Dear User!

We care about your privacy and want you to feel comfortable while using our services. Therefore, below we present the most important information about the processing of your personal data and the cookies used by our Store. These details have been prepared in accordance with GDPR – the General Data Protection Regulation.

DATA CONTROLLER

XLAP24.PL LIMITED LIABILITY COMPANY, based at ul. Leśna 1, 64-100 Leszno, entered in the Register of Entrepreneurs of the National Court Register by the District Court Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000995702, NIP 6972389141, REGON 52332453900000, share capital PLN 5000.00; BDO registration number: 000578858.

If you want to contact us regarding the processing of your personal data, write to us at: sklep@xlap24.pl.

YOUR RIGHTS

You have the right to request:

• Access to your personal data, including obtaining a copy of your data (Article 15 GDPR or – if applicable – Article 13(1)(f) GDPR),
• Rectification (Article 16 GDPR),
• Deletion (Article 17 GDPR),
• Restriction of processing (Article 18 GDPR),
• Transfer of data to another data controller (Article 20 GDPR).

You also have the right to:

• Object at any time to the processing of your data:
  • For reasons related to your particular situation – against the processing of personal data concerning you, based on Article 6(1)(f) GDPR (i.e., based on our legitimate interests) (Article 21(1) GDPR);
  • If personal data is processed for direct marketing purposes, to the extent that such processing is related to direct marketing (Article 21(2) GDPR).

If you wish to exercise your rights, please contact us. You can express an objection regarding the use of cookies (which you can read about below) through the appropriate browser settings.

If you believe your data is being processed unlawfully, you can file a complaint with the President of the Personal Data Protection Office.

PERSONAL DATA AND PRIVACY

Below you will find detailed information on the processing of your data, depending on your actions.

1. Placing an Order in the Store – Part 1

Purpose:
Order fulfillment
Legal basis:
Sales agreement (Article 6(1)(b) GDPR)
Legal obligation related to accounting that requires us to process your personal data (Article 6(1)(c) GDPR)
How long:
For the duration of the aforementioned agreement
Until the expiration of the legal obligation related to accounting
Furthermore, your data will be processed until the period in which claims can be made – by you or by us (more information in the last table of this section)
Consequence of not providing data:
You will not be able to place an order

2. Placing an Order in the Store – Part 2

Purpose:
Improving the quality of our services thanks to reviews submitted by Users through the satisfaction survey service
Legal basis:
Our legitimate interest in processing your data to conduct surveys on your satisfaction with our services (Article 6(1)(f) GDPR)
How long:
If you do not provide a review – for 30 days from your purchase or until your objection to the processing is considered; if you do provide a review – until its deletion or until your objection to the processing is considered
Furthermore, your data will be processed until the period in which claims can be made – by you or by us (more information in the last table of this section)
Consequence of not providing data:
We will not be able to consider your opinion regarding our services in improving them further

3. Creating an Account in the Store

Purpose:
Fulfillment of the service agreement for maintaining an account in the Store
Legal basis:
Service agreement (Article 6(1)(b) GDPR)
How long:
For the duration of the aforementioned agreement
Furthermore, your data will be processed until the period in which claims can be made – by you or by us (more information in the last table of this section)
Consequence of not providing data:
You will not be able to create an account or use its features, such as viewing order history or checking order status

4. Contacting Us (e.g., for an inquiry)

Purpose:
Handling your inquiries or requests
Legal basis:
Agreement or actions taken at your request aimed at its conclusion (Article 6(1)(b) GDPR) – if your inquiry or request concerns an agreement of which we are or could be a party
Our legitimate interest in processing your data for communication purposes (Article 6(1)(f) GDPR) – if your inquiry or request is not related to the agreement
How long:
For the duration of the agreement binding us, or – if no agreement is concluded – until the period of pursuing claims expires (see the last table of this section)
Consequence of not providing data:
We will not be able to respond to your inquiry or request

5. Browser Settings or Other Similar Actions Allowing Analytical Activities

Purpose:
Analyzing how you use and navigate the Store website to improve its functionality (more on this in the "Analytical Activities" and "Cookies" sections of the Privacy Policy)
Legal basis:
Our legitimate interest in processing data for the above purpose (Article 6(1)(f) GDPR)
How long:
Until the validity expires or the deletion of cookies used for analytical purposes
Consequence of not providing data:
We will not consider how you use and navigate the Store website in its development

6. Giving Your Consent to Receive Marketing Content from Us (e.g., information on special offers)

Purpose:
Sending marketing information, especially special offers
Analyzing the effectiveness of messages sent by us to determine general principles for effective message delivery in our activities (more on this in the "Analytical Activities" section of the Privacy Policy)
Legal basis:
Your consent to our marketing activities (Article 6(1)(a) GDPR)
Our legitimate interest in processing data for the above purpose (Article 6(1)(f) GDPR)
How long:
Until you withdraw your consent – remember, you can withdraw consent at any time. Data processing until consent is withdrawn remains lawful.
Furthermore, your data will be processed until the period in which claims can be made – by you or by us (more information in the last table of this section)
Consequence of not providing data:
You will not receive our marketing materials, including information on our special offers

7. Signing Up for the Newsletter

Purpose:
Sending newsletters
Analyzing the effectiveness of content sent by us to determine general principles for effective message delivery in our activities (more on this in the "Analytical Activities" section of the Privacy Policy)
Legal basis:
Service agreement for sending newsletters (Article 6(1)(b) GDPR)
Our legitimate interest in processing data for the above purpose (Article 6(1)(f) GDPR)
How long:
Until you unsubscribe from our newsletter or until your objection to the processing is considered
Consequence of not providing data:
You will not be able to receive information about the Store and our services

8. Taking Actions or Omissions That May Lead to Claims Related to the Store or Our Services

Purpose:
Establishing, pursuing, or defending any claims related to the concluded agreement or provided services
Legal basis:
Our legitimate interest in processing personal data for the purpose indicated above (Article 6(1)(f) GDPR)
How long:
Until the limitation period for claims expires or until your objection to processing is considered
Consequence of not providing data:
No possibility to establish, pursue, or defend claims

ANALYTICAL ACTIVITIES

We conduct analytical activities on the Store's website to increase its intuitiveness and usability – in relation to you, this will occur if you allow such activities. We will take into account how you navigate the Store, such as how long you spend on a given page or where you click within the Store. This will allow us to optimize the layout, appearance, and content of the Store during development to improve its functionality.

Additionally, if you wish to receive marketing messages or newsletters from us, we may analyze the effectiveness of the communications we send. For instance, we may verify whether and how they influenced activity in our Store. Such actions will help us determine the general principles for sending such messages in our business – such as the best times for sending or how to formulate effective content.

DATA SECURITY

When processing your personal data, we use organizational and technical measures in compliance with applicable law, including encrypting the connection using an SSL/TLS certificate.

COOKIES

Our Store, like most websites, uses "cookies." These files:

• Are saved in the memory of your device (computer, phone, etc.);
• Do not cause changes to the settings of your device.

In our Store, cookies are used for:

• Remembering your session,
• Statistical purposes,
• Marketing purposes.

To learn how to manage cookies, including how to disable them in your browser, you can refer to your browser's help file.