Privacy Policy of the Store www.loomac.com
("Store")

Dear User!
We care about your privacy and we want you to feel comfortable while using our services. Therefore, below we present the most important information about the rules for processing your personal data by us and cookies that are used by our Store. This information has been prepared taking into account the GDPR, i.e. the general data protection regulation.

PERSONAL DATA ADMINISTRATOR
MARTA EREN, an entrepreneur running a business under the name MARTA EREN LOOMAC, entered into the Central Register and Information on Economic Activity kept by the minister responsible for economy and keeping the Central Register and Information on Economic Activity, NIP 7742975982, REGON number 387302646, al. Jana Pawła II 35/95, 00-899 Warsaw, Poland.

If you want to contact us in relation to the processing of your personal data by us, please write to us at the following e-mail address: info@loomac.com.

YOUR POWERS
You have the right to request:

• access to your personal data, including obtaining a copy of your data (Article 15 of the GDPR or - if applicable - Article 13 (1) (f) of the GDPR),
  rectify them (Article 16 of the GDPR),
• deletion (Article 17 of the GDPR),
• processing restrictions (Article 18 of the GDPR),
• transferring data to another administrator (Article 20 of the GDPR).

And also the law:

• object at any time to the processing of your data:
    - for reasons related to your particular situation - in relation to the processing of personal data concerning you, based on art. 6 sec. 1 lit. f      GDPR (i.e. on the legitimate interests pursued by us), including profiling (Article 21 (1) of the GDPR);
    - if personal data are processed for direct marketing purposes, including profiling, to the extent that the processing is related to such direct marketing (Article 21 (2) of the GDPR).

Please contact us if you want to exercise your rights. You can express your objection to our use of cookies (about which you can read below) using the appropriate browser settings.

If you believe that your data is being processed unlawfully, you can submit a complaint to the President of the Office for Personal Data Protection.

PERSONAL DATA AND PRIVACY

Below you will find detailed information on the processing of your data depending on your actions.

1. Placing an order in the Store - part 1
For what purpose?
fulfillment of your order
On what basis?
sales contract (Article 6 (1) (b) of the GDPR) legal obligation related to accounting, obliging us to process your personal data (Article 6 (1) (c) of the GDPR)
How long?
for the duration of the above-mentioned contract until the expiry of the legal obligation related to accounting
in addition, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or by us (for more information, see the last table of this section)
What will happen if you do not provide your data?
you will not be able to place an order

2. Placing an order in the Store - part 2
For what purpose?
adjusting the Store to the needs of Users, as well as improving the quality of our services, thanks to the opinions issued by Buyers via the satisfaction survey website
On what basis?
our legitimate interest in the processing of your data in order to conduct research on your satisfaction with our services (Article 6 (1) (f) of the GDPR)
How long?
if you do not express your opinion - for a period of 7 days from your purchase or until we take into account your objection to processing; if, however, you express your opinion - until it is removed or until we take into account your objection to processing *
in addition, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or by us
(for more information, see the last table of this section)
What will happen if you do not provide your data?
we will not take into account your opinion regarding our Store in the work on its further development * depending on which is applicable in a given case and which will occur soonest

3. Creating an account in the Store
For what purpose?
implementation of the contract for the provision of account management services in the Store
On what basis?
contract for the provision of services (Article 6 (1) (b) of the GDPR)
How long?
until the account is deleted by you or by us at your request
in addition, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or by us
(for more information, see the last table of this section)
What will happen if you do not provide your data?
you will not be able to create an account and use its functions, such as viewing your order history or checking the status of your order

4. Establishing contact with us (e.g. to ask a question)
For what purpose?
handling your inquiries or notifications
On what basis?
a contract or actions taken at your request to conclude it (Article 6 (1) (b) of the GDPR) - if your inquiry or notification concerns a contract to which we are or may be a party to our legitimate interest in processing Your data in order to communicate with you (Article 6 (1) (f) of the GDPR) - if your inquiry or notification is not related to the contract
How long?
for the duration of the contract that is binding on us or - if the contract is not concluded - until the end of the claim period - see the last table of this section * until the end of the claim period - see the last table of this section - or until we take into account your objection to processing *
in addition, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or by us
(for more information, see the last table of this section)
What will happen if you do not provide your data?
we will not be able to respond to your inquiry or notification * depending on which is applicable in a given case and which will occur first

5. Browser settings or other similar action permitting marketing activities
For what purpose?
direct marketing, consisting in displaying personalized advertisements
(you can read more about this in the "Profiling" and "Cookies" sections of the Privacy Policy).
On what basis?
our legitimate interest in the processing of data for the above-mentioned purpose (Article 6 (1) (f) of the GDPR)
How long?
until you expire or delete cookies used for marketing purposes *
What will happen if you do not provide your data?
you will not receive suggestions of products or services that you may be interested in * depending on which is applicable and which is the earliest

6. Browser settings or other similar action permitting analytical activities
For what purpose?
analysis of the way you use and navigate the Store's website in order to adapt the website to the needs and behavior of Users
(you can read more about this in the "Analytical activities" and "Cookies" section of the Privacy Policy)
On what basis?
our legitimate interest in the processing of data for the above-mentioned purpose (Article 6 (1) (f) of the GDPR)
How long?
until the cookies used for analytical purposes expire or delete them *
What will happen if you do not provide your data?
we will not take into account your preferences regarding the use of the Store in work on its development * depending on which is applicable in a given case and which will occur soonest

7. Your consent to receive marketing content from us (e.g. information about special offers)
For what purpose?
sending marketing information, especially special offers
On what basis?
Your consent to our marketing activities (Article 6 (1) (a) of the GDPR)
How long?
until you withdraw your consent - remember, you can withdraw your consent at any time. The processing of data until you withdraw your consent remains lawful.
in addition, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or by us
(for more information, see the last table of this section)
What will happen if you do not provide your data?
you will not receive our marketing materials, including information about our special offers

8. Subscription to the newsletter
For what purpose?
sending the newsletter
On what basis?
contract for the provision of the newsletter shipping service (Article 6 (1) (b) of the GDPR)
How long?
until you unsubscribe from our newsletter
in addition, your data will be processed until the expiry of the period in which it is possible to pursue claims - by you or by us
(for more information, see the last table of this section)
What will happen if you do not provide your data?
you will not be able to receive information about the Store and our services

9. Taking an action or omission that may result in claims related to the Store or our services
For what purpose?
establishing, investigating or defending any claims related to the concluded contract or services provided
On what basis?
our legitimate interest in the processing of personal data for the above-mentioned purpose (Article 6 (1) (f) of the GDPR)
How long?
until the expiry of the limitation period for claims or until we take into account your objection to processing *
What will happen if you do not provide your data?
no possibility to establish, assert or defend claims *, depending on which is applicable in a given case and which will occur first

PUBLISHING YOUR DATA

If you decide to publish a comment, its content and your signature will be visible to other users of the Store.

We do not disclose your e-mail address to other users - unless you do so yourself.

PROFILING

As part of the Store, we perform profiling - it will take place in relation to you if you allow such activities. This profiling is based on an automatic assessment of what products or services you may be interested in, using information about the content displayed by you. As a result, advertisements for products or services displayed within the online services you use will be more tailored to you and your needs.

The profiling we carry out does not result in making decisions that have legal effects on you or affect you in a similarly significant way.

ANALYTICAL ACTIVITIES

As part of the Store, we conduct analytical activities aimed at increasing its intuitiveness and accessibility - it will happen to you if you allow such activities. As part of the analysis, we will take into account the way in which you navigate the Store - i.e. how much time you spend on a given subpage, or which places in the Store you click. Thanks to this, we can adjust the layout and appearance of the Store and the content posted therein to the needs of Users.

DATA SAFETY

When processing your personal data, we use organizational and technical measures in accordance with the applicable law, including encryption of the connection with an SSL certificate.

COOKIES

Our Store, like most websites, uses the so-called cookies (cookies). These files:

• are saved in the memory of your device (computer, telephone, etc.);
• do not change the settings of your device.

In this Store, cookies are used for the purposes of:

• remembering your session
• collecting statistical data
• collecting marketing data
• making the functions of the Shop available

To learn how to manage cookies, including how to disable them in your browser, you can use your browser's help file. You can read the information on this subject by pressing the F1 key in the browser. In addition, relevant tips can be found on the following subpages, depending on the browser you use:

• Firefox
• Chrome
• Safari
• Internet Explorer / Microsoft Edge

Cookies will not be processed by us for more than 2 years from the last visit to the Store.

By using the appropriate options of your browser, you can at any time:

• delete cookies,
• block the use of cookies in the future.

In such cases, we will no longer process them.

More information about cookies can be found on Wikipedia.

EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities that support us in running our business. We entrust them with processing your data - these entities process data only on our documented request.

Below you will find a list of recipients of your data:

Moreover:

relevant public authorities to the extent that we are required to provide them with data.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
** In connection with the above, your personal data may also be processed by entities outside the European Union. The appropriate level of protection of your data, including through the use of appropriate safeguards, ensures:

application of standard data protection clauses adopted by the European Commission, referred to in art. 46 sec. 2 lit. c GDPR