Privacy Policy

Last updated: January 2025

Definitions

Data Processing in Connection with the Use of the Website

In connection with your use of the Website, we collect your data to the extent necessary for the provision of the individual services offered, as well as information about your activity on the Website. The detailed principles and purposes of the processing of personal data collected in connection with your use of the Website are described below.

Purposes and Legal Ground for Data Processing

Use of the Website

We process personal data of all persons who use the Website (including IP address or other identifiers and information collected through cookies or other similar technologies), and who are not registered Users (i.e. persons who do not have a profile on the Website) for the following purposes:

• For the purpose of providing electronic services in the scope of making the content collected on the Website available to the Users - then the legal ground for processing is the necessity of processing for the performance of a contract (Article 6 (1)(b) of the GDPR);
• For analytical and statistical purposes - then the legal ground for the processing is our legitimate interest (Article 6 (1)(f) of the GDPR) consisting in conducting analyses of the Users' activity, as well as of their preferences in order to improve the functionalities used and the services provided;
• For the purpose of potential establishment and pursuing of claims or defending against them - the legal ground for the processing is our legitimate interest (Article 6 (1)(f) of the GDPR) consisting in the protection of our rights;
• For marketing purposes (our own and of our partners), in particular related to the presentation of behavioral advertising - the principles of processing personal data for marketing purposes are described in the "Marketing" section.

Your activity on the Website, including your personal data, is recorded in system logs. The information collected in the logs is processed primarily for the purposes related to the provision of services. We also process it for technical, administrative purposes, for the purpose of ensuring the security of the IT system and managing this system, as well as for analytical and statistical purposes - in this regard the legal ground for processing is our legitimate interest (Article 6(1)(f) of the GDPR).

Use of Paid Services on the Website

If you place an order (purchase of goods or services) on the Website, we will process your personal data for the following purposes:

• For the purpose of implementation of the order placed - the legal ground for processing is the necessity of processing for the performance of a contract (Article 6 (1)(b) of the GDPR); in terms of data provided optionally – the legal ground for processing is consent (Article 6 (1)(a) of the GDPR);
• For the purpose of complying with our statutory obligations, resulting in particular from the tax and accounting provisions of law - the legal ground for processing is a legal obligation (Article 6 (1)(c) of the GDPR);
• For analytical and statistical purposes - the legal ground for the processing is our legitimate interest (Article 6 (1)(f) of the GDPR) consisting in conducting analyses of your activity on the Website, as well as of your shopping preferences in order to improve the functionalities used;
• For the purpose of potential establishment and pursuing of claims or defending against them - the legal ground for the processing is our legitimate interest (Article 6 (1)(f) of the GDPR) consisting in the protection of our rights.

Marketing

We process your personal data for the purpose of undertaking marketing activities, which may include:

• Displaying marketing content that is not tailored to your preferences (contextual advertising);
• Displaying marketing content matching your interests (behavioral advertising);
• Sending e-mail notifications of interesting offers or content, which in some cases contain commercial information (newsletter service);
• Conducting other activities related to direct marketing of goods and services (sending commercial information by electronic means of communication and telemarketing activities).

In order to carry out marketing activities, in some cases we use profiling (if you have given your consent). This means that, through the automated data processing, we evaluate the selected factors about natural persons in order to analyze their behavior or make predictions for the future.

Direct Marketing

We may also use your personal data to allow us to target marketing content to you through various channels, i.e. by e-mail, by MMS / SMS or by telephone. We only undertake such activities if you have given us your consent, which can be withdrawn at any time.

Social Media

We process your personal data when you visit our social media profiles (Facebook, YouTube, Instagram, Twitter). These data are processed exclusively in connection with operating the profile, including to inform you about our activities and to promote various events, services and products. The legal ground for processing personal data for this purpose is our legitimate interest (Article 6 (1)(f) of the GDPR) consisting in promoting our own brand.

Cookies and Similar Technology

Cookies are small text files installed on your device when you browse the Website. Cookies collect information facilitating the use of the website, e.g. by recording your visits to the Website and your actions. Within the Website we may use the following types of cookies:

'Service' Cookies

We use the so-called service cookies primarily to provide you with electronic services and to improve the quality of those services. In this regard, we and other entities that provide analytical and statistical services to us, use the cookies to store information or access information already stored in your telecommunications end device (computer, phone, tablet, etc.). Cookies used for this purpose include:

• Cookies with the data you enter (session ID) for the duration of the session (user input cookies);
• Authentication cookies used for services that require authentication for the duration of the session (authentication cookies);
• Cookies serving to provide security, e.g. used for detecting authentication abuse (user centric security cookies);
• Multimedia player session cookies (e.g. flash player cookies), for the duration of the session (multimedia player session cookies);
• Persistent cookies used to personalize the User interface for the duration of the session or slightly longer (user interface customization cookies);
• Cookies used for monitoring website traffic, i.e. data analytics, including Google Analytics cookies (these are cookies used by Google to analyze how you use the Website, to create statistics and reports on the Website's operation). Google does not use the collected data to identify the User, nor does it combine this information to enable identification. The detailed information on the scope and principles of data collection in connection with this service can be found under the link: https://www.google.com/intl/en/policies/privacy/partners.

'Marketing' Cookies

We and our trusted partners also use cookies for marketing purposes, including in connection with targeting you with behavioral advertising. For that purpose we and our trusted partners store information or access information already stored on your telecommunications end device (computer, phone, tablet etc.). The use of cookies and personal data collected through them for marketing purposes, in particular to promote the services and goods of third parties, requires your consent, which can be withdrawn at any time.

Management of Cookies

If you do not want to receive cookies, you can change your browser settings. We stipulate that disabling cookies necessary for authentication processes, security, maintaining user preferences may hinder the use of the Website.

To manage your cookie settings, select the web browser you are using from the list below and follow the instructions:

• Edge
• Internet Explorer
• Chrome
• Safari
• Firefox
• Opera

Essential Marketing Techniques

The purpose and scope of data collection and its further processing and use by the service providers, as well as the possibility of contact and the User's rights in this regard have been described in the privacy policy of the service providers.

We may use remarketing techniques to tailor advertising messages to your activity on the Website, which may give the illusion that your personal data are being used for tracking purposes, but in practice we do not share any of your personal data with advertising operators. A technological prerequisite for such activities is that cookies are enabled.

We may use a solution consisting in studying user behavior by creating heat maps and recording the activities on the Website. This information is anonymized before it is sent to the service provider so that the service provider does not know which natural person it relates to. In particular, the passwords typed in and other personal data are not recorded.

Duration of Personal Data Processing

The duration of our processing of your data depends on the type of service provided and the purpose of the processing. As a general rule, your data is processed for the duration of the service or order processing, until you withdraw your consent or express an effective objection to the data processing (in cases where the legal ground for data processing is our legitimate interest).

The duration of processing may be extended if the processing is necessary for the establishment and pursuing of potential claims or defending against them, and thereafter only if and to the extent required by law.

After the end of the processing period, your data is irreversibly erased or anonymized.

Your Rights

Due to the fact that we process your personal data, you have the following rights:

• Right to information about the processing of personal data - on this basis, at your request, we will provide you with information about data processing, including in particular about the purposes and legal ground for the processing, the scope of data held, the entities to which they are disclosed, and the planned date of erasure of data;
• Right to obtain a copy of data - on this basis, at your request, we will provide you with a copy of the processed data relating to the person making the request;
• Right to rectify - at your request we are obliged to rectify any potential inconsistencies or errors in personal data we process and to complete them if they are incomplete;
• Right to erase data - on this basis, you can request the erasure of data the processing of which is no longer necessary for any of the purposes for which they were collected;
• Right to restrict the processing - on this basis, at your request, we will stop performing operations on your personal data - except for the operations you have given your consent for - and storing them, in accordance with the retention rules adopted or until the reasons for restricting the processing cease to exist;
• Right to data portability - on this basis - to the extent that your data are processed in connection with the concluded agreement or consent given - we will provide you with the data we received from you in a computer readable format. You may also request that we transfer these data to another party, provided that we have the technical capacity to do so.
• Right to object to processing for marketing purposes - you may object to the processing of your personal data for marketing purposes at any time, without having to justify such objection;
• Right to object to other purposes of processing - you may object to the processing of personal data carried out on the basis of our legitimate interest at any time (e.g. for analytical or statistical purposes or for reasons relating to the protection of property); an objection in this respect should contain a justification;
• Right to withdraw consent - if data are processed on the basis of your consent, you have the right to withdraw it at any time, which, however, does not affect the legality of the processing carried out before the withdrawal of consent;
• Right to lodge a complaint - if you believe that the way we process your personal data breaches the GDPR provisions or other regulations on data protection, you can lodge a complaint with the President of the Personal Data Protection Office.

Data Recipients

Due to the fact that we want to provide you with the best possible services, we will disclose your personal data to our trusted partners, including in particular to the IT system providers, entities such as banks and payment operators, accounting providers, couriers (in connection with the processing of the order), marketing agencies (for marketing services) and our affiliates.

Your personal data will be shared with other entities for their own purposes, including marketing purposes only if you have given your consent.

Transfer of Data Outside the EEA

The level of personal data protection outside the European Economic Area (EEA) may differ from that provided by European law. For this reason, we will transfer your personal data outside the EEA only when it is necessary and with an adequate level of protection. You will be notified of this each time.

Security of Personal Data

Be aware that we take all the steps to ensure that we process your personal data in a secure manner – ensuring, in particular, that only the authorized persons have access to your data and only to the extent necessary for the performance of their tasks.

We take all the necessary steps to ensure that our subcontractors and other entities we cooperate with ensure that the appropriate security measures are applied whenever they process your personal data on our behalf.