§ 1. PREAMBLE 

We respect and protect the privacy and security of users of our websites (“Users”). 

This Privacy Policy (“Privacy Policy”) applies to data provided to us via the website vestis-shop.eu, operated at the address vestis-shop.eu. 

In this Privacy Policy, we describe what information we collect in connection with the provision of electronic services, including e-commerce (“Services” or “Service”), and for what purpose and how it is used. 

The term “data processing” used in the Privacy Policy refers to information voluntarily provided by Users, as well as information automatically collected (via so-called “cookies”), and includes all operations on personal data, in particular collection, recording, storing, processing, modifying, sharing, and deleting, carried out in connection with making the Website available and providing the Services. 

The primary purpose of data processing is to optimize the functionality of the Website and Services to allow Users to use them in the simplest and most effective way. 

§ 2. DATA ADMINISTRATION 

1. The personal data administrator: 

a. For Clients in order to process the purchasing process (e.g., entering into a sales contract, fulfilling an order, handling complaints related to the order, etc.), 

b. And for Users who are natural persons, whose data is collected via the Online Store to enable them to use the services provided electronically within the Online Store’s website (e.g., account creation and management service in the Store, newsletter service, contact forms, etc.), 

is Lakerta – Wadim Jaszczyszen, Rzgów, 95-030, ul. Rzemieślnicza 35, NIP: 5223068658, REGON: 380600470 (hereinafter: “Administrator”), who processes this personal data in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: “GDPR”). 

2. Contact information: shop@vestis-shop.eu 

3. The User is not obligated to provide us with their personal data. However, refusal to provide or make available the data necessary for the provision of Services results in the justified inability of vestis-shop.eu to provide the Service and may limit the User’s access to the Website or certain functionalities. For example, access to the “purchase history” and “complaints section” is only possible after providing personal data during registration. 

§ 3. PURPOSES OF DATA PROCESSING 

1. vestis-shop.eu processes Users’ personal data for the following purposes: 

a. To provide electronic services consisting of making content available on the website, managing and maintaining user accounts on the website, and providing other services available on the website (e.g., placing orders, tracking the status of placed orders, contact forms, sending newsletters, etc.). The legal basis for such data processing is the necessity of processing to perform a contract with the data subject (Article 6(1)(b) of the GDPR) and the consent given by the data subject (Article 6(1)(a) of the GDPR) in the case of non-mandatory data; 

b. To enter into a sales contract via the Online Store or actions taken at the User’s request, aimed at concluding the contract. The legal basis for such data processing is the necessity of processing to perform a contract with the data subject (Article 6(1)(b) of the GDPR) and the consent given by the data subject (Article 6(1)(a) of the GDPR) in the case of non-mandatory data; 

c. To enter into a contract for the provision of a digital service (Newsletter). The legal basis for such data processing is the necessity of processing to perform a contract with the data subject (Article 6(1)(b) of the GDPR) and the consent given by the data subject in accordance with the Act on Providing Services by Electronic Means and the Telecommunications Law; 

d. The legal obligation on vestis-shop.eu, e.g., related to accounting (Article 6(1)(c) of the GDPR); 

e. Handling a submitted complaint and withdrawal from the contract – to fulfill the obligations (Article 6(1)(c) of the GDPR), including obligations: a) due to non-compliance of the goods or services with the contract or withdrawal from the contract, including for handling, considering, and resolving complaints or withdrawal from the contract, including responding to it; b) issuing and storing relevant documents required by tax laws in connection with the complaint and reported non-compliance of the goods or services with the contract or withdrawal from the contract; 

f. The legitimate interest of vestis-shop.eu in processing data to establish, assert, or defend potential claims (Article 6(1)(f) of the GDPR); 

g. The legitimate interest (Article 6(1)(f) of the GDPR) consisting of: 

– direct marketing, 

– processing data for analytical and statistical purposes, 

– conducting customer satisfaction surveys; 

h. Analytical and statistical purposes, including profiling. The legal basis for such personal data processing is the legitimate interest of vestis-shop.eu (Article 6(1)(f) of the GDPR), primarily aimed at analyzing user activity on the website, how they use their account, or their preferences to improve the solutions used on the website. 

2. Users’ data are also processed for marketing purposes: 

a. Conducting contextual advertising, i.e., displaying marketing content on the Website that is not tailored to the User’s preferences. The legal basis for such data processing is the legitimate interest of the data controller (Article 6(1)(f) of the GDPR); 

b. Sending newsletters to Users, which may contain commercial information. The legal basis for such data processing is the necessity of processing to perform a contract (Article 6(1)(b) of the GDPR) and the legitimate interest of the data controller (Article 6(1)(f) of the GDPR); 

c. Sending commercial information requested by the User. The legal basis for such data processing is the consent given by the data subject (Article 6(1)(a) of the GDPR); 

d. Conducting direct marketing by sending marketing content to Users electronically or via telemarketing. The legal basis for such personal data processing is the consent given by the data subject (Article 6(1)(a) of the GDPR). 

3. For the purposes specified in points 1 and 2 above, we use the following personal data of Users: first and last name, email address, address (residential or correspondence), phone number, login, information collected by cookies, or tools or technologies similar to them. 

4. vestis-shop.eu also processes personal data of users visiting the Online Store’s profiles on social media (Facebook, YouTube, Instagram). These data are processed solely in connection with the operation of the profile, including informing users about the activities of vestis-shop.eu and promoting various events, services, and products. The legal basis for data processing by the Administrator for this purpose is their legitimate interest (Article 6(1)(f) of the GDPR), which consists of promoting their brand. 

§ 4. DATA PROCESSING ENTRUSTMENT 

1. vestis-shop.eu undertakes to provide the User with access to up-to-date information about the entity to whom vestis-shop.eu entrusts the processing of data, the scope of data entrusted, and the timing of their transfer. vestis-shop.eu discloses Users’ personal data on the basis of the entrustment of data processing, particularly to providers of IT or marketing solutions, solely in connection with the provision of services by vestis-shop.eu to the Users. 

2. In the event of failure or improper performance by vestis-shop.eu of its obligations arising from the entrustment or further entrustment of data processing, vestis-shop.eu’s contractual and tort liability is limited only to direct losses suffered by the User. vestis-shop.eu shall not be liable for indirect damages, regardless of their source, except in cases of deliberate wrongdoing by vestis-shop.eu. 

§ 5. DATA RECIPIENTS 

1. The data collected and processed by vestis-shop.eu may be disclosed to third parties in accordance with the Privacy Policy and applicable law, if it is deemed that such disclosure is necessary for: 

   a. Protecting the rights of vestis-shop.eu or third parties; 

   b. Protecting public safety or the safety of others; 

   c. Preventing or stopping unethical or offensive actions; 

   as well as in any other cases required by law, particularly in cases of suspected criminal activity or violations of intellectual or industrial property rights. 

2. In connection with the provision of services and sales agreements, personal data will be disclosed to external entities, including providers responsible for handling IT systems used for service provision, such as order placement or email communication, entities providing accounting, tax, and legal services, courier companies and carriers, entities providing electronic payment services. 

3. Subject to sections 1 and 2 of this paragraph, we do not transfer, sell, or share Users’ personal data with other individuals or institutions unless this is done with the explicit consent of the User or required by law. 

4. We reserve the right to disclose aggregate, general statistical summaries about Users to companies and websites we cooperate with. 

§ 6. TECHNICAL ISSUES, DATA DELETION, RETENTION 

1. While browsing the Service, our servers automatically collect information sent by the browser and contained in system logs. This information may include various data, in particular, an email address, IP address, browser type, the website visited immediately before accessing our Service, the time of entry into the Service, and other statistical data. This information may be used by vestis-shop.eu for the purpose of concluding, amending, or terminating a contract with the User, ensuring the highest quality of the provided Service, and also for technical and statistical purposes. 

2. As a general rule, vestis-shop.eu processes the User’s personal data for the duration of the Services provided to them or until the User withdraws their consent to data processing. The personal data processing period may be extended in each case by a period: 

   a. Necessary to settle the Service and pursue claims related to payment for the use of the Service; 

   b. Of limitation of claims, if the processing of personal data is necessary to pursue possible claims or defend against such claims; 

   c. Specified by generally applicable laws, for example, to fulfill public law obligations imposed on the administrator; 

   d. Necessary to clarify the circumstances of unauthorized use of the Service. 

3. In the event that vestis-shop.eu becomes aware of the User’s use of the Service in violation of the terms and conditions or applicable laws (unauthorized use of the Service), vestis-shop.eu may process the User’s personal data to the extent necessary to determine the User’s liability. 

4. vestis-shop.eu may notify the User of their unauthorized activities, requesting their immediate cessation, and may also exercise the rights referred to in sections 2 and 3 of this paragraph. 

§ 7. COOKIES 

1. vestis-shop.eu uses text files known as “cookies.” A “cookie” is a small piece of information placed at the request of our server (first-party cookies) on the User’s telecommunications device (e.g., computer, smartphone, etc.) when visiting the Service. This information can be read by the server upon reconnecting from that device. The use of cookies aims to ensure the proper functioning of the Service on Users’ telecommunications devices; this mechanism does not cause any configuration changes to Users’ devices or the software installed on them. 

2. vestis-shop.eu uses the following types of cookies: 

   a. Session cookies – stored on the User’s telecommunications device only while browsing the Service’s website, until the browser is closed or the User logs out of the Service; 

   b. Persistent cookies – stored on the User’s telecommunications device for a specified period or until deleted by the User. 

3. vestis-shop.eu uses cookies for the following purposes: 

   a. Facilitating navigation on the Service’s pages, including by maintaining the User’s session, so there is no need to log in again on each subpage; 

   b. Verifying and improving our offerings, including by adjusting the Service’s content to the User’s preferences; 

   c. Statistical purposes. 

4. The User consents to vestis-shop.eu also using third-party cookies to: 

   a. Present multimedia content on the Service’s web pages, which is retrieved from external websites; 

   b. Collect general and anonymous statistical data through analytical tools; 

   c. Use interactive features to promote the Service via social media platforms. 

5. Consent to store and use cookies can be withdrawn at any time. The User has the option to define the conditions for the use of cookies via their web browser settings. Specifically, any User can disable the cookie mechanism in their web browser on their telecommunications device. The Administrator notes that disabling the cookie mechanism may, however, lead to difficulties or prevent the use of the Service. Detailed information can be found at the following links: 

   a. [Internet Explorer](https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies) 

   b. [Mozilla Firefox](http://support.mozilla.org/pl/kb/ciasteczka) 

   c. [Google Chrome](http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647) 

   d. [Opera](http://help.opera.com/Windows/12.10/pl/cookies.html) 

   e. [Safari](https://support.apple.com/kb/PH5042?locale=en-GB) 

§ 8. ANALYTICAL AND MARKETING TOOLS 

1. vestis-shop.eu and its partners use various solutions and tools for analytical and marketing purposes, including targeting behavioral advertising to Users on external websites. Below are basic details regarding the tools used by the Administrator. Detailed information on these tools can be found in the privacy policies of the respective partners. 

   a. **GOOGLE ANALYTICS**: The Administrator uses Google Analytics, an analytical tool that collects information about Users’ visits to the website (e.g., pages viewed, time spent on the site, transitions between subpages). This is done using cookies from Google LLC for the Google Analytics service. These cookies are used by Google to analyze how the User interacts with the Service, create statistics, and generate reports on the Service’s performance. Google does not use the collected data to identify Users, nor does it link this information to allow for identification. More information on the scope and rules for collecting data for this service can be found at: [https://www.google.com/intl/pl/policies/privacy/partners](https://www.google.com/intl/pl/policies/privacy/partners). 

   b. **GOOGLE ADS**: The Administrator uses remarketing technologies offered by Google, including Google Ads tools, to manage advertising campaigns. These tools enable the User’s device to be recognized on other websites that are part of Google’s and its partners’ advertising network and display ads tailored to the User’s potential interests. This is done using cookies from Google LLC related to the Google Ads service. More information about ad personalization in Google can be found at: [https://support.google.com/ads/answer/2662856?hl=pl](https://support.google.com/ads/answer/2662856?hl=pl). 

   c. **FACEBOOK PIXEL**: The Administrator uses Facebook Pixel marketing tools to target personalized ads to Users on Facebook and measure the effectiveness of advertising campaigns managed by the Administrator on Facebook. This involves the use of cookies from Facebook. More information about the purposes and scope of data collection and processing by Facebook, as well as privacy settings, can be found at: [https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen](https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen). 

§ 9. RIGHTS OF DATA SUBJECTS 

1. The User has the right to request access to their data, as well as to rectify, delete, restrict processing, and the right to data portability. 

2. The User has the right to object to the processing of their data for direct marketing purposes or for reasons related to their particular situation if the processing is based on the legitimate interest of the Administrator. 

3. The User also has the right to file a complaint with the supervisory authority responsible for personal data protection if they believe that the processing of their personal data by the Administrator violates the provisions of the Regulation. 

§ 10. COMMERCIAL INFORMATION 

1. vestis-shop.eu reserves the right to send Users commercial information regarding the activities of vestis-shop.eu as well as the activities of vestis-shop.eu’s partners and contractors. This right is exercised when Users have given consent to the newsletter service, to vestis-shop.eu using push technology in browsers, or to any other method of delivering commercial information. 

2. The User may withdraw consent to receive commercial information at any time; for example, any newsletter recipient has the right to opt out of receiving commercial information from vestis-shop.eu by clicking the “unsubscribe” link or by sending an email to shop@vestis-shop.eu. 

§ 11. MINORS 

1. The Service is intended for adults. 

2. Individuals under the age of eighteen may use the Service and its features only with the knowledge and consent of their legal guardians. Minors are requested not to provide any information, particularly personal data, to us or to other Users through or in connection with the Service. 

§ 12. LINKS 

1. The Service may contain links that, when clicked, redirect the User to an external website. The presence of such links should not be interpreted as any form of affiliation between vestis-shop.eu and the entity that owns the external website. 

2. vestis-shop.eu is not responsible for the consequences of such redirects, has no control over the content on external websites, and is not liable for the privacy and security policies in place on those sites, or for the cookies used during browsing. We encourage Users who follow these links to familiarize themselves with the relevant policies of those external sites. 

§ 13. FINAL PROVISIONS 

1. By using our Service, you agree to the terms outlined in the Privacy Policy. 

2. Any questions or concerns regarding the Privacy Policy and the use of the Service should be directed to the following email address: shop@vestis-shop.eu. 

3. vestis-shop.eu reserves the right to make changes to the Privacy Policy. All changes will be published on vestis-shop.eu in the “Privacy Policy” section.