Privacy Policy and Cookie Policy
General Provisions
1. This document (hereinafter referred to as the "Privacy Policy") sets out the principles of processing and protecting the personal data of Users using the service available at www.luosan.pl.
2. The following definitions apply in these Regulations:
a. Service - the website at www.luosan.com managed by the Administrator.
b. User - a natural person using the Service.
c. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).d. Cookies - small pieces of information - telecommunication data sent by each website visited by the User and stored on their end device, e.g. on a computer or smartphone, used during browsing websites, including the Service.
3. Other terms beginning with capital letters have the same meaning as in the Service's regulations conducted by the Administrator, available HERE.
- The administrators of your personal data are LUOSAN company with a permanent place of business in Bielsko-Biała, at 33B/47 Bliska St., 43-300 Bielsko-Biała, NIP 5472237350 REGON: 524933683
4. Contact (hereinafter: the "Administrator"). Contact with the Administrator is possible via email: info@luosan.com or by phone at +48 881491296
5. The Administrator, concerned about the security of processed data, has developed internal procedures and recommendations to prevent unauthorized access to data.
In particular, they take care of encrypting personal data, the integrity of personal data, the confidentiality of personal data, and the correct system for processing them.
6. Providing personal data by the User is entirely voluntary, but refusal to provide it will prevent the conclusion of the Sales Agreement, as well as the conclusion of the Service Functionality Agreement or contact with the Administrator.
7. The personal data of Users will not be transferred by the Administrator (nor will the Administrator commission the transfer of personal data of Users) outside the territory of the European Economic Area, except for the transfer of personal data to a recipient in a country where, according to the decision of the European Commission, an adequate level of personal data protection is ensured, or the transfer will be carried out in accordance with the reservations and safeguards specified in Article 46 of the GDPR.
What data does the Administrator process, and what are the bases and purposes of the processing?
1. The Administrator may process the following personal data: first name, last name, nickname (pseudonym), email address, delivery address, business address, name or company name, NIP, data related to the use of the Service (IP address, domain, end device, data saved in cookies), data related to complaint handling or related to payments made by the User via the Service. If the User creates an Account in the Service, the Administrator will also process the email address and password.
2. The Administrator is entitled to process personal data in cases where - and to the extent - at least one of the following conditions is met:
a. the person to whom the data pertains has given their consent to the processing of their personal data for one or more specific purposes;
b. the processing is necessary for the performance of a contract to which the person to whom the data pertains is a party or to take action at the request of the person to whom the data pertains before concluding a contract;
c. the processing is necessary to fulfill a legal obligation incumbent on the Administrator;
d. the processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the person to whom the data pertains, requiring the protection of personal data, particularly if the person to whom the data pertains is a child.
3. The personal data of the User is processed for the following purposes and on the following bases:
a. the performance of the Sales Agreement or Service Functionality Agreement, or taking action at the request of the person to whom the data pertains before the conclusion of the aforementioned agreements, as well as handling Account in the Service, technical support - Article 6(1)(b) GDPR (performance of a contract by the Administrator),
b. communication with Users, responding to User inquiries regarding the Service - Article 6(1)(b) GDPR (performance of a contract by the Administrator),
c. conducting direct marketing by the Administrator (offering the Administrator's products) - Article 6(1)(f) GDPR (legitimate interest of the Administrator),
d. the performance of the legal obligations incumbent on the Administrator (in particular, accounting obligations, tax obligations) - Article 6(1)(c) GDPR (legitimate interest of the Administrator),
e. establishment, assertion, or defense of claims that may be raised by the Administrator or may be raised against the Administrator - Article 6(1)(f) GDPR (legitimate interest of the Administrator),
f. for analytical purposes, related to examining User preferences - Article 6(1)(f) GDPR (legitimate interest of the Administrator),
g. archival purposes, related to the need to prove compliance with the accountability obligation arising from the GDPR, as well as to defend against claims and to improve the functionality of the Service - Article 6(1)(f) GDPR (legitimate interest of the Administrator),
h. if the Administrator obtains consent from the User to send newsletters and other marketing content - the legal basis for processing data will be both the User's consent under Article 6(1)(a) GDPR (User's consent), Article 172 of the Telecommunications Law, and Article 10 of the Act on Providing Services by Electronic Means.
4. Personal data processing period: The personal data of the User will be processed for the period necessary to achieve the purposes for which they were collected and processed, in particular:
a. data processed based on the User's consent - until the consent is withdrawn, unless the GDPR allows the Administrator to continue processing personal data,
b. data processed based on the legitimate interest of the Administrator - until the legitimate interest of the Administrator is fulfilled or until the User objects to such processing, unless the GDPR allows the Administrator to continue processing personal data,
c. data processed in connection with the performance of contracts - for the period necessary for the proper performance of the contract, particularly until the expiry of the deadlines for asserting any claims arising from the concluded contracts.
d. In the case of processing data necessary to fulfill a legal obligation incumbent on the Administrator - for the period required by law.
5. What rights does the User have?
a. the right to access the User's personal data and obtain a copy of such personal data,
b. the right to rectify the User's personal data,
c. the right to delete the User's personal data - if permissible under the GDPR,
d. the right to withdraw consent to the processing of the User's personal data - this applies to data processed based on Article 6(1)(a) GDPR, however, the withdrawal of consent does not affect the lawfulness of the processing carried out by the Administrator before its withdrawal,
e. the right to object (related to their particular situation) to the processing of the User's personal data by the Administrator based on Article 6(1)(e) - (f) GDPR,
f. the right to object to the processing of the User's personal data by the Administrator for direct marketing purposes,
g. the right to lodge a complaint with a supervisory authority - the User has the right to lodge a complaint with the President of the Office for Personal Data Protection ("PUODO"), if the User believes that the Administrator processes their personal data unlawfully.
h. the right to restrict the processing of personal data.
6. Recipients of personal data: Access to the User's personal data may be provided to:
a. appropriate state authorities - in cases specified by law,
b. courier companies, couriers, carriers - in case the Administrator executes a Sales Agreement for the Client, if they chose a delivery method other than personal pickup,
c. the Administrator's employees and associates,
d. if the Client used electronic payment or card payment - entities handling electronic payments or card payments, the provision of data is related to the purpose of handling the Client's payments,
e. service providers supplying the Administrator with organizational and technical solutions enabling the Administrator to conduct business activities, in particular, entities providing hosting, marketing, analytics, or IT services,
f. accounting offices, legal offices, and other entities providing the Administrator with legal assistance.
Cookie Policy
1. The Service uses (or may use) the following types of Cookies:
|
Cookie Name: |
Purpose (function): |
Storage period: |
|
Shop5 |
session |
until the end of the session |
|
cookie_read |
Cookie information |
2 years from creation |
|
product_vote_56 |
Product rating |
24 hours from creation |
|
poll_vote_1 |
Survey response |
24 hours from creation |
|
basket |
cart content iteration |
until the end of the session |
|
shop_utm_source |
Verification of the effects of Google or Facebook campaigns within the framework of campaign services |
90 days from the last visit from the URL of the product in the campaign or after making a purchase by the User, from whom we saved the cookie |
|
shop_campaign |
Verification of the effects of Google or Facebook campaigns within the framework of campaign services |
90 days from the last visit from the URL of the product in the campaign or after making a purchase by the User, from whom we saved the cookie |
|
_ga |
analytical |
2 years from creation |
|
_gid |
analytical |
24 hours from creation |
|
_gat |
analytical |
1 minute from creation |
2. Cookies are used by the Administrator based on their legitimate interest (Article 6(1)(f) GDPR) for the purpose of:
a. Analysis and statistics of Service viewership,
customizing the content of the Service to the User's preferences.
b. Data collected through Cookies is processed automatically, enabling the assessment of certain factors related to natural persons (e.g., analysis of Store viewership, individual Products).
c. Based on the data collected through Cookies, no significant decisions are made regarding the User based on such data.
d. Users are entitled to change Cookie settings at any time, which is possible by changing the settings of their internet browser. These settings can be changed, in particular, to block the automatic handling of Cookies or to inform about their placement on the User's device each time. Detailed information on the possibilities and ways of handling cookies is available in the software settings (internet browser), e.g., on the following pages:
1. Safari: http://support.apple.com/kb/HT1677?viewlocale=pl_PL&locale=pl_PL.
2. Firefox: http://support.mozilla.org/pl/kb/ciasteczka,
3. Chrome: http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647,
4. Opera: http://help.opera.com/Linux/12.10/pl/cookies.html,
5. Internet Explorer: https://support.microsoft.com/pl-pl/topic/usuwanie-plik%C3%B3w-cookie-i-zarz%C4%85dzanie-nimi-168dab11-0753-043d-7c16-ede5947fc64d.