PRIVACY POLICY

version effective from 28.03.2023

previous version of the Privacy Policy is available here

WHAT IS PRIVACY POLICY?

We would like to acquaint you with the details of our processing of your personal data to give you full knowledge and comfort in using our website.

As we are in the Internet business ourselves, we know how important it is to protect your personal information. Therefore, we make special efforts to protect your privacy and the information you provide to us.

We carefully select and use appropriate technical measures, especially those of a programmatic and organizational nature, to ensure the protection of the personal data we process. Our site uses encrypted data transmission (SSL), which ensures the protection of the data identifying you.

In our Privacy Policy you will find all the most important information regarding our processing of your personal data. We ask you to read it and promise that it will not take you more than a few minutes.

Who is the administrator of the www.dolasu.pl website?

The administrator of the website is OUTDOOR PIENIĄŻEK I PIENIĄŻEK SPÓŁKA JAWNA with its registered office in Piaseczno, 39 Pomorska St., 05-501 Piaseczno registered in the National Court Register by the District Court for the city of Warsaw in Warsaw, XIV Economic Department of the National Court Register, under the KRS number 0000285479, NIP 1231118972, REGON 141065208, BDO 000438091 (i.e.: us).

PERSONAL DATA

What legal act governs the processing of your personal data?

Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly referred to as: RODO. To the extent not regulated by the RODO, the processing of personal data is governed by the Personal Data Protection Act of May 10, 2018.

Who is the controller of your personal data?

The administrator of your personal data is OUTDOOR PIENIĄŻEK I PIENIĄŻEK SPÓŁKA JAWNA with its registered office in Piaseczno, 39 Pomorska Street, 05-501 Piaseczno registered in the National Court Register by the District Court for the City of Warsaw in Warsaw, XIV Economic Department of the National Court Register, under the KRS number 0000285479, NIP 1231118972, REGON 141065208. phone: +48 (22) 4282888, e-mail: dolasu@dolasu.pl

You can contact us regarding your personal data via:

• e-mail: dolasu@dolasu.pl,
• postal mail: ul. Śląska 36, 05-501 Piaseczno,
• phone: +48 (22) 4282888.

HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?

What personal data do we process and for what purposes do we process it?

We offer you many different services on our website, for which purposes we process different personal data, based on different legal grounds.

Voluntariness of providing personal data

The provision by you of the required personal data is voluntary but is a condition for us to provide services to you (e.g., sending you a newsletter or creating an account).

Recipients of personal data

You can find the current list of entities to whom we disclose your personal data here.

Automated decision-making (including profiling)

We use tools through which we target personalized advertising to you. Based on your actions in the Store, in particular your choice of content viewed and the time you stay on the Store's subpages, we customize and display marketing content tailored to you. This profiling allows us to target marketing messages that are more desirable to you, which is a benefit to both us and you, as it limits marketing messages about goods and services that are not in your area of interest.

Will we transfer your personal data outside the EEA or to an international organization?

In order to use Google's tools, your personal data may be transferred to the United States, where Google LLC's servers are located.

Google LLC is listed as a participant in the Privacy Shield certification program* (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), and uses model contractual clauses on data security approved by the European Commission.

In order to use Facebook and Instagram tools, your personal data may be transferred to the United States, where the servers of Meta Inc. are located.

Meta Inc. is listed as a participant in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active), for its Workplace service and advertising options and measurement tools. Meta Platforms Ireland Limited transfers data to Meta Inc. on the basis of Facebook's Annex on the Transfer of European Data, which takes into account the standard new contractual clauses that came into effect in 2022. More information can be found here: https://www.facebook.com/legal/terms/dataprocessing/update, https://www.facebook.com/legal/EU_data_transfer_addendum/update.

*Remember that Privacy Shield is no longer a law in the European Union, but a program that sets certain data protection standards for entities with servers in the United States. Now a form of certification, entities enrolled in the Privacy Shield meet certain data protection standards.

WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?

Under the RODO, you have the right to:

• request access to your personal data,
• request rectification
• of
• your
• personal
• data,
• request erasure of your personal data
• ,
• request restriction
• of
• processing of
• your personal
• data,
• object to the processing of your personal data,
• request portability of
• your
• personal
• data.

If you make any of the above-mentioned requests to us, we will inform you without undue delay - and in any case within one month of receipt of the request - about the actions taken in connection with your request.

If necessary, we may extend the one-month period by another two months due to the complexity of the request or the number of requests.

In any case, we will inform you within one month of receipt of the request about the extension of the deadline and provide you with the reasons for the delay.

Right of access to personal data (Article 15 RODO)

You have the right to obtain information on whether we process your personal data. If we process your personal data you have the right to:

• access your personal data,
• obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of storage of your data or the criteria for determining that period, your rights under the RODO and your right to lodge a complaint with the President of the Office for Personal Data Protection, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;
• obtain a copy of your personal data.

If you wish to request access to your personal data, submit your request to: dolasu@dolasu.pl.

Right to rectify your personal data (Article 16 of the RODO)

If your personal data is inaccurate you have the right to request that we promptly rectify your personal data. You also have the right to request that we complete your personal data. If you wish to request rectification or completion of your personal data, please submit your request to: dolasu@dolasu.pl.

The right to erasure of your personal data, the so-called "right to be forgotten" (Article 17 RODO)

You have the right to request the deletion of your personal data when:

• your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• you have withdrawn specific consent, to the extent that personal data were processed based on your consent;
• your personal data were processed unlawfully;
• you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
• you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.

Despite your request for erasure, we may continue to process your personal data for the purpose of establishing, asserting or defending claims, of which you will be informed.

If you wish to request deletion of your personal data, please submit your request to adres:dolasu@dolasu.pl.

The right to request the restriction of the processing of your personal data (Article 18 RODO)

You have the right to request a restriction of the processing of your personal data when:

• you question the correctness of your personal data, in which case we will restrict the processing of your personal data for a period of time to allow you to verify the correctness of the data;
• the processing of your data is unlawful, and instead of deleting your personal data you request
• the
• restriction of
• the processing
• of
• your personal data
• ;
• your personal data is no longer needed for the purposes of processing, but it is needed to establish, assert or defend your claims;
• you have objected to the processing of your personal data - until
• we
• determine whether our legitimate interests override the grounds stated in your objection.

If you wish to request a restriction of the processing of your personal data, please submit your request to: dolasu@dolasu.pl.

Right to object to the processing of your personal data (Article 21 RODO)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

• processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Personal Data Controller or a third party;
• processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please submit your request to: dolasu@dolasu.pl.

The right to request the portability of your personal data (Article 20 RODO)

You have the right to receive your personal data from us in a structured, commonly used machine-readable format and send it to another personal data controller.

By default, we will make your personal data available to you in CSV format. If you prefer to have your data made available to you in another format indicate your preferred format in your request. To the extent possible, we will endeavor to make your data available to you in your preferred format.

You may also request that we send your personal data directly to another controller (if technically possible).

If you wish to request the transfer of your personal data, submit your request to: dolasu@dolasu.pl.

Can you withdraw your consent to the processing of personal data?

You can revoke the consent you have given for the processing of your personal data at any time. Withdrawal of consent to process your personal data does not affect the lawfulness of the processing performed by us on the basis of your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, please submit your request to: dolasu@dolasu.pl.

If you wish to withdraw your consent to the processing of your personal data for the purpose of providing the "Newsletter" service, you can opt out here

Complain to the supervisory authority

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place where the alleged violation was committed.

In Poland, the supervisory authority under the RODO is the President of the Office for Personal Data Protection, which replaced the GIODO as of May 25, 2018.

More information can be found here.

Cookies

General information

When browsing the web pages of the Online Store, "cookies" files, hereinafter referred to as "Cookies", are used, i.e. small text information that is saved in your terminal device in connection with the use of the Online Store. Their use is aimed at proper operation of the Internet Store's websites.

These files allow us to identify the software used by you and customize the Online Store individually to your needs.

Cookies usually contain the name of the domain from which they originate, the time they are stored on your device and the assigned value.

Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to enter your devices through Cookies.

Types of Cookies

We use two types of Cookies:

• Session Cookies: they are stored on your device and remain there until the session of the respective browser ends. The stored information is then permanently deleted from the memory of your device.
• The mechanism of session Cookies does not allow you to download any personal data or any confidential information from your device.
• Permanent Cookies: are stored on your device and remain there until they are deleted
• .
• Ending the session of a given browser or switching off the device does not delete them from your device. The mechanism of Persistent Cookies does not allow the collection of any personal data or any confidential information from your device.

Purposes of

We also use third-party Cookies for the following purposes:

• configuration of the Online Store;
• to create statistics that help to understand how users of the website use the websites, which allows to improve their structure and content through analytical tools Google Analytics, whose administrator is Google Ireland Ltd. based in Ireland, Google's privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
• to determine the profile of the customer in order to display him/her tailored materials in advertising networks, using the tool of Internet advertising Google Adwords, whose administrator is Google Inc.
• based in the U.S., Google's privacy policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/,http://www.google.com/intl/pl/policies/privacy/partners/;
• to collect information about User behavior using the Facebook Pixel tool, whose administrator is Meta Platforms Ireland Limited, based in Ireland, Facebook's privacy policy is available at the following link: https://www.facebook.com/help/cookies/.

To learn about the use of Cookies, we recommend you to read the privacy policies of the above-mentioned companies.

Cookies may be used by advertising networks, in particular the Google network, to display ads tailored to your preferences. For this purpose, information about how you navigate the web or when you use the website may be stored.

To view and edit the information about your preferences collected by the Google advertising network, you can use the tool provided at the link https://www.google.com/ads/preferences/.

Through your browser settings or through the configuration of the service, you can independently and at any time change your settings regarding Cookies, specifying the conditions under which Cookies are stored and accessed by your device. You can change these settings so as to block the automatic handling of Cookies in the settings of your web browser or inform about their placement on your device each time. Detailed information on the possibility and methods of using Cookies is available in the settings of your software (web browser).