I. General provisions 1.
Privacy Policy defines how EJLAK SP Z O.O. collects, processes and stores Users’ personal data necessary to provide services electronically through the website www.ejlak.com (hereinafter: Service).
(2) The Service collects only personal data necessary for the provision and development of the services offered therein.
(3) Personal data collected through the Service shall be processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016.
on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as RODO) and the Law on Personal Data Protection of May 10, 2018.
II.
Data Administrator The administrator of the personal data collected through the Service is EJLAK SP Z O.O. with its registered seat Antoniego Wiwulskiego 39/5 51-629 Wrocław, KRS: 0001113249, NIP: 8982309481, REGON: 29065984, e-mail address: sklep@ejlak.com (hereinafter: Administrator).
III.
Purpose of personal data collection 1.
Personal data is used for the purpose of: – registration of the account and verification of the User’s identity, – enabling logging into the Service, – execution of the agreement on services and e-services, – communication with the User (livechat, contact form, etc.), – dispatch of the newsletter (after the User’s consent to receive it), – operation of the comment system, – provision of social services, – promotion of the Administrator’s offer, – marketing, remarketing, affiliation, – personalization of the Service for Users, – analytical and statistical activities, – debt collection, – establishment and assertion of claims or defense against them.
(2) Provision of data is voluntary, but necessary to conclude an agreement or use other functionalities of the Website.
IV.
Type of personal data processed The Administrator may process User’s personal data: name and surname, residential address, e-mail address, telephone number, Tax ID, bank account number V. Period of personal data processing Users’ personal data will be processed for a period of time: – when the basis of data processing is the performance of a contract – until the statute of limitations for claims after its performance, – when the basis of data processing is consent – until the consent is revoked, and after revocation of consent until the statute of limitations for claims.
In both cases, the statute of limitations is 6 years, and for claims for periodic benefits and claims relating to the conduct of business – 3 years (unless a special provision provides otherwise).
VI.
Sharing of personal data
(1) Users’ personal data may be transferred to: entities affiliated with the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. companies handling e-payments, companies providing courier/postal services, law firms.
(2) Users’ personal data will not/will not be transferred outside the European Economic Area (EEA).
VII.
Users’ Rights

  1. The Service User has the right to: access to the content of their personal data, rectification, deletion, restriction of processing, portability, object to processing, withdrawal of consent at any time (which does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal).

(2) Notification of the User’s claim of entitlement under the said rights shall be sent to sklep@ejlak.com.
(3) The Administrator shall comply or refuse to comply with the request immediately – within a maximum of one month of receipt.
(4) The User has the right to file a complaint with the President of the Office for Personal Data Protection if he/she considers that the processing violates his/her rights and freedoms (RODO).
VIII.
Cookies
(1) The Service collects information through cookies – session cookies, permanent cookies and third-party cookies.
(2) The collection of cookies supports the correct provision of services on the Website and is used for statistical purposes.
(3) The user may determine the extent of access of cookies to his/her device in the browser settings.
IX.
Automated decision-making and profiling
(1) Users’ data may not be processed in an automated manner so that any decisions regarding them could be made as a result.
(2) Users’ data may be profiled in order to adapt the content and personalization of the offer after their consent.
X. Final provisions
(1) The Administrator is entitled to make changes to the Privacy Policy, but the rights of Users will not be limited.
(2) Information about the changes will appear in the form of an announcement available on the Site.
(3) In matters not regulated by this Privacy Policy, the provisions of RODO and the provisions of Polish law shall apply.