Polityka prywatności

We place great importance on protecting your personal data and do so in accordance with the principles set out in Polish law, including the General Data Protection Regulation (GDPR).

The purpose of this Privacy Policy is to explain the principles on which your personal data is processed and to outline your fundamental rights related to our processing of your personal data.

The personal data controller is: LUMILUNA S.C ul. Plebiscytowa 200, 43-190 Mikołów NIP: 6351877921, REGON: 543129087

We have not appointed a Data Protection Officer, but for all matters related to data processing, you can contact us at: biznesmateuszk@gmail.com

General Principles of Personal Data Processing

The principles governing the processing of personal data provide a framework to ensure that personal data is used appropriately. We are committed to ensuring that personal data is:

• processed lawfully, fairly, and transparently;

• accurate, adequate, and not excessive in quantity;

• accurate and up-to-date—any inaccurate or incomplete personal data will be corrected, deleted, or its further processing will be suspended;

• stored for no longer than necessary;

• processed only for specified, explicit, and legitimate purposes and in accordance with the purpose for which it is collected;

• secure.

Types of Personal Data

We collect and process personal data provided to us through various communication channels, including our Store. Some personal data is necessary for the sale of our products, while providing other data is voluntary, such as for marketing purposes.

We always indicate which personal data is required (e.g., by marking it with an asterisk (*)) and what the consequences will be if you do not provide us with this data—this may, for example, result in the inability to (fully) fulfill your requests. The personal data we collect and process can generally be divided into the following categories:

• contact details, such as name, address, phone number, and email address;

• address data, primarily the delivery address for products;

• payment data, such as bank account or credit card numbers;

• user information, such as technical data related to usage and browsing, including IP addresses from which users visit our websites or applications, including those of external entities.

Purposes of Personal Data Processing

We process personal data for lawful purposes and generally do so only if:

• you have given consent for the processing of your data;

• the processing is necessary for the performance of a contract, such as delivering a product to you;

• the processing is necessary to fulfill a legal obligation;

• the processing is necessary for the purposes of our legitimate interests or the legitimate interests of third parties and is not considered harmful to the person whose data is being processed, including our interests in developing, evaluating, offering, and selling our products, as well as establishing, developing, and maintaining business relationships.

We process personal data to:

• facilitate the use of our Store, enable you to purchase our products, and contact you as part of standard customer service;

• provide comprehensive customer service and technical support;

• personalize the content of the Store and search results.

Disclosure, Transfer, and Sharing of Personal Data with Third Parties

Disclosure and transfer of personal data to third parties is limited to the minimum necessary and depends on the existence of an appropriate level of data protection.

We never disclose your data for marketing purposes, sell it, or exchange it with other third parties.

We reserve the right to disclose or share personal data with third parties in the following circumstances:

• when third parties provide services on our behalf, such as IT support, hosting services, payment processing, or product delivery (courier companies);

• such third parties may process the disclosed, transferred, or shared personal data only under the terms specified by us and based on a written data processing agreement;

• legal advisors—to establish, exercise, or defend our rights;

• when the user has given prior consent to the disclosure of their personal data to third parties.

If the recipient of personal data is located in a country outside the EU/EEA that does not provide an adequate level of data protection, the user's personal data will only be transferred to such a recipient after concluding a written agreement for the transfer of data based on the standard contractual clauses adopted by the European Commission.

User Consent

Some of our data processing activities are based on your consent. In such cases, you have the right to withdraw your consent at any time. If you withdraw your consent, we will cease processing your personal data unless further processing or storage is permitted or required by applicable Polish law. Please note that withdrawing consent will not affect the lawfulness of the processing carried out before the withdrawal. Furthermore, withdrawing consent may prevent us from fulfilling your expectations.

Your Rights

At any time, you have the right to check which of your personal data we process. For this purpose, you can write to us at the addresses provided at the beginning of this Privacy Policy. We will generally respond to you via email.

You can also request that your data be updated or corrected.

If we process your personal data automatically based on your consent or to fulfill orders for our products, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format. We can send this copy to you or to another entity that will process this data from then on. Please note that this applies only to personal data we have received from you.

You have the right to delete your personal data that we process at any time, except in situations where:

• we are awaiting payment for a product you have ordered;

• you have purchased something from our Store—we will retain your transaction-related personal data for accounting purposes;

• we suspect that your actions may lead to claims against you.

You also have the right to object to the processing of your data to the extent that we do so based on a so-called legitimate interest. We will then cease processing your personal data unless, according to the law, your interest or rights are overridden or there are legal claims against you. In such a case, we will inform you accordingly.

You have the right to unsubscribe from our newsletter at any time. You can do this via the link at the end of the last newsletter you received or by writing to us at the addresses provided at the beginning of this Privacy Policy.

If you believe that we are processing your personal data improperly, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.

We will process your Store account data until you delete it or we do so due to a violation of our rights.

We store data related to your purchases until any potential claims related to the sale of the product expire, either yours or ours.

We retain data necessary for accounting or tax settlements for as long as required by accounting or tax regulations.

We will store your data for direct marketing purposes until you withdraw your consent.