The processing (inter alia collection and storage) of your personal data will be carried out by Meblolux spółka z ograniczoną odpowiedzialnością with its registered office in Działdowo, 40 Grunwaldzka Street, 13-200 Działdowo, which is the Administrator of your personal data (hereinafter: the "Administrator").

The Administrator's contact details:

Umebluje.pl

40 Grunwaldzka St,

13-200 Działdowo,

email sklep@umebluje.pl

phone 505 107 395 Monday-Friday: 8:00-18:00 | Saturday: 10:00-14:00

In connection with the use of the Shop, the Administrator collects your personal data:

(a) with your previously given consent (Article 6(1)(a) RODO) - in this regard, your personal data will be processed for marketing purposes (with the exception of processing for direct marketing purposes based on Article 6(1)(f) RODO).

b) for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract (Article 6(1)(b) RODO), with regard to contracts for the provision of electronic services in particular: Customer Account (including, in particular, enabling the use of functionalities such as placing orders, making payments, managing one's account, resolving technical problems, handling orders directed to the Shop's service), Newsletter, Order Form and in the scope of sales contracts.

c) when it is necessary for the fulfilment of a legal obligation incumbent on the controller (Article 6(1)(c) of the RODO), including: obligations arising from tax legislation, accounting legislation, the Act on the provision of electronic services.

d) when it is necessary for the purposes of legitimate interests pursued by the controller or by a third party (Article 6(1)(f) RODO).

The Administrator processes your personal data on the basis of Article 6(1)(f) of the RODO, i.e. for the purposes of the Administrator's or a third party's legitimate interests, which include:

• handling complaints about the operation of the Store, if you make such a complaint;
• carrying out direct marketing of the Administrator's products or services consisting of monitoring your activity in order to adjust the advertisements displayed to you according to the products you have previously browsed;
• carrying out direct marketing of the Administrator's products or services, including personalised marketing activities carried out in the form of profiling;
• carrying out direct marketing by contacting you, via the available communication channels (however, in the case of communication via electronic means - such as e-mail address or telephone number - only with your consent or request for service):
• handling the payment services used to process payments for goods purchased from the Shop;
• ensuring the secure provision of electronic services by, among other things, enforcing compliance with the Store's rules as set out in the Store Terms and Conditions, preventing fraud and abuse, and ensuring traffic safety;
• monitoring your activity in order to analyse, among other things, the functionality of the Store, to improve and develop its operation, to introduce improvements/new functional solutions, and to compile statistics;
• to conduct judicial/extrajudicial proceedings;
• for archiving purposes and to demonstrate that the Administrator has fulfilled his/her legal obligations.

Recipients of data, i.e. entities to whom data will be disclosed, are: entities processing personal data on our behalf, i.e. IT solution providers, entities supporting our marketing activities, persons who - under our authorisation or that of the processor - may process personal data (employees/co-workers) but also third parties providing payment, courier, legal, postal services.

(1) Personal data processed on the basis of a separate consent (Article 6(1)(a) RODO) will be processed until revoked;

2. personal data processed in connection with the conclusion or performance of a contract will be processed for the duration of the contract concluded with you, as well as after its termination, until the end of the limitation period for potential claims under the contract in accordance with the applicable legal provisions on limitation periods;

(3) Personal data processed in connection with the fulfilment of legal obligations, e.g. tax and accounting, provision of electronic services, will be processed for the period indicated in the legal provisions imposing certain obligations on the Administrator or until they are fulfilled.

(4) The processing of your personal data based on the Administrator's legitimate interests (e.g. direct marketing, profiling, analytical purposes) will be carried out until you object to the processing for these purposes (in accordance with point IV above), unless the Administrator demonstrates the existence of valid legitimate grounds for processing overriding your interests, rights and freedoms or grounds for establishing, asserting or defending claims. The processing of personal data for marketing purposes will be carried out for the duration of the contract or until you object to such processing.

You have the right to:

• to request from the Controller access to your personal data, rectification, erasure, restriction of processing, as well as the right to object to processing and the right to data portability.
• to withdraw your consent to the processing of your personal data at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
• to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection.

The provision of personal data by you is voluntary, however, the provision of certain data is necessary for the conclusion and performance of the agreement on the provision of services by electronic means (e.g. the establishment of an Account and the use of its specific functionalities) or sale. Failure to provide certain data may result in the refusal to conclude a contract for the provision of services by electronic means or in the impossibility of its proper execution.

(1) You have the right to object at any time - on grounds relating to your particular situation - to the processing of personal data concerning you based on a legitimate interest pursued by the controller or by a third party, including profiling carried out on the basis of this provision. In that case, we will no longer be allowed to process these personal data unless we demonstrate the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or grounds for the establishment, exercise or defence of claims.

(2) In addition, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling, to the extent that the processing is related to such direct marketing.

Like everyone else, we also use cookies in our Store. Please note that cookies collect information about each person using the Store (hereinafter also referred to as the "Service"), regardless of whether you are a customer of the Store (e.g. whether you have a customer account or have purchased goods).

Please note that the scope of information stored in cookies varies due to the way in which you use the various functionalities of the Website. Below you will find detailed explanations from the Administrator regarding the cookies used.

1. what are cookies and what types of cookies are they ?

Cookie (cookie, http cookie) - a small file containing IT data, stored on the final device (such as a computer, phone, tablet) of a website user. Cookies mainly store settings and other information used on visited websites - making it possible to display websites tailored to the user's preferences, use certain functionalities of these websites or personalise their content.

We can distinguish between two types of cookies based on their duration:

* session cookies - they expire when a particular web browser session is closed (the period from the opening of the browser until it is closed)

* permanent - do not expire when the browser session is closed and remain on the user's device for the period specified in the script.

2 On what basis do we use cookies?

The use of cookies is possible on the basis of the consent of the User visiting the Website. The default settings of web browsers (or similar software) allow cookies to be placed on the User's terminal equipment. Of course, the default settings can be changed by the User by, for example, blocking certain cookies or deleting them (see section 4). However, please note that if cookies are blocked or deleted, the use of the Website may be hindered or even impossible. The main purpose of our use of cookies is to optimise the presentation of the Shop's offer and to prevent fraud and abuse.

3. for what purposes do we use cookies?

Cookies are very diverse in nature. Some of them are necessary for the functioning of the Website, others only for the use of specific functionalities or are used for advertising, statistical and analytical purposes.

The cookies whose operation is necessary for the use of the Website include, in particular, cookies which allow the maintenance and recording of the user's session status, login authorisation, operation of the online shopping basket when making purchases in the Shop, monitoring of service availability.

In addition, we use cookies that facilitate the use of the Website, but are not essential for its operation. These types of cookies may include files that enable: maintaining the user's login session, saving to cookies, automatic login, preferential settings for the display of pages, display of recently viewed products, adjustment of the displayed products to the user's preferences.

Cookies provided by third parties are also used for analytical purposes, in particular Google Analytics.

We also use cookies to carry out marketing activities. In this regard, we primarily use Google Adwords functionality. With the help of Google Adwords, we promote our website on third-party websites and in search results. The purpose of using cookies in our marketing activities is to provide users with more personalised advertisements that reflect their individual preferences.

4 How do I delete or restrict the use of cookies?

You decide which cookies you accept when you visit the website. If you agree, and you choose to block or delete cookies, you can do so by changing your browser settings. Information on how to delete or block cookies should be found in the "Help" section of the web browser you are using.

For example, we point out that it is possible to modify the cookie settings within the popular web browsers using the following access paths:

• Google Chrome: Settings/Advanced/Privacy and security/Content settings/Cookies/
• Mozilla Firefox: Options/Privacy and security/Cookies and page data.