0 items - € 0.00 0
0 items - € 0.00 0

Privacy Policy for STOCKSHOCK Service
Effective from 01.11.2023

Your personal data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

Administrator’s Data and Contact with the Administrator

The administrator, who determines the purposes and means of processing your personal data, is Jowita Niemczyk, conducting business activities in Poland under the name Jowita Niemczyk VISION – ADVERTISING, PRINTING, 89-400 Sępólno Krajeńskie, ul. Bergera 12, NIP 5551080500, REGON: 340346689.

For matters related to the processing of your personal data, you can contact me by email at info@stockshock.art or by post at the address: VISION – advertising, printing, Jowita Niemczyk, 89-400 Sępólno Krajeńskie, ul. Bergera 12.

Processing of Data of Persons Contacting the Administrator (email, telephone, contact form, consultation form, social media messengers)

When you contact me via email, telephone, contact form, consultation form, or social media messengers such as Messenger, WhatsApp, Discord, direct messages on Instagram, or the LinkedIn portal, I directly receive your personal data, which is processed for the following purposes and on the following legal bases:

  1. To respond to your inquiries, which constitutes my legitimate interest pursuant to Article 6(1)(f) of the GDPR.
  2. To take actions before entering into a contract at your request, such as sending offers upon your request, based on Article 6(1)(b) of the GDPR.
  3. To establish, investigate, and defend against claims, which constitutes my legitimate interest pursuant to Article 6(1)(f) of the GDPR.

Providing personal data is voluntary but necessary for the fulfillment of the above purposes, especially for responding to your inquiries or sending you offers. Your personal data is stored for the time necessary to achieve the above purposes or until you effectively object to the processing of personal data. If a contract is not concluded between us, personal data collected during our correspondence will be deleted no later than 5 years after the contact is established.

Processing of Personal Data of Clients (individuals)

In the event that we enter into an agreement for the provision of services by me to you, when you post your comment on the Service or make a purchase on the Service, I collect personal data directly from you and process it for the following purposes and on the following legal bases:

  1. To enter into an agreement with you and fulfill it – based on Article 6(1)(b) of the General Data Protection Regulation (GDPR).
  2. To provide services, including placing orders on the Service, delivering digital content (including the Newsletter), providing consultations, posting comments – based on Article 6(1)(b) of the GDPR (data processing is necessary for the performance of a contract for the provision of services electronically).
  3. For current contact regarding the provision of services, consideration of any complaints, prevention of fraud, which constitutes my legitimate interest pursuant to Article 6(1)(f) of the GDPR.
  4. To fulfill my legal obligations in the field of taxes and accounting, in particular, issuing invoices or other accounting documents, maintaining accounts, tax settlements, archiving data for accounting purposes – based on Article 6(1)(c) of the GDPR in connection with tax regulations and the Accounting Act.
  5. To establish, assert, or defend claims, which constitutes my legitimate interest pursuant to Article 6(1)(f) of the GDPR.
  6. For marketing purposes, such as sending you commercial information electronically, including through the Newsletter, or sending marketing communications to you by phone, if you provide your consent – based on Article 6(1)(a) of the GDPR and in accordance with the provisions of the Act on the Provision of Services by Electronic Means or the Telecommunications Act.

Providing personal data that is necessary to fulfill my legal obligations is mandatory and arises from tax regulations and the Accounting Act. Providing personal data to enter into an agreement is voluntary but necessary to enter into and execute the agreement. Providing personal data in the remaining scope is voluntary and does not constitute a condition for entering into an agreement and executing it.

Personal data is stored for the duration of the agreement, and then until the obligation to store the data required by law expires (5 years from the end of the tax year) and until the statute of limitations for claims expires. Personal data processed based on consent is stored until consent is withdrawn.

In the case of adding content (entry, comment) to the Service’s website, your personal data will be stored for the duration of the publication of a given entry or comments under the entry, and after its removal, it will not be stored by me.

Processing of Personal Data of Contractors (individuals conducting business activities)

If I enter into an agreement with you for the provision of services to me or another agreement, I collect personal data directly from you and process it for the following purposes and on the following legal bases:

  1. To enter into an agreement with you and fulfill it – based on Article 6(1)(b) of the General Data Protection Regulation (GDPR).
  2. For current contact regarding the provision of services, consideration of any complaints, prevention of fraud, maintaining business relationships, which constitutes my legitimate interest pursuant to Article 6(1)(f) of the GDPR.
  3. To fulfill my legal obligations in the field of taxes and accounting, in particular, maintaining accounts, tax settlements, archiving data for accounting purposes – based on Article 6(1)(c) of the GDPR in connection with tax regulations and the Accounting Act.
  4. To establish, assert, or defend claims, which constitutes my legitimate interest pursuant to Article 6(1)(f) of the GDPR.
  5. For marketing purposes, such as sending you commercial information electronically, including through the Newsletter, or sending marketing communications to you by phone, if you provide your consent – based on Article 6(1)(a) of the GDPR and in accordance with the provisions of the Act on the Provision of Services by Electronic Means or the Telecommunications Act.

Providing personal data that is necessary to fulfill my legal obligations is mandatory and arises from tax regulations and the Accounting Act. Providing personal data to enter into an agreement is voluntary but necessary to enter into and execute the agreement. Providing personal data in the remaining scope is voluntary and does not constitute a condition for entering into an agreement and executing it.

Personal data is stored for the duration of the agreement, and then until the obligation to store the data required by law expires (5 years from the end of the tax year) and until the statute of limitations for claims expires. Personal data processed based on consent is stored until consent is withdrawn.

Processing of Personal Data of Representatives (individuals representing clients or contractors)

If my client or contractor (whether an individual, company, or other legal entity) is represented by you or you have been designated by them for ongoing contact in connection with the conclusion and execution of an agreement, I receive your personal data from the client or contractor, or directly from you. I process your personal data for the following purposes and on the following legal bases:

  1. To enter into an agreement between the contractor or client and me and fulfill it, especially to verify your authorization to conclude the contract on behalf of the contractor or client, and to contact you as a contact person in connection with the execution of the agreement – based on Article 6(1)(f) of the General Data Protection Regulation (GDPR), i.e., based on the legitimate interests pursued by both me and my contractor or client, which is to enable efficient ongoing execution of the agreement and to verify your authorization to conclude the contract on behalf of the contractor or client.
  2. For tax settlement and accounting documentation – based on Article 6(1)(c) of the GDPR, i.e., processing the data is necessary to fulfill my legal obligations arising from generally applicable legal provisions, including tax regulations and accounting regulations.
  3. To establish, assert, or defend claims between the contractor or client and me – based on Article 6(1)(f) of the GDPR, i.e., processing is necessary for purposes arising from my legitimate interests, which involve the ability to establish, assert, or defend claims.
  4. To establish or maintain business relationships with the contractor or client through you, which constitutes my legitimate interest under Article 6(1)(f) of the GDPR.
  5. For marketing purposes, such as sending you commercial information electronically, including through the Newsletter, or sending marketing communications to you by phone, if you have given your consent – based on Article 6(1)(a) of the GDPR and in accordance with the provisions of the Act on the Provision of Services by Electronic Means or the Telecommunications Act.

If you provide me with your personal data directly, it is voluntary, but necessary to enter into and execute the agreement and to establish business relationships. Failure to provide personal data will result in the inability to conclude and execute the agreement and to maintain business relationships. Providing personal data for marketing purposes is entirely voluntary.

Your personal data is processed for the period necessary to achieve the purposes indicated above, in particular, for the duration of maintaining business relationships and executing an agreement concluded with my contractor or client. Subsequently, they will be stored by me until the expiration of claims or the expiration of the obligation to store data under legal provisions (e.g., tax law). Personal data processed based on consent will be stored until consent is withdrawn.

Processing of Personal Data on Social Media

I maintain profiles on the following social media platforms:

In connection with managing the above profiles, I collect your personal data when you subscribe to my fan pages, groups, or channels on social media platforms (by clicking “Like,” “Follow,” “Subscribe,” etc.), when you post a comment on any of the posts on my fan page or channel, and when you send me messages through the social media portal. I process your personal data, particularly in the following scope:

  1. Your user identifier (which may include your name).
  2. Your identification data and other information published by you on your own profile on the relevant social media platform.
  3. Profile picture (which may include your image).
  4. Other pictures (which may also depict your image) voluntarily posted by you under my posts.
  5. The content of comments and the content of conversations held with you through the social media platform.
  6. Statistical data about visits to my social media profiles or channels.

In light of the above, I process your personal data for the following purposes and legal bases:

  1. Managing social media profiles according to the terms and conditions set by the operators of these social media platforms, informing about activities, services, promoting various events, contests I organize, sharing knowledge, as well as building and maintaining a community and communication through available features of social media services (comments, chat, messages, including event sign-ups). This is my legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR).
  2. Analyzing the performance, popularity, and usage of my profiles on social media, which is also my legitimate interest according to Article 6(1)(f) of the GDPR.

In the case of using statistics features on the Facebook portal, I and Meta Platforms Ireland Limited act as joint data controllers for data processed for statistical purposes. Agreements between joint controllers, determining the areas of responsibility for processing personal data, can be found here: [Link to the agreement]. According to the agreement, Meta Platforms Ireland Ltd. has assumed primary responsibility under the GDPR for processing data for statistical purposes and for fulfilling all relevant obligations under the GDPR.

Tracking activity on websites may occur regardless of whether you are logged in or registered on a social media platform. I would like to emphasize that I have no influence on internet activity tracking practices employed by the specific social media platform, and I cannot disable such practices.

Detailed information regarding activity tracking can be found in the privacy policies of the operators of social media platforms. With regard to statistics provided to me by the operators, I have limited control, and I can only restrict them to a limited extent. If you are a registered user of a specific social media platform, please verify your privacy settings to match your preferences.

Providing personal data is voluntary.

Information included in private messages sent to me via social media portals will be stored for the duration of providing a response to the submitted questions (up to a maximum of 5 years) or until the end of cooperation, or the deletion of your user profile on the social media platform, whichever occurs first.

Data collected by the social media platform, such as the history of posts, activity, and sent messages, is subject to storage as specified in the terms of service of the social media platform.

Statistical data regarding visitors to my social media profiles will be processed for the duration that this data is available on the specific social media service, in accordance with its terms.

Remember that besides me, the operator of the social media platform you use to visit my profile is the administrator of your personal data. I have limited influence on how your personal data is processed by the operator of the social media platform. Please familiarize yourself with the terms of service and privacy policy of the social media platform you use to visit my profile.

More information about the processing of your personal data by operators can be found here:

Processing of Personal Data of Contest Participants

If you participate in a contest organized by me, the rules for processing personal data may be specified separately in the contest rules. Unless otherwise stated in these separate rules, your personal data, provided directly by you, is processed for the following purposes and legal bases:

  1. To conduct the contest, select the winner, inform them of the prize, and award the prize. This is based on your consent as mentioned in Article 6(1)(a) of the General Data Protection Regulation (GDPR).  
  2. To fulfill legal obligations related to organizing the contest and awarding the prize when the nature of the contest and the prize require it. This is based on Article 6(1)(c) of the GDPR in connection with tax regulations.  
  3. To handle complaints, determine, investigate, and defend against claims. This is my legitimate interest in accordance with Article 6(1)(f) of the GDPR.  

Providing personal data is voluntary, but necessary to participate in the contest. If awarding the prize involves tax obligations, providing your personal data will be mandatory.

Processing of Data in Connection with Submission of Requests for Exercising Rights Under the GDPR

Since you have specific rights related to the processing of your personal data, you can correspond with me regarding the exercise of these rights. In this context, I process your identification data, contact details, and other data provided in the correspondence conducted with you or another person who, on your behalf, sends me a request for the exercise of your rights under the GDPR. If the request is not sent directly by you but by an authorized representative or legal guardian, I also process data related to that representative or guardian, such as their identification data, contact information, and data regarding the nature of their authorization.

The personal data of applicants are processed by me for the following purposes and legal bases:

  1. For the purpose of maintaining contact and correspondence regarding the request for the exercise of rights under the GDPR, based on Article 6(1)(c) of the GDPR since processing personal data is necessary to fulfill a legal obligation imposed on me by Article 12(1)-(3) of the GDPR.  
  2. For the purpose of archiving correspondence related to the handling of the request for the exercise of rights under the GDPR, for evidential purposes and to demonstrate that I have responded to the request within the prescribed timeframe. This is my legitimate interest according to Article 6(1)(f) of the GDPR.  

Providing personal data is necessary to fulfill the request made.

Personal data is processed for the duration of the correspondence and will be archived for evidential purposes until the statute of limitations for claims has expired.

Recipients of Personal Data Your personal data may be disclosed by me to other entities, namely:

  1. my subcontractors, contractors, in particular, entities providing legal, training, accounting, marketing, and IT services (in most cases, these are data processing entities with whom I have entered into data processing agreements);
  2. banks or institutions facilitating payments on the Website;
  3. couriers, postal services;
  4. entities authorized under the law;
  5. in the case of you publishing content on the Website or on social media profiles, your personal data may also be visible to visitors of the Website or my social media profiles, as well as to the operators of these social media platforms.

Automated Decision-Making If you have provided your consent for the use of advertising cookies (as mentioned below in the Privacy Policy) or if you are a subscriber to the Newsletter, I analyze data regarding your browsing history on the Website, the history of transactions made on the Website, the history of activities on my social media profiles, as well as data from the Newsletters sent by me. This analysis is carried out in an automated manner, taking into account your actions, click behavior on the Website, or in the Newsletter (if you subscribe). However, this information will not result in any legal consequences for you or significantly affect your situation. The purpose of this analysis is to customize the ads displayed to you when browsing web pages and to select the products offered to you. You may receive special offers through personalized email, postal, or online advertising on the Website or on external channels (e.g., on social media).

Transfer of Data outside the EEA As I operate profiles or channels on social media platforms, your personal data is processed through a specific social media platform, the servers of which may be located in the United States or another country outside the European Economic Area (EEA). When transferring personal data outside the EEA, the operators of social media platforms are required to use appropriate safeguards, in particular, the Standard Contractual Clauses of the EU. In such cases, you may request a copy of these appropriate safeguards. More detailed information can be found in the privacy policies of individual social media platforms. Regarding the use of Google Analytics services, email, and potentially other service providers, your personal data may also be transferred to a third country, exclusively based on the appropriate safeguards provided for in the GDPR, especially using the Standard Contractual Clauses of the EU. In the case of Google Analytics services, anonymous IP address recording (so-called IP masking) has been implemented on the Website through the “gat._anonymizelp();” code. This means that the user’s IP address is shortened by Google within the EU and the EEA. Only in exceptional cases is the full IP address sent to Google’s server in the USA and then shortened. More information about processing data through the Google Analytics service can be found here.

Your Rights In connection with the processing of your personal data by me, you have the following rights:

  1. Access to your personal data (Article 15 of the GDPR), including obtaining a copy of the data (Article 15(3) of the GDPR).
  2. Rectification (correction) or completion of incomplete personal data (Article 16 of the GDPR).
  3. Request for the erasure of personal data in cases provided by law (Article 17 of the GDPR).
  4. Request for the restriction of the processing of personal data (Article 18 of the GDPR).
  5. Receive your data in a structured, commonly used, machine-readable format and to transmit this data when processing is based on your consent or contract and is carried out by automated means (Article 20 of the GDPR).
  6. Object to the processing of your personal data when it’s processed for the purpose of fulfilling my legitimate interests and based on reasons related to your specific situation (Article 21 of the GDPR).
  7. Withdraw your consents at any time without affecting the lawfulness of the processing that occurred based on the consents before their withdrawal.

You can exercise the above rights by contacting me at the addresses provided for contacting the data controller.

Additionally, if you believe that the processing of your personal data infringes the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority, namely, the President of the Personal Data Protection Office in Warsaw. Details on submitting complaints can be found on the Personal Data Protection Office website.

Cookie Policy On the Website’s web pages, I use cookies or similar technologies. Cookies are small text files containing information about your activity on the Website, storing it on the device from which you access the Website. In accordance with applicable legal regulations, I may store cookies on your device if it is necessary for the functioning of the Website (these cookies are described below as essential). For the use of all other types of cookies (especially analytical and advertising), I need your consent. I use the following types of cookies on the Website:

  1. Strictly necessary cookies, which do NOT require your prior consent according to the law, are necessary for the proper functioning of the Website, including the performance of specific tasks, such as providing services that you request through the Website, storing your preferences (e.g., cookie preferences), or keeping you logged in to your account. These cookies are not deleted after you finish browsing the website but have a specific expiration time. The installation of strictly necessary cookies does not require your prior consent, as they are automatically installed on your device when you enter the Website or make specific choices on the site.
  2. Performance cookies are used to check the number of visits to the Website and the sources from which you came to it, serving the analysis of the effectiveness of the website and the identification of areas requiring improvement. These cookies require your prior consent.
  3. Functional cookies are necessary to perform specific functions on the website, such as video or live chat functions. They may be used, for example, to store technical data necessary to play video or audio content that you may want to watch or listen to on the site. These cookies require your prior consent.
  4. Advertising cookies and their recipients, which may include third-party entities. These cookies require your prior consent. These third-party entities have access to the information collected by their cookies. The following are the third-party entities:
    • Google Inc. (through Google Analytics and Google Doubleclick and, where applicable, Google Plus plugin)
    • Facebook (through plugins)
    • Instagram (through plugins)
    • LinkedIn (through plugins)
  5. Youtube (through plugins)
  6. Pinterest (through plugins)
  7. TikTok (through plugins)

Advertising cookies and their recipients may include profiling cookies that create user profiles to provide ads consistent with user preferences shown while browsing the internet, used for advertising purposes, as well as retargeting cookies used to provide ads related to products similar to those in which you showed interest (e.g., display pages of products you visited on the Website while browsing related pages) or to measure the effectiveness of marketing campaigns (mine or third-party entities).

  1. Social media cookies allow social media platform operators to install their cookies through their plugins. These cookies require your prior consent. They are managed directly by third-party entities and may also be used when you visit other websites to deliver you advertisements consistent with your preferences.

As mentioned above, your consent is required to apply cookies other than the essential ones. When you visit the Website for the first time, you will see a banner with information about cookies. In the future, during subsequent visits to the Website, it should not be displayed again because essential cookies will save your preferences. You can change your cookie settings at any time, including withdrawing your consent to the use of specific types of cookies, by using the cookie settings panel available at the bottom of the Website under the “See Preferences” button.

Privacy Policy Changes This Privacy Policy may be updated in the event of changes to legal regulations that affect the processing of your personal data or the use of cookies, as well as if there are changes to the processes of processing personal data and the types of cookies used by me. You can always find the current and effective version of the Privacy Policy here.

Minimum 4 characters