Privacy policy

Last updated: June 01, 2020

Please read these terms and conditions carefully before using Our Service.

§1. Definitions

1. For the purposes of this Privacy Policy:
   a) “Administrator” means [Company Name], responsible for processing personal data.
   b) “User” means any natural person accessing or using the Website.
   c) “Website” means the online service operated by the Administrator.
   d) “GDPR” means Regulation (EU) 2016/679 (General Data Protection Regulation).
   e) “Data” or “Personal Data” means any information relating to an identified or identifiable natural person.

§2. General Provisions

1. This Privacy Policy sets out the rules for processing Personal Data collected through the Website.
2. The Administrator ensures that Personal Data is processed in compliance with GDPR and applicable international data protection laws.
3. By using the Website, the User accepts this Privacy Policy. If the User does not agree, they should cease using the Website.
4. Contact with the Administrator is possible via e-mail: [Email Address].

§3. Scope of Data Processing

1. The Administrator may process the following categories of Personal Data:
   a) identification data (first name, last name),
   b) contact data (e-mail address, telephone number),
   c) account registration data,
   d) address data (billing and shipping address),
   e) data voluntarily submitted by the User through forms or correspondence,
   f) payment-related records (excluding card details),
   g) technical data (IP address, device information, browser type),
   h) cookies and usage-related logs.
2. Payment card details are not stored by the Administrator and are processed exclusively by third-party payment providers.

§4. Purposes and Legal Basis of Processing

1. Personal Data is processed for the following purposes:
   a) performance and execution of contracts and orders (Art. 6(1)(b) GDPR),
   b) creation and maintenance of User accounts (Art. 6(1)(b) GDPR),
   c) handling inquiries and customer support (Art. 6(1)(b) and (f) GDPR),
   d) marketing activities, including electronic communications (Art. 6(1)(a) GDPR),
   e) analytics, statistics and Website improvement (Art. 6(1)(f) GDPR),
   f) ensuring security and preventing unlawful activity (Art. 6(1)(f) GDPR),
   g) fulfilment of legal obligations imposed on the Administrator (Art. 6(1)(c) GDPR).

§5. Cookies and Online Tracking

1. The Website uses cookies and similar technologies for:
   a) ensuring proper operation of the Website,
   b) maintaining User sessions,
   c) performing analytical and statistical measurements,
   d) marketing and remarketing activities.
2. Users may disable cookies in their browser settings; however, doing so may impair Website functionality.
3. The Website makes use of third-party tools such as Google Analytics, Google Tag Manager, Google Ads, and Meta services.

§6. Data Disclosure and International Transfers

1. Personal Data may be disclosed to:
   a) hosting service providers and IT partners,
   b) payment operators,
   c) courier and logistics companies,
   d) marketing and analytical service providers,
   e) legal advisers, accounting firms, and other entities supporting the Administrator’s operations,
   f) public authorities when required by law.
2. The Administrator may transfer Personal Data outside the European Economic Area (EEA) only if:
   a) an adequacy decision of the European Commission is applicable, or
   b) appropriate safeguards such as Standard Contractual Clauses are implemented.

§7. Data Retention Period

1. Personal Data will be stored for the following periods:
   a) data processed for the performance of contracts – for the duration of the contract and limitation periods,
   b) accounting and tax data – for the period required by law (typically 5 years),
   c) marketing data – until withdrawal of consent,
   d) technical logs and analytical data – up to 12 months unless legal or technical requirements impose a longer period.

§8. User Rights

1. Under GDPR, the User has the right to:
   a) access their Personal Data,
   b) rectify inaccurate or incomplete data,
   c) erase Personal Data (“right to be forgotten”),
   d) restrict processing,
   e) object to processing,
   f) withdraw consent at any time,
   g) receive a copy of their Personal Data (data portability).
2. Requests related to the above rights should be submitted to: [Email Address].
3. The User also has the right to lodge a complaint with the supervisory authority (in Poland: the President of the Personal Data Protection Office – UODO).

§9. Security Measures

1. The Administrator implements appropriate technical and organizational measures to ensure the security of Personal Data, including:
   a) SSL encryption,
   b) firewalls and server security protections,
   c) controlled access to data,
   d) regular software updates,
   e) internal procedures to prevent unauthorized access.
2. Despite the measures taken, the Administrator cannot guarantee absolute security of data transmitted via the Internet.

§10. Account Management and Deactivation

1. Users may modify their account information through the “My Account” section of the Website.
2. Users may request account deactivation by contacting the Administrator.
3. Content submitted by Users (e.g., reviews, comments) may remain on the Website even after account deletion, unless removal is required by law.

§11. Amendments to the Privacy Policy

1. The Administrator reserves the right to amend this Privacy Policy at any time.
2. Changes will be published on the Website, and in the case of substantial modifications, Users may be notified via e mail.

§12. Contact Information

Any questions regarding this Privacy Policy or the processing of Personal Data should be directed to:

[Company Name]
[Company Address]
Email: [Email Address]