Privacy Policy

The controller of your personal data is: Home Screen Magdalena Cylke 20 Szeroka Street 75-814 Koszalin Tax ID (NIP): 4990574327 Contact for data protection matters: Email: [email protected] Phone: +48 793 237 970 This Privacy Policy sets out the rules for processing personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Personal Data Protection Act.

Depending on the type of service, we collect the following data: WHEN PLACING AN ORDER: • First and last name • Email address • Phone number • Delivery address (street, postal code, city, country) • Company name and Tax ID (optional, for invoices) WHEN REGISTERING AN ACCOUNT: • First and last name • Email address • Password (stored in encrypted form) WHEN SUBSCRIBING TO NEWSLETTER: • Email address AUTOMATICALLY COLLECTED DATA: • IP address • Browser and operating system type • Preferred language and currency • Browsing history of products • Cart and wishlist contents

We process your data for the following purposes: CONTRACT PERFORMANCE (Art. 6(1)(b) GDPR): • Accepting and processing orders • Contact regarding orders • Issuing invoices or receipts • Handling returns and complaints LEGITIMATE INTEREST (Art. 6(1)(f) GDPR): • Conducting statistics and analysis • Pursuing or defending against claims • Detecting fraud and ensuring security CONSENT (Art. 6(1)(a) GDPR): • Sending newsletters with promotional information • Direct marketing LEGAL OBLIGATION (Art. 6(1)(c) GDPR): • Maintaining accounting documentation • Processing complaints in accordance with consumer law

The website uses cookies. These are small text files stored on your device. TYPES OF COOKIES USED: Essential cookies (required for website operation): • Session identifier – maintaining login status • Shopping cart – storing products in cart • Wishlist – saving favorite products • Currency preferences – remembering selected currency (PLN/EUR) Analytical cookies (with consent): • Website traffic analysis • Visit statistics MANAGING COOKIES: You can manage cookies in your browser settings. Disabling essential cookies may prevent use of some store features (e.g., cart). More information about cookies: https://www.allaboutcookies.org

Your data may be transferred to the following entities: COURIER COMPANIES (for order delivery): • InPost S.A. • DHL Parcel Polska Sp. z o.o. • PKN Orlen S.A. (Orlen Paczka) PAYMENT OPERATORS (for transaction processing): • PayU S.A. • Przelewy24 (DialCom24 Sp. z o.o.) IT SERVICE PROVIDERS: • Hosting and server infrastructure • E-commerce system support OTHERS: • Accounting office (accounting documentation) • Government authorities (based on legal provisions) We do not sell or share personal data with third parties for marketing purposes. Data may be transferred to third countries (outside the EEA) only when an adequate level of protection is ensured (e.g., standard contractual clauses).

We store your data for the following periods: • Order-related data – 5 years from the end of the tax year (tax obligation) • User account data – until account deletion or 3 years from last activity • Newsletter – until unsubscription • Cookies – according to the cookie's lifetime (from session to 1 year) • Data for complaint purposes – until claims expire (2-6 years) After these periods, data is permanently deleted or anonymized.

Under GDPR, you have the following rights: • RIGHT OF ACCESS – you can obtain information about processed data • RIGHT TO RECTIFICATION – you can correct inaccurate data • RIGHT TO ERASURE (right to be forgotten) – you can request data deletion • RIGHT TO RESTRICTION OF PROCESSING – you can limit the scope of processing • RIGHT TO DATA PORTABILITY – you can receive data in a machine-readable format • RIGHT TO OBJECT – you can object to processing for marketing purposes • RIGHT TO WITHDRAW CONSENT – you can withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal) To exercise these rights, contact us at: [email protected] You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

We apply appropriate technical and organizational measures to protect your data: • Data transmission encryption (SSL/TLS) • User password encryption • Regular software updates • Limited data access only for authorized persons • Protection against unauthorized access • Data backups Despite applying the highest security standards, no system is 100% secure. In case of a data breach that may pose a risk to your rights, you will be promptly notified.

The Controller reserves the right to make changes to this Privacy Policy. We will inform you about significant changes through: • A notice on the website • Email message (for registered users) Changes take effect on the date specified in the notice, but not earlier than 14 days from the publication date. Using the store after changes are made constitutes acceptance of the new Privacy Policy.

For matters related to personal data protection, you can contact us: Email: [email protected] Phone: +48 793 237 970 Mailing address: Home Screen Magdalena Cylke 20 Szeroka Street 75-814 Koszalin We respond to inquiries within 30 days of receipt. In complex cases, the deadline may be extended by an additional 60 days, of which you will be informed.