II. Data Controller

The administrator of personal data collected through the Service is:

(hereinafter: Administrator).

III. Purpose of personal data collection

Personal data is used for the purpose of:

• account registration and User identity verification,
• enabling login to the Service,
• execution of the agreement concerning services and e-services,
• communication with the User (live chat, contact form, etc.)
• newsletter shipments (after the User has consented to receive it),
• comment system management,
• provision of social services,
• Administrator's offer promotions,
• marketing, remarketing, affiliation,
• Service personalization for Users,
• analytical and statistical activities,
• debt collection,
• establishment and pursuit of claims or defense against them.

Providing data is voluntary, but necessary to conclude an agreement or use other functionalities of the Service.

IV. Type of personal data processed

The Administrator may process the User's personal data: **first and last name, date of birth, residential address, e-mail address, phone number, Tax Identification Number (NIP).**

V. Period of personal data processing

Users' personal data will be processed for the period:

• when the basis for data processing is the performance of a contract – until the expiration of claims after its performance,
• when the basis for data processing is consent – until it is withdrawn, and after withdrawal of consent until the statute of limitations for claims.

In both cases, the limitation period is **6 years**, and for claims for periodic benefits and claims related to conducting business activities – **3 years** (unless a specific provision states otherwise).

VI. Sharing of Personal Data

Users' personal data may be transferred to:

• to entities related to the Administrator,
• its subcontractors,
• to entities cooperating with the Administrator, e.g., e-payment processing companies, courier/postal service providers, law firms.

Users' personal data will not be/will be transferred outside the European Economic Area (EEA).

VII. User Rights

Service User has the right to:

• access to the content of your personal data,
• their corrections,
• removal,
• processing restrictions,
• transfer,
• objection to processing,
• withdrawal of consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).

A notification regarding the exercise by the User of the right resulting from the mentioned rights should be sent to the address mukosiiiryna@wp.pl.

The administrator fulfills or refuses the request immediately – within a maximum of **one month** from its receipt.

The user has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing infringes their rights and freedoms (GDPR).

VIII. Cookies

The service collects information using cookies – session, persistent, and third-party.

Collecting cookies supports the proper provision of services on the Website and is used for statistical purposes.

The user can specify the scope of cookie access to their device in the browser settings.

IX. Automated decision-making and profiling

User data may not be processed in an automated manner in such a way that would result in any decisions being made concerning them.

User data may be profiled for the purpose of tailoring content and personalizing offers after they have given their consent.

X. Final Provisions

The Administrator has the right to introduce changes to the Privacy Policy, provided that the Users' rights will not be restricted.

Information about the introduced changes will appear as a message available in the Service.

In matters not regulated by this Privacy Policy, the provisions of the GDPR and Polish law shall apply.