PRIVACY POLICY
NFC Kids / nfckids.com
This Privacy Policy sets out the rules for processing the personal data of Users and Customers using the NFC Kids online store and the services for storing data on NFC tags.
The controller of personal data processed in connection with orders and the operation of the store is:
RS Real Estate Robert Skoracki
ul. Jęczmienna 8, 64-100 Leszno, Poland
Tax ID (NIP): 6972389253, REGON: 523375867
e-mail: info@nfckids.com
CHAPTER 1. BASIC INFORMATION
-
By using our services, you provide us with personal data. We ensure that your data remains confidential and secure and is processed in accordance with the GDPR.
-
Personal data is not sold or shared with third parties for marketing purposes.
-
Personal data is processed for the purposes of: order fulfilment, communication, account management, analytics, and security.
CHAPTER 2. DATA CONTROLLER
-
With regard to data collected during the purchasing process, communication, account management, and the operation of the store — the Seller acts as the data controller.
-
With regard to data stored by the User on an NFC tag — the User is the sole data controller. The Seller provides only the technical means for storing, retaining, and displaying data, acting as a data processor within the meaning of Article 28 GDPR.
CHAPTER 3. DATA STORED ON THE NFC TAG
-
NFC tags allow storage of contact details, medical information, or other content.
-
The User bears full responsibility for the legality, accuracy, adequacy, and compliance with applicable law of the data stored on the tag.
-
The User declares that they have a legal basis for processing third-party data if they enter such data.
-
The User is aware that data stored on the NFC tag may be read by any person with a mobile device featuring NFC functionality.
-
Where medical data (special category data) is stored, the User gives voluntary and explicit consent to its processing and public disclosure via the tag in accordance with Article 9(2)(a) GDPR.
CHAPTER 4. SCOPE OF DATA PROCESSED
-
Data processed in connection with an order:
-
first and last name,
-
shipping address,
-
e-mail address,
-
contact phone number,
-
billing details.
-
-
Data stored on the NFC tag — any data entered by the User.
CHAPTER 5. PURPOSES AND LEGAL BASES FOR PROCESSING
-
Order fulfilment — Article 6(1)(b) GDPR.
-
Accounting and tax obligations — Article 6(1)(c) GDPR.
-
Establishment, exercise, or defence of claims — Article 6(1)(f) GDPR.
-
Cookies and analytics — Article 6(1)(a) GDPR (consent).
-
Data stored on the NFC tag is processed solely upon the User’s instructions.
CHAPTER 6. DATA RETENTION PERIOD
-
Order data — until the limitation period for claims expires (up to 6 years).
-
Account data — until the account is deleted or 3 years from the last activity.
-
NFC tag data — until deleted by the User.
-
Contact data — up to 12 months.
-
Analytics data — in accordance with browser/cookie settings.
CHAPTER 7. DATA RECIPIENTS
-
Courier/delivery companies.
-
Payment service providers.
-
IT service providers.
-
No sale or sharing of data for marketing purposes.
CHAPTER 8. ANALYTICS TOOLS AND COOKIES
Information from Google Analytics, Tag Manager, and DoubleClick may be transferred to the United States in accordance with the EU–US Data Privacy Framework.
CHAPTER 9. USER RIGHTS
You have the right to:
-
access your data,
-
rectify your data,
-
erase your data,
-
restrict processing,
-
data portability,
-
object to processing,
-
withdraw consent.
CONTACT
​
