Privacy policy

PERSONAL DATA PRIVACY POLICY

www.forever-limited.com

Effective from: 18.12.2020

§1
Identity of the data controller

1. The controller of personal data provided during the use of the Website and the Online Shop under the name www.forever-limited.com is Forever Entertainment S.A. with its registered office in Gdynia at al. Zwycięstwa 96/98, 81-450 Gdynia, Poland, NIP 5833112205 KRS: 0000365951, REGON 221122120, share capital of PLN 10,880,000, fully paid-up, e-mail: biuro@forever-entertainment.com, website: www.forever-entertainment.com

2. The data are processed in accordance with the applicable laws, i.e., Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), the Data Protection Act of 10 May 2018 and the Act of 18 July 2002 on the provision of services by electronic means.

§2
Definitions used

1. In this policy the following definitions shall apply:

1. Service/Shop - the website available at www.forever-limited.com through which the User may: browse its content, online shop, contact the data controller http://forever-limited.com/contact,2.html and place orders for products and goods of the on-line shop.

2. Personal Data Controller - an entity that determines the purpose and means of data processing, in this policy it shall mean: Forever Entertainment S.A. with its registered office in Gdynia at al. Zwycięstwa 96/98, 81-450 Gdynia, Poland.

3. User - a natural person to whom the data refers and who uses the services available on the Website/Shop.

4. Personal data - any information that, without excessive time and cost, may lead to the identification of a natural person, including its identification, address and contact details.

§3
Purposes of data processing

1. The Controller processes personal data for the following purposes:

1. proper performance of the agreement to which the data subject is a party, or taking action at the request of the data subject, i.e., concluding an agreement, submitting and performing an order in the Shop, exercising rights related to the performance of the order, including guarantees and warranty, settlements, delivery of the ordered goods,

2. registration and creation of an account on the Website,

3. documenting the sale or performance of the service, including the issue of a receipt or an invoice for a natural person,

4. answering the questions asked through the contact form or through contact details available on the Website,

5. sending commercial and marketing information to the data controller to the e-mail address provided by the User in the course of subscription to the newsletter, with the consent of the data subject,

6. asserting rights and claims by the data controller or the data subject,

7. documenting the processing of personal data, i.e., ensuring accountability in accordance with the GDPR requirements

2. Data are processed with the User's consent, expressed at the time of registration on the Website and at the time of placing the order on the Website. The consent to the processing of personal data is entirely voluntary, but the lack of consent makes it impossible to register on the Website and make purchases via the Website - the provision of data is necessary for the registration on the Website (creating an account), performance of the order, issuing the sales document, pursuing claims, as well as providing answers to questions.

3. The provision of other data is voluntary.

4. Failure to provide the required data prevents the provision of services, including orders and contacts.
   
   

§4
Methods of data acquisition

1. The User’s personal data are collected directly from the data subjects, i.e., by:

1. filling in the form with contact data when submitting a query through the form on the website,

2. filling in the subscription form for the newsletter,

3. filling in the order form in the Shop,

4. registering the account on the Website,

5. providing data for the preparation and conclusion of the agreement,

6. direct contact with the data controller using contact details available on the website or in a traditional form at the place of business.

§5
Scope of data processing

1. The scope of personal data processing was limited to the minimum allowing for the provision of services in the scope of:

1. submitting a request through the contact form or with the use of contact details available at: e-mail address, phone number, first name, possible other data provided voluntarily by the data subject,

2. subscribing to the newsletter: first name, e-mail address,

3. placing an order in the Shop: first name and surname, e-mail address, telephone number, delivery address, card/credit card details – card number, first name and surname of the card holder, expiry date; bank account number, fist name and surname of the account holder; e-mail address related to the PayPal account.

4. registration of the account on the Website or the Shop: first name and surname, e-mail address, password, login, order history,

5. issuing a receipt or invoice: first name and surname of the entity, address of the registered office, tax identification number (NIP),

6. delivering the ordered goods in the Shop: first name and surname, delivery address, telephone number,

7. in the case of withdrawal from the agreement or recognition of a complaint, when the repayment of receivables takes place directly on the User's bank account: bank account number in order to return the receivables.

§6
Period of data processing

1. Personal data are processed for the period necessary to achieve the purpose for which they were collected, i.e.:

1. throughout the term of the concluded agreement, until the account is deleted from the Website,

2. for the period necessary to document the performed agreement or service, including a receipt or an invoice - data are stored for 5 years from the end of the calendar year in which the tax payment deadline expired,

3. for the period necessary to answer the question asked with the use of the contact form or by phone,

4. until the consent is revoked if the data processing is based on the consent of the data subject.

5. until the expiry of the claims, as well as for the period of the legal regulations in force.

§7
Data recipients

1. Personal data of the User may be entrusted to other entities for the purpose of performing services at the request of the data controller, in particular entities in the scope of:

   1. hosting the website,

   2. servicing and maintenance of IT systems in which the data are processed, including for the purpose of automation of the newsletter, issuing invoices, handling orders, etc.

   3. performing accounting services,

   4. performing office services,

   5. courier services broker,

   6. implementation and processing of orders – Argo S.A. with its registered office in Gdańsk,

   7. Personal data of the User may also be made available to entities supporting the data controller, including entities performing courier and postal services, processing online payments, i.e., PayPal (Europe)

2. Personal data of the User shall not be transferred outside the European Union.

§8
Rights of data subjects

1. The data subject is entitled to:

   1. the right to access and correct the content of the data,

   2. the right to delete data, unless other provisions of law apply, which oblige the data controller to archive data for a specified period of time,

   3. the right to data portability, provided that the basis for data processing is the agreement or consent of the data subject, and the data processing takes place automatically,

   4. the right to object to the processing of data in its entirety and for the purpose indicated, e.g., for direct marketing purposes, carried out by the data controller as part of a justified legal interest, as well as the right to request restriction of processing,

   5. the right to independent profiling, if the data controller would take decisions based solely on automated profiling and carrying legal effects for the data subject or similarly affected,

   6. the right to control the processing of data and information on who is the data controller, as well as to obtain information about the purpose, scope and method of data processing, the content of such data, the source of data, as well as the manner of making such data available, including the recipients or categories of data recipients,

   7. the right to withdraw consent at any time if the basis for data processing was the consent of the data subject. The withdrawal of consent does not affect the lawfulness of processing made on its basis, prior to its withdrawal,

   8. the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), if the person considers that the processing of its data is inconsistent with the currently applicable provisions in this respect.

2. In order to exercise the right to control, access and correct data as well as other rights, contact the data controller.

§9
Final provisions

1. The Data Controller reserves the right to change this privacy policy, especially in situations required by technical solutions, changes in the legal regulations regarding the privacy of data subjects or other significant changes affecting the content of the information provided to the Users.

2. In the event of a change of the applicable privacy policy, appropriate modifications will be made to the above-mentioned entry, which will apply from the date of their publication on the Website/Shop.