PRIVACY POLICY

1. GENERAL PROVISIONS

Below you will find information on how and why your personal data is processed. Please take a few minutes to read the following terms.

This Privacy Policy applies to personal data that is processed when using our online store at https://dorotalapamaik.com/, as well as in connection with the provision of services offered via the website and in connection with the conclusion and performance of sales contracts.

2. DATA ADMINISTRATOR

The entity responsible for the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ WE (hereinafter: "GDPR") is Art Studio LaMa Dorota Łapa-Maik

with its registered office in Kraków, at ul. Juliusza Lea 210B/38, 30-133 Kraków. (hereinafter: "Administrator")

The administrator is obliged to use methods and technical and organizational measures that ensure proper protection of personal data of customers and visitors.

The administrator is obliged to process personal data in a manner consistent with the requirements of generally applicable law, in particular the GDPR, and the relevant provisions of national law. The processing of data by the Administrator may only take place in accordance with the purpose and scope specified in this Privacy Policy and the Regulations, as well as resulting from the relevant provisions of law.

The administrator enables contact with him regarding the processing of personal data via the e-mail address: artstudiolama@gmail.com

and correspondence address: ul. Juliusza Lea 210B/38, 30-133 Kraków.

We kindly ask you to include the note "GDPR. Online shop"

3. WHERE DOES THE ADMINISTRATOR GET YOUR PERSONAL DATA?

To the extent that your data has not been obtained by the Administrator directly from you, these data have been provided by the entity that represents you, which is also the Administrator's client. To the extent that your data has not been obtained directly from you, the data processed by the Administrator may include in particular: name and surname, correspondence address, address of residence, telephone number, e-mail address.

4. WHO MAY BE THE RECIPIENT OF YOUR DATA?

The proper functioning of the Administrator's online store, in particular the performance of sales contracts, requires the use of services of external entities, in particular couriers, suppliers and platforms providing opinions. The Administrator, each time providing personal data collected on the basis of this Privacy Policy, makes sure that their standards of operation and the rules and technical measures for the protection of personal data applied by them will ensure the protection of this data required by the GDPR and other generally applicable laws.

Personal data processed by the Administrator on the basis of this Privacy Policy may be transferred to entities providing services to the Administrator, including: IT, postal operators and couriers, banks and other entities providing payment services, legal, tax and accounting advisors, entities providing archiving services documents. In addition, the data may be transferred to other entities with which the Administrator cooperates, including in particular subcontractors and other service providers. Data may also be transferred to authorized bodies to the extent required by applicable law.

5. WHAT ARE THE PURPOSES, BASIS AND PERIOD OF PROCESSING YOUR PERSONAL DATA? IS THERE A REQUIREMENT FOR YOU TO PROVIDE PERSONAL DATA?

• REGISTRATION AND ACCOUNT MAINTENANCE

a. if you are a client of the Administrator - in order to take actions aimed at concluding a contract (setting up an account in the online store) and in order to perform the contract (setting up and servicing an account in the online store), in particular in order to fulfill the obligations and rights arising from it - based on Article. 6 sec. 1 lit. b of the general regulation on the protection of personal data No. 2016/679 ("GDPR") (i.e. the necessity to take action at the customer's request, before concluding the contract to which he is a party and the necessity to perform the contract to which the customer is a party);

b. if you are a client of the Administrator - in order to fulfill the legal obligations incumbent on the Administrator, resulting in particular from the provisions of the Civil Code, GDPR - pursuant to art. 6 sec. 1 lit. c GDPR (i.e. necessity to fulfill the legal obligation incumbent on the Administrator);

c. if you act on behalf of the Administrator's client (you are, for example, his employee, associate, representative or contact person) - in order to take steps to conclude a contract with the Administrator's client (setting up an account in the online store) and to perform the contract (setting up an account in the online store) and servicing the account in the online store), as well as in order to perform the legal obligations incumbent on the Administrator in connection with the conclusion and performance of the contract - the legal basis is art. 6 sec. 1 lit. f of the GDPR) (i.e. the implementation of the Administrator's legitimate interest in conducting business activity, including the performance of contracts with the Administrator's client);

d. in addition, your personal data may also be processed in order to implement the Administrator's legitimate interests consisting in the possibility of determining or pursuing any claims or defending against such claims by the Administrator - pursuant to art. 6 sec. 1 lit. f of the GDPR (i.e. the legitimate interest of the Administrator consisting in the possibility of establishing or pursuing claims or defending against them).

Personal data related to registration and account maintenance will be stored until it is deleted. Then, the data may be processed for the time necessary to fulfill the legal obligations incumbent on the Administrator in connection with the performance of the contract (setting up and servicing an account in the online store). such claims by the Administrator. After this period, the data will be processed only to the extent and for the time required by law.

If you are a client of the Administrator - providing personal data indicated in the registration form is necessary to conclude and/or perform the contract (setting up and servicing an account in the online store). In addition to these data, the Administrator may also request the customer to provide data required by law. Then, failure to provide data will result in the inability to fulfill certain obligations or rights of the parties to the contract. If you act on behalf of the Administrator's client (you are, for example, his employee, associate, representative or contact person) - providing personal data indicated in the registration form is voluntary, but it is necessary to conclude and/or perform a contract binding the Administrator with his client (assumptions and servicing the account in the online store), as well as the performance of the Administrator's legal obligations related thereto. Failure to provide them may result in the inability to contact you and the inability to perform certain obligations or rights related to the contract binding the Administrator with his client. In the remaining scope, providing data is not a statutory or contractual requirement, but it is necessary to achieve the purposes for which the data is collected and processed.

• PLACING ORDERS, CONCLUDING SALES AGREEMENTS

a. if you are a client of the Administrator - in order to take actions aimed at concluding a contract (placing an order in the online store) and in order to perform the contract (placing and processing an order in the online store), in particular in order to fulfill the obligations and rights arising from it monitoring its performance, contacting in connection with its performance, considering complaints and returning benefits in the event of withdrawal from the contract - pursuant to art. 6 sec. 1 lit. b of the GDPR (i.e. the necessity to take action at the customer's request, before concluding the contract to which he is a party and the necessity to perform the contract to which the customer is a party);

b. if you are the Administrator's client - in order to fulfill the legal obligations incumbent on the Administrator, including e.g. paying tax on the completed contract (placed orders, resulting in particular from tax regulations, the Civil Code, the GDPR - pursuant to Article 6(1) letter c of the GDPR (i.e. the necessity to fulfill the legal obligation incumbent on the Administrator);

c. if you act on behalf of the Administrator's client (you are, for example, his employee, associate, representative or contact person) - in order to take steps to conclude a contract with the Administrator's client (place an order in the online store) and to perform it (submit and execution of the order in the online store), in particular in order to fulfill the obligations and rights arising from it, monitor its performance, contact in connection with its performance, consider complaints and return benefits in the event of withdrawal from the contract, as well as to settle the contract and performance of legal obligations incumbent on the Administrator in connection with its conclusion, performance and settlement - the legal basis is art. 6 sec. 1 lit. f of the GDPR) (i.e. the implementation of the Administrator's legitimate interest in conducting business activity, including the performance of contracts with the Administrator's client and conducting current correspondence);

d. in addition, your personal data may also be processed in order to implement the Administrator's legitimate interests consisting in the possibility of determining or pursuing any claims or defending against such claims by the Administrator - pursuant to art. 6 sec. 1 lit. f of the GDPR (i.e. the legitimate interest of the Administrator consisting in the possibility of establishing or pursuing claims or defending against them).

In the above scope, personal data will be stored for the time necessary to process the order and its settlement, and the time necessary to fulfill the legal obligations incumbent on the Administrator in connection with the execution of the order and its settlement. The above periods of personal data processing may be extended each time by the period necessary to establish, pursue any claims or defend against such claims by the Administrator. After this period, the data will be processed only to the extent and for the time required by law.

If you are a client of the Administrator - providing personal data required by the Administrator to place an order is necessary for its submission, handling and/or settlement. In addition to these data, the Administrator may also request the customer to provide data required by law. Then, failure to provide data will result in the inability to fulfill certain obligations or rights of the parties to the contract. If you act on behalf of the Administrator's client (you are, for example, his employee, associate, representative or contact person) - providing personal data is voluntary, however, it may be necessary to submit, service and settle an order placed by you on behalf of the Administrator's client, as well as performance of the Administrator's legal obligations related to it. Failure to provide them may result in the inability to contact you and the inability to perform certain obligations or rights related to the contract binding the Administrator with his client. In the remaining scope, providing data is not a statutory or contractual requirement, but it is necessary to achieve the purposes for which the data is collected and processed.

• NEWSLETTER

a. if you have consented to it - in order to conduct marketing activities (e.g. providing commercial information by e-mail or telephone) - pursuant to art. 6 sec. 1 lit. a GDPR (i.e. your consent),

b. in order to implement the legitimate interests of the Administrator consisting in the possibility of determining or pursuing any claims or defending against such claims by the Administrator - pursuant to art. 6 sec. 1 lit. f of the GDPR (i.e. the legitimate interest of the Administrator consisting in the possibility of establishing or pursuing claims or defending against them).

The personal data provided by you will be stored until the consent is withdrawn. The above period of personal data processing may be extended each time by the period necessary to pursue any claims or defend against such claims by the Administrator.

Providing data is voluntary and not required, but failure to provide data will result in the inability to process data for marketing purposes.

6. WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA?

In the scope of data processing based on consent, you have the right to withdraw consent at any time (but this does not affect the lawfulness of personal data processing before the consent was withdrawn and the lawfulness of personal data processing on legal grounds other than consent). You also have the right to access the content of the data and request their rectification, deletion, processing restrictions, the right to transfer personal data ("the right to be forgotten") and to object to data processing, as well as to lodge a complaint to the supervisory body dealing with the protection of personal data (President of the Personal Data Protection Office) in the manner and manner specified in the provisions of the GDPR and relevant acts of Polish law, when you consider that the processing of personal data violates the provisions of the GDPR.

If you want to exercise the rights referred to above, you can contact the Administrator by sending a message to the e-mail address artstudiolama@gmail.com or in writing to the Administrator's address indicated in point 2 of this Policy

7. AUTOMATED PROCESSING

Your personal data will not be subject to automated processing, including profiling.

The administrator may use profiling for direct marketing purposes as part of the online store. Decisions made on this basis by the Administrator, however, do not concern the conclusion or refusal to conclude sales contracts or the provision of electronic services. Data profiling may be related primarily to giving a given person a discount, sending a discount code, reminding about unfinished purchases, sending a Product proposal that may potentially match the customer's preferences.

8. TRANSFER OF DATA TO THIRD COUNTRIES

Your data will not be transferred by the Administrator to third countries or international organizations.

9. COOKIES

1. Cookies are small files (in particular text files) containing information necessary for the proper use of the online store https://dorotalapamaik.com/, which are saved on the end device (computer, tablet, smartphone, etc.) when you use / Lady from the online store https://dorotalapamaik.com/

2. Cookies are used, in particular, to:

a. remembering the login data (so that it is not necessary to enter the login and password each time);

b. remembering products added by you to the basket;

c. collecting statistical data (for the development and improvement of the online store https://dorotalapamaik.com/ in accordance with customer preferences).

3. Cookie files do not contain data enabling identification of the person using the online store. These files are not harmful to your device and do not change its settings or its software settings.

4. When you use the online store https://dorotalapamaik.com/, the following types of cookies are used:

a. session cookies - temporary files that are stored on your device until you log out of the online store https://dorotalapamaik.com/

b. permanent cookies - stored in your device for the time specified in the parameters of these files or until they are deleted by you.

5. When you use the online store https://dorotalapamaik.com/, cookies are used with the following functions:

a. necessary for the operation of the online store - these files enable the proper operation of the online store, logging in, navigating and making purchases. Without saving them on your device, it is impossible to use the online store https://dorotalapamaik.com/;

b. ensuring the security of transactions made within the online store https://dorotalapamaik.com/. The lack of these files will make it impossible to complete the transaction;

c. statistical - enable the collection of statistical information on how you use the online store https://dorotalapamaik.com/;

d. functional - files that allow you to remember settings and preferences. By saving these files on your device, i.a. it will not be necessary to enter the login and password each time;

e. social - enabling the integration of social networking sites (e.g. Facebook) that you use with the online store https://dorotalapamaik.com/.

6. Browser settings usually allow cookies to be saved by default. If you do not agree to the saving of cookies, you should change the settings of your web browser. The changes may consist in not saving cookies or in informing you each time about saving them. It is also possible to manually delete cookies from your device. Detailed information on the possibilities and ways of handling cookies are available in the settings and in the "Help" section of the web browser. Please note that restrictions on the use of cookies may make it difficult or impossible to use the online store https://dorotalapamaik.com/.

10. FINAL INFORMATION

In case of any doubts regarding the processing of your personal data, the use of the online store https://dorotalapamaik.com/ or its functioning (including the use of cookies), please contact us at the following e-mail address: artstudiolama@gmail.com

LINKS TO OTHER SITES

The website of the online store may contain links to other websites. We cannot be held responsible for the privacy practices of these sites. We kindly ask you to read the privacy policy applicable on these websites. This privacy policy applies only to the domain at https://dorotalapamaik.com/ on which this online store operates.

We reserve the right to change this privacy policy, in particular if it is necessary to adapt its provisions to changes in generally applicable law, regulatory obligations or other special cases, including changes in the manner, scope, form of providing services by the Administrator and conducting business via of this online store.