Privacy & Cookie Policy

This document sets out the conditions for processing personal data (hereinafter also referred to as the “data”) and cookie files in the naturo.org.pl e-store, run via a website available at the address: naturo.org.pl, hereinafter referred to as “the Store”

TABLE OF CONTENTS

§1. HOW TO CONTACT THE DATA CONTROLLER 1

§2. THE GROUNDS FOR THE PROCESSING OF YOUR DATA

§3. INFORMATION ON DATA PROCESSING TO ENTER INTO AND PERFORM AGREEMENTS, AND ON THE POTENTIAL EXERCISE AND DEFENCE OF LEGAL CLAIMS 1

§4. INFORMATION ON DATA PROCESSING FOR DIRECT MARKETING PURPOSES 2

§5. INFORMATION ON DATA PROCESSING FOR SECURITY ASSURANCE PURPOSES 2

§6. INFORMATION ON DATA PROCESSING TO SEND NOTIFICATIONS ABOUT PRODUCTS 2

§7. INFORMATION ON DATA RECIPIENTS 3

§8. INFORMATION ON DATA TRANSFER TO THIRD COUNTRIES 3

§9. UNCONDITIONAL RIGHTS VESTED IN DATA SUBJECTS 3

§10. CONDITIONAL RIGHTS VESTED IN DATA SUBJECTS 4

§11. COOKIE FILES – INTRODUCTION 4

§12. DATA CONTROLLER’S COOKIE FILES 5

§13. THIRD-PARTY COOKIE FILES 5

§14. CONSENT TO THE USE AND MANAGEMENT OF COOKIE FILES 6

§15. CACHE MEMORY 6

§16. LINKS TO OTHER WEBSITES OR SOFTWARE 6

§17. AMENDMENTS TO THE PRIVACY AND COOKIE FILE POLICY 6

§1. HOW TO CONTACT THE DATA CONTROLLER

The Controller of the personal data processed as part of the Store is Naturo Sp. z o.o. with its registered office in Elizówka (21-003), at ul. Szafranowa 6/Hala H1, entered in the Enterprise Register of the National Court Register (KRS) under No. 0000462546, NIP (Tax ID No.): 7123278825 and REGON (National Business Registry Number): 061556075

You may contact the Data Controller

1. by post: Naturo Sp. z o.o., ul. Szafranowa 6/Hala H1, 21-003 Elizówka,

2. by e-mail: sklepnaturo@naturo.org.pl, 3. by phone: + 48 517949977.

§2. THE GROUNDS FOR THE PROCESSING OF YOUR DATA

Collecting personal data, we always provide information about the legal basis for processing. This arises directly from the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). If we inform you about:

• Article 6 (1)(a) of the GDPR, this means that we process your personal data based on the received consent,

• Article 6 (1)(b) of the GDPR, this means that we process your data because it is necessary for the performance of a contract or in order to take steps

at the request of the data subject prior to entering into a contract,

• Article 6 (1)(c) of the GDPR, this means that we process your personal data because it is necessary for compliance with a legal obligation,

• Article 6 (1)(f) of the GDPR, this means that we process your personal data to pursue our legitimate interest.

§3. INFORMATION ON DATA PROCESSING TO ENTER INTO AND PERFORM AGREEMENTS, AND ON THE POTENTIAL EXERCISE AND DEFENCE OF LEGAL CLAIMS

1. We may process personal data that is necessary for the performance of the agreement we have made with you. However, prior to entering into such agreement, we may process personal data in order to take steps at your request. The data are processed under Article 6 (1)(b) of the GDPR.

2. During the term of the agreement and afterwards, we process the personal data of its party to examine or defend potential legal claims. Our legitimate interest includes, for example, the possibility to provide a reply to a potential complaint, to which we are obliged under separate civil law provisions. In such event, we will process personal data based on our legitimate interest, i.e., the defence or exercise of potential legal claims. The data are processed under Article 6 (1)(f) of the GDPR.

3. We will store the data for no longer than is necessary for the purposes for which the personal data are processed, no longer than until relevant claims are time-barred under separate legal regulations.