Privacy Policy

General Provisions

1. This Privacy Policy defines the principles of privacy protection (i.e., the rules for collecting, using, processing, and protecting) the personal data of users ("Users") of the online store available at the electronic address www.skarpetoholik.pl (hereinafter referred to as: "Service"), which is the property of LT Crafts sp. z o.o. with its registered office in Łódź. 2. The administrator of the personal data of the Service Users within the meaning of Art. 4 pt 7 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR") is LT Crafts sp. z o.o., ul. Fabryczna 25E, 90-341 Łódź, NIP 7282891685, e-mail address: sklep@skarpetoholik.pl, phone number: +48 664735332, the owner of the Service, hereinafter referred to as the "Administrator". 3. The Users of the Service are its customers, i.e., persons using the services provided by the Administrator via the Service, specified in the Skarpetoholik Store Terms and Conditions ("Terms and Conditions"). This Privacy Policy is an integral part of the Terms and Conditions.

Scope of Data Collection

1. The Administrator collects Users' personal data to the extent required to fulfill orders placed via the Service, register on the Service, or provide other services specified in the Terms and Conditions. 2. The scope of collected data may include: first name and last name, e-mail address, phone number, bank account number, delivery address including: street, postal code, city, country, as well as profile data from Facebook. The scope of processed data depends on the type of service selected by the User.

PURPOSE OF DATA PROCESSING

1. The Administrator processes Users' personal data solely for the purpose of: 2. enabling Users to use the Service, which is understood as the provision of services in accordance with the Terms and Conditions, including in particular orders placed in the Administrator's online store, ensuring contact with the User, issuing invoices, and handling complaints; 3. registering an account in the Administrator's online store, providing service for this account and transactions made by Users, including resolving technical problems; 4. conducting direct marketing of services provided by the Administrator, including primarily the implementation of the voluntary free newsletter service containing commercial information within the meaning of the Act of 18 July 2002 on the provision of electronic services (i.e., Journal of Laws of 2017, item 1219); 5. conducting contests, loyalty programs, or promotional campaigns organized by the Administrator; 6. ensuring the security of services provided by the Administrator electronically, including in particular to enforce Users' compliance with the Terms and Conditions and to prevent and counteract fraud and abuse; 7. performing obligations arising directly from applicable law; 8. statistical and archival purposes; 9. pursuing claims arising from the Administrator's business activities. 10. The Administrator processes Users' personal data only for the purposes indicated above. 11. Users' personal data will not be transferred to countries outside the European Economic Area (to countries other than European Union countries and Iceland, Norway, and Liechtenstein). 12. Providing data is voluntary but necessary for the Administrator to provide services via the Service.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

1. The Administrator processes Users' personal data on the basis of the following provisions: 2 Art. 6(1)(a) of the GDPR – the data subject has given consent to the processing of his or her personal data for one or more specific purposes; 3 Art. 6(1)(b) of the GDPR – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; 4 Art. 6(1)(f) of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Administrator.

USER'S RIGHTS

1. Users' personal data is stored at the Administrator's registered office, i.e., at the address: LT Crafts sp. z o.o., ul. Fabryczna 25, 90-341 Łódź, NIP 7282891685; 2 The User has the right to: 3 access their personal data stored by the Administrator; 4 request correction of personal data if they believe that the personal data stored by the Administrator is outdated, incomplete, or untrue; 5 request restriction of personal data processing; 6 request deletion of personal data; 7 request a copy of personal data; 8 object to the processing of personal data in cases specified in Art. 21 of the GDPR; 9 request the transfer of personal data to another personal data administrator, if it is technically possible; 10 withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal); 3 The User may exercise the rights referred to in point 2 above by submitting an appropriate declaration of will to the Administrator: 4 in person at the Administrator's registered office; 5 by post to the Administrator's registered office address indicated above; 6 by e-mail to the address: sklep@skarpetoholik.pl; 7 via the account panel held in the Service. 8 The User also has the right to lodge a complaint with the data protection supervisory authority, i.e., the President of the Personal Data Protection Office (PUODO). 9 The Administrator reserves the right to refuse to delete the User's data if their retention is necessary for the purpose of pursuing claims or if required by applicable law.

COOKIE MECHANISM

1. The Service website uses text files called Cookies. 2 Cookies are saved by the server on the User's computer. 3 To use the Service, it is necessary to allow Cookies to be stored on the User's computer. Lack of permission may mean the inability or difficulty in using the Service. 4 Cookies are not used to collect the User's personal data. 5 Cookies do not change the configuration of the User's computer, are not used to install or uninstall any computer program, and do not interfere with the integrity of the User's system or data. 6 The Administrator reserves the right to use the services of third parties to compile statistics on the use of the Service website. The Administrator declares that in such a case, no data identifying Users will be made available to such entities. 7 Three types of cookies are used within the Service: "session" cookies, "persistent" cookies, and "analytical" cookies. "Session" cookies are temporary files that are stored on the User's end device until logging out (leaving the site). "Persistent" cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User. "Analytical" cookies allow for a better understanding of how the User interacts with the content of the Service's website. They collect information about how the website is used, the type of page from which the User was redirected, and the number of visits and the time of the User's visit to the Service. This information does not record specific personal data of the User but is used to compile statistics on the use of the Service website. 8 In accordance with the applicable provisions of the Act of 16 July 2004 Telecommunications Law (i.e., Journal of Laws of 2017, item 1907), the User has the right to decide on the access of Cookies to their computer by selecting them in their browser window. 9 How to manage Cookies – instructions from web browser manufacturers: o Mozilla Firefox o Internet Explorer o Google Chrome o Safari o Opera IP ADDRESS 1 The Administrator reserves the right to collect the IP addresses of visitors to the Service website, which may be helpful in diagnosing technical problems with the server, creating statistical analyses (e.g., determining which regions have the most visits). Furthermore, they may be useful in administering and improving the Service website.

ACCESS TO THIRD-PARTY DATABASES

1. Users' personal data will not be made available by the Administrator to other entities or third parties, except when: 2 The User consents to it; 3 It is necessary to provide services by the Administrator via the Service, i.e., Users' personal data may be shared with entities such as Poczta Polska S.A. with its registered office in Warsaw, courier companies (DHL, DPD, Let’s Deliver), payment operators (PayU, PayPal, PayNow), etc. In this case, the Administrator provides only the personal data that is necessary to perform these services. More information on how these entities use Users' personal data can be found in their privacy and cookie policies; 4 It is necessary to detect and prevent fraud, as well as to resolve other problems related to fraud, security, and technical issues; 5 It is required by applicable law or a legitimate request from state institutions and judicial authorities. 6 Additionally, the Administrator may share Users' personal data with entities that it has authorized or to which it has entrusted the processing of personal data, i.e.: 7 providers of legal and advisory services in the event the Administrator pursues claims related to its business activities; 8 providers of technical and organizational services enabling the Administrator to provide services via the Service; 9 employees and associates. PERIOD

OF STORAGE OF PERSONAL DATA

1. Users' personal data will be stored no longer than necessary for the proper provision of services within the Service, as well as for the limitation period of civil law claims available to the Administrator against the User.

SECURITY AND PROTECTION OF PERSONAL DATA

1. The Administrator declares that it processes Users' personal data in accordance with the requirements of the GDPR and other applicable data protection regulations that supplement and/or implement the GDPR, including primarily that it applies technical and organizational measures ensuring the protection of processed data appropriate to the threats and categories of data protected, and in particular, protects Users' personal data against unauthorized disclosure, loss, or damage.

DISCLAIMER

1. This Privacy Policy does not cover any information regarding the services or goods of entities other than the Administrator, which have been posted on the Service's pages commercially, as a courtesy, on a reciprocal basis, or not serving to achieve a commercial effect.

CONTACT US

1. Any additional questions related to the Privacy Policy should be directed to the Administrator's registered office address or to the e-mail address: sklep@skarpetoholik.pl.

CHANGES TO THE PRIVACY POLICY

1. The Administrator reserves the right to make changes to the Privacy Policy if required by law or changes introduced in the Service. The Administrator will inform the User about the planned change and its effective date via the Service's website, the newsletter service, and for registered Users, information will also be placed via the Account. 2 The User using the Service is bound by the current Privacy Policy. 3. The date specified below is the effective date of the Privacy Policy in its latest version. Date: 01.02.2025