This website is operated by Potential Supplements sp. z o.o., Ul. Warszawska 6 32 Bialystok, Poland (hereinafter – Potential).
This privacy statement covers only the information collected on this website and does not cover any other information collected offline by Potential.
The personal information provided on the Potential website is transmitted via a secure server and is processed by Potential as a data controller.
Potential undertakes to manage personal information with high standards of information transmission security.
We inform and ensure that all appropriate physical, electronic and administrative measures are taken to maintain the security and accuracy of the personal information that is collected, limiting the number of people who have physical access to the database servers, as well as employing electronic security systems and password protections that protect and protect against unauthorized access to data.
Potential website uses Secure Sockets Layer (SSL) encryption technology, in order to protect personal information during transport and data transmission. SSL encrypts the order information such as name, address and credit card number.
Potential customer service center operates within a private and secure network.
Note that the e-mail is not encrypted and is not considered a secure means of transmitting credit card information.
In order to guarantee the provision of high quality services, Potential uses information deriving from interactions with customers within the website.
In respect of customer privacy, Potential has implemented procedures to ensure that personal information collected is handled in a safe and responsible manner.
Given the constant technological advances, it should be noted that this information may undergo or have already undergone changes.
We therefore invite you to view them in a systematic manner, in order to implement any changes and updates.
You can browse the Potential website without providing any personally identifiable information. However, you may be required to provide personally identifiable information in some areas of the site.
In some cases, if you choose not to provide the requested information, you may not be able to access all parts of the site or take part in all of its features.
HOW THE COLLECTED INFORMATION IS USED
We process personal data for these and related purposes:
– Provision of services (creating and managing your account, submitting an order, managing your order etc.). Legal basis for this purpose is performance of a contract with you and compliance to the legal obligations.
– Providing direct marketing via email or telephone. Legal basis is our legitimate interest to provide our existing customers with the relevant information about our promotions and other useful information and/or consent of our potential clients. Please note when personal data is collected based on your consent you have a right to withhold that consent or withdraw consent at any time without an adverse effect. We use Mailchimp for sending our newsletters.
– Providing important notifications. Legal basis is our legitimate interest – to provide good customer service and inform you about certain changes, cancelations or other important messages related to your orders.
All personal information stored on the site is stored each time purchases are made through the Potential website or through authorized sales channels.
The information provided in other ways is also stored, for example by subscribing to mailing lists or mobile messaging.
If you use a credit or debit card, the details of these will also be included.
If you use one of the services or participate in one of the promotions or sweepstakes, additional information may be required, such as age, interests or preferences about the products.
From the purchases made and from all the interactions on the Potential website, information will be obtained regarding specific products and / or services used.
OTHER SUBJECTS WITH WHICH THE INFORMATION IS SHARED
All information collected as described above may be shared with our carefully selected partners: IT service providers, cloud service providers, auditors, IT support, accounting partners, marketing partners.
Service providers: we reserve the right to share information with external companies that provide support in the supply of products and services.
For example, it is possible that you contact an external company to: (a) manage a database of customer information; (b) have a support in e-mail distribution; (c) have direct marketing support and data collection; (d) data storage and analysis; (d) to have support in fraud prevention; and (e) provide other services designed to maximize commercial potential.
It is required that these external companies accept to keep all information that is shared confidential, apply adequate security measures and to use the information only to fulfill their obligations.
Other companies: information may be provided to carefully selected external companies when it is deemed that their products or services may be of interest to the customer. This is done only if the customers agree to receive promotions from other companies.
It will be possible to transfer or share a copy of personal information within the group companies.
In the event that there is a change of ownership or control of the company, the user will receive a notification by e-mail or a notice on the Potential website.
Compliance with the law: it will be possible to provide access to information when requested by the authorities, to cooperate with police investigations or other legal proceedings, to limit legal liability.
Potential works with advertising companies to place its advertising on websites on the Internet. These advertising companies collect anonymous information about visits to the Potential website.
This technology involves the use of third-party cookies and which allow these companies to develop personalized advertising so that it refers directly to offers that may interest customers.
You can choose to forgo this service offered by the advertising partner.
It will be possible to use Potential cookies to provide advanced online marketing based on the user’s specific interests and preferences.
You can choose to forgo these advanced online marketing ads.
COOKIES, WEB BEACONS
A “cookie” is a small data file stored by the web browser on your computer or mobile device (hard disk) and allows you to recognize the specific computer (but not specifically who is using it) when you access the site by associating the identification numbers in the cookie with other client information.
Customer information is stored in the secured database.
A “web beacon” or “pixel tag” or “clear gif” is generally a one-pixel image used to transfer information from a computer or mobile device to a website.
This information is used to improve site design, product assortments, customer support and special promotions. Of course, you can disable cookies and web beacons on your computer by indicating it in your browser preferences or options menus. However, some parts of the website may not work properly if you disable cookies. You could also use web beacons and other technologies to monitor and learn if our communications reach it, to measure their effectiveness or to collect certain non-personal information from the customer’s computer.
REGISTRATION OF ONLINE ACCOUNT
To make online shopping faster and easier, you can register on Potential website.
As a registered customer, it is sufficient to enter the shipping addresses and billing data only once; will be safely stored by Potential for future use. Using the name and password chosen by the user, the account can be accessed online at any time to add, delete or change the information.
If you are using a public computer, we recommend that you log off at the end of the session.
List of cookies used on our website:
|Cookie name||Purpose of the cookie||Expiration date|
|__stripe_mid||To initiate Stripe payment session||7 days|
Facebook pixel analytic tool
Google Analytics tool
Creates unique Google Analytics identificator
|wfwaf-authcookie-*||Unique identification number created for the website firewall to identify a potentially malicious visitor||7 days|
|woocommerce_cart_hash||Saving the contents of the shopping cart.||Session|
|wordpress_test_cookie||Checking whether the browser accepts cookies and whether there is an option to save the contents of the shopping cart||Session|
|wp-settings-time-1||Determining user time zone||Session|
STORAGE OF DATA
We retain personal information in an identifiable format as long as required by law or as needed for our business purposes. We retain personal information for longer periods of time than is legally required if it is in our legitimate business interests and is not prohibited by law. For the exact retention periods, please contact us directly.
YOUR RIGHTS AS A DATA SUBJECT
We have a legal obligation to ensure that your personal data is kept accurate and up to date. We kindly ask you to assist us to comply with this obligation by ensuring that you inform us of any changes that have to be made to any of your personal data that we are processing.
Right to access: you have the right to request access to any data that can be considered your personal data. This includes the right to be informed on whether we process your personal data, what personal data categories are being processed by us, and the purpose of our data processing;
Right to rectification: you have the right to request that we correct any of your personal data if you believe that it is inaccurate or incomplete;
Right to object: you are entitled to object to certain processing of personal data, including for example, making automated decisions based on your personal data or when we otherwise base the processing of your personal data on our legitimate interest;
Right to restrict personal data processing: you have the right to request that we restrict the processing of your personal data if you wish to: (i) object the lawfulness of the processing; (ii) fix unlawful processing of personal data; (iii) receive or avoid deletion of personal data for establishing or defending against legal claims; or (iv) demand restriction of the processing until assessing the plausibility of DAT’s legitimate interest in the specific processing activity;
Right to erasure: you may also request your personal data to be erased if the personal data is no longer necessary for the purposes for which it was collected, or if you consider that the processing is unlawful, or if you consider that the personal data has to be erased to enable us to comply with a legal requirement;
Right to data portability: if your personal data is being automatically processed with your consent or on the basis of a mutual contractual relationship, you may request that we provide you that personal data in a structured, commonly used and machine-readable format. Moreover, you may request that the personal data is transmitted to another controller. Bear in mind that the latter can only be done if that is technically feasible;
Right to withdraw your consent: in cases where the processing is based on your consent, you have the right to withdraw your consent to such processing at any time without any adverse effect;
Right to submit your claim with the supervisory authority: if you are not satisfied with our response to your request in relation to personal data or you believe we are processing your personal data not in accordance with the law, you can submit your claim with the Polist Data Protection supervisory authority.
Please note that you will need to provide sufficient information for us to handle your request regarding your rights. Prior to answering your request, we may ask you to provide additional information for the purposes of authenticating you and evaluating your request.
We have a designated person for all privacy and data protection related matters. Should you wish to implement your data subject rights or have any question regarding your personal data processing, please contact our Data Protection Officer via email@example.com.