PRIVACY POLICY OF THE WEBSITE

ILPIU-ONLINE.COM

1. GENERAL PROVISIONS

1.1. This privacy policy of the Website is for information purposes, which means that it is not a source of obligations for the Customers or Clients of the Website. 1.1.1. The administrator of personal data collected via the Website is ANNA KRUSZYŃSKA running a business under the name of FIRMA KONFEKCYJNA „DALBE” ANNA KRUSZYŃSKA entered into the Central Register and Information on Economic Activity of the Republic of Poland kept by the minister competent for economy, having: address of the place of business and address for delivery: Chechło Pierwsze ul. ks. Maksymiliana Marii Kolbego 12, 95-082 Dobron, Tax Number 7311002654, National Business Registry Number 730045285, e-mail address: [email protected] – hereinafter referred to as the „Administrator” and being also the Website Service Provider and the Seller. 1.2. The personal data of the Customer and the Customer are processed in accordance with the Personal Data Protection Act of August 29, 1997 (Journal of Laws 1997 No. 133, item 883, as amended) (hereinafter: the Personal Data Protection Act) and the Act on providing electronic services of July 18, 2002 (Journal of Laws 2002 No. 144, item 1204, as amended). 1.3. The administrator takes special care to protect the interests of the data subjects, and in particular ensures that the data they collect are processed in accordance with the law; collected for specified, legitimate purposes and not subject to further processing incompatible with these purposes; factually correct and adequate in relation to the purposes for which they are processed and stored in a form allowing identification of persons they concern, no longer than it is necessary to achieve the purpose of processing.

2. PURPOSE AND SCOPE OF DATA COLLECTION AND DATA RECEIVERS

2.1. Each time, the purpose, scope and recipient of data processed by the Administrator results from actions taken by the Client or the Client on the Website. 2.2. Possible purposes of collecting personal data of the Customers or Customers by the Administrator: 2.2.1. conclusion and implementation of a Sales Agreement or contract for the provision of Electronic Services (e.g. Account). 2.2.2. direct marketing of the Administrator’s own products or services. 2.3. The Administrator may process the following personal data of Clients or Customers using the Website: name and surname; e-mail address; contact phone number; delivery address (street, house number, apartment number, zip code, city, country), address of residence / business / legal address (if different from delivery address). In the case of Clients or Customers who are not consumers, the Administrator may additionally process the company’s name and tax identification number (NIP) of the Client or the Customer. 2.4. Providing personal data referred to in the point above may be necessary to conclude and implement the Sales Agreement or contract for the provision of Electronic Services on the Website. Each time, the scope of data required to conclude the contract is previously indicated on the Website.

3. COOKIES AND OPERATING DATA

3.1. Cookie files (cookies) are small text information in the form of text files, sent by the server and saved on the side of the person visiting the Website (eg on the hard drive of the computer, laptop or on the smartphone’s memory card – depending on what device the visitor uses our Website). Detailed information about cookies as well as the history of their creation can be found, among others here: http://en.wikipedia.org/wiki/City. 3.2. The Administrator may process data contained in Cookies files when users use the Website for the following purposes: 3.2.1. identifying the Registered Users as logged in to the Website and showing that they are logged in; 3.2.2. remembering data from completed Forms, surveys or login data for the Website; 3.2.3. adapt the content of the Website to the individual preferences of the Service Recipient (eg regarding colors, font size, page layout) and optimize the use of the Website; 3.2.4. keeping anonymous statistics showing the use of the Website. 3.3. Standardly, most Internet browsers available on the market accept cookies by default. Everyone has the possibility to define the terms of using cookies using the own browser’s settings. This means that you can, for example, partially reduce (eg temporarily) or completely disable the option of saving cookies – in the latter case, however, it may affect some of the functionality of the Website. 3.4. Browser settings in the scope of cookies are important from the point of view of consent to the use of Cookies by our Website – in accordance with the law, such consent can also be expressed through the settings of the web browser. In the absence of such consent, the browser’s settings in the field of cookies should be changed accordingly. 3.5. Detailed information on changing cookies settings and their self-removal in the most popular web browsers are available in the help section of the web browser and on the following pages (just click on the link):

• in the Chrome browser
• in the Firefox browser
• in the Opera browser
• in the Safari browser
• in the Microsoft Edge browser

3.6. The Administrator also processes anonymised operational data related to the use of the Website (IP address, domain) to generate statistics helpful in administering the Website. These data are aggregate and anonymous, ie they do not contain features that identify visitors to the Website. These data are not disclosed to third parties.

4. BASIS OF DATA PROCESSING

4.1. The basis for the processing of personal data of the Client or the Customer is the necessity to perform the contract to which he is a party or take action on its request before its conclusion. In the case of data processing for direct marketing of the Administrator’s own products or services, the basis for such processing is (1) prior consent of the Customer or Client or (2) fulfillment of legally justified purposes carried out by the Administrator (in accordance with Article 23 paragraph 4 of the Act on personal data protection) legally justified purpose is in particular the direct marketing of the Administrator’s own products or services).

5. RIGHT TO CONTROL, ACCESS THEIR CONTENTS AND MAKE IMPROVEMENT

5.1. The Service Recipient or the Customer has the right to access their personal data and correct it. 5.2. Each person has the right to control the processing of data related to him, contained in the Administrator’s data file, in particular the right to: request supplementing, updating, rectifying personal data, temporary or permanent suspension of their processing or their removal if they are incomplete, out of date, false or have been collected in violation of the Act or are no longer necessary to achieve the purpose for which they were collected. 5.3. If the Client or the Customer grants consent to data processing for direct marketing of the Administrator’s own products or services, the consent may be revoked at any time. 5.4. In the event that the Administrator intends to process or process data of the Service Recipient or Customer for direct marketing of the Administrator’s own products or services, the person whose data is also entitled to (1) submit a written motivated request to cease processing of its data due to its special situation or to (2) object to the processing of its data. 5.5. In order to exercise the rights referred to above, you can contact the Administrator by sending a relevant message in writing or by e-mail to the Administrator’s address indicated at the beginning of this privacy policy.

6. FINAL PROVISIONS

6.1. The Website may contain links to other websites. The administrator urges that after going to other websites, read the privacy policy established there. This privacy policy applies only to this Website. 6.2. The administrator uses technical and organizational measures to ensure that personal data being processed is protected against hazards and categories of data protected, in particular, protects data against unauthorized access, being taken by an unauthorized person, processing in violation of applicable laws and changes, loss, damage or destruction. 6.3. The Administrator provides the following technical measures to prevent the unauthorized access and modification of personal data sent electronically: 6.3.1. Securing the data set against unauthorized access.