Privacy Policy

This Privacy Policy sets out the principles for the processing of personal data collected through the online storehttps://www.basanti.eu 

(hereinafter referred to as the "Online Store").

Definitions contained in the Regulations of the Online Store available athttps://www.basanti.eu/regulaminare appropriately applicable to this Privacy Policy.

The data controller is:

Damajanti Sp. z o.o. ul. Inwalidów Wojennych 12, 43-603 Jaworzno entered in the national court register maintained by the District Court Katowice-East in Katowice, Economic Division VIII KRS under the KRS number 0001089827, share capital 5,000 PLN (fully paid), REGON: 528402244; NIP: 6322037041; (hereinafter referred to as the "Administrator")

Contact details of the Administrator:

• correspondence address: ul. Inwalidów Wojennych 12, 43-603 Jaworzno

• Email address: damajanti@vp.pl;

• Phone number: +48 885 181 020

General principles of personal data processing

1. Personal data collected by the Administrator through the Online Store are processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as GDPR.

2. Personal data will be processed only when permitted by law.

3. There is a possibility of sharing personal data if required by law or requested by an authorized body. Furthermore, there is a possibility of disclosing personal data to fulfill regulatory obligations, e.g., in situations where there are adverse reactions to our brand's Products.

4. Personal data will be processed solely for the purposes for which they were provided or when processing is necessary for the performance of a contract. Personal data may also be used to take necessary steps prior to entering into a contract as part of necessary data processing for legal or legitimate business purposes.

Type of personal data processing and purpose of processing

1. The personal data we process are limited to the type of data and the amount necessary for the purposes for which we process them.

2. We process the following data for purposes such as:

a. submitting an inquiry to register a User account in the Online Store; company name, company NIP, contact phone number, email address;

b. registering a User account in the Online Store: company name, email address, company NIP, password;

c. managing and using the User Account: username, user password, orders made, order history, current subscriptions, subscription history,

d. managing and using additional functionalities of the Seller – Client name, Client address, Client email address, Client phone number, Client mobile phone number; distribution brokerage history and data;

e. directing offers: first and last name, company name, NIP, email address,

f. executing placed orders: first and last name, company name, email address, phone number, delivery address, data regarding purchases in the Online Store;

g. making a bank transaction: payment account data, bank account data, billing/shipping address, first and last name, order description (including date, time, amount, product or service description), device identifier, email address, IP address/location, order identifier, payment card data, tax identifier/status, unique User identifier, identity information including government-issued documents (e.g., national identifiers, driver's licenses, and passports);

settlement of the service provided and issuance of accounting documents: company name, company address, NIP number, email address, phone number, orders made, subscriptions, data regarding distribution brokerage,

handling returns and complaints: recipient data, address, phone number, email address, bank account number, first and last name of the person filing the complaint,

sharing opinions about the store: pseudonym, nickname or first name, name.

contact form – Company name, phone, email, NIP,

establishing, investigating, and enforcing claims: personal data provided by the User while using the functionalities of the Online Store such as: first name, last name, company name, tax identification number (NIP), registered office address, contact details, data regarding the use of services, if the claims arise from the way the User uses the services, other data necessary to prove the existence of the claim, including the extent of the incurred damage.

Account management and use of the Online Store and Service: Internet Protocol (IP) address, login data, type and version of the browser, time zone settings and location, types and versions of browser plugins, operating system and platform, and other technologies on devices used to access our website, in appropriate cases Stripe may process sensitive data (e.g., data obtained from facial recognition).

Providing personal data is voluntary and occurs in connection with placed orders or facilitating distribution on the Website, whereby failure to provide the required data during the registration of the User Account prevents the creation of a User account, and the lack of account creation prevents placing and fulfilling orders as well as facilitating distribution.

When using the Service and the Online Store, we may automatically collect Technical Data regarding hardware, activities, and browsing patterns using automated technologies and interactions. We collect this personal data using cookies, server logs, and other similar technologies. We may also receive technical data about the User if they visit other websites using our cookies.

In the case of concluding and executing a contract and providing services that the User wishes to use - personal data is processed based on the concluded distribution agreement (i.e., art. 6 sec. 1 lit. b GDPR). In the case of sending commercial information electronically, personal data is processed based on the expressed consent (i.e., art. 6 sec. 1 lit. a GDPR). In other cases, the legal basis is the legitimate interest of the Administrator arising from the subject of the conducted business activity (art. 6 sec. 1 lit. f GDPR).

The User has the option to save their debit or credit card data as a preferred payment method on their Account at the time of making the first payment and consents to a one-time verification for each order process. The legal basis for data processing is the declaration of consent made by the User before saving the data (i.e., art. 6 sec. 1 lit. a GDPR).

Rights of individuals whose data is processed

In connection with the processing of personal data, there is a right to:

access the content of personal data; including obtaining confirmation whether the Administrator processes personal data, obtaining a copy of the data, obtaining information about the purposes of processing, categories of processed personal data, the source of this data, recipients or categories of recipients of this data, the planned period of storage of the User's data or criteria for determining this period (when determining the planned data processing period is not possible), about the rights available to the User under GDPR and the right to lodge a complaint with a supervisory authority, about the safeguards applied in connection with the transfer of this data outside the European Union;

rectification or correction of personal data, including making changes independently after logging into the Service in the 'Client Panel' account tab;

restriction of the processing of personal data for a specified time or to a specified extent;

obtaining information about the scope of processing of personal data;

transfer of personal data; by transferring personal data processed by the Administrator, and then sending it on their own by the User to the selected personal data administrator;

withdrawal of consent at any time, if personal data is processed based on consent; however, the withdrawal of consent takes effect from the moment of withdrawal, and the withdrawal of consent does not affect the processing of data lawfully before its withdrawal; withdrawal of consent does not entail any negative consequences, but may prevent further use of services or functionalities;

deletion of personal data, however, depending on the situation, this may result in the deletion of the User Account;

objection to the processing of personal data; submitting a request until it is resolved prevents the use of certain functionalities or services, the use of which will involve the processing of data covered by the request;

"Filing a complaint with the supervisory authority for personal data, which in Poland is the President of the Personal Data Protection Office, address of the Personal Data Protection Office: ul. Moniuszki 1A, 00-014 Warsaw."

"Exercising the above-mentioned rights does not involve any fee. However, an appropriate fee may be charged if the request is clearly unfounded, repetitive, or excessive."

"Submitting requests and exercising your rights will not affect the actions we have taken. You will receive information regarding the fulfillment of your request no later than within one month."

"We store data about transactions you have made for the period required by tax law or to safeguard our interests as the Administrator by collecting evidence related to the acknowledgment of complaints. Deleting data at the User's request does not stop their processing in the specified scope."

"Despite the request for deletion of personal data, in connection with the objection or withdrawal of consent, the Administrator may retain certain personal data to the extent that processing is necessary for establishing, pursuing, or defending claims, as well as for fulfilling a legal obligation requiring processing under Union law or the law of the member state to which the Administrator is subject. This particularly concerns personal data including: first name, surname, company name, email address, registered office address, which data is retained for the purposes of handling complaints and claims related to the use of the Administrator's services, or additionally the residence address/correspondence address, order number, which data is retained for the purposes of handling complaints and claims related to distribution contracts or the provision of services."

"Contact regarding personal data"

"All notifications or requests regarding personal data can be made in the following way:"

• "By email to: damajanti@vp.pl"

• "By phone: +48 885 181 020"

• "By mail to: Damajanti Sp. z o.o ul. Inwalidów Wojennych 12, 43-603 Jaworzno"

"Retention period for personal data"

"Personal data, the basis for processing of which is the execution of a contract, will be processed for the time necessary to achieve the purposes for which they were collected, including for legal, accounting, tax, or reporting purposes."

"Personal data, the basis for processing of which is the User's consent, will be processed until the consent is withdrawn, and after the withdrawal of consent for a period corresponding to the limitation period for any claims."

"After the retention period expires, the data will be completely deleted or anonymized."

"Entrusting processing or transferring data"

"Personal data may be transferred to:"

"entities fulfilling complex orders for the purpose of preparing the order for shipment;"

"courier companies for the purpose of delivering ordered products;"

"technology providers and cloud service operators for the operation of the Service and the Online Store;"

"entities providing accounting services for the settlement of documents documenting distribution;"

"entities providing legal services for the defense of rights and pursuing claims;"

"entities providing payment services for the execution of payments related to the placed order."

"To process payments for orders, the Administrator uses an external payment service provider – Stripe Technology Europe, Limited, Ireland (hereinafter: "Stripe"). Stripe processes users' personal data, including payment card data, in accordance with its own privacy policy, available at""https://stripe.com/privacy"."

"Users' personal data transferred to Stripe includes payment account data, bank account data, billing/shipping address, first name and surname, order description (including date, time, amount, product or service description), device identifier, email address, IP address/location, order identifier, payment card data, tax identifier/status, unique User identifier, identity information, including government-issued documents (e.g., national identifiers, driver's licenses, and passports); in appropriate cases, Stripe may process sensitive data (e.g., data obtained from facial recognition)."

"Transferring personal data to Stripe is necessary to process payments in the Online Store. If consent to process data by Stripe is not given, entering into a distribution agreement is not possible."

"Transferring personal data to external entities occurs only to the extent necessary to perform specific services, and their use of personal data may only occur to the extent resulting from the agreement concluded with the Administrator."

We may share your personal data with external service providers outside the European Economic Area in order to provide services on your behalf or to support our business activities. If we transfer your personal data to such entities, we will ensure appropriate measures and controls to protect your personal data, such as data transfer agreements in accordance with applicable law, including the use of Standard Contractual Clauses (SCC) and appropriate adequacy decisions.

In order to provide you with services (when necessary or based on our legitimate interest or the interest of third parties), we are entitled to automatically collect and record data transmitted to the server by web browsers or your devices (including for the purpose of ensuring IT resource security or the security of other Users). The data may include, for example, cookies, IP address, software and hardware parameters, viewed pages, mobile device identification number, application usage information, and other data regarding the devices and systems you use. The collection of this information affects the proper functioning of the website, allowing you to use it comfortably and have full access to our service.

Changes to this policy

In the event that the Company introduces new products or services, changes the procedures of the online store, or in the event of the development of internet security technology, it may be necessary to update the information contained in this privacy policy. For this reason, the Company reserves the right to change the privacy policy or supplement it if necessary. Changes will be published on the Service. The Company recommends regularly visiting the section containing the privacy policy to learn about the current state of information regarding the protection of personal data.

Data processing for marketing purposes

The data listed below pertains to the processing of personal data for advertising purposes. GDPR documentation allows such data processing based on Article 6(1)(f) to be generally possible and constitutes a legitimate interest of the Administrator, except for the right to send commercial information electronically. In such a case, the basis for data processing will be consent based on Article 6(1)(a). The retention period for data for advertising purposes will then depend on the relevance of the processing purpose or the validity of your consent.

Advertising purposes carried out by Damajanti Sp. z o.o. and third parties

The Administrator may process your data such as: email address, username, first and last name, address, to send information regarding our own, similar products, if you have given your explicit, voluntary consent. Consent can be withdrawn at any time, which does not affect the legality of sending advertising information before its withdrawal.

Withdrawal of consent may occur by sending an email or a registered letter to the address of the personal data Administrator.

Advertising purposes related to interests

The Administrator takes actions aimed at sending promotional information that may relate to the User's interests. For this purpose, the Administrator categorizes and adds further information to your customer profile. Statistical data as well as information about the User are used for this purpose.