Privacy policy

Introduction

In this privacy policy, you will find the rules for the processing of personal data and the use of cookies and other tracking technologies in connection with the use of the website www.luletto.pl (hereinafter referred to as the “Store”).

The purposes, legal grounds, and storage periods of personal data are indicated separately for each purpose of data processing.

Personal Data Controller

The controller of your personal data within the meaning of data protection regulations is Mateusz Michalski, an entrepreneur conducting business under the name MICHALSCY GRUPA VAT, with its registered office in Poland, Zduńska Wola (98-220), Tymieniecka 5, NIP 8291754184.

Your Rights

In connection with our processing of your personal data, you are entitled to the following rights:

• the right to request access to your personal data, rectification, erasure, or restriction of processing,
• the right to object to processing,
• the right to data portability,
• the right to withdraw your consent to the processing of personal data for a specific purpose, if you have previously given such consent,
• the right to lodge a complaint with a supervisory authority in connection with our processing of your personal data.

You may exercise the above rights in accordance with the rules described in Articles 16–21 of the GDPR by contacting us at sklep@luletto.pl

Providing your personal data is voluntary, but necessary to place an order, subscribe to the newsletter, or simply contact us.

Recipients of Personal Data

We use the services of external entities to whom your data may be transferred. Below is a list of such entities:

• the entity storing data on the server,
• the entity delivering goods,
• the payment provider,
• the hosting provider,
• the entity facilitating Store optimization,
• the entity cooperating within marketing campaigns,
• entities providing consulting services,
• entities providing mailing systems,
• the software provider necessary to operate the online store,
• social media platforms,
• the accounting office,
• the entity offering an invoicing system.

Transfer of Your Data to Countries Outside the European Economic Area

If data is transferred to a third country for which the European Commission has not issued a decision confirming an adequate level of protection, the Store applies appropriate safeguards through standard data protection clauses adopted by the European Commission or a supervisory authority (in accordance with Article 46(2)(c) and (d) GDPR).

Profiling

Within the Store, we may automatically tailor certain content to your needs, i.e. carry out profiling using the personal data you have provided. However, this will not produce any legal effects concerning you or similarly significantly affect your situation.

Profiling of personal data by the Store consists of processing your data (also in an automated manner) by using it to evaluate certain information about you, in particular to analyze or predict your personal preferences and interests.

Purposes and Legal Grounds for Data Processing

Newsletter (legal basis: Article 6(1)(a) GDPR)

Through the website, you may subscribe to the newsletter containing information about new products, promotions, and products related to our online activity. For the purpose of sending the newsletter, your personal data in the form of your name and email address is processed.

The legal basis for processing your personal data in connection with the newsletter is your consent expressed by checking the appropriate checkbox when subscribing to the newsletter. You may withdraw such consent at any time by unsubscribing from the newsletter. The data is processed for the duration of the newsletter operation, unless you unsubscribe, which will result in the removal of your data from the database.

Orders (legal basis: Article 6(1)(b) GDPR)

When placing an order, you must provide your personal data necessary to process the order, i.e. your first name and surname, email address, phone number, and delivery address. You may also provide additional data, such as information about your business activity. If you have previously provided such data in your user account, this data will be automatically inserted into the order form, while you always have the option to modify it.

The legal basis for processing your personal data contained in the order is the performance of the contract. The data provided in the order form will be saved in the database and stored there until the limitation period for claims arising from the concluded contract expires.

Invoices (legal basis: Article 6(1)(c) GDPR)

If we issue you an invoice, for this purpose we process your personal data to the extent necessary to issue the invoice. The legal basis for processing your data in this case is the fulfillment of the legal obligation to issue an invoice. In addition, all issued invoices are included in the accounting records, therefore your data will be processed within this documentation for the period required by law.

Email Contact (legal basis: Article 6(1)(a) and (f) GDPR)

When you contact us by email, you provide us with your email address as the sender's address. In addition, the content of the message may also include other personal data. The legal basis for processing personal data in such a case is your consent resulting from initiating contact with us. Your personal data provided in the course of email communication is processed solely for the purpose of handling your inquiry. The content of the correspondence may be archived.

Consequences of Not Providing Data and Withdrawal of Consent

Consequences of not providing data:

Depending on the purpose for which the data is provided:

• inability to register in the Store,
• inability to use the Store services,
• inability to make purchases in the Store,
• inability to receive information about promotions or special offers available in the Store.

Possibility to withdraw consent:

You may withdraw your consent at any time. The processing of data until you withdraw your consent remains lawful.

Cookies and Other Tracking Technologies

Our website uses cookies to ensure the best possible experience when using the site. Cookies are small text files stored on your end device (e.g. computer, tablet, smartphone), which may be read by our ICT system.

Using the appropriate options in your browser, you may at any time:

• delete cookies,
• block the use of cookies in the future.

Cookies allow us to:

• ensure the proper functioning of the website as you expect,
• improve the speed and security of using the website,
• improve the functions available to you on the website,
• use analytical tools,
• use marketing tools,
• provide social media features.

Types and Use of Cookies

Own Cookies

Cookies may be divided into first-party cookies and third-party cookies. As regards our own cookies, we use them to ensure the proper functioning of the website.

Third-Party Cookies

Our website uses functions provided by third parties, which involves the use of cookies originating from third parties. The use of this type of cookies is described below.

Analytics and Statistics

We use cookies to track website statistics, such as the number of visitors, the type of operating system and browser used to browse the website, time spent on the website, visited subpages, etc. In this regard, we use Google Analytics and Google AdWords. The information collected in this regard is completely anonymous and does not allow us to identify you. For this purpose, cookies from Google LLC relating to the Google Analytics service are used.

The use of Google Analytics and Google AdWords involves implementing Google’s tracking code in our website code. This code is based on cookies, but may also use other tracking technologies.

Marketing

We use Facebook marketing tools to direct advertisements to you on this platform. For this purpose, we have implemented Facebook Pixel in the website code, which remembers your visits. For this purpose, Facebook cookies are used.

Social Features

We provide the possibility of using social features, such as sharing content on social media platforms and subscribing to social media profiles. The use of these features involves the use of cookies from administrators of social media platforms such as Facebook, Instagram, and YouTube.

Server Logs and Final Information

Server Logs

Using the website involves sending requests to the server on which the website is stored. Each request sent to the server is recorded in server logs.

Logs include, among other things, your IP address, server date and time, information about the browser and operating system you use. Logs are stored and kept on the server. The data saved in server logs is not associated with specific persons using the service and is not used by us to identify you.

Server logs constitute only auxiliary material used for administering the website and their content is not disclosed to anyone except persons authorized to administer the server.

Changes to the Privacy Policy

We reserve the right to change the above privacy policy by publishing a new privacy policy on this subpage.