Privacy Policy

§1 General Provisions

1. This document is an attachment to the Terms of Service. By using our services, you entrust us with your information. This Privacy Policy serves solely as a guide to understanding what information and data are collected, for what purpose, and how they are used. These data are very important to us, so we ask you to carefully read this document as it sets out the principles and methods of processing and protecting personal data. This document also defines the rules for the use of "Cookies".

2. We hereby declare that we comply with the principles of personal data protection and all legal regulations provided for by the Act on the Protection of Personal Data and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

3. The person whose personal data are processed has the right to request comprehensive information from us on how we use their personal data. We always strive to clearly inform about the data we collect, how we use them, the purposes they serve, to whom we disclose them, what protection we provide for this data when transferring them to other entities, and we provide information about the institutions to contact in case of doubts.

4. The service employs technical measures such as physical protection of personal data, hardware measures of IT and telecommunications infrastructure, protection measures within software tools and databases, as well as organizational measures ensuring proper protection of processed personal data, in particular securing personal data against unauthorized access, acquisition by an unauthorized person, and their use for unknown purposes, as well as accidental or deliberate alteration, loss, damage, or destruction of such data.

5. In accordance with the rules specified in the Terms of Service and in this document, we have exclusive access to the data. Access to personal data may also be entrusted to other entities through which payments are made, which collect, process, and store personal data in accordance with their Terms of Service, as well as entities tasked with order fulfillment. Access to personal data is granted to the above-mentioned entities to the extent necessary and only to ensure the provision of services.

6. Personal data are processed only for the purposes for which you have given consent by clicking on the appropriate fields of the form posted on the Service or in another explicit manner. The legal basis for the processing of your personal data is consent to the processing of data or the requirement to perform a service (e.g., ordering a Product) that you have ordered from us (in accordance with Article 6(1)(a) and (b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - GDPR).

§2 Privacy Principles

1. We take privacy seriously. We are characterized by respect for privacy and strive to provide the most complete and guaranteed convenience in using our services.

2. We value the trust that Users place in us by entrusting us with their personal data for order fulfillment. We always use personal data in a fair manner and in a way that does not betray this trust, only to the extent necessary for order fulfillment, including its processing.

3. Users have the right to obtain clear and comprehensive information on how we use their personal data and for what purposes they are needed. We always clearly inform about the data we collect, how we use them, and to whom we disclose them, and we provide information about the entities to contact in case of doubts, questions, or comments.

4. In case of doubts regarding the use of User's personal data by us, we will take immediate action to clarify and dispel such doubts, and we fully and exhaustively answer all related questions.

5. We will take all reasonable actions to protect Users' data from improper and uncontrolled use and to ensure comprehensive security.

6. The Administrator of your personal data is located in the "contact" tab on the website.

7. The legal basis for processing your personal data is Article 6(1)(b) of the GDPR. Providing data is not mandatory but necessary for undertaking appropriate actions preceding the conclusion of a contract and its execution. We will disclose your personal data to other recipients to whom the processing of personal data has been entrusted on our behalf. Your data will be transferred on the basis of Article 6(1)(f) of the GDPR, where the legitimate interest is the proper performance of contracts/orders. Additionally, we will provide your personal data to other business partners. The collected personal data are stored within the European Economic Area ("EEA"), but they may also be transferred to a country outside this area and processed there. Each operation of transmitting personal data is carried out in accordance with applicable law. If data are transferred outside the EEA, we use standard contractual clauses and privacy shield as protective measures concerning countries for which the European Commission has not found an adequate level of data protection.

8. Your personal data related to the conclusion and execution of contracts for the execution of agreements will be processed for the duration of their execution, and also for a period not longer than provided for by legal provisions, including the Civil Code and the Accounting Act, i.e., no longer than 10 years, counting from the end of the calendar year in which the last contract was executed.

9. Your personal data processed for the purpose of concluding and executing future contracts will be processed until you object.

10. You have the right to: access your personal data and receive a copy of the personal data undergoing processing, rectify your incorrect data; request deletion of data (right to be forgotten) in the circumstances specified in Article 17 of the GDPR; request restriction of processing in cases specified in Article 18 of the GDPR, object to the processing of data in cases specified in Article 21 of the GDPR, and transfer provided data processed in an automated manner.

11. If you believe that personal data are processed unlawfully, you may lodge a complaint with the supervisory authority (Data Protection Authority, ul. Stawki 2, Warsaw). If you need additional information related to the protection of personal data or want to exercise your rights, please contact us in writing at the correspondence address.

12. We make every effort to protect against unauthorized access, unauthorized modification, disclosure, and destruction of information in our possession. In particular: We control methods of collecting, storing, and processing information, including physical security measures, to protect against unauthorized access to the system.

13. Access to personal data is granted only to those employees, contractors, and representatives who need access to them. Furthermore, under contract, they are obligated to maintain strict confidentiality, to enable us to control and verify how they fulfill their assigned duties, and in case of failure to fulfill these obligations, they may face consequences.

14. We will comply with all applicable laws and regulations regarding data protection and will cooperate with data protection authorities and law enforcement agencies authorized to do so. In the absence of data protection regulations, we will adhere to generally accepted data protection principles, social norms, and established customs.

15. The detailed data protection measures are included in the Personal Data Protection Policy (PDP: security policy, personal data protection regulations, IT system management instructions). For security reasons, due to the described procedures, it is only available for inspection by state control authorities.

16. If you have any questions regarding the way we handle personal data, we invite you to contact us through the website from which the user was redirected to this Privacy Policy. The request for contact will be promptly forwarded to the appropriate person appointed for this purpose.

17. The user always has the right to notify us if:
- They no longer wish to receive any information or messages from us in any form;
- They wish to receive a copy of their personal data held by us;
- They want to correct, update, or delete their personal data in our records;
- They wish to report violations, improper use, or processing of their personal data.
To facilitate our response or consideration of the information provided, please provide your full name and further details.

§3 Scope and Purpose of Collecting Personal Data

1. We process necessary personal data for the purpose of providing services and for accounting purposes only, namely:
a) to place an order;
b) to conclude a contract, handle complaints, and withdraw from a contract;
c) to issue a VAT invoice or other receipt.
d) monitoring traffic on our websites;
e) collecting anonymous statistics to determine how users use our website;
f) determining the number of anonymous users of our sites;
g) monitoring how often selected content is shown to users and which content is most frequently shown;
h) monitoring how often users choose a particular service or which service is most frequently accessed;
i) examining subscriptions to newsletters and contact options;
j) using a personalized recommendation system for e-commerce;
k) using a communication tool for both email and subsequently telephone communication;
l) integration with social media portals;
m) possible online payments.

2. We collect, process, and store the following user data:
a) Name and surname,
b) Residential address,
c) Delivery address (if different from the residential address),
d) Tax identification number (NIP),
e) Email address,
f) Phone number (mobile, landline),
g) Date of birth,
h) PESEL (Personal Identification Number),
i) Information about the internet browser used,
j) Other personal data voluntarily provided to us.

3. Providing the above data is entirely voluntary but also necessary for the full provision of services.

4. The purpose of collecting, processing, or using our data is:
a) Direct marketing, archival purposes of advertising campaigns;
b) Fulfillment of legal obligations by collecting information about undesirable activities.

5. We may transmit personal data to servers located outside the user's country of residence or to affiliated entities, third parties based in other countries, including countries within the European Economic Area (EEA), for the purpose of processing personal data by such entities on our behalf in accordance with the provisions of this Privacy Policy and applicable law, customs, and regulations concerning data protection.

6. We retain your personal data no longer than is necessary for the proper quality of service and depending on the mode and purpose of their acquisition, we store them for the duration of its duration and after its completion for the following purposes:
a) Fulfillment of obligations arising from legal provisions, tax and accounting regulations;
b) Prevention of abuse or crimes;
c) Statistical and archival purposes.
d) Marketing activities - for the duration of the contract, upon separate consent for processing such data - until the completion of activities related to transaction processing, your objection to such processing, or withdrawal of consent.
e) Post-sales and promotional activities - e.g., contests, promotional campaigns - for the duration and settlement of such actions.
f) Operational activity - until the expiration of obligations imposed by the GDPR Regulation and appropriate national provisions, for the purpose of demonstrating reliability in the processing of personal data.
g) Pursuing any claims related to the executed agreement.

7.Given the circumstances that in many countries to which this personal data is transmitted, there is not the same level of legal protection of personal data as in the user's country, access to the user's personal data stored in another country may be obtained in accordance with the law applicable there, for example by courts, law enforcement authorities, and national security agencies, in accordance with the regulations applicable in that country. Subject to lawful requests for disclosure of data, we undertake to require entities processing personal data outside the user's country to take action to protect data in a manner adequate to the regulations of their national law.

§4 Cookies Policy

1. We automatically collect information contained in cookies to gather user data. A cookie is a small piece of text that is sent to the user's browser and which the browser sends back on subsequent visits to the website. They are mainly used to maintain sessions, for example by generating and sending a temporary identifier after logging in. We use "session" cookies stored on the user's end device until they log out, close the website, or close the web browser, and "persistent" cookies stored on the user's end device for the time specified in the cookie parameters or until they are deleted by the user.

2. Cookies customize and optimize the website and its offer for the needs of users by actions such as creating view statistics and ensuring security. Cookies are also necessary to maintain sessions after leaving the website.

3. The administrator processes data contained in cookies each time the website is visited by visitors for the following purposes:
a) Optimization of website usage;
b) Identification of users as currently logged in;
c) Adaptation of graphics, options, and all other content of the website to the individual preferences of the user;
d) Remembering automatically and manually entered data from Order Forms or login data provided by the visitor;
e) Collection and analysis of anonymous statistics showing the way of using the website in the administrative panel and Google Analytics;
f) Creating remarketing lists based on information about preferences, behavior, usage patterns, interests from the Website, and collecting demographic data, and then sharing these lists in AdWords and Facebook Ads;
g) Creating data segments based on demographic information, interests, preferences in the selection of viewed products/services;
h) Using demographic data and interest data in Analytics reports.

4. At any time, the user can completely block and delete the collection of cookies using their web browser.

5. Blocking the ability to collect cookies on the user's device may make it difficult or impossible to use some functionalities of the website, to which the user is fully entitled, but must be aware of the limitations of functionality in such a situation.

6. A user who does not want cookies to be used for the purpose described above can manually delete them at any time. To familiarize yourself with detailed instructions, you should visit the website of the manufacturer of the web browser currently used by the user.

7. More information about cookies is available in the help menu of each web browser. Examples of web browsers that support cookies include:
a) Cookie settings in Internet Explorer
b) Cookie settings in Chrome
c) Cookie settings in Firefox
d) Cookie settings ins Opera
e) Cookie settings in Safari
f) Cookies in Android
g) Cookies in Blackberry
h) Cookies in iOS (Safari)
i) Cookies in Windows Phone

§5 Rights and Obligations

1. We have the right, and in cases determined by law, also a statutory obligation to provide selected or all information regarding personal data to public authorities or third parties who request such information based on applicable Polish law.

2. The user has the right to access the content of their personal data provided, the user can correct, supplement this data at any time, and also has the right to request that it be deleted from our databases or that processing be stopped, without giving any reason. To exercise their rights, the user may at any time send the appropriate message to the email address or in any other way that will deliver/convey such a request.

3. The processing of personal data of individuals who are our customers is based on:
a) Legitimate interest as the data controller (e.g., in creating a database, analytical and profiling activities, including activities related to analyzing the use of products, direct marketing of own products, securing documentation for the purpose of defense against potential claims or for the purpose of pursuing claims)
b) Consent (including, in particular, consent to email marketing or telemarketing)
c) Execution of a concluded contract
d) Obligations arising from the law (e.g., tax law or accounting regulations).

4. Processing personal data of individuals who are potential customers is based on:
a) Legitimate interest of the data controller (e.g., in creating a database, direct marketing of own products)
b) Consent (including, in particular, consent to email marketing or telemarketing)

5. A request from the User to delete personal data or to cease their processing may result in either the complete inability to provide services by [Company Name] or serious limitations thereof.

6. We attach particular importance to the issue of profiling and specify that:
a) For profiling purposes, we usually process data that has previously been subjected to SSL encryption
b) We typically use common data such as email address and IP or cookies for this purpose
c) We profile for the purpose of analyzing or predicting personal preferences and interests of individuals using our Services or products, and for tailoring the content in our Services or products to those preferences
d) We profile for marketing purposes, i.e., matching the marketing offer to the aforementioned preferences.

7. We undertake to comply with applicable law and principles of social coexistence.

8. Information about out-of-court dispute resolution for consumer disputes: The authorized entity within the meaning of the Act on out-of-court resolution of consumer disputes is the Financial Ombudsman, whose website address is as follows: www.rf.gov.pl.

§6 Basic Security Principles

1. Every user should prioritize their own data security and the security of their devices used to access the Internet. Such devices should absolutely have antivirus software with regularly updated virus definitions, a secure version of the internet browser being used, and an active firewall. Users should ensure that the operating system and installed programs have the latest and compatible updates, as attacks often exploit vulnerabilities in installed software.

2. Access data for services offered on the Internet – such as logins, passwords, PINs, electronic certificates, etc. – should be secured in a location inaccessible to others and impossible to breach from the internet. They should not be disclosed or stored on a device in a format that allows unauthorized access or reading by unauthorized individuals.

3. Exercise caution when opening unfamiliar attachments or clicking on links in email messages, especially from unknown senders or from the spam folder.

4. It is recommended to enable anti-phishing filters in the internet browser, which verify whether a displayed website is authentic and not intended for information phishing, such as impersonating an individual or institution.

5. Files should only be downloaded from trusted locations, services, and websites. It is not recommended to install software from unverified sources, especially from unknown publishers with unverified reputations. This applies to mobile devices as well, such as smartphones and tablets.

6. When using a home Wi-Fi network, set a password that is secure and difficult to breach, avoiding any patterns or character strings that are easy to guess (e.g., street name, host's name, date of birth, etc.). It is also recommended to use the highest possible standards of encryption for wireless Wi-Fi networks that are available on the equipment owned, such as WPA2.

§7 Using Social Media Plugins

1. Plugins, commonly known as social media plug-ins, from social media platforms such as Facebook.com and Twitter, among others, may be present on our websites. The services associated with them are provided by Facebook Inc. and Twitter Inc., respectively.

2. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. To view Facebook plugins, visit: https://developers.facebook.com/docs/plugins

3. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To view Twitter plugins, visit: https://dev.twitter.com/web/tweet-button

4. The plugin only sends information to its provider about which of our web pages you accessed and at what time. If a user is logged into their account on platforms such as Facebook or Twitter while browsing or staying on our website, the provider can link your interests, information preferences, and other data obtained, for example, through actions like clicking the "Like" button, leaving a comment, or entering a profile name in searches. This information will also be transmitted directly to the provider by the browser.

5. For more detailed information on data collection and use by Facebook or Twitter, as well as privacy protection, please visit the following pages:
a) Facebook's Data Protection/Privacy Advice: http://www.facebook.com/policy.php
b) Twitter's Data Protection/Privacy Advice: https://twitter.com/privacy

6. To avoid your visit to our website being recorded on your Facebook or Twitter account, you must log out of your account before browsing our web pages.