I. DATA CONTROLLER

1. The controller of your personal data is Katarzyna Szynalska-Zittlau, conducting business under the name Lorenzo KATARZYNA SZYNALSKA-ZITTLAU with its registered office in Toruń, entered in the Central Registration and Information on Business (CEIDG), Tax ID (NIP): 9562093460, Business Registry No. (REGON): 340727115.
2. You may contact the Controller:
1)by post, at the address: ul. Pod Dębową Górą 29/31, 87-100 Toruń;
2)electronically (by e-mail), at: biuro@butiklorenzo.pl;

II. LEGAL BASIS AND PURPOSE OF PROCESSING PERSONAL DATA

1. The basis for the processing of your personal data by the Controller is Article 6(1)(a), (b), (c), (f) of the GDPR.
2. The processing of your personal data may take place for the purpose of:
1)concluding and performing a contract - for the time necessary to perform the contract and to fully settle accounts between the parties;
2)activating and providing the electronic newsletter service, i.e. sending commercial information - for the period during which you use this service and for the limitation period of the parties' claims related to the service.
3)activating and providing the electronic Account service - for the period during which you use this service and for the limitation period of the parties' claims related to the service.
4)fulfilling the legal obligations incumbent on the Controller, i.e.:
a)obligations related to the warranty for defects (liability for defects of goods) - for the limitation period of claims on this account;
b)obligations related to the Customer's right to withdraw from the contract - for the limitation period of claims on this account;
c)obligations arising from tax law and accounting regulations concerning the issuing and storage of accounting documents - for the period during which the obligation to store the aforementioned documents exists, as specified by generally applicable law;
5)pursuing the legitimate interests of the Controller or a third party, i.e.:
a)pursuing claims related to the conclusion of sales contracts and the provision of electronic services specified in the Terms and Conditions, including for evidentiary purposes to demonstrate certain facts, in particular in the event of a dispute between you and the Controller - for the limitation period of any claims in this respect;
b)creating analyses, summaries and statistics for the Controller's internal needs, in particular in order to examine the quality of the services offered by the Controller, increase your satisfaction with the services provided by the Controller, and develop the online store - for the limitation period of the claims to which you are entitled or the limitation period of the Controller's claims referred to in point 4(a);
c)preventing and detecting fraud;
d)ensuring network security - for the period of data storage and until the cessation of the Controller's liability arising from the obligation of accountability and the obligations under data protection regulations;
e)supporting customer service - for the duration of the contract or until the completion of actions taken at your request prior to concluding the contract;

III. PROFILING

1. For direct marketing purposes, your data may be subject to profiling consisting in promoting products tailored to your preferences and characteristics, which constitutes a legitimate interest of the Controller (Article 6(1)(f) of the GDPR). However, this will not produce any legal effects concerning you or significantly affect your situation. This information is in no way combined with personal data and is not used to determine your identity; this activity will serve solely for analyses and forecasts of individual preferences.
2. You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling.

IV. VOLUNTARY PROVISION OF PERSONAL DATA

Providing your personal data is voluntary. You are not required by generally applicable law to provide any personal data. The provision of personal data results solely from a contractual obligation to which you must consent. However, failure to consent to the provision of personal data may hinder or prevent:
1. the use of the online store, in particular the use of the electronic services offered by the Controller (Account, Newsletter, Order form) and the conclusion of sales contracts;
2. the pursuit of claims under the warranty for defects of goods;
3. the exercise of the right to withdraw from the contract;
4. contact with the Controller or the online store's staff.

V. SHARING OF PERSONAL DATA BY THE CONTROLLER

1. Your data is not transferred outside the European Economic Area, unless this is necessary to provide services through the online store. Where it is necessary to transfer personal data to third countries, it will be transferred only where:
1)the recipient comes from a country for which the European Commission has issued a so-called "adequacy decision";
2)appropriate safeguards are provided, and on condition that enforceable data subject rights and effective legal remedies are available in that country.
2. The personal data of the Service Recipient (Customer) may be shared by the Controller with:
1)employees and persons providing work for the controller on a basis other than an employment contract;
2)entities providing the Controller with advisory, legal, tax, accounting, payment and audit services, and services for the protection of persons and property;
3)entities conducting postal or courier activities;
4)entities conducting payment activities (banks, Poczta Polska, other payment institutions);
5)insurance companies;
6)other entities not listed in points 2-5, with the help (cooperation) of which the Controller performs sales contracts, provides electronic services, exercises the rights and obligations arising from the aforementioned contracts and services, and contacts you;
7)entities providing IT and ICT services, operating ICT systems, e-mail and the online store website;
8)entities acquiring receivables (engaged in debt collection).
3. The Controller may be obliged to share the personal data of the Service Recipient (Customer) with entities authorised to request its disclosure on the basis of generally applicable law, in particular law enforcement authorities.

VI. RIGHTS OF THE DATA SUBJECT

1. In connection with the processing of your personal data, you have the right to:
1)request access to your personal data from the Controller;
2)rectify, erase or restrict the processing of personal data;
3)object to the processing of personal data;
4)data portability;
5)withdraw consent at any time for the processing of personal data processed on the basis of previously given consent;
6)lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.
2. Withdrawing your consent to the processing of personal data does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
3. In order to exercise the rights specified in point 1, you may submit a specific request to the Controller by e-mail at: biuro@butiklorenzo.pl or by post at: ul. Pod Dębową Górą 29/31, 87-100 Toruń.
4. The Controller will, without undue delay - and in any case within one month of receiving any of the requests indicated in point 1 - provide you with information on the action taken in connection with its submission. If necessary, this period may be extended by a further two months due to the complex nature of the request or the number of requests. Within one month of receiving the request, the Controller will inform you of any such extension, stating the reasons for the delay. If the request was submitted electronically, the information referred to in this point will, where possible, also be provided electronically, unless you request another form of communication.
5. If the Controller does not take action in connection with your request, it will inform you without delay - at the latest within one month of receiving the request - of the reasons for not taking action and of the possibility of lodging a complaint with the supervisory authority and pursuing legal remedies before a court.

VII. COOKIES

1. The online store website uses cookies, i.e. small files saved on the computer or other device (tablet, phone, etc.) used by the Service Recipient (Customer) when visiting the online store website, containing the settings and information used by the visited website.
2. The online store website uses:
1)session cookies, i.e. files permanently deleted from the memory and device on which they were stored after the web browser window is closed;
2)persistent cookies, i.e. files that remain on the device until they are manually deleted;
3. It is possible to change the cookie settings, i.e. to restrict, disable or restore the collection of files, at any time, at your own discretion. The changes referred to in the preceding sentence can be made at any time in the web browser settings. Restricting or disabling the collection of cookies may hinder or prevent the use of certain functions (services) of the online store.
4. The following data is collected through cookies: IP address, type of browser and operating system, language, internet service provider, information about the time, date and location.
5. Cookies enable:
1. familiarisation with your preferences and, consequently, personalisation of the advertisements sent (displayed) and the products suggested by the online store;
2. maintaining the "logged in" status of the Account while browsing subsequent subpages of the online store website;
3. maintaining the previously selected currency in which the prices of the products offered on the website are to be displayed;
4. remembering previously entered login data and data filled in forms;
5. analysing and creating statistics on the viewership of particular subpages of the online store website ("visits" to given subpages) and, consequently, optimising the use of the online store website and improving its content according to your preferences and needs.
6. On our websites, third parties place information in the form of cookies and other similar technologies on your terminal device (e.g. computer, smartphone) and access them. These are our trusted partners with whom we work continuously in order to tailor the advertising on our and their websites to your needs and interests, as well as the services that we and our trusted partners provide. One such trusted partner is the entities of the Wirtualna Polska capital group. Detailed information on the processing of your data by Wirtualna Polska can be found in the Wirtualna Polska privacy policy.