PRIVACY AND COOKIES POLICY

DolomityNaFerratach.eu

www.dolomitynaferratach.eu

I. General information

1. This document specifies the privacy principles applicable in the Online Shop www.dolomitynaferratach.eu.
2. For the purposes of data protection legislation, we are the data controller of your personal data – KLD Sp. z o.o. with the registered office in 80-209 Tuchom, Spacerowa 21 St (Poland), entered in the National Court Register under no. 0000601924, registered with the tax identification number (NIP) – Vat number PL5892022001 and statistical identification number (REGON) 363727620, e-mail address: DolomityNaFerratach.eu@gmail.com.
3. Personal information collected by the data Controller shall be processed in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 (GDPR).
4. The data controller collects information provided voluntarily by the Customers. However, the provision of marked personal data is a condition for placing an order, while the consequence of not ordering will be the inability to order products in the store.
5. Moreover, the data controller may record information about connection parameters, like IP addresses, for technical purposes, server administration, and for general, statistical demographic information, and for security purposes.
6. The data Controller shall make an extra effort to protect the privacy and information about the Online Shop Customers provided to him. The Controller shall exercise due diligence when selecting and applying appropriate technical measures to protect the processed data.
7. Personal data will be processed in accordance with the principles of art. 5 GDPR:
   • a) processed lawfully, fairly and in a transparent manner (‘lawfulness, fairness and transparency’).
   • b) collected for specified, explicit and legitimate purposes (‘purpose limitation’).
   • c) adequate, relevant and limited to what is necessary (‘data minimization’).
   • d) accurate and, where necessary, kept up to date (‘accuracy’).
   • e) kept in a form which permits identification of data subjects for no longer than is necessary (‘storage limitation’).
   • f) processed in a manner that ensures appropriate security (‘integrity and confidentiality’).
8. Your personal data is primarily processed within the European Economic Area (EEA). In connection with the operation of the Online Shop, your personal data may also be transferred to countries outside the EEA, but only to the extent necessary.
9. If transferring personal data to entities based outside the EEA, the Controller ensures that the requirements set out in Chapter 5 of the GDPR are applied.
10. The Controller will always post information about changes to the Privacy Policy in the Online Shop. With each change, a new version of the Policy will appear with a new date.

II. Purpose for Processing

1. The basis for processing the Customer’s Personal Data is primarily the necessity to perform the contract to which he is a party (Article 6 par 1 (b) of GDPR).
2. After expressing separate consent, data may also be processed for sending commercial information by electronic means for marketing purposes or Newsletter (Article 6 par. 1 (a) GDPR).
3. In other purposes, the Customer’s Personal Data may be processed based on:
   • a) applicable law when processing is necessary to fulfill the legal obligation of the Controller (Article 6 (1) (c) GDPR).
   • b) indispensable for purposes resulting from legitimate interests pursued by the Controller or by a third party (Article 6 (1) (f) GDPR).
4. Social media: We have profiles in social media (Facebook [Meta], Instagram [Meta]).
   • a) for conducting marketing and analytical activities – Article 6(1)(f) of the GDPR;
   • b) for statistical and advertising purposes carried out through tools provided by the applications of individual social networking sites.

III. The personal data we collect and use

1. We ensure that the collection and use of your personal data is lawful. Therefore, for the purposes listed below, we only use your personal data if one of the following conditions apply:
   • a) You have given us your consent.
   • b) We need your personal data for the performance of a contract you enter into with us.
   • c) We need to comply with legal obligations.
   • d) We need to protect your vital interests.
   • e) Your data is necessary for the public interest, or
   • f) We have a legitimate interest in processing the personal data.
2. Category of Personal Data:
   • a) Name and contact details (e.g. first name, last name, company name, country/region, street address, phone number and email address).
   • b) Purchase information/history.
   • c) Device information: information about your computer, phone or other device, such as device type, operating system, hardware version, browser type, unique device identifier, IP address and advertising ID.
   • d) Payment information (we don’t store this information).

IV. Term of Personal Data Processing

1. In compliance with the applicable legal provisions, we process your personal data for a term necessary to meet the designated purpose. After such term, the personal data of Customers will be irrevocably deleted or destroyed.
2. Personal data processed covered by the consent statement will be processed until the consent is revoked.
3. We process personal data during the term of the agreement, as well as during a period of expiry of claims resulting from the provisions of the Polish Civil Code.

V. Recipients of personal data

1. Recipients of the Customer’s personal data may be entities performing the order at the Seller’s request, such as: shipment companies, accounting companies, suppliers of the goods, assembly services, providers of IT solutions, payment processing companies, banks, companies providing marketing services, telecommunication providers, law offices, authorized state authorities.
2. Online payments are processed by PayPal (PayPal (Europe) S.à r.l. & Cie, S.C.A., 5. Etage, 22-24 Boulevard Royal, 2449 Luxembourg).
3. Transaction data, including personal data, may be transferred to PayPal to the extent necessary to handle payment for the order. The Customer has the right to access their data and correct it.

VI. Your rights on personal data concerning you

1. Due to the voluntary nature of providing your personal data, you have the right to:
   • a) access your personal data (Art. 15 GDPR).
   • b) rectify your personal data (Art. 16 GDPR).
   • c) delete your personal data (“the right to be forgotten” – Art.17 GDPR).
   • d) restrict the processing of your personal data (Art. 18 GDPR).
   • e) transfer your personal data (Art. 20 GDPR).
   • f) object (Art. 21 GDPR).
2. If it is found that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the President of the Office for Personal Data Protection.
3. Withdrawal of consent to the processing of data does not affect the lawfulness of data processing made by the Controller based on consent before its withdrawal.
4. Requests for the processing of personal data can be submitted by e-mail: DolomityNaFerratach.eu@gmail.com.

VII. Cookies

1. The website www.dolomitynaferratach.eu uses cookies.
2. Cookies are IT data, in particular text files, which are stored in the end device of the Online Shop Customer and are intended for use on the Shop’s web pages. Cookies usually contain the name of the web page from which they originate, their storage time on the end device, and a unique number.
3. Cookies are used for the following purposes:
   • a) creating statistics that help to understand how the Online Shop Customers use web pages, which allows improving their structure and content.
   • b) maintaining the Online Shop Customer’s session (after logging in), thanks to which the Customer does not have to re-enter the login and password on every page of the Shop.
   • c) defining a Customer’s profile to display advertising materials matched to the Customer’s profile, especially in the Google network.
4. By default, web browsers (website viewing software) allow cookies to be stored on the User’s device by default. Shop Customers can change their settings in this respect. The web browser enables the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this subject is provided in the help section or the documentation of the web browser.
5. Restrictions on the use of cookies may affect some functionalities available on the web pages of the Online Shop.

VIII. Server logs

1. Information about certain behaviors of Customers is subject to logging at the server level. These data are used only to administer the website and ensure the most efficient service provided hosting services.
2. The browsed resources are identified by URLs. In addition, the following data may be recorded:
   • a) the time of arrival of the inquiry.
   • b) the time of sending the response.
   • c) the name of the client’s station – identification performed by the HTTP protocol.
   • d) information about errors that occurred during the implementation of the HTTP transaction.
   • e) the URL address of the page previously visited by the Customer (referrer link) – in the case when the transition to the website was made via a link.
   • f) information about the Customer’s browser.
   • g) information about the IP address.
3. The above data is not associated with specific people browsing the pages.
4. The above data is used only for server administration purposes.

IX. Hosting

The store is hosted (technically maintained) on the servers of the operator: Wix.com Ltd.

X. Security

1. The store uses security measures to protect the data under its control against alteration, loss, improper use or destruction.
2. Access to the data is restricted, and authorized employees, agents, and contractors who have access to this data are required to keep it confidential and secure.