privacy policy.

I. GENERAL PROVISIONS/

1. The administrator of personal data collected via the website www.balavu-fashion.com is the LADY-ANNE, ANNA NOLL company at the following address: Widok 5/13. Gorzow wlkp, 66-400 NIP 5993250258, REGON 386747228, e-mail address: info@balavu-fashion.com (hereinafter referred to as the "Administrator"), which is also the Service Provider.

2. The service recipient is any natural person visiting the website www. balavu-fashion.com or using one or more of the services described in the Privacy Policy.

3. The Service Recipient's personal data are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (GDPR).

4. The administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are:

1) processed in accordance with law;

2) collected for specified, lawful purposes and not subjected to further processing inconsistent with these purposes;

3) substantively correct and adequate in relation to the purposes for which they are processed and stored in a form enabling identification of the persons to whom they concern, no longer than is necessary to achieve the purpose of processing.

5. You can contact the data protection officer (DPO) at the e-mail address: info@balavu-fashion.com or by correspondence. Using these communication methods, you can contact the Administrator in all matters related to the protection of personal data (including submitting any demands, applications and exercising rights). As part of the contact, the Service Recipient is obliged to indicate his request, application or right he wants to exercise.

II. GENERAL INFORMATION REGARDING DATA COLLECTED

1. Personal data of Service Users, collected by the Administrator, are used in connection with commercial relations connecting or likely to connect the Administrator with the Service User, in particular for:

1) contacting the Service Recipient (customer);

2) information purposes and other activities related to the Service User's activity on the website www.lavard.pl;

3) implementation of contracts and commercial processes, including the provision of services related to maintaining User accounts in the Lavard Online Store;

4) marketing purposes (sending commercial information by electronic means and telemarketing activities);

5) handling complaints and withdrawals from concluded contracts.

2. The Administrator processes the following personal data of Service Recipients:

1) name and surname;

2) address;

3) e-mail address;

4) telephone number;

5) date of birth;

6) Tax Identification Number;

7) other.

3. The Administrator may process the following data characterizing the manner in which the Service User uses services provided electronically:

1) markings identifying the termination of the telecommunications network or the IT system used by the Service Recipient;

2) information about the beginning, end and scope of each use by the Service Recipient of the service provided electronically;

3) information about the Service User's use of services provided electronically;

4) location data;

5) MAC number of the device for which the order was placed.

III. DETAILED INFORMATION REGARDING PROCESSING OF PERSONAL DATA

1. The Service Recipient's personal data is used to take action at the Service Recipient's request before concluding the contract, and later, possibly, to perform the contract and in this respect:

1) the Service Recipient's personal data will be processed in order to take action at the Service Recipient's request before concluding the contract, and in the event of concluding a contract, in order to perform the contract concluded between the Administrator and the Service Recipient;

2) the recipients of the personal data provided by the Service User are suppliers of other goods and services necessary to implement the above-mentioned. purposes, banks paying remuneration, contractors of the Administrator and entities to which the Administrator entrusted the processing of the Service User's personal data (including external audit units), capital-related entities and entities authorized under the law, including state authorities;

3) the Service Recipient's personal data will be processed until the completion of all factual and legal activities necessary to negotiate and implement the contract and to the extent required by law (including tax regulations) or to secure any claims;

4) The Service Recipient has the right to access the content of personal data and the right to rectify, delete or limit processing, as well as the right to transfer data and the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office;

5) the Service Recipient's personal data may be subject to automated processing, including profiling, however, this processing will not lead to automated decision-making that produces legal effects for the Service Recipient or significantly affects him in a similar way, as referred to in Art. 22 section 1 GDPR. This means that the Service User's personal data will be used only to adapt our marketing materials to provide the Service User with information consistent with his or her interests;

6) providing personal data by the Service Recipient is a condition for concluding the contract; providing the data is voluntary, but the consequence of not providing this data will be the inability to conclude and perform the contract;

7) the legal basis for the processing of personal data in this respect is Art. 6 section 1 letter b) GDPR, so processing is necessary to perform the contract or to take action before concluding the contract.

2. The Service Recipient's personal data are used for the legally justified purposes of the Administrator, including:

1) the Service User's personal data will also be processed for legally justified purposes pursued by the Administrator, i.e.:

a) for the efficient implementation of the Administrator's current operational activities, including the implementation of business and administrative processes related to the Administrator's business,

b) to ensure the protection of property and to keep confidential information whose disclosure could cause damage to the Administrator,

c) to potentially establish, pursue or defend claims arising from the business activities conducted by the Administrator,

d) direct marketing conducted by the Administrator in connection with purchases made by the Service Recipient in order to keep the Service Recipient informed about the best offers of the Administrator tailored specifically to the Service Recipient;

2) the recipients of the personal data provided by the Service User are suppliers of goods and services necessary to implement the above-mentioned. purposes and entities entrusted by the Administrator with the processing of the Service User's personal data and entities authorized under the law, including state authorities;

3) the Service Recipient's personal data will be stored until the legally justified interests of the Administrator constituting the basis for this processing are fulfilled or until the Service Recipient objects to such processing;

4) The service recipient has the right to access the content of personal data and the right to rectify it, as well as the right to delete it or limit its processing and the right to object to its processing. The service recipient also has the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office;

5) the Service Recipient's personal data may be subject to automated processing, including profiling, however, this processing will not lead to automated decision-making that produces legal effects for the Service Recipient or significantly affects him in a similar way, as referred to in Art. 22 section 1 GDPR. This means that the Service User's personal data will be used only to adapt our marketing materials to provide the Service User with information consistent with his or her interests;

6) providing personal data by the Service Recipient is voluntary.

7) the legal basis for the processing of personal data is Art. 6 section 1 letter f) GDPR (legitimate interest of the administrator).

3. The Service Recipient's personal data are used to perform tax obligations imposed on the Administrator after the possible conclusion of the contract and in this respect:

1) the Service Recipient's personal data will also be processed in order to fulfill the obligations imposed on the Administrator by law;

2) the recipients of the personal data provided by the Service User are entities authorized under the law (e.g. tax offices, control authorities, law enforcement agencies) and entities to which the Administrator has entrusted the processing of the Service User's personal data;

3) the Service Recipient's personal data collected in order to fulfill the obligations arising from legal provisions will be stored for the period to fulfill these obligations and for the period required by applicable legal provisions;

4) The Service Recipient has the right to access the content of personal data and the right to rectify, delete or limit processing, as well as the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office;

5) the Service Recipient's personal data may be subject to automated processing, including profiling, however, this processing will not lead to automated decision-making that produces legal effects for the Service Recipient or significantly affects him in a similar way, as referred to in Art. 22 section 1 GDPR. This means that the Service User's personal data will be used only to adapt our marketing materials to provide the Service User with information consistent with his or her interests;

6) providing personal data is an obligation arising from applicable tax law provisions;

7) the legal basis for the processing of personal data is Art. 6 section 1 letter c) GDPR - processing is necessary to fulfill the legal obligation of the administrator.

4. If the Service Recipient expresses additional consents, the Service Recipient's personal data will be used for marketing purposes or to provide the Service Recipient with commercial information (in particular in the scope of sending marketing materials to the Service Recipient, including a newsletter, SMS messages) and in this respect:

1) the Service Recipient's personal data will also be processed for marketing purposes, including, among others: sending product offers, commercial, advertising and promotional information in order to maintain contact and send notifications in connection with the sale of the Administrator's products,

2) the recipients of the personal data provided by the Service User are suppliers of other goods and services necessary to implement the above-mentioned. purposes, entities related to the Administrator, contractors of the Administrator and entities to which the Administrator entrusted the processing of the Service User's personal data, including: IT service providers, as well as entities authorized under the law, including state authorities;

3) the Service User's personal data will be stored until the Service User withdraws consent;

4) The Service Recipient has the right to access the content of personal data and the right to rectify, delete or limit processing, as well as the right to lodge a complaint with the supervisory authority - the President of the Office for Personal Data Protection, as well as the right to withdraw consent at any time (withdrawal of consent may be made by unilateral declaration and does not affect the lawfulness of processing based on consent before its withdrawal);

5) the Service Recipient's personal data may be subject to automated processing, including profiling, however, this processing will not lead to automated decision-making that produces legal effects for the Service Recipient or significantly affects him in a similar way, as referred to in Art. 22 section 1 GDPR. This means that the Service User's personal data will be used only to adapt our marketing materials to provide the Service User with information consistent with his or her interests;

6) providing data is voluntary;

7) the legal basis for the processing of personal data is Art. 6 section 1 letter a) GDPR (consent granted by the Service Recipient).

IV. NEWSLETTER

1. Service recipients may consent to receiving the Service Provider's information and marketing content to the provided e-mail address by providing the e-mail address and confirming the necessary consent to receive the above-mentioned. content, in particular in response to an e-mail sent by the Administrator.

2. The Newsletter service is voluntary and free of charge.

3. The Newsletter service is provided for an indefinite period of time, and the Service Recipient may unsubscribe from it at any time by unchecking the appropriate box in the "Customer Account" tab or by contacting the e-mail address iod@lavard.pl.

V. COOKIES

1. The Service Provider's website uses "cookies". Failure to change the browser settings on the part of the Service Recipient is tantamount to consent to their use.

2. The installation of cookies is necessary for the proper provision of services on the website. "Cookies" files contain information necessary for the proper functioning of the website, in particular those requiring authorization.

3. The following types of cookies are used on the website:

1) session files, i.e. temporary files that are stored on the Service User's end device until logging out (leaving the website);

2) permanent, i.e. files stored on the Service Recipient's end device for the time specified in the "cookie" file parameters or until they are deleted by the Service Recipient;

3) analytical, i.e. files enabling better understanding of how the Service User interacts with the content of the website, allowing for better organization of its layout. Analytical cookies collect information about how the Service User uses the website, the type of website from which the Service User was redirected, and the number of visits and duration of the Service User's visit to the website. This information does not record specific personal data of the Service User, but is used to develop statistics on the use of the website.

4. The service recipient has the right to decide on the access of "cookies" to his computer by selecting them in advance in his browser window. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.

VI. FINAL PROVISIONS

1. The Administrator applies technical and organizational measures to ensure protection of processed personal data appropriate to the threats and categories of data protected, and in particular protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of applicable regulations and change, loss, damage or destruction. .

2. The Service Provider provides appropriate technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically.

3. The privacy policy is verified on an ongoing basis and updated, if necessary.