Data administrator
The controller of your personal data is Escribo, with its registered office at 17 Plebiscytowa Street, 40-035 Katowice, Poland, and Tax Identification Number (NIP) 6282088373.

Why do we process your data?

Processing your data allows us to provide services, including maintaining your Account, fulfilling your orders, contacting you regarding order fulfillment, and sending marketing information (including newsletters).

In particular:

• Providing services (including order fulfillment, communication related to order fulfillment, and billing). The basis for data processing in this case, if you are the holder of an Account, is Article 6(1)(b) of the GDPR.
• To process complaints and any other claims. The basis for data processing is Article 6(1)(b) of the GDPR, to secure information about your order history, communication with us, and payments.
• For analytical or statistical purposes. The basis for data processing is Article 6(1)(f) of the GDPR, for the purpose of conducting financial and sales analyses for internal reporting purposes and determining optimal directions for our development.
• For the purpose of sending you marketing content by Versorium. The legal basis for processing is Article 6(1)(f) of the GDPR, for the purpose of delivering requested marketing communications, including newsletters containing information about current offers, promotions, and competitions. Your data will only be processed for this purpose if you have consented to receiving marketing information (newsletter) electronically.

What personal data do we collect?

We collect personal data such as:

• Name and surname
• Home address, mailing address, delivery address
• Tax Identification Number (NIP) if you wish to receive a VAT invoice
• Email address
• Phone number

How long will your personal data be stored?

Personal data will be stored for 5 years for accounting purposes. Where consent is the basis for processing your data, your data will be processed until it is withdrawn (information on the basis of processing can be found above, in the "Why do we process your data?" section). You can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. If you wish to withdraw your consent to the processing of your personal data, please send an email or letter to the address provided below, in the "How can you contact us?" section. Where will your data be stored? Your personal data will be processed in an IT environment, which means it may also be temporarily stored and processed to ensure the security and proper functioning of IT systems, for example, in connection with making backup copies, testing changes to IT systems, detecting irregularities, or protecting against abuse and attacks.

What rights do you have?

• You can obtain information about how and to what extent we process your data, as well as a copy of your personal data. If your request includes copies of data, you can assist us by specifying the copies of data you would like to receive. Versorium may charge a fee for the second and subsequent copies, of which you will be notified. The fee will reflect the costs of preparing the copies.
• You can request the rectification of your data (if it has been incorrectly recorded or if it has changed), its deletion (if there is no basis for Versorium to process it) or the restriction of processing (if you want Versorium to process your data only to a limited extent, until your objection or request for rectification is resolved, and if you want the data to be stored in connection with your claims).
• You may request that we transfer your data you provided to us in a structured, commonly used, and machine-readable format. You can transfer the data you received to a controller of your choice. Furthermore, if technically feasible and while maintaining appropriate security standards, we can do this for you at your request.
• If the processing of your data by Versorium is based on a legitimate interest, you may object to such processing (information on the basis of processing can be found above in the section "Why do we process your data?" If you believe that our processing of your data violates your rights, please let us know. We strive to respond to our Users' comments and suggestions. You also have the right to lodge a complaint with the supervisory authority [in Poland – the President of the Personal Data Protection Office (referred to as the Inspector General for Personal Data Protection until May 25, 2018)].

How can you contact us?

In any matter concerning the processing of personal data, you can contact us by sending a message to the following e-mail address:

• Info@escribo.pl
• In person at the Escribo store, Plebiscytowa 17, Katowice
• By calling 504 910 110