Privacy Policy

We would like to present to you the details of how we process your personal data, so that you have full understanding and comfort when using our website.

Since we operate in the online industry ourselves, we know how important the protection of your personal data is. That’s why we make every effort to safeguard your privacy and the information you share with us.

We carefully select and apply appropriate technical measures, especially those of a software and organizational nature, to ensure the protection of the personal data we process. Our website uses encrypted data transmission (SSL), which protects the data that identifies you.

In our Privacy Policy, you will find all the most important information regarding how we process your personal data. We kindly ask you to read it, and we promise it won’t take you more than a few minutes.

Who is the administrator of the website www.dreamisland.com?

The administrator of the website is FUNDACJA SHAPE YOUR DESTINY, headquartered in Warsaw, at ul. Chmielna 73C lok. 39, 00-801 Warsaw, registered by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, KRS 0000666226, NIP 5223084901, REGON 366683640 (that is: us).

What legal act regulates the processing of your personal data?

Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly known as the GDPR. In matters not regulated by the GDPR, the processing of personal data is governed by the Personal Data Protection Act of 10 May 2018.

Who is the administrator of your personal data?

The administrator of your personal data is FUNDACJA SHAPE YOUR DESTINY, headquartered in Warsaw, at ul. Chmielna 73C lok. 39, 00-801 Warsaw, registered by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, KRS 0000666226, NIP 5223084901, REGON 366683640, phone: +48 537926668, email: contact@dreamisland.com

You can contact us regarding your personal data via:

• email: contact@dreamisland.com
• traditional mail: ul. Chmielna 73C lok. 39, 00-801 Warsaw
• phone: +48 537926668

What personal data do we process and for what purposes do we process it?

On our website, we offer you many different services, for which we process various types of personal data based on different legal grounds.

Purpose	Personal data	Legal basis for processing	Data retention period
concluding and performing a contract	first name, last name, correspondence address, tax identification number (NIP), email address, phone number, payment card number	Art. 6(1)(b) GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party	until the expiry of the limitation period for claims related to the performance of the contract
creating and managing an account	first name, last name, email address, phone number, correspondence address, others, tax identification number (NIP)	Art. 6(1)(b) GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are a party	until the expiry of the limitation period for claims related to the performance of the contract
newsletter	email address, first name, last name	Art. 6(1)(a) GDPR, i.e. processing based on the consent you have given for the processing of your personal data	until consent for personal data processing is withdrawn
contact form	first name, last name, email address, phone number	Art. 6(1)(f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest consisting of maintaining communication continuity and enabling contact with us regarding our business operations	until an objection to personal data processing is submitted
organization of contests	first name, last name, email address, image, phone number	Art. 6(1)(a) GDPR, i.e. processing based on the consent you have given for the processing of your personal data	until consent for personal data processing is withdrawn
loyalty program	first name, last name, email address, phone number	Art. 6(1)(a) GDPR, i.e. processing based on the consent you have given for the processing of your personal data	until consent for personal data processing is withdrawn
analysis of traffic on the online store website	first name, IP address, email address	Art. 6(1)(f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest consisting of analyzing customer traffic on the store’s website	until an objection to personal data processing is submitted
direct marketing of our goods and services, including remarketing	first name, IP address, others, last name	Art. 6(1)(f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest consisting of direct marketing of our services, including remarketing	or until an objection to personal data processing is submitted
establishing, pursuing, and enforcing claims, and defending against claims in proceedings before courts and other state authorities	first name, last name, residential address, PESEL number, tax identification number (NIP), statistical number (REGON), email address, phone number, IP number, bank account number, payment card number	Art. 6(1)(f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest consisting of establishing, pursuing, and enforcing claims, and defending against claims in proceedings before courts and other state authorities	until the expiry of the limitation period for claims related to the performance of the contract
fulfillment of legal obligations arising from legal provisions, in particular tax and accounting regulations	first name, last name, company name, PESEL number, tax identification number (NIP) or statistical number (REGON), email address, phone number, correspondence address, payment card number	Art. 6(1)(c) GDPR, i.e. processing necessary to fulfill the legal obligations imposed on us, arising from legal provisions, in particular tax and accounting regulations	until the expiry of the legal obligations imposed on the Administrator that justify the processing of personal data

Voluntary provision of personal data

Providing the required personal data is voluntary, but it is a condition for us to provide services to you (e.g. sending the newsletter or creating an account).

Recipients of personal data

You can find the current list of entities to whom we disclose your personal data here.

Automated decision-making (including profiling)

We use tools that allow us to display personalized advertisements to you. Based on the actions you take in the Store—particularly the content you view and the amount of time you spend on specific subpages—we adjust and present marketing content tailored to you. Thanks to such profiling, we can direct marketing messages that are more relevant to your interests, which benefits both you and us, as it reduces marketing related to products or services that are outside your area of interest.

Will we transfer your personal data outside the EEA or to an international organization?

Under the GDPR, you have the right to:

• request access to your personal data,
• request the rectification of your personal data,
• request the deletion of your personal data,
• request the restriction of personal data processing,
• object to the processing of personal data,
• request the transfer of personal data.

If you submit any of the above requests, we will provide you with information about the actions taken in response to your request without undue delay—and in any case within one month of receiving the request.

If necessary, we may extend this one-month period by an additional two months due to the complexity of the request or the number of requests.

In any such case, we will inform you within one month of receiving your request about the extension and the reasons for the delay.

Right of access to personal data (Art. 15 GDPR)

You have the right to obtain information on whether we process your personal data. If we do, you have the right to:

• access your personal data,
• obtain information on the purposes of processing, the categories of processed personal data, the recipients or categories of recipients of the data, the planned retention period or the criteria for determining it, the rights you have under the GDPR, the right to lodge a complaint with the President of the Personal Data Protection Office, the source of the data, automated decision-making (including profiling), and the safeguards applied in connection with transferring the data outside the European Union,
• obtain a copy of your personal data.

If you wish to request access to your personal data, submit your request to: contact@dreamisland.com.

Right to rectify personal data (Art. 16 GDPR)

If your personal data is inaccurate, you have the right to request that we rectify it without delay. You also have the right to request that we complete your incomplete personal data. If you wish to request the rectification or completion of your personal data, submit your request to: contact@dreamisland.com.

Right to erase personal data (“right to be forgotten”) (Art. 17 GDPR)

You have the right to request the deletion of your personal data when:

• your personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
• you have withdrawn consent, to the extent that processing was based on your consent,
• your personal data has been processed unlawfully,
• you objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that processing is related to direct marketing,
• you objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or for purposes arising from legitimate interests pursued by us or a third party.

Despite your request for deletion, we may continue processing your data in order to establish, pursue, or defend legal claims, of which you will be informed.

If you wish to request the deletion of your personal data, submit your request to: contact@dreamisland.com.

Right to request restriction of personal data processing (Art. 18 GDPR)

You have the right to request restriction of the processing of your personal data when:

• you contest the accuracy of your personal data—in such a case we will restrict processing for the time needed to verify the accuracy of the data,
• the processing of your data is unlawful and instead of requesting deletion you request restriction of processing,
• your personal data is no longer needed for processing purposes, but you need it to establish, pursue, or defend your claims,
• you have objected to the processing of your personal data—until it is determined whether our legitimate grounds override the reasons indicated in your objection.

If you wish to request restriction of processing, submit your request to: contact@dreamisland.com.

Right to object to the processing of personal data (Art. 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

• processing necessary for the performance of a task carried out in the public interest or processing necessary for legitimate interests pursued by the data controller or a third party,
• processing for direct marketing purposes.

If you wish to object to the processing of your personal data, submit your request to: contact@dreamisland.com.

Right to request data portability (Art. 20 GDPR)

You have the right to receive your personal data from us in a structured, commonly used, machine-readable format and to transmit it to another data controller.

By default, we will provide your personal data in CSV format. If you prefer another format, indicate it in your request. We will do our best to provide the data in your preferred format, if technically feasible.

You may also request that we transfer your data directly to another controller (if technically possible).

If you wish to request the transfer of your personal data, submit your request to: contact@dreamisland.com.

Can you withdraw your consent to personal data processing?

You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

If you wish to withdraw your consent, submit your request to: contact@dreamisland.com.

If you wish to withdraw consent for the “Newsletter” service, you may unsubscribe here: [unsubscribe link].

Complaint to a supervisory authority

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged violation.

In Poland, the supervisory authority under the GDPR is the President of the Personal Data Protection Office, who replaced GIODO on 25 May 2018.

More information can be found here.

General information

When browsing the webpages of the Online Store, “cookies” are used, hereinafter referred to as Cookies—small text files saved on your end device in connection with your use of the Online Store. Their purpose is to ensure the proper functioning of the Online Store’s webpages.

These files allow the software you use to be identified and enable the Online Store to be individually tailored to your needs.

Cookies typically contain the domain name they originate from, the time they are stored on the device, and a unique value.

Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or malicious software to enter your devices through Cookies.

Types of Cookies

We use two types of Cookies:

• Session Cookies: stored on your device and remain there until the session of a given browser ends. The stored information is then permanently deleted from your device. The mechanism of session Cookies does not allow the collection of any personal data or confidential information from your device.
• Persistent Cookies: stored on your device and remain there until they are deleted. Ending the session of a given browser or turning off the device does not remove them. The mechanism of persistent Cookies does not allow the collection of any personal data or confidential information from your device.

Purposes

We also use third-party Cookies for the following purposes:

• configuration of the Online Store.

To learn about the rules for using Cookies, we recommend reading the privacy policies of the companies listed above.

Cookies may be used by advertising networks, particularly Google’s network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate the web or the time you spend on a website may be stored.

To view and edit the information about your preferences collected by the Google advertising network, you can use the tool available at: https://www.google.com/ads/preferences/

Using your browser settings or service configuration, you can independently and at any time change the settings regarding Cookies, specifying the conditions for their storage and access. You can change these settings to block the automatic handling of Cookies in your web browser or to notify you each time Cookies are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in your browser settings.