1. General Provisions
The administrator of personal data collected via the Online Store musicanarea.com is ONSIDE MUSIC STUDIO; email address: office@musicanarea.com – hereinafter referred to as the "Administrator", who is also the Service Provider of the Online Store and the Seller.
This Privacy Policy is informative and aims to explain the principles, scope, and purpose of personal data processing and the use of cookies in connection with the use of the Online Store by Users.
The Administrator makes every effort to ensure that personal data is secure and processed in accordance with applicable regulations, particularly the General Data Protection Regulation (EU) 2016/679 (GDPR).
2. Scope and Purpose of Data Collection
The Administrator processes personal data of the User when:
- creating a Customer Account in the Online Store,
- placing an order without registering an account,
- subscribing to the newsletter (if available),
- contacting via the contact form or email.
The scope of collected data includes, in particular: first name and last name, email address, IP address, transaction data (for payments), and in the case of custom transcriptions – any data voluntarily provided by the Customer in the message content.
The purpose of processing the data is to:
- fulfill the order,
- issue a sales document,
- contact the customer regarding the order,
- send marketing information (if the User has given consent),
- statistical and analytical purposes.
3. Legal Basis for Data Processing
Personal data is processed based on:
- Article 6(1)(b) GDPR – the performance of a sales contract or actions prior to its conclusion,
- Article 6(1)(c) GDPR – a legal obligation of the Administrator (e.g., issuing invoices),
- Article 6(1)(f) GDPR – the legitimate interest of the Administrator (e.g., customer contact, statistics),
- Article 6(1)(a) GDPR – the consent of the data subject (e.g., for newsletters).
4. Recipients of Data
Personal data may be shared with entities processing it on behalf of the Administrator, such as:
- payment operators (PayPal, Millenium Bank),
- IT and hosting service providers,
- operators of the online store system (PrestaShop),
- companies providing accounting services.
All of these entities are obligated to protect data in accordance with GDPR.
5. Data Storage
Personal data is stored for the following periods:
- for the duration of the contract and tax obligations (up to 6 years),
- until the consent is withdrawn – in case of processing based on consent,
- until the limitation period of claims – in case of processing for the purpose of defending the Administrator's interests.
6. Rights of the Data Subject
Every User has the right to:
- access their data,
- rectify their data,
- delete their data,
- restrict the processing of their data,
- data portability,
- object to processing,
- withdraw consent at any time (if processing is based on consent),
- file a complaint with the President of the Data Protection Office.
7. Cookies and Analytical Tools
The Online Store uses cookies to ensure the proper functioning of the service, customize content to the user's preferences, analyze statistics, and integrate with services such as PayPal payment system.
The User can change the cookie settings in their web browser. Restricting the use of cookies may affect some functionalities of the Store.
8. Voluntariness of Data Provision
Providing personal data is voluntary, but necessary to use the functionalities of the Store, especially for processing the order.
9. Data Security
The Administrator applies appropriate technical and organizational measures to protect personal data, including SSL encryption, server security, and access restrictions.
10. Contact with the Data Administrator
For matters related to personal data processing, please contact via email: office@musicanarea.com