Privacy and Cookies Policy

of the Lis on the Way online store (lisontheway.com.pl)

I. General provisions

1. This Privacy Policy sets out the rules for processing and protecting the personal data provided by Users in connection with their use of the website and store at lisontheway.com.pl.

2. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the GDPR) and with the Polish Act on the provision of services by electronic means.

3. The Administrator takes particular care to protect the interests of the data subjects, and in particular ensures that data is processed lawfully, collected for specified purposes and not subjected to further processing incompatible with those purposes.

II. Purposes of and legal bases for data processing

Users’ personal data is processed for the following purposes:

• Fulfilling orders in the online store: Processing is necessary for the performance of the sales contract (Article 6(1)(b) GDPR).

• Handling enquiries sent through the contact form or by e-mail: Processing is based on the legitimate interest of the Administrator, namely communication with Users (Article 6(1)(f) GDPR).

• Accounting and tax settlements: Processing is necessary to fulfil a legal obligation of the Administrator (Article 6(1)(c) GDPR).

• Analytical and statistical activities: In order to improve the functionality of the site and tailor the offer, on the basis of the legitimate interest of the Administrator (Article 6(1)(f) GDPR) and of consent to cookies (Article 6(1)(a) GDPR).

III. Scope of the data collected

Depending on the purpose, the Administrator may collect the following data:

1. When placing an order: First name and surname, home/delivery address, telephone number, e-mail address and, in the case of companies, the company name and tax identification number (NIP).

2. When using the contact form: First name and surname, e-mail address, content of the message.

3. Data collected automatically (cookies): IP address, browser type, operating system type, information about how you move around the site.

IV. Data recipients

For the store to function properly and for contracts to be performed, the Administrator uses the services of external entities. Personal data may be transferred to:

• Hosting service providers.

• Entities handling electronic payments.

• Courier companies and postal operators, in order to deliver the order.

• The accounting office serving the Administrator.

V. Data retention period

1. Data connected with order fulfilment and settlements will be stored for the period required by tax law (as a rule 5 years from the end of the calendar year in which the tax payment deadline fell).

2. Data processed in order to handle contact enquiries will be stored for the duration of the correspondence and then for the period necessary to secure any potential claims.

VI. User rights

Under the GDPR, every User has:

• The right to access their data and to receive a copy of it.

• The right to rectify (correct) their data.

• The right to erasure of data (the „right to be forgotten”).

• The right to restriction of processing.

• The right to object to processing.

• The right to data portability.

• The right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office) if the User considers that the processing of their data infringes the GDPR.

To exercise the above rights, please contact us at the e-mail address: kontakt@lisontheway.com.pl.

VII. Cookies

1. The site lisontheway.com.pl uses cookies. These are small text files sent by the web server and stored by the software of the browser on your computer.

2. The Administrator uses cookies for the following purposes:

   • Necessary: Maintaining the User’s session (e.g. keeping the contents of the shopping basket).

   • Analytical and statistical: Understanding how Users use the site so that it can be improved (e.g. Google Analytics).

   • Marketing: Possible tailoring of advertisements to the User’s preferences.

3. At any time the User may change the cookie settings in their web browser (e.g. block them completely), which may however affect the correct operation of some of the store’s functions.

VIII. Final provisions

1. The Administrator reserves the right to make changes to the Privacy Policy in connection with the development of internet technology, changes in data protection law or the development of the site.

2. Users will be informed of any changes in a visible and understandable way on the website.

3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply.