1. General Provisions

The personal data administrator in accordance with Article 4(7) of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR"). (hereinafter referred to as the "administrator").

Personal data refers to any information related to an identified or identifiable natural person; an identifiable natural person is one who can be directly or indirectly identified, especially by an identifier such as a name, identification number, location data, network identifier, or one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

2. Sources and Categories of Processed Personal Data

The administrator processes personal data that you have provided or personal data obtained by the administrator in the course of fulfilling your order. The administrator processes your identification and contact data, as well as data necessary for the execution of the contract.

3. Legal Basis and Purpose of Personal Data Processing

The legal basis for processing personal data is:

• the performance of the contract between you and the administrator in accordance with Article 6(1)(b) of the GDPR;
• your consent to processing for direct marketing purposes (especially sending commercial information and newsletters) in accordance with Article 6(1)(a) of the GDPR in conjunction with Article 10(2) of the Act of 18 July 2002 on the provision of electronic services, if no orders for goods or services have been placed;

The purpose of processing personal data is:

• the execution of your order and the fulfillment of rights and obligations arising from the contract between you and the administrator; when placing an order, personal data necessary for the successful completion of the order (name and contact details) are required, providing personal data is a requirement necessary to conclude and execute the contract, and without providing personal data, it is not possible to conclude or execute the contract on the part of the administrator;
• sending commercial information and conducting other marketing activities;

The administrator does not make automated individual decisions within the meaning of Article 22 of the GDPR. You have explicitly consented to such processing.

4. Data Retention Period

The administrator stores personal data:

• for the period necessary to fulfill the rights and obligations arising from the contract between you and the administrator and to pursue claims under these contracts (for a period of 10 years from the end of the contractual relationship);
• until the withdrawal of consent to the processing of personal data for marketing purposes, for a maximum of 10 years, if personal data is processed based on consent;

After the expiration of the data retention period, the administrator will delete this data.

5. Your Rights

In cases specified in the GDPR, you have:

• the right to access your personal data in accordance with Article 15 of the GDPR;
• the right to rectify personal data in accordance with Article 16 of the GDPR, or alternatively, the right to restrict processing in accordance with Article 18 of the GDPR;
• the right to erase personal data in accordance with Article 17 of the GDPR;
• the right to object to processing in accordance with Article 21 of the GDPR;
• the right to data portability in accordance with Article 20 of the GDPR;
• the right to withdraw consent to the processing of data in written or electronic form to the address or email of the administrator provided in point III of these terms;

6. Conditions for Securing Personal Data

The administrator declares that it has taken all appropriate technical and organizational measures to secure personal data. The administrator has implemented technical measures to secure data storage and the storage of personal data in paper form, especially by securing cloud storage with passwords. The administrator declares that only authorized persons have access to personal data.

7. Final Provisions

By sending an order via the online order form, you confirm that you have read and fully accept the terms of personal data protection.

The administrator has the right to change these terms. The new version of the terms of personal data protection will be published on its websites.