Privacy policy

version 1.0

The meaning of terms written with a capital letter is the same as in our terms & conditions for the supply of e-books, audiobooks and other digital content.

Who processes your personal data and how to contact them?

Personal Data Controller:

Elibri sp. z o. o., a limited liability company incorporated under the laws of Poland, with its seat in Warsaw (address Grottgera St. 9a/7, 00-785 Warsaw), with a tax identification number (NIP): 5213483769, registered in the register of entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register (KRS), under the KRS number: 0000306422.

Contact via e-mail: hello@checkout.bookery.app

How and for what purpose do we process your personal data?

The purpose of processing your personal data and the scope of it processed depends on what you do on our website.

You are the Customer of our Shop

If you buy in our Shop, we ask you to provide your name and surname, e-mail address (these personal data are transferred by us to the Payment Operator). Providing data marked as mandatory is required to perform the order.

Your personal data are processed:

  1. in order to perform the order - the legal basis for processing is the necessity of processing to perform the Contract (Article 6 .1.b of the GDPR); in the scope of optional data, the legal basis for processing is consent (Article 6.1.a of the GDPR);

  2. in order to fulfill the statutory obligations incumbent on the Controller, resulting (in particular) from tax and accounting regulations - the legal basis for processing is the legal obligation (Article 6.1.c of the GDPR);

  3. for analytical purposes - the legal basis for processing is the Controller's legitimate interest (Article 6.1.f of the GDPR) consisting in conducting analyzes of users' activity on the website, as well as their purchasing preferences in order to improve the functionalities used;

  4. in order to possibly pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Controller (Article 6.1.f of the GDPR) consisting in the protection of his rights;

Basic processing period: six years from the end of the year in which the Contract was concluded.

You have consented to share your email to the publisher of the Digital Content you have ordered

When performing an order in our Store, you may give separate consent to share your e-mail address to the publisher of the ordered Digital Content. If you consent, you may receive messages from this publisher about new products, promotions and discounts available on our website (commercial information). This publisher became a separate controller of your personal data.

Personal data is processed:

  1. in order to provide you commercial information via email - the legal basis for processing is your consent (Article 6.1.a of the GDPR); You can revoke consent to receive the newsletter at any time;

  2. for analytical purposes - the legal basis for processing is the Controller's legitimate interest (Article 6.1.f of the GDPR) consisting in conducting analyzes of users' activity on the website and the manner of using the account, as well as their preferences, in order to improve the functionalities used;

  3. in order to possibly pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Controller (Article 6.1.f of the GDPR) consisting in the protection of his rights.

Basic processing period: until you unsubscribe from the publisher’s newsletter.

You contact us by e-mail, web forms or as otherwise described on the Shop’s website

Depending on the purpose of the contact, you may be asked to provide personal data, e.g. your name, surname, email address, order number or other personal data necessary to contact you and answer your inquiry. Providing personal data is voluntary.

Personal data is processed:

  1. to identify the sender and handle his inquiry - the legal basis for processing is the necessity of processing to perform the service contract (Article 6.1.b of the GDPR);

  2. for analytical purposes - the legal basis for processing is the Controller's legitimate interest (Article 6.1.f of the GDPR) consisting in keeping statistics of inquiries submitted by users via the website in order to improve its functionality;

  3. in order to possibly pursue claims or defend against them - the legal basis for processing is the legitimate interest of the Controller (Article 6.1.f of the GDPR) consisting in the protection of his rights.

Basic processing period: one year from the end of the year in which the contact was made. In the case of after-sales service, six years from the end of the year in which the Contract was concluded.

Cookies what are they?

Cookies are small text files that are saved by your web browser on your device. The cookie file stores information supporting the functioning of the website and data about your activity on the website. In this Policy, information on cookies also applies to other similar technologies used on the website.

What types of cookies do we use?

We use:

  • technical cookies - necessary for the proper and safe functioning of the website

  • configuration cookies - storing your settings, eg the language of the site

  • statistical cookies - used to create network traffic statistics on our website

How to express or withdraw consent to the installation of cookies and the processing of data collected by them?

From your browser settings:

Using the web browser settings, you can independently and at any time change the settings for all cookies, specifying the conditions for their storage and access by cookies to your device. You can change these settings so as to block the automatic handling of cookies in your web browser settings or inform about their every posting on your device. Detailed information on the possibilities and methods of handling cookies is available in the settings of your software (web browser). Instructions on how to do this can be found on the website of your browser manufacturer or, for example, on this website (http://jakwylaczyccookie.pl/jak-wylaczyc-pliki-cookies/).

How long do we process your personal data?

We provide the data processing period for the activities described in this policy as the "Basic processing period". The basic processing period, if the basis for processing is your consent, lasts until the consent is withdrawn. If the Basic processing period has not been provided, it is 3 years from the end of the year in which the data was collected.

The basic period of data processing may be extended by the period of limitation of claims (usually 6 years) if the processing is necessary to establish, investigate or defend against any claims.

Your rights

In connection with the processing of personal data, you are entitled to:

  • access to your personal data;

  • obtain a copy of personal data;

  • rectify or supplement your personal data; Remember that you can edit some personal data yourself via the account;

  • delete your personal data;

  • restrictions on the processing of personal data;

  • transfer of personal data.

You can exercise your rights by writing to us at the following address: kontakt@elibri.com.pl.

The personal data Controller will, without undue delay - and in any case within one month of receiving the request - provide you with information about the actions taken by him in connection with the request you have made. If necessary, the monthly period may be extended by another two months due to the complexity of the request or the number of requests.

1) Withdrawal of the consent

To the extent that the basis for the processing of your data is consent, the data will be processed until it is withdrawn. The consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.

2) Right to object

The user has the right to object at any time to the processing of his data for reasons related to his particular situation in cases where the legal basis for data processing is the legitimate interest of the controller (e.g. in connection with the implementation of analytical and statistical purposes).

3) Complaint to the supervisory authority

If you believe that the processing of your personal data violates the law, you have the right to lodge a complaint with the supervisory authority competent for the place of your stay. In Poland, the supervisory body within the meaning of the GDPR is the President of the Personal Data Protection Office (https://uodo.gov.pl/). Before submitting a complaint, we encourage you to contact us and exercise your rights described in this policy.

Who do we share your personal data with and why?

Personal data obtained by the Controller in connection with the provision of services on the website will be disclosed to external entities, such as:

  • operators of online payment systems,

  • suppliers responsible for the operation of IT systems,

  • operators of platforms for sending mailings,

  • accountants, lawyers and auditors,

  • other entities with which the Controller has concluded an agreement on entrusting the processing of personal data.

Data transfering to third countries

The level of personal data protection outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Controller transfers personal data outside the EEA only when it is necessary and with an adequate level of protection, primarily through:

  • the cooperation with entities processing personal data in countries for which the Adequacy Decision of the European Commission has been issued;

  • the use of standard contractual clauses issued by the European Commission.

Policy changes

The privacy policy is verified on an ongoing basis and updated if necessary.

The privacy policy comes into force since November 9, 2023.