Privacy Policy and Cookie Policy

A. Introduction

1. The privacy of visitors to our website is very important to us, and we make every effort to protect it. This policy explains what we do with your personal data.
2. Providing personal data, as well as consent to its processing, is entirely voluntary. All personal data provided to us is processed solely to the extent and for the purpose for which you have given your consent. If you decide not to provide us with the data necessary to complete your order and do not consent to its processing, unfortunately, we will not be able to fulfill your order. Please remember that you have the right to update or completely delete your personal data at any time. You can do this yourself or with our assistance, which we will gladly provide. We assure you that our company follows a strict personal data security policy. Your personal data is safe with us, and we make every effort to ensure that this level of security increases year after year. We believe that by familiarizing yourself with our privacy policy, you will feel safe and enjoy your shopping experience.
3. Consent to the use of cookies in accordance with the terms of this policy during your first visit to our website allows us to use cookies on each subsequent visit to our website.

B. General Provisions

1. This privacy policy is for informational purposes only and does not constitute a source of obligations.
2. The controller of personal data collected through the Online Store is BOBINSANA LTD Address: Unit 10 Enterprise Court Farfield Park, Rotherham, England, S63 5DB, Company Number: 16416716, email: kontakt@lakailas.pl

C. Purpose of Collecting Personal Data, Scope of Collected Data, and Legal Basis

1. Below we indicate the purposes of processing your personal data, the types of personal data subject to processing, and the legal basis for such processing:

• Purpose: performance of a contract and taking steps at your request prior to entering into a contract, including: payment, delivery, returns, warranty claims.
  Scope of personal data: first name, last name, address, delivery address, email address, telephone number, payment information, order details.
  Legal basis: Article 6(1)(b) GDPR.
• Purpose: creation of an account in the Online Store and registration as a Customer.
  Scope of personal data: first name, last name, address, email address, telephone number, date of birth, order history, payment information and payment history, click and browsing history (cookies).
  Legal basis: Article 6(1)(a) GDPR – requires your consent.
• Purpose: responding to inquiries sent by the Customer via the contact form managed by the Controller – conducting and developing business activity, maintaining customer relations.
  Scope of personal data: first name, last name, email address.
  Legal basis: Article 6(1)(f) GDPR.
• Purpose: sending newsletters.
  Scope of personal data: first name, last name, email address.
  Legal basis: Article 6(1)(a) GDPR – requires your consent.
• Purpose: direct marketing – we will recommend our products to you via email or text messages and inform you about discounts and offers that may be of interest to you.
  Scope of personal data: first name, last name, address, email, telephone number, products and offers clicked.
  Legal basis: Article 6(1)(f) GDPR.
• Purpose: administration, development, and protection of our business, as well as improvement of our services and products.
  Scope of personal data: order history, delivery information, payment details, click and browsing history (cookies).
  Legal basis: Article 6(1)(f) GDPR.
• Purpose: analysis of your activity on our website in order to improve our website, products, and customer relations, as well as to display advertisements for our products and tailor their content to customer preferences; all data used for these purposes is anonymized.
  Scope of personal data: details of your device, IP address, browser type and version, location, operating system, information about your activity in our Store, such as how you use it, searched products.
  Legal basis: Article 6(1)(f) GDPR.
• Purpose: compliance with legal obligations.
  Scope of personal data: first name, last name, address, payment information, and order details.
  Legal basis: Article 6(1)(c) GDPR.
• Purpose: pursuing claims and defending against claims.
  Scope of personal data: first name, last name, address, payment information, order details.
  Legal basis: Article 6(1)(f) GDPR.

2. Your privacy settings may be used to limit the publication of your information on our website and can be adjusted via the privacy controls on the site.
3. We will not disclose your personal data to third parties for direct marketing purposes without your explicit consent.
4. Before disclosing another person’s personal data to us, you must obtain that person’s consent to both the disclosure and the processing of that personal data in accordance with this policy.
5. In our Store we may use profiling, which involves automated processing of personal data to verify aspects concerning Customers. We use profiling only for marketing purposes, as it allows us to better understand Customer preferences regarding our products and adapt our offer to your needs.

---

D. Disclosure of Personal Data

1. Your trust is of key importance to us, which is why we do not sell any of your personal data to third parties. However, in order to deliver our products and services and conduct our business, we may disclose and share your data with the following categories of recipients:

• business partners who support us in running our business, such as:
  • providers of technical services;
  • companies that enable the fulfillment of your order, such as online payment providers, courier companies, warehouses;
  • the bank maintaining our company’s bank account;
  • companies providing marketing communication and advertising services;
  • companies providing services on our behalf in the area of sending emails, text messages, and postal deliveries;
• lawyers, accountants, and auditors who provide professional services to us;
• authorities, if we are legally obliged to disclose your personal data.

2. Please note that many of these entities receiving data have an independent right or obligation to process your personal data.
3. We may disclose personal data of the user to any of our employees, members of management, representatives, suppliers, or subcontractors insofar as it is reasonably necessary for the purposes set out in this Privacy Policy.

E. International Data Transfers

• The information we collect may be stored and processed in any of the countries in which we operate, and may be transferred between those countries to enable the use of the information in accordance with this Privacy Policy.
• The information we collect may be transferred to the following countries that do not have data protection laws equivalent to those in force within the European Economic Area: the United States of America, Russia, Japan, China, and India.
• Personal data that you publish on our website or submit for publication on our website may be available, via the Internet, around the world. We cannot prevent the use or misuse of such information by others.

F. Retention Period of Personal Data

• The retention period of your personal data will be determined only to the extent necessary for the purposes for which it is collected.
• Your personal data processed for the purpose of concluding and performing a contract will be stored for as long as the contract is in force, and after its expiration, for the period necessary to secure or pursue claims and to fulfill any obligations set out by law.
• Personal data used for the purpose of fulfilling legal obligations or pursuing legitimate interests will be stored for as long as the law requires their retention and processing.
• In situations where the processing of your personal data is based on consent, it may be stored until the consent is withdrawn or an objection to processing is raised, or until it is no longer necessary for the fulfillment of the purpose. After that period, your data will be stored until the limitation period for claims has expired.

G. Security of Personal Data

• We will take reasonable technical and organizational precautions to prevent the loss, misuse, or alteration of your personal data.
• We will store all personal data you provide on our secure servers (protected by password and firewall).
• All electronic financial transactions conducted through our website will be protected by encryption technology.
• You acknowledge that the transmission of information over the Internet is inherently insecure, and we cannot guarantee the security of data transmitted in this way.
• You are responsible for keeping the password you use to access our website confidential; we will never ask you for your password (except when you log in to our website).

H. Amendments

This policy may be updated from time to time by posting a new version on our website. You should check this page occasionally to ensure that you understand any changes to this policy. We may also notify you of changes to this policy by email or through our website.

I. Your Rights

1. In accordance with the applicable personal data protection regulations, you have the following rights:

• Right of access to your personal data – you have the right to access your personal data and to receive a copy of the personal data we hold about you.
• Right to rectification of your personal data – you have the right to have your personal data rectified if it is outdated or incomplete.
• Right to erasure of your personal data – you have the right to request the deletion of your personal data if there is no reason for us to continue processing it. However, we may not always be able to completely delete your personal data – for example, when it is needed to fulfill legal obligations.
• Right to restriction of processing – you have the right to request the restriction of the processing of your personal data in certain situations.
• Right to data portability – you have the right to receive a digital copy of your personal data. You also have the right to request that your personal data be transferred to another data controller. This right is limited to situations where the processing is carried out by automated means and concerns personal data processed on the basis of your consent or under a contract.
• Right to object to the processing of personal data – you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. You also have the right to object to the processing of your personal data for direct marketing purposes.
• Right to lodge a complaint – if you have any complaints regarding the way we process your personal data, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Poland’s supervisory authority).

1. We will respond to your requests without undue delay, and at the latest within one month f rom the date of submission. This period may be extended if necessary – in such a case, we will inform you accordingly.

2. Providing personal data in our Store is voluntary, but necessary in order to use most of the Store’s functionalities, in particular to place an order and perform a contract. Failure to provide personal data may result in the inability to perform most activities in our Online Store.

J. Third-Party Websites

If our website contains hyperlinks to third-party websites and detailed information about them, please note that we have no control over, and are not responsible for, the privacy policies and practices of such third parties.

K. Updating Personal Data

Please inform us if the personal data we hold about you needs to be corrected or updated.

L. Cookies (Cookie Files)

• Cookies are text information in the form of text files, sent by a server and stored on the side of the person visiting the Online Store website.
• Your personal data, which is automatically collected when you enter the Website:
  • IT system – the Online Store’s IT system automatically collects data in logs related to the device you use to connect with the Online Store. This data is collected solely for statistical purposes and concerns: device type, operating system, type of web browser, screen resolution, color depth, IP address, internet service provider. The data is used only in the optimization process to ensure the greatest convenience of use.
  • Cookies – The Controller may process data contained in cookies when using the Online Store website for the following purposes: identifying Customers as logged in to the Online Store and showing that they are logged in; recording Products added to the cart to place an Order; remembering data from completed Order Forms, surveys, or login data to the Online Store; customizing the content of the Online Store website to the individual preferences of the Customer (e.g., colors, font size, page layout) and optimizing the use of Online Store pages; conducting anonymous statistics showing how the Online Store website is used. If you do not agree to cookies being placed on your device, you can block their placement by configuring your web browser accordingly. Information on how to do this can be found in your browser’s help files.
  • Google Analytics (cookies) – Google Analytics uses “cookie” technology, i.e. text files placed on your device, to allow the Online Store to analyze traffic sources and how visitors use it. Google collects data obtained from placing cookies on devices on its servers and uses this information to create reports and provide other services related to traffic and Internet use. Google may also transfer this information to third parties if required to do so by law or where such third parties process this information on behalf of Google.
  • Google AdWords (cookies) – Google AdWords uses “cookie” technology, i.e. text files placed on your device, to allow the Online Store to assess the correctness and effectiveness of advertising activities carried out using the AdWords network. Google collects data obtained from placing cookies on devices on its servers and uses this information to create reports and provide other services related to traffic and Internet use. Google may also transfer this information to third parties if required to do so by law or where such third parties process this information on behalf of Google.
• The Controller indicates that most web browsers available on the market accept cookies by default. Everyone has the option of defining the conditions for the use of cookies by changing their web browser settings.
• Browser settings regarding cookies are significant with respect to consent to the use of cookies by the Online Store – in accordance with the law, such consent may also be expressed through browser settings. If you do not consent, you should appropriately change your browser settings regarding cookies.
• Detailed information on how to change cookie settings and delete them independently in the most popular web browsers can be found in the help section of your web browser.
• The Controller also processes anonymized operational data related to the use of the Online Store (IP address, domain) to generate statistics useful in administering the Online Store. This data is aggregate and anonymous, i.e. it does not contain identifying features of visitors to the Online Store website. This data is not disclosed to third parties.