browsers manage cookies settings in different ways. In help menu in the browser you can find information concerning changing cookies settings.

It should be noted that disabling or restricting using cookies can result in problems when using our website as well as in other websites using cookies.

Own cookies. We use own cookies to ensure the proper functioning of the website, in particular when placing an order or logging in to the user account. Besides, own cookies can be used for tracking your actions taken within the shop, in particular for displaying prompts regarding previously browsed products.

Third parties cookies. Our website, just like majority of today’s websites, utilizes functions provided by third parties, which involves cookies coming from third parties. Using these cookies is described below.

Google Analytics. We apply Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We conduct those activities basing on our legitimate interest involving making statistics and its analysis for the purpose of optimisation of our websites.

Google Analytics automatically collects information on your use of our website. Thus collected information is in most cases transferred to Google server in the United States and it is stored there.

Due to IP-anonymisation enabled by us, your IP address is shortened before further transfer. Only in exceptional cases the complete IP address is transferred to Google server in the United States where it further shortened. The anonymised IP address transferred by your browser as part of Google Analytics is not generally joined with other Google data.

Because the registered office of Google LLC is in the US and utilises technical infrastructure located in the US, it joined EU-US-Privacy Shield framework to ensure appropriate level of data protection required by European regulations. As part of the agreement between the US and European Commission, the latter found the level of data protection appropriate in case of enterprises owning Privacy Shield certificate.

You may refuse registering data collected by cookie files regarding visiting our website by Google as well as processing those data by Google by installing a plugin to the browser from the following address: https://tools.google.com/dlpage/gaoptout.

If you are interested in detailed information related to processing of data as part of Google Analytics, we kindly encourage you to get to know explanations prepared by Google: https://support.google.com/analytics/answer/6004245.

4Server logs

The use of the website involves transmitting inquiries to the server in which the website is stored. Any inquiry to the server is recorded in the server logs.

A log include among others: your IP address, date and time of server, information on website browser and operating system which you use. Logs are registered and stored on the server.

Data stored in server logs is not associated with the individual person using the website and is not used by us to identify you.

Server logs serve only as support material used to administer the website, and their contents is not revealed to anyone except for persons authorised to administer the server.