Privacy policy
The administrator of the personal data, whose processing principles are described in this document, is Rollen Polska - Studio Figura Izabella Michalak with its registered office in Lusówko, 56 Wiązowa Street, 62-080 Tarnowo Podgórne, entered in the Central Register of Economic Activity, business address in Lusówko, 56 Wiązowa Street, 62-080 Tarnowo Podgórne, NIP 7831266218, REGON 300224173 (referred to in this policy as, "we", "us", "our" or "Studio Figura International").
- We are committed to doing the right thing in collecting, using and protecting your personal information. Therefore, we have developed this privacy and cookie policy ("Policy"), which:
- identifies the types of personal data we collect
- explains how and why we collect and use your personal data and how long we keep it for
- explains when and why we will share personal data with other organisations
- explains the rights and choices you have when it comes to your personal data.
- The Policy applies if you use our Services (referred to in this Policy as "our Services"). Use of our Services means:
- using any of the services located on our domains (studiofigura.com.co.uk, bezajo.com, roll-shaper.com.co.uk, roll-shaper.ru, rollshape.co.uk, rollshaper.lv, rollshaper.ru, rollshaper.us, studio-figura.lt, studio-figura.ru, studiofigura24.com, studiofigura.co.uk, studiofigura.pl, studiofigura.us, swanshaper.com, swanshaper.pl)
- purchasing from Studio Figura International (sklepstudiofigura.com.pl)
- subscribing to electronic communications for direct marketing, such as newsletters, by means of: Click funnels, Chatfuel, GetResponse.
- contacting us via Social Media such as: Facebook, Messenger, Instagram, Google+, Pinterest, Tiktok.
- This Policy also applies if you contact us or we contact you about our Services using a contact form, email, SMS, chat, social media.
- Our Websites may contain links to other websites operated by other organisations which have their own privacy policies. Please read the terms and conditions and privacy policies posted there carefully before providing any personal information on such websites, as we have no responsibility for the websites of other organisations.
Data and data processing rules
Purpose of processing
Through our websites, we only collect data to the extent that it is necessary to manage these websites, to ensure the smooth operation of the functionalities offered within them and to analyse the effectiveness of the communication.
We process this data for statistical purposes, to measure your activity on the Website and the level of attractiveness of the various elements of the Website, as well as to increase your convenience and improve your satisfaction.
Scope of processing
For website users, we do not require registration. This data remains anonymous for us. During your session, the Website saves cookies in your browser's memory. Information about your online behaviour while browsing our Websites.
Information about any devices you use to access our Services (including make, model and operating system, IP address, browser type and mobile device identifiers, date and time of access to our Services, address of the website from which you were redirected to our website, other data sent via standard HTTP request headers(s), data used to maintain your online session once you have logged in).
Legal basis for processing
Article 6, paragraph 1, letter f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the data controller).
Purpose of processing
In order to provide the services
To manage the accounts you have with us, including accounts on the sklepstudiofigura.com.pl services
To resolve disputes, complaints or claims
Scope of processing
Data identifying you, including your postal and billing address, email addresses, and telephone numbers.
Your account login details, such as your username. Information about your orders and purchases (for example, what you bought, when and where you bought it, and how you paid for it).
Information about your online behaviour while browsing our Websites.
Information about any devices you use to access our Services (including the make, model, and operating system, IP address, browser type, and mobile device identifiers, the date and time you accessed our Services, the address of the website from which you were redirected to our website, other data sent via standard HTTP request headers(s), data used to maintain your online session once you have logged in).
Legal basis for processing:
Article 6, paragraph 1, letter b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject before entering into a contract).
Purpose of processing
For the purpose of order fulfilment and returns, as well as for fulfilling legal obligations imposed on the Data Controller, particularly arising from tax regulations and accounting provisions – the legal basis for processing is a legal obligation (Article 6, paragraph 1, letter c of the GDPR);
For the potential establishment and pursuit of claims or defence against them – the legal basis for processing is the legitimate interest of the Data Controller (Article 6, paragraph 1, letter f of the GDPR), based on protecting its rights.
Scope of processing
During this time, we collect:
- data concerning purchases and transactions
- contact information
- details regarding delivery/pickup.
We will not be able to provide you with your products or services if you do not provide us with this information.
– in the scope of other data processing operations occurring after order fulfilment
Legal basis for processing
Article 6, paragraph 1, letter b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject before entering into a contract)
Article 6, paragraph 1, letter f) of the GDPR (processing is necessary for the legitimate interests pursued by the data controller)
Purpose of processing
To contact you, for example, by phone, email, letter, or by responding to your social media and chat posts to us about matters relating to our Services.
We want to better serve you as our customer, so we use personal data to provide clarification or assistance in response to your communications, as well as to inform you of changes we have made or intend to make to our Services that affect you (e.g. changes to this Policy or the rules and regulations of our Services).
Manage the promotions and competitions you take part in.
We need to process your personal data so that we can manage the promotions and competitions you wish to enter.
Scope of processing
Personal data you provide whenever you contact us regarding our Services (for example, name, username and contact details), including by phone, email or letter, or when you contact us via social media.
Details of emails and other electronic messages we send to you that you open, including any links in them that you click on (for example, those that allow us to determine if and when you opened such communications).
Legal basis for processing
Article 6, paragraph 1, letter f) of the GDPR (processing is necessary for the legitimate interests pursued by the data controller), with the provision that if we wish to invite you through electronic means, such as email or SMS, we will rely on your consent.
Article 6, paragraph 1, letter f) of the GDPR (processing is necessary for the legitimate interests pursued by the data controller), with the provision that if we wish to invite you through electronic means, such as email or SMS, we will rely on your consent.
Purpose of processing
To monitor the security of our premises. To protect our business, the local community, customers and our employees
Scope of processing
Footage showing an image of you may be recorded by video surveillance equipment (CCTV) and stored on our systems along with the date and time of your visit.
Legal basis for processing
Article 6, paragraph 1, letter f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the data controller)
Period of processing of personal data
The period of data processing by the administrator depends on the type of service provided and the purpose of the processing. As a general rule, data shall be processed for the duration of the service provided or the fulfilment of the order until the withdrawal of the consent given or until an effective objection is made to the processing of the data in cases where the legal basis for the processing is the legitimate interest of the administrator.
The period of data processing may be extended if the processing is necessary for the establishment, investigation or defence of possible claims, and thereafter only if and to the extent required by law. After the expiry of the processing period, the data shall be irreversibly deleted or anonymised.
User rights
- Right to information about personal data processing - on this basis, to the person making such a request, the Administrator provides information about the processing of personal data, including primarily the purposes and legal bases of processing, the scope of the held data, entities to whom personal data are disclosed, and the planned date of their erasure;
- Right to obtain a copy of data - on this basis, the Administrator provides a copy of the processed data concerning the requesting person;
- Right to rectification - on this basis, the Administrator rectifies any inconsistencies or errors concerning processed personal data, and supplements or updates them if they are incomplete or have changed;
- Right to restriction of processing - on this basis, the Administrator ceases to perform operations on personal data, except for operations to which the data subject has given consent, and stores them in accordance with adopted retention principles, or until the reasons for restricting data processing cease (e.g., a decision of the supervisory authority is issued, allowing further data processing);
- Right to data portability - on this basis, to the extent that data is processed in connection with a concluded contract or with the explicit consent given, the Administrator provides data supplied by the data subject in a format allowing their reading by a computer. It is also possible to request that this data be transferred to another entity - provided that there are technical possibilities for this both on the side of the Administrator and the other entity;
- Right to object to other purposes of data processing - the data subject may at any time object to the processing of personal data based on the legitimate interest of the Administrator;
- Right to withdraw consent - if the processing of data is based on consent, the data subject has the right to withdraw it at any time, which does not affect the legality of processing carried out before such withdrawal;
- Right to lodge a complaint - if the data subject believes that the processing of personal data breaches the provisions of the GDPR or other provisions regarding the protection of personal data, they can lodge a complaint with the President of the Personal Data Protection Office (as defined on the website of the Personal Data Protection Office).
Requests to Studio Figura International concerning the exercise of the above rights can be made:
- in writing to the address: Rollen Polska - Studio Figura Izabella Michalak, Lusówko, 56 Wiązowa Street, 62 - 080 Tarnowo Podgórne
- in writing to the address email: admin@studiofigura.com.pl
The answer will be provided to the email address from which the application was sent, and in the case of applications sent by letter, by letter to the address indicated by the applicant, unless the content of the letter indicates the wish to receive feedback to the email address (in such a case, the e-mail address should be provided).
Data recipients
We entrust personal data for processing to entities with whom we have a permanent cooperation, especially to suppliers responsible for managing information systems, entities providing accounting, legal, auditing, consulting services, couriers (in relation to order fulfilment), companies supporting our marketing activities (in the scope of marketing services), and entities related to the Data Controller, including its business partners.
These entities operate based on data processing agreements and, just like us, are obligated to protect personal data.
Furthermore, in the case of using traditional mail communication, we provide personal data to Poczta Polska (Polish Post) and other companies operating based on postal law.
The Data Controller reserves the right to disclose selected information about the User to relevant authorities or third parties who request such information, based on the appropriate legal basis and in accordance with the provisions of applicable law.
Security measures we apply
We utilise computer security measures such as firewalls and data encryption, and enforce physical access controls to our buildings and files to ensure the security of this data. Access is granted only to those employees and subcontractors who require it to perform their duties.
- We protect the security of your data during transmission by encrypting it using the Secure Sockets Layer (SSL) protocol;
- We enforce physical, electronic, and organisational security measures in connection with the collection, storage, and disclosure of personal data. Depending on circumstances, we may request identity verification before providing access to your personal data.
Personal data we collect from you may be transferred and stored in a destination outside the European Economic Area ("EEA"). They might also be processed by companies operating outside the EEA who work for us or for one of our Service Providers. In such cases, we ensure that your right to privacy is respected in accordance with this Policy. The most common method we use to achieve this is by entering into a specific type of agreement using standard contractual clauses (so-called Model Clauses) or based on an approved set of privacy protection principles, such as the Privacy Shield, which applies when transferring data to the USA.
More information about data transfers outside the EEA, including a copy of the Model Clauses, can be found at: https://ec.europa.eu/info/law/law-topic/data-protection_pl
Cookies and similar technologies
We and our partners use cookies and similar technologies, including tags ("cookies"), to personalise and enhance the quality of service while you use our Websites. This section provides more information about cookies, including how we use them and how you can make choices about cookie usage.
How we use cookies
Cookies are small text files containing a unique identifier that are stored on your computer or mobile device, enabling the device to be recognized when you use a specific website or mobile application. They can be used only for the duration of your visit or may be used to measure your interactions with services and content over a certain period of time. Cookies assist in providing important features and functionality of our Websites and in improving your quality of use.
If you consent to the use of cookies in our Services, they may be used for the following purposes:
Cookies allow us to enhance the functioning of our Websites so that we can personalise your customer experience and enable you to make use of many useful features they offer.
For instance, we use cookies to remember your preferences and the contents of your cart when you return to our Websites and Mobile Applications.
Cookies can help us understand how our Websites and Mobile Applications are utilised, for instance, by informing us whether error messages appear while using them.
Cookies can inform us if you have seen a specific advertisement and how much time has elapsed since it was displayed to you. This information allows us to measure the effectiveness of our online advertising campaigns and control how many times the advertisement has been shown to you.
We also use cookies to measure the effectiveness of our marketing communications, for example, by informing us whether you have opened the marketing email message we sent to you.
Cookies are also used to monitor statistics on our websites. Specifically, they allow us to observe anonymous information about the number of people visiting our websites, with details such as geographical location, used browser, operating system, and type of device used to view the page.
Managing cookies
Through your browser settings, you can accept or reject new cookies and delete existing ones. You can also configure your browser to notify you whenever new cookies are placed on your computer or other device. More detailed information on how to manage cookies can be found using the help function available in your web browser.
If you choose to disable some or all cookies, you may not be able to fully utilise our Websites. For example, you may not be able to add products to your cart, proceed to checkout, or use those of our products and services that require logging in.
Third-party entities operating through our Websites
Below is a list of our key partners along with information about the services they provide for us. This list is not exhaustive but includes those partners with whom we have established relationships and whose cookie technologies are most frequently used in our Services.
Analysis of the use of our services, including testing different versions in terms of content. This data may also be used to personalise our services and market our services.
Partner: Google Analytics
Reaching out to you through social media platforms and to enable sharing and engagement, using our Websites. These companies may use your data for their own purposes, including profiling and targeting you with other advertising.
Partner: Facebook Twitter Instagram
Processing payments for purchases in the online shop
Partner: T-pay.com PayPal