Privacy Policy

The personal data controller responsible for their processing is:

PIO REMARKETING PL Sp. Z o.o.
Andrzejów Duranowski 1C
96-500 Sochaczew
info@pio-remarketing.pl

Telephone: 880353719

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below you will find detailed information on how your data is handled.

1. Access data and hosting

You can visit our websites without providing any personal data. Each time a website is accessed, the server automatically saves only so-called server logs, e.g., the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting internet service provider (so-called access logs), and documents the page request. This data is analyzed solely to ensure the proper functioning of our website and to improve our offer. Pursuant to Art. 6 (1) (f) GDPR, this serves to protect our legitimate interest in the optimal and correct presentation of our websites and offers.

1.1 Hosting

All access data will be deleted at the latest seven days after your visit to our site has ended.

Hosting and website display services are partially provided on our behalf by our service providers as part of data processing entrustment. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Our contact details can be found in the "Contact and company details".

1.2 Content Delivery Network

In order to shorten the loading time of our websites, we use a so-called Content Delivery Network ("CDN"). As part of CDN services, content on the site, e.g., large multimedia files, is delivered via regional servers of external CDN service providers. This means that so-called access data is also processed on the servers of CDN service providers. The services provided to us in this regard are carried out under a data entrustment agreement concluded with the service providers. Our service providers are based and/or use servers located in countries outside the UE and EEA. In relation to these countries, the European Commission has not issued an adequacy decision stating an appropriate level of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Our contact details can be found in the "Contact and company details".

2. Collection and processing of data for contract execution and contact purposes

2.1 Data processing for contract execution purposes

We process the personal data voluntarily provided by you during the ordering process for the purpose of executing the contract (including inquiries regarding the handling of claims under the warranty for defects or guarantees and within the scope of the obligation to inform about necessary updates). The legal basis in this regard is Art. 6 (1) (b) GDPR. Mandatory fields are marked as such because they concern data that is necessary to fulfill the order, and without providing it, we are unable to process it. What data is collected results directly from the forms into which the data is entered.

Further information regarding the processing of your data, in particular regarding the transfer of data to our service providers for the purpose of fulfilling orders, payments, and shipping, can be found in the subsequent sections of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted, and after the storage periods required under tax and accounting regulations have expired, the data will be deleted (Art. 6 (1) (c) GDPR), unless you give express consent (Art. 6 (1) (a) GDPR) for further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we inform you in this privacy policy in such a situation.

Goods management system

In order to process orders and execute contracts, we also use an external goods management system. Our service providers provide services for us in this regard under a data entrustment agreement. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Our contact details can be found in the "Contact and company details".

2.2 Customer account

If, pursuant to Art. 6 (1) (a) GDPR, you give your consent to create a customer account, we will process the personal data necessary for this purpose. It will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, send a message to our contact address indicated in the "Contact and company details". or use the corresponding function in the customer account settings. After deleting your customer account, the processing of your data will be restricted, and after the storage periods specified in tax and accounting regulations have expired, the data will be deleted (Art. 6 (1) (c) GDPR), unless you give express consent (Art. 6 (1) (a) GDPR) for further use of this data or we reserve the right to further use the data for other purposes in accordance with applicable laws, about which we inform you in this privacy policy in such a situation.

2.3 Data processing for contact purposes

As part of customer communication, we process personal data in order to handle your inquiries (Art. 6 (1) (b) GDPR). You provide this data to us voluntarily when contacting us (e.g., via a contact form or e-mail). Mandatory fields are marked as such because they concern data that is necessary to process the inquiry. What data is collected results directly from the forms into which the data is entered. After your inquiry has been fully processed, your data will be deleted, unless you give express consent (Art. 6 (1) (a) GDPR) for further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we inform you in this privacy policy in such a situation.

3. Data processing for delivery purposes

In order to perform the contract (Art. 6 (1) (b) GDPR), we pass your data to the shipping company selected by you during the ordering process, which has been commissioned to deliver the ordered products. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Our contact details can be found in the "Contact and company details".

4. Data processing for payment purposes

In order to process payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the company handling the payment selected by you during the ordering process. This serves the execution of the contract (Art. 6 (1) (b) GDPR).

Data processing to prevent abuse and optimize payments

In some situations, we may provide our service providers with additional information that may be used by them along with the information necessary to process the payment. These service providers then act on our behalf as processors and provide us with services in the field of abuse prevention and optimization of payment processes (e.g., invoicing, analysis of rejected payments, accounting support). According to Art. 6 (1) (f) GDPR, this serves to fulfill our legitimate interests in protecting against abuse and fraud and in effective payment management.

Installment purchase

If you choose the "installment purchase" payment method and give the appropriate consent (Art. 6 (1) (a) GDPR), your personal data (first name, last name, address, e-mail, phone number, date of birth, IP address, gender) along with the data necessary to complete the transaction (item, invoice amount, due date, total amount, invoice number, taxes, currency, date and time of order) will be transferred for payment processing to our partner PayU S.A., ul. Grunwaldzka 186, 60-166 Poznań, Poland. In order to verify the creditworthiness of the customer making an installment purchase, our partner checks and collects information from generally available databases and from business information bureaus and agencies. A list of service providers from whom information is obtained, including information on the customer's creditworthiness determined based on mathematical-statistical models, as well as information on data processing after its transfer to our partner PayU S.A., can be found in its privacy policy at: https://poland.payu.com/prywatnosc/.

Our partner PayU S.A. will use the received information regarding the statistical probability of non-payment to make a decision regarding the establishment, execution, or termination of the contractual relationship. You can present your point of view and disagree with a given decision by contacting our partner PayU S.A. for this purpose. The consent given during the ordering process for the transfer of data may be revoked by you at any time without giving a reason with effect for the future.

5. Marketing activity channels: e-mail

The newsletter is sent as part of data processing entrustment on our behalf by an external service provider. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Our contact details can be found in the "Contact and company details".

Sending an invitation to provide a review of the purchase

If you have given your consent for this during or after placing an order (Art. 6 (1) (a) GDPR), we will then use your e-mail address to send you an electronic invitation to rate the purchase made in our store. Providing a review/rating takes place via the review system we use. You can withdraw your consent at any time by sending a message with information about withdrawing consent to our contact address indicated in the "Contact and company details". Alternatively, you can also use the unsubscribe link provided in the newsletter recipient list in the message with the invitation to provide a review. Once you withdraw your consent, we will remove your e-mail address from the newsletter recipient list. Your e-mail address will be deleted from our systems unless you have given explicit consent (Art. 6 (1) (a) GDPR) for its further use for other purposes or we have reserved the right to further use it for other purposes in accordance with applicable laws (e.g., for contract fulfillment purposes), about which we inform you in this privacy policy in such a situation.

Invitations to provide a review are sent by our service provider Trusted Shops SE Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops"). As part of sending invitations, we receive information from Trusted Shops about the status (e.g., whether a given invitation to provide a review has been sent and whether it has reached the recipient). This takes place in accordance with Art. 6 (1) (f) GDPR in order to fulfill our legitimate interest, which is to receive information regarding invitations to provide reviews, so that we can optimize based on this if necessary, as well as to fulfill the legitimate interest of Trusted Shops, which is the ability to offer this service.

We are jointly responsible with Trusted Shops for sending invitations to provide reviews and for collecting and displaying information regarding reviews and ratings or status.

Within the framework of this joint responsibility between us and Trusted Shops, if you have questions regarding the protection of your data or wish to exercise your rights, please contact Trusted Shops. Contact details are available on this page. You will also find further information on data protection at Trusted Shops there. Regardless of this, you can also always contact us directly. If necessary, your inquiry will be forwarded to Trusted Shops, which is jointly responsible for data processing.

6. Cookies and similar technologies

General information

In order to make a visit to our website more attractive and to enable you to use its key functions, we use technological tools for this purpose, including so-called cookies. Cookies are small text files that are automatically saved on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e., after it is closed (so-called session cookies). Other cookies are retained on your terminal device and allow us to recognize your browser when you next enter the site (so-called persistent cookies).

Privacy protection of terminal devices
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this regard, the storage of information on the user's terminal device or access to information that is already stored on their terminal device does not require the user's consent.

In the case of functions that are not absolutely necessary, the storage of information on the user's terminal device or access to information already saved on their terminal device requires the user's consent. Please note that in the absence of consent, some functions or elements of the site may not be available in full. Any consent given by the user remains valid until consent is withdrawn, settings are configured, or the relevant settings on the terminal device are reset.

Other cases of data processing using cookies and other technologies

We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g., shopping cart function). These technologies process data such as, for example, your IP address, time of visit to the site, device and browser information, as well as information about the use of our website (e.g., about the contents of the shopping cart). Pursuant to Art. 6 (1) (f) GDPR, this serves to fulfill our legitimate interest in the optimal presentation of our offer.

Furthermore, we also use technological tools to fulfill legal obligations to which we are subject (e.g., to prove receipt of consent for processing your personal data), as well as for web analysis and internet marketing. Further information on this subject, including the relevant legal bases for data processing, can be found in the subsequent sections of this privacy policy.

In the help menu of your web browser, you will find explanations regarding changing settings for cookies. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

When consent has been given by you for the use of certain technological tools (Art. 6 (1) (a) GDPR), it may be withdrawn by you at any time. To withdraw consent, please contact us via the contact address. Our contact details can be found in the "Contact and company details".

7. Use of cookies and similar technological tools

On our website, we use the cookies and other similar tools/technologies of external service providers indicated below. Unless otherwise specified in the description of individual technologies, their use takes place on the basis of your consent within the meaning of Art. 6 (1) (a) GDPR. After the purpose of processing has been fulfilled and the use of the given tool/technology has ended, the data collected as part of the use of these tools/technologies will be deleted. The consent given may be withdrawn by you at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the point "Cookies and similar technologies". Further information can be found on the pages of individual service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Our contact details can be found in the "Contact and company details".

7.1 Use of Google services

We use the technological tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") indicated below. Information automatically collected by Google technologies regarding the use of our website is usually transmitted to a Google LLC server, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing takes place on the basis of a joint personal data controller agreement concluded with Google in accordance with Art. 26 GDPR. Further information regarding data processing by Google can be found in the privacy policy on Google's website.

Our service providers are based and/or use servers located in countries outside the EU and EEA, for which the European Commission has issued a so-called adequacy decision stating an appropriate level of data protection.

Our service providers are based and/or use servers located in countries outside the EU and EEA. In relation to these countries, the European Commission has not issued adequacy decisions stating an appropriate level of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics – a web analysis tool from Google, which automatically processes your data for this purpose (IP address, time of visit to the site, information about the device and browser, as well as information regarding the use of our website) and creates pseudonymized user profiles based on them. Cookies may be used for this purpose. When a user visits our website from EU territory, their IP address is saved on a server located in the EU for the purpose of obtaining location data, and then immediately deleted, even before the traffic is redirected to further Google servers. Data processing within the Google Analytics service takes place under a data entrustment agreement concluded with Google.

For web analysis purposes, we also use the Google Signalstool, which is an extension of Google Analytics services and enables so-called "cross-device tracking" (identifying users using multiple devices). This means that if your internet-enabled devices are linked to your Google account and you have activated the "personalized advertising" option in your Google account, Google can generate reports regarding the usage of our site (in particular, the number of users using different devices), even if you change devices. We do not process your personal data in this regard; we only receive statistics based on Google Signals functions and technologies.

Google Ads

With the help of Google Ads, we promote our website in search results and on third-party sites. For this purpose, during a visit to our website, a remarketing cookie from Google is automatically saved on your device, which, based on the pages you visit, allows for the display of interest-based ads by processing your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website) using a pseudonymized identifier (ID). Further data processing takes place only if you have activated the ad personalization option in your Google account settings. In this case - if you are logged into Google at the same time during your visit to our website, Google will use your data together with the data collected as part of the Google Analytics service to create and define so-called target group lists for remarketing purposes across different devices.

For web analysis purposes, we use the Google Ads Conversion Trackingtool to measure and analyze your behavior when you have visited our site via an advertisement within the Google Ads tool. For this purpose, cookies may be used and data such as: IP address, visit time, device and browser information, as well as information regarding the use of our website, e.g., visit to the website or registration for the newsletter, may be processed. Pseudonymized user profiles are then created based on this data.

Google Maps

For the visual presentation of geographic information, Google Maps will save and process information regarding how you use the maps and individual functions, including, for example, your IP address and location data. We have no influence over the above data processing by Google.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plugin – when playing a video, Google processes the following data: IP address, time of visit, information about the user's device and browser.

7.2 Use of Microsoft technologies

We use the technological tools of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft") indicated below. Data processing takes place in accordance with Art. 26 GDPR on the basis of joint arrangements concluded between joint controllers. Information automatically collected by Microsoft's technological tools regarding the use of our website is usually sent to a Microsoft Corporation server, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there. Further information regarding data processing by Microsoft can be found in Microsoft's privacy policy.

Our service providers are based and/or use servers located in countries outside the EU and EEA, for which the European Commission has issued a so-called adequacy decision stating an appropriate level of data protection.

Our service providers are based and/or use servers located in countries outside the EU and EEA. In relation to these countries, the European Commission has not issued adequacy decisions stating an appropriate level of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Microsoft Advertising

For marketing purposes, we promote our website in search results on Bing, Yahoo, and MSN and on third-party sites. For this purpose, during a visit to our website, a cookie (so-called Microsoft Advertising Remarketing Cookie) is automatically saved on your device, which, with the help of a pseudonymized identifier (ID) and processed data (your IP address, time of visit to the site, device and browser information, as well as information regarding the use of our website) and based on the pages you visit, enables the display of interest-based ads.

For web analysis purposes, we use the Microsoft Advertising Universal Event Tracking (UET) tool to measure and analyze your behavior when you have visited our site via an advertisement within the Microsoft Advertising service. For this purpose, cookies may be used and data such as: your IP address, visit time, device and browser information, as well as information regarding the use of our website, e.g., visit to the website or registration for the newsletter, may be processed. As long as your internet-enabled devices are connected to your Microsoft account and you have not disabled the "Displaying ads of interest" setting in your Microsoft account, Microsoft can generate reports regarding the usage of our site (in particular, the number of users using different devices), even if you change devices – so-called "cross-device tracking". We do not process your personal data in this regard; we only receive statistics created by Microsoft UET.

7.3 Use of Facebook services

Facebook Pixel

We use the Facebook Pixel tool provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). The scope of functionalities used by us is indicated below. Facebook Pixel automatically collects and saves data (your IP address, time of visit, device and browser information, as well as information regarding the use of our website, e.g., visit to the website or registration for the newsletter). Pseudonymized user profiles are then created based on this data. For this purpose, during a visit to our site, Facebook Pixel saves a cookie on your device, which, using a pseudonymized Cookie-ID, enables the automatic recognition of your browser when visiting other websites. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of websites, in particular for ad personalization purposes. Information automatically collected by Facebook (by Meta) technologies regarding how our website is used is usually sent to the server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Further information regarding data processing by Facebook can be found in Facebook's (by Meta) privacy policy. Our service providers have their main headquarters and/or use servers in countries for which the European Commission has issued adequacy decisions stating an appropriate level of data protection. Our service providers' headquarters are located in: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The adequacy decision for the USA applies as a basis for transferring data to third countries, provided that the service provider in question has been certified. Certification has been obtained. Our service providers have their main headquarters and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
In relation to these countries, the European Commission has not issued adequacy decisions stating an appropriate level of data protection. Data transfer within our cooperation with service providers from these countries is based on the following safeguards: European Commission standard data protection clauses.

Facebook analysis tools

As part of Facebook Business tools – based on data collected via the Facebook pixel code regarding your use of our site, statistics on user activity on our site are created. Data processing by Facebook takes place on the basis of a concluded data entrustment agreement. Data analysis (site usage statistics) serves to optimize and make our website more attractive.

Facebook Ads (ad management)

Facebook Ads allows us to advertise our website on Facebook and other platforms. We set the parameters for a given advertising campaign. Facebook is responsible for the exact execution, and in particular for the decision to display a given ad to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint personal data controller agreement in accordance with Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include subsequent data processing by Facebook Ireland.

Based on the pseudonymized Cookie-ID saved by Facebook Pixel and the collected information on user activity on our website, we create via the Facebook Pixel Remarketing function personalized advertisements.

For web analysis and optimization purposes – using the Facebook Pixel Conversions function, we analyze the activity of users who visit our website via advertisements displayed within the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data entrustment agreement.

8. Integration with Trusted Shops Trustbadge and other widgets

As long as you have given your consent in accordance with Art. 6 (1) (a) GDPR, Trusted Shops widgets are integrated with our website in order to display Trusted Shops services (e.g., quality mark, review system) and to offer Trusted Shops products for buyers after an order has been placed.

Trustbadge and the services advertised through it are an offer of Trusted Shops SE, Subbelrather Str. 15c, 50823 Cologne, Germany (hereinafter "Trusted Shops") with whom, in accordance with the content of Art. 26 GDPR, we are jointly responsible for the protection of jointly controlled data. We hereby inform you of the essential content of the joint arrangements of the joint controllers (Art. 26 (2) GDPR).

Within the framework of joint responsibility existing between us and Trusted Shops SE, if you have questions regarding data protection and wish to exercise your rights, please contact Trusted Shops using the contact details provided in the privacy policy of Trusted Shops. Regardless of this, however, you can always contact the data controller of your choice. Your inquiry or request will then be forwarded to the other joint controller for processing/reply if necessary.

8.1 Data processing within the framework of Trustbadge integration and other widgets

Trustbadge is provided by an American CDN (Content-Delivery-Network) provider. An appropriate level of data protection is ensured based on a European Commission decision (so-called adequacy decision), which is available here for the USA . Service providers from the USA are usually certified according to the framework agreement concluded between the USA and the EU ("Data Privacy Framework", abbreviated as "DPF"). Further information in this regard can be found here. In the case of service providers who are not certified according to the "DPF" principles, an agreement on the applicability of standard contractual clauses has been adopted as an appropriate guarantee for data protection.

When Trustbadge is called up, the web server automatically saves a so-called log file (server logs), which also contains your IP address, the date and time of the call, the amount of data transferred, and the requesting operator (access data) and documents the call. The IP address is anonymized immediately after downloading, so that the saved data cannot be assigned to a specific person. Anonymized data is used in particular for statistical purposes and error analysis.

8.2 Data processing after placing an order

If you have given your consent, Trustbadge obtains access after placing an order to information regarding the order stored on your terminal device (order total, order number, and if applicable – purchased product) as well as the e-mail address used by you during the ordering process. The e-mail address is hashed using a cryptological one-way function. The hash value is then transmitted to Trusted Shops along with the order information in accordance with Art. 6 (1) sentence 1 (a) GDPR.

This serves to check whether you are already registered in the Trusted Shops SE system in order to use Trusted Shops services for buyers. In the event that you are already registered, further data processing takes place in accordance with the agreement concluded between you and Trusted Shops. If you are not registered or do not consent to automatic recognition of registration via Trustbadge, you will be given the opportunity to register manually to use the services, or to protect the purchase under an existing user agreement.

To this end, Trustbadge obtains access after placing an order in the store to the following information saved on the terminal device you use: order total, order number, and e-mail address. This is necessary so that we can offer you buyer protection. The above data is transmitted to Trusted Shops only if you actively decide to use buyer protection by clicking on the appropriately marked button in the so-called trust card ("Trustcard"). If you decide to use these services, further data processing takes place on the basis of the agreement concluded with Trusted Shops (Art. 6 (1) (b) GDPR) for the purpose of registering buyer protection and securing your order, as well as so that you can receive invitations by e-mail to provide a review of the purchase.

Trusted Shops uses services provided by service providers in the field of hosting and log monitoring. The legal basis in this regard is Art. 6 (1) (f) GDPR, and the legitimate interest consists in striving to ensure the trouble-free functioning of the offered products. Related data processing may also take place in third countries (USA, UK, and Israel).

An appropriate level of data protection is ensured based on a European Commission decision (so-called adequacy decision), which is available here for the USA, here for the UK, and here for Israel. Service providers from the USA are usually certified according to the framework agreement concluded between the USA and the EU ("Data Privacy Framework", abbreviated as "DPF"). Further information in this regard can be found here. In the case of service providers who are not certified according to the "DPF" principles, an agreement on the applicability of standard contractual clauses has been adopted as an appropriate guarantee for data protection.

9. Social Media

9.1 Social media plugins: Facebook (by Meta)

So-called plugins (buttons) of social networks are used on our website. These plugins are available via an HTML link, which ensures that when visiting our page containing such plugins (buttons), no automatic, direct connection is established with the servers of the operator of the given social network. After clicking on one of the buttons (plugin), a new window of your browser will open displaying the page of the given social network, where you can confirm the use of the given button, e.g., "Like" or "Share".

9.2 Our activity on social media portals: Instagram (by Meta)

If you have given your consent to the given social portal in this regard (Art. 6 (1) (a) GDPR), when visiting our account/profile on the aforementioned social portals, your data will be automatically collected and stored for web analysis and marketing purposes. Pseudonymized user profiles are created based on this data. They can be used, for example, to place so-called personalized advertisements within social portals and beyond, which probably correspond to your interests. Cookies are usually used for this purpose.
Detailed information regarding the processing and use of your data by individual social portals, as well as information regarding your rights and privacy setting configuration options, and contact details for the purpose of making an inquiry, are described in the privacy policies of the individual social networks linked below. Should you need help in this regard, you can also contact us.

Instagram (by Meta) is a social network offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland "). Automatically processed information regarding your activities and the way you use our fanpage account on Instagram is generally transmitted to the server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and stored there. Data processing within visits to the fanpage account on Instagram (by Meta) takes place in accordance with Art. 26 GDPR on the basis of joint arrangements of joint controllers. Further information regarding the processing of your personal data during visits to a Facebook fanpage (information regarding page statistics function) is available here.

Our service providers have their main headquarters and/or use servers in countries for which the European Commission has issued adequacy decisions stating an appropriate level of data protection. Our service providers' headquarters are located in: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA applies as a basis for transferring data to third countries, provided that the service provider in question has been certified. Certification has been obtained.

Our service providers have their main headquarters and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
In relation to these countries, the European Commission has not issued adequacy decisions stating an appropriate level of data protection. Data transfer within our cooperation with service providers from these countries is based on the following safeguards: standard data protection clauses adopted by the European Commission.

10. Our contact details and your rights

10.1 Your rights

Persons whose data is processed have the following rights:

• pursuant to Art. 15 GDPR: the right to obtain information about data processing to the extent specified in this article;
• pursuant to Art. 16 GDPR: the right to rectify your incorrect or incomplete personal data;
• pursuant to Art. 17 GDPR: the so-called "right to be forgotten", i.e., the right to delete your personal data stored with us, as long as its further processing is not necessary:
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • due to reasons of public interest;
  • to establish, exercise, or defend claims;
• pursuant to Art. 18 GDPR: the right to restrict the processing of personal data, as long as:
  • the accuracy of this personal data is contested by you;
  • the processing is unlawful, and you object to its deletion;
  • we no longer need the personal data, but you need it to establish, exercise, or defend claims;
  • you have filed an objection to the data processing pursuant to Art. 21;
• pursuant to Art. 20 GDPR: the right to receive the data provided to us in a structured, commonly used, machine-readable format and to send it to another controller;
• pursuant to Art. 77 GDPR: the right to lodge a complaint with a supervisory authority (President of the Personal Data Protection Office "UODO").

10.2 Contacting us

In the event of questions regarding the collection, processing, and use of your personal data, as well as in the event of a request for information, rectification, restriction of processing or deletion of data, and for the purpose of revoking consents given or objecting to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.