1. GENERAL PROVISIONS

    1. This Privacy Policy sets out the rules for the processing of personal data obtained through the Online Store available at pl(hereinafter referred to as the "Online Store").
    2. The personal data controller is LANREL SP. Z O.O.with its registered office in Warsaw, ul. Patriotów 220, 04-701 Warszawa; entered into the Register of Entrepreneurs of the National Court Register under KRS number: 0000737049, NIP: 7010829850, REGON: 380659670 (hereinafter referred to as the "Controller").
    3. Personal data collected by the Controller via the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
    4. The Controller takes special care to protect the privacy of data subjects.

2. PURPOSE AND LEGAL BASIS FOR DATA PROCESSING

The Controller processes personal data for the following purposes and on the following legal bases:
  1. Conclusion and performance of a sales agreement(Article 6(1)(b) GDPR) – data provided in the order form (name, address, e-mail, phone number, billing details).
  2. Compliance with tax and accounting obligations(Article 6(1)(c) GDPR) – keeping invoices and accounting records.
  3. Establishment, exercise, or defense of legal claims(Article 6(1)(f) GDPR) – legitimate interest of the Controller.
  4. Customer account managementin the Online Store (Article 6(1)(b) GDPR).
  5. Newsletter distributionand commercial information (Article 6(1)(a) GDPR) – based on consent given.
  6. Handling product reviews(Article 6(1)(f) GDPR).

3. RECIPIENTS OF PERSONAL DATA

  1. Customers' personal data may be transferred to the following categories of recipients:
  • payment operators (e.g., PayU, PayPal),
  • courier companies and logistic operators carrying out deliveries,
  • accounting offices and legal advisors,
  • IT, hosting, and store platform service providers.
    1. Personal data is not transferred to countries outside the European Union, unless resulting from the use of external IT tools (e.g., Google) while maintaining appropriate safeguards compliant with the GDPR.

4. DATA RETENTION PERIOD

  1. Data related to the sales agreement – for the period necessary to perform the agreement and statute of limitations for tax and civil claims (usually 5 years from the end of the calendar year in which the tax payment deadline expired).
  2. Data processed based on consent (e.g., Newsletter) – until the user withdraws their consent.

5. RIGHTS OF THE DATA SUBJECT

Every data subject has the right to:
  1. access their personal data and receive a copy thereof,
  2. rectification (correction) of their data,
  3. erasure of data ("right to be forgotten"),
  4. restriction of data processing,
  5. data portability,
  6. object to data processing,
  7. withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal),
  8. lodge a complaint with the President of the Personal Data Protection Office (UODO).

6. COOKIES

  1. The Online Store uses cookies to ensure the proper functioning of the website, for statistical and marketing purposes.
  2. The user can change cookie settings in their web browser at any time.

7. CONTACT WITH THE CONTROLLER

All matters related to personal data protection and the exercise of user rights can be reported via email at: info@lanrel.eu or by traditional mail to: LANREL SP. Z O.O., ul. Patriotów 220, 04-701 Warszawa.