Privacy policy

Privacy Policy of the on-line store.

 

Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), on the basis of:

  • Article 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into a contract,

  • Article 6(1)(c) GDPR – compliance with a legal obligation incumbent on the controller,

  • Article 6(1)(f) GDPR – legitimate interests pursued by the controller,

  • Article 6(1)(a) GDPR – consent of the data subject (where applicable).

3. SCOPE OF PROCESSED DATA

The Controller may process the following personal data:

  • first and last name,

  • email address,

  • telephone number,

  • residential address / shipping address,

  • invoicing details (company name, VAT ID),

  • data contained in correspondence,

  • IP address,

  • data contained in cookies.

4. PURPOSES OF DATA PROCESSING

Personal data are processed for the purpose of:

  • order fulfillment and performance of sales contracts,

  • handling payments and deliveries,

  • fulfillment of accounting and tax obligations,

  • handling complaints and returns,

  • correspondence with Customers,

  • ensuring proper functioning of the website,

  • analytical and statistical purposes,

  • marketing activities, including sending newsletters (where separate consent has been given).

5. DATA RECIPIENTS

Personal data may be transferred to entities cooperating with the Controller, only to the extent necessary to achieve the purposes of processing, in particular to:

  • accounting service providers,

  • payment operators,

  • courier and postal service providers,

  • IT and hosting service providers,

  • providers of analytical and marketing tools.

Personal data are not transferred to other entities without a legal basis.

6. TRANSFER OF DATA OUTSIDE THE EU

Personal data may be transferred outside the European Union only when using tools provided by entities based outside the EU (e.g. Google, Meta), with the application of appropriate safeguards required under the GDPR.

7. DATA RETENTION PERIOD

Personal data are stored:

  • for the duration of the contract and thereafter for the period required by applicable law,

  • until the limitation period for potential claims expires,

  • in the case of data processed on the basis of consent – until such consent is withdrawn.

8. RIGHTS OF DATA SUBJECTS

Each data subject has the right to:

  • access their personal data,

  • rectification of personal data,

  • erasure of personal data,

  • restriction of processing,

  • data portability,

  • object to processing,

  • withdraw consent at any time (where processing is based on consent),

  • lodge a complaint with the President of the Personal Data Protection Office (PUODO).

9. VOLUNTARY PROVISION OF DATA

Providing personal data is voluntary, but necessary in order to:

  • place an order,

  • conclude a contract,

  • handle complaints or customer contact.

10. COOKIES

The website uses cookies.

Cookies are used to:

  • ensure proper functioning of the website,

  • generate statistics,

  • conduct marketing activities (where the user has given consent).

Users may manage cookies independently through their web browser settings.

Consent to the use of cookies may be withdrawn at any time by changing browser settings or cookie consent settings on the website.

11. DATA SECURITY

The Controller applies appropriate technical and organizational measures to ensure the protection of processed personal data, in particular safeguards against unauthorized access.

12. CHANGES TO THE PRIVACY POLICY

The Controller reserves the right to make changes to this Privacy Policy.
The current version of the document is always available on the Store’s website.