Privacy policy
Privacy Policy
What is the privacy Policy?
We would like to familiarize you with the details of the processing of your data by us to give you full knowledge and comfort in using our website.
Because we operate in the Internet industry ourselves, we know how important it is to protect your data. Therefore, we make special efforts to protect your privacy and the information you provide to us.
We carefully select and apply appropriate technical measures, in particular, those of a programming and organizational nature, ensuring the protection of personal data being processed. Our site uses encrypted data transmission (SSL), which ensures the protection of data identifying you.
In our Privacy Policy, you will find all the most important information regarding the processing of your data by us. We ask you to read it and we promise that it won’t take you more than a few minutes.
Who is the administrator of the website www.healthidea.co.uk ?
The administrator of the website is the Voytex with its registered office in London, at Wembley, London, United Kingdom. (i.e.: us).
PERSONAL DATA
What legal act regulates the processing of your data?
Your data is collected and processed by us in by the provisions of Regulation (EU) 2016/679 of the European Parliament and the Council of 27/04/2016 on the protection of individuals about the processing of personal data and on the free movement of such data, and repealing Directive 95 / 46 / EC (general regulation on data protection) (Official Journal EU L 119, p. 1), commonly referred to as GDPR. To the extent not regulated by the GDPR, the processing of personal data is regulated by the Personal Data Protection Act of May 10, 2018.
Who is the administrator of your data?
The administrator of your data is Voytex with its registered office in London, at Wembley, London, United Kingdom, e-mail: [email protected]
HOW DO WE PROCESS YOUR DATA YOU PROVIDE TO US?
What data do we process and for what purposes do we process it?
On our website, we offer you many different services, for the purposes of which we process different personal data, based on different legal bases.
Purpose |
conclusion and performance of the contract |
setting up and maintaining an account |
newsletter |
contact form |
organization of competitions |
Loyalty program |
website traffic analysis |
direct marketing of own goods and services, including remarketing |
determination, investigation and enforcement of claims and defense against claims in proceedings before courts and other state authorities |
fulfillment of legal obligations resulting from legal provisions, in particular tax and accounting regulations |
Personal data | name, surname, correspondence address, tax identification number, e-mail address, telephone number, payment card number, |
name, surname, e-mail address, telephone number, correspondence address, other, NIP |
e-mail address, name, surname, |
name, surname, e-mail address, telephone number, |
name, surname, e-mail address, image, telephone number |
name, surname, e-mail address, telephone number |
name, IP address, e-mail address |
name, IP address, other, Surname |
name, surname, address of residence, ID number, e-mail address, telephone number, IP number, bank account number, payment card number |
name, surname, company, ID number, e-mail address, telephone number, correspondence address, payment card number |
Legal basis for processing | article 6 sec. 1 lit. b) GDPR, i.e. processing in order to take action at your request, before concluding the contract and processing necessary to perform the contract to which you are a party |
article 6 sec. 1 lit. b) GDPR, i.e. processing in order to take action at your request, before concluding the contract and processing necessary to perform the contract to which you are a party |
article 6 sec. 1 lit. a) GDPR, i.e. processing based on your consent to the processing of your personal data |
article 6 sec. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest, consisting in maintaining continuity of communication and enabling contact with us in matters of business activity |
article 6 sec. 1 lit. a) GDPR, i.e. processing based on your consent to the processing of your personal data |
article 6 sec. 1 lit. a) GDPR, i.e. processing based on your consent to the processing of your personal data |
Article 6 par. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest in analyzing customer traffic on the store’s website |
Article 6 par. 1 lit. f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in direct marketing of our own services, including remarketing |
article 6 sec. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest, consisting in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities |
Article 6 par. 1 lit. c) GDPR, i.e. processing is necessary to fulfill the legal obligations imposed on us by law, in particular tax and accounting regulations |
Data storage time | until the expiration of the limitation period for claims regarding the performance of the contract |
until the expiration of the limitation period for claims regarding the performance of the contract |
until the consent to the processing of personal data is withdrawn |
until you object to the processing of personal data |
until the consent to the processing of personal data is withdrawn |
until the consent to the processing of personal data is withdrawn |
until you object to the processing of personal data |
or until you object to the processing of personal data |
until the expiration of the limitation period for claims regarding the performance of the contract |
until the expiry of the legal obligations incumbent on the Administrator, which justified the processing of personal data |
Purpose |
conclusion and performance of the contract |
setting up and maintaining an account |
newsletter |
contact form |
organization of competitions |
Loyalty program |
website traffic analysis |
direct marketing of own goods and services, including remarketing |
determination, investigation and enforcement of claims and defense against claims in proceedings before courts and other state authorities |
fulfillment of legal obligations resulting from legal provisions, in particular tax and accounting regulations |
Personal dataname, surname, correspondence address, tax identification number, e-mail address, telephone number, payment card number,
name, surname, e-mail address, telephone number, correspondence address, other, NIP |
e-mail address, name, surname, |
name, surname, e-mail address, telephone number, |
name, surname, e-mail address, image, telephone number |
name, surname, e-mail address, telephone number |
name, IP address, e-mail address |
name, IP address, other, Surname |
name, surname, address of residence, ID number, e-mail address, telephone number, IP number, bank account number, payment card number |
name, surname, company, ID number, e-mail address, telephone number, correspondence address, payment card number |
Legal basis for processingarticle 6 sec. 1 lit. b) GDPR, i.e. processing in order to take action at your request, before concluding the contract and processing necessary to perform the contract to which you are a party
article 6 sec. 1 lit. b) GDPR, i.e. processing in order to take action at your request, before concluding the contract and processing necessary to perform the contract to which you are a party |
article 6 sec. 1 lit. a) GDPR, i.e. processing based on your consent to the processing of your personal data |
article 6 sec. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest, consisting in maintaining continuity of communication and enabling contact with us in matters of business activity |
article 6 sec. 1 lit. a) GDPR, i.e. processing based on your consent to the processing of your personal data |
article 6 sec. 1 lit. a) GDPR, i.e. processing based on your consent to the processing of your personal data |
Article 6 par. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest in analyzing customer traffic on the store’s website |
Article 6 par. 1 lit. f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in direct marketing of our own services, including remarketing |
article 6 sec. 1 lit. f) GDPR, i.e. processing in order to implement our legitimate interest, consisting in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities |
Article 6 par. 1 lit. c) GDPR, i.e. processing is necessary to fulfill the legal obligations imposed on us by law, in particular tax and accounting regulations |
until the expiration of the limitation period for claims regarding the performance of the contract
Data storage time |
until the expiration of the limitation period for claims regarding the performance of the contract |
until the consent to the processing of personal data is withdrawn |
until you object to the processing of personal data |
until the consent to the processing of personal data is withdrawn |
until the consent to the processing of personal data is withdrawn |
until you object to the processing of personal data |
or until you object to the processing of personal data |
until the expiration of the limitation period for claims regarding the performance of the contract |
until the expiry of the legal obligations incumbent on the Administrator, which justified the processing of personal data |
Voluntary provision of personal data
Providing the required data by you is voluntary, but it is a condition for us to provide services to you (e.g. sending a newsletter or creating an account).
Recipients of personal data
The current list of entities to which we disclose your data can be found here.
Automated decision-making (including profiling)
We use tools with which we direct personalized advertising to you. Based on your actions in the Store, in particular the selection of content viewed and the time spent on the Store’s subpages, we adjust and display marketing content tailored to you. Thanks to such profiling, we can direct the marketing message more desired by you, which is an advantage for both us and you, because in this way we limit the marketing message regarding goods and services that are not in your area of interest.
Will we transfer your data outside the EEA or to an international organization?
WHAT RIGHTS DO YOU HAVE ABOUT US PROCESSING YOUR DATA?
Based on the GDPR, you have the right to:
request access to your data,
request correction of your data,
request deletion of your data,
requests to limit the processing of personal data,
object to the processing of personal data,
requests to transfer personal data.
If you submit any of the above requests to us, without undue delay – and in any case within one month of receiving the request – we will provide you with information about the actions taken in connection with your request.
If necessary, we may extend the monthly period by another two months due to the complexity of the request or the number of requests.
In any case, we will inform you within one month of receiving the request to extend the deadline and provide you with the reasons for the delay.
Right of access to personal data (Article 15 of the GDPR)
You have the right to obtain information whether we process your data. If we process your data, you have the right to:
access to personal data,
obtaining information about the purposes of the processing, categories of personal data being processed, recipients or categories of recipients of this data, the planned period of storing your data or the criteria for determining this period, your rights under the GDPR, and the right to lodge a complaint with the President of the Office for Personal Data Protection, about the source of this data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of this data outside the European Union;
obtain a copy of your data.
If you want to request access to your data, submit your request to: [email protected]
Right to correction of personal data (Article 16 of the GDPR)
If your data is incorrect, you have the right to request us to correct your data immediately. You also have the right to request us to supplement your data. If you want to request rectification or supplementation of your data, submit your request to the following address: [email protected]
The right to delete personal data, the so-called “right to be forgotten” (Article 17 of the GDPR)
You have the right to request the deletion of your data when:
your data is no longer necessary for the purposes for which it was collected or otherwise processed;
you have withdrawn specific consent to the extent that personal data was processed based on your consent;
your data has been processed unlawfully;
you have objected to the processing of your data for direct marketing, including profiling, to the extent that the processing of personal data is related to direct marketing;
you have objected to the processing of your data in connection with the processing necessary to perform a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by us or a third party.
Despite submitting a request to delete personal data, we can process your data further to establish, pursue, or defend claims, about which you will be informed.
If you want to request the deletion of your data, submit your request to: [email protected]
The right to submit a request to limit the processing of personal data (Article 18 of the GDPR)
You have the right to request the restriction of the processing of your data when:
you question the correctness of your data – in this case, we will limit the processing of your data for a period that allows you to check the correctness of this data;
the processing of your data is unlawful, and instead of deleting your data, you request the restriction of the processing of your data;
your data are no longer needed for processing, but they are needed to establish, pursue, or defend your claims;
you have objected to the processing of your data – until it is determined whether our legitimate interests override the grounds indicated in your objection.
If you want to request the restriction of the processing of your data, submit your request to the following address: [email protected]
Right to object to the processing of personal data (Article 21 of the GDPR)
You have the right to object at any time to the processing of your data, including profiling, in connection with:
processing necessary to perform a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the Personal Data Administrator or a third party;
processing for direct marketing purposes.
If you want to object to the processing of your data, submit your request to the following address: [email protected]
The right to request the transfer of personal data (Article 20 of the GDPR)
You have the right to receive your data from us in a structured, commonly used, and machine-readable format and to send it to another personal data controller.
By default, we will provide you with your data in CSV format. If you prefer the data to be made available to you in a different format, indicate your preferred format in your request. Where possible, we will try to make the data available to you in the format you prefer.
You can also request that we send your data directly to another administrator (if technically possible).
If you want to request the transfer of your data, submit your request to the following address: [email protected]
Can you withdraw your consent to the processing of personal data?
You can withdraw your consent to the processing of your data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out by us based on your consent before its withdrawal.
If you want to withdraw your consent to the processing of your data, submit your request to the following address: [email protected]
If you want to withdraw your consent to the processing of personal data to provide the “Newsletter” service, you can unsubscribe here [link to the unsubscribe website].
Complaint to the supervisory authority
If you believe that the processing of your data violates the provisions on the protection of personal data, you have the right to complain to the supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged violation.
In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection, which replaced GIODO on May 25, 2018.
More information can be found here.
Cookies
General information
When browsing the websites of the Online Store, “cookies” are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Online Store. Their use is aimed at the correct operation of the Online Store websites.
These files allow you to identify the software you use and adapt the Online Store individually to your needs.
Cookie files usually contain the name of the domain they come from, their storage time on the device, and the assigned value.
Security
The cookies we use are safe for your devices. In particular, viruses or other unwanted software or malware can not get to your devices through Cookies.
Types of Cookies
We use two types of cookies:
Session cookies: they are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from your device’s memory. The session cookies mechanism does not allow you to download any personal data or any confidential information from your device.
Persistent cookies: they are stored on your device and remain there until you delete them. Ending the session of a given browser or turning off the device does not delete them from your device. The mechanism of persistent cookies does not allow you to download any personal data or any confidential information from your device.
Purposes
We also use third-party cookies for the following purposes:
configuration of the Online Store.
To learn about the rules of using Cookies, we recommend that you read the privacy policies of the above-mentioned companies.
Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information about the way you move around the web or when you use the website may be stored.
To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at the link https://www.google.com/ads/preferences/
Using the web browser settings or using the service configuration, you can independently and at any time change the settings for Cookies, specifying the conditions for their storage and access by Cookies to your device. You can change these settings to block the automatic handling of Cookies in the settings of your web browser or to inform about them each time they are placed on your device. Detailed information about the possibilities and ways of handling Cookies are available in the settings of your software (web browser).