1. General provisions

1.1. This Privacy policy is informative and does not create obligations for Customers beyond those resulting from applicable law and agreements concluded through the Online Store.

1.2. The administrator of personal data collected through the Online Store is BIOKUR Waldemar Łopato, business address and address for service: ul. Wojska Polskiego 31, 67-100 Nowa Sól, Poland, NIP: 9251508798, REGON: 080163524, e-mail: office@victoriavynn24.eu, phone: +48 698 344 156.

1.3. Personal data are processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1.4. Using the Online Store is voluntary. Providing personal data is voluntary, but in some cases necessary to conclude and perform a Sales Agreement, provide an electronic service, handle a complaint, issue accounting documents or fulfil statutory obligations.

1.5. The Administrator applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or unlawful processing.

2. Legal bases for processing

2.1. The Administrator processes personal data when at least one of the following legal bases applies:

• the data subject has given consent to processing for one or more specific purposes,
• processing is necessary to perform a contract or to take steps before concluding a contract,
• processing is necessary to comply with a legal obligation imposed on the Administrator,
• processing is necessary for the purposes of legitimate interests pursued by the Administrator or a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject.

2.2. Specific purposes and legal bases are described in the next section.

3. Purposes, bases and retention periods

4. Recipients of personal data

4.1. For the proper operation of the Online Store and the fulfilment of Orders, the Administrator may use external service providers. Personal data may be transferred only when necessary and only to the extent necessary.

4.2. Recipients of personal data may include:

• carriers, courier companies, forwarding companies and shipping brokers,
• payment service providers, including Przelewy24 and PayPal,
• providers of IT, hosting, e-mail, store software and technical support services,
• accounting, legal, tax and advisory service providers,
• entities supporting customer service, complaint handling or communication,
• providers of analytics, marketing and social media tools, if such tools are used in the Online Store and allowed by cookie settings,
• public authorities or other entities authorized by law, where required by applicable provisions.

4.3. If personal data are transferred outside the European Economic Area, the Administrator applies safeguards required by GDPR, in particular adequacy decisions or standard contractual clauses, where applicable.

5. Profiling

5.1. The Administrator may use profiling for direct marketing purposes, for example to adjust the offer, discount codes, reminders or product suggestions to the Customer's interests.

5.2. Profiling does not produce legal effects concerning the Customer and does not similarly significantly affect the Customer. The Customer decides freely whether to use the offer, discount or recommendation.

5.3. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

6. Rights of the data subject

6.1. The data subject has the right to request access to personal data, rectification, erasure, restriction of processing, data portability and the right to object to processing in cases provided by GDPR.

6.2. If processing is based on consent, the data subject has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6.3. The data subject has the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office.

6.4. To exercise rights, contact the Administrator at office@victoriavynn24.eu or by post at ul. Wojska Polskiego 31, 67-100 Nowa Sól, Poland.

7. Cookies and analytics

7.1. The Online Store uses cookies and similar technologies. Cookies are small text files stored on the device of the person visiting the Online Store.

7.2. Cookies may be necessary, functional, analytical, performance, marketing, advertising or social media cookies, depending on their purpose and the tools used in the Online Store.

7.3. Necessary cookies enable the proper functioning of the Online Store, including the basket, order process, login and security functions.

7.4. Analytical and marketing cookies may be used to prepare statistics, analyse traffic, improve the Online Store, measure the effectiveness of advertising and present content better suited to the user's interests.

7.5. The user may manage cookie settings through the browser settings and, where available, through the cookie settings tool displayed in the Online Store. Disabling some cookies may affect the operation of the Online Store, especially the basket and order process.

7.6. If the Online Store uses Google Analytics or similar tools, data are processed to generate aggregated statistics helpful in administering the Online Store and analysing traffic.

8. Final provisions

8.1. The Online Store may contain links to other websites. After going to another website, the user should read the privacy policy applicable there.

8.2. This Privacy policy applies only to the Online Store www.victoriavynn24.eu.