Privacy policy

PRIVACY POLICY

The personal data administrator responsible for their processing is:

Katarzyna Mitas
Al. Sloneczna 7
38-440 Iwonicz Zdroj
Poland

rodo@maylily.pl

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below you will find detailed information on the handling of your data.

1. Access data and hosting

You can visit our websites without providing personal information. Each time a website is accessed, the server automatically saves only so-called cookies. server logs, e.g. the name of the requested file, your IP address, date and time of the request, the amount of data transferred and the Internet service provider submitting the query (so-called access logs) and documents the page visit. This data is only analyzed to ensure the proper functioning of our website and to improve our offer. The above serves in accordance with art. 6 sec. 1 lit. f GDPR to secure our legitimate interest in the optimal, correct presentation of our websites and offers.

Hosting
All access data will be deleted at the latest seven days after the end of your visit to our website.

Website hosting and display services are partly provided on our behalf by our service providers as part of entrusting data processing. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basics of working with them, please contact us. Our contact details can be found in the section "Our contact details and your rights".

2. Collection and processing of data for the purposes of contract performance and contact

2.1 Data processing for the purposes of contract performance
We process the personal data provided by you voluntarily when placing an order in order to perform the contract (including inquiries regarding the consideration of claims under warranty for defects or guarantees and the obligation to inform about necessary updates). The legal basis in this regard is art. 6 sec. 1 lit. b GDPR. Mandatory fields are marked as such because they concern data that is necessary to complete the order and without providing them we are unable to complete it. What data is collected results directly from the forms into which the data is entered.

Further information on the processing of your data, in particular regarding the transfer of data to our service providers for order processing, payment and shipping, can be found in the following sections of this privacy policy. After the contract is completed, the processing of your data will be limited, and after the expiry of the retention periods required under tax regulations and the Accounting Act, these data will be deleted (Article 6(1)(c) of the GDPR), unless you give your express consent (Article 6 section 1(a) of the GDPR) for further use of this data for other purposes or we reserve the right to further use it in cases permitted by law, which we inform you about in this privacy policy.

2.2 Customer Account
If pursuant to Art. 6 sec. 1 lit. a RODO, you will give your consent to set up a customer account - we will process your personal data necessary for this purpose. They will also be used for future orders on our website. Your customer account may be deleted at any time. For this purpose, please send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the customer account settings. After deleting your customer account, the processing of your data will be limited, and after the expiry of the retention periods specified in tax regulations and the Accounting Act, these data will be deleted (Article 6(1)(c) of the GDPR), unless you expressly consent (Article 6(1)(a) of the GDPR) for further use of these data or in accordance with under applicable law, we reserve the right to further use the data for other purposes, which in such a situation we inform you about in this privacy policy.

2.3 Data processing for contact purposes
As part of communication with the client, we process personal data in order to process your inquiries (Article 6(1)(b) of the GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they relate to data that is necessary to develop the query. What data is collected results directly from the forms into which the data is entered. After your inquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6(1)(a) of the GDPR) to further use of this data for other purposes or we reserve the right to further use it in cases permitted by law, about which in such a situation, we inform you in this privacy policy.

3. Data processing for the purpose of delivery
In order to perform the contract (Article 6(1)(b) of the GDPR), we transfer your data to the shipping company selected by you in the ordering process, which was commissioned to deliver the ordered products.

4. Data processing for the purpose of making payments
In order to process payments in our online store, we cooperate with external service providers that support electronic online payments and transfer your data to the payment service company selected by you in the ordering process. The above is for the performance of the contract (Article 6(1)(b) of the GDPR).

Data processing to prevent fraud and optimize payments
In some situations, we may provide our service providers with additional information that may be used by them along with the information necessary to complete the payment. These service providers then act on our behalf as processors and provide us with services in the field of fraud prevention and optimization of payment processes (e.g. invoicing, analysis of rejected payments, accounting support). According to Art. 6 sec. 1 lit. f GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.

5. Channels of marketing activities: e-mail
If you subscribe to our newsletter, based on your consent (Article 6(1)(a) of the GDPR), we will use the data you provide to us to regularly send our newsletter by e-mail.

Unsubscribing from the newsletter is possible at any time. For this purpose, send a message to our contact address indicated in the section "Our contact details and your rights" or use the unsubscribe link in the newsletter. After unsubscribing from the list of newsletter recipients, we will delete your e-mail address, unless you expressly agree You expressly consent (Article 6(1)(a) of the GDPR) to further use of this data for other purposes or in accordance with applicable law, we reserve the right to further use the data, which we inform you about in this privacy policy.

5.1 Sending the newsletter
5.2 Sending an invitation to review a purchase
If you have consented to this during or after placing an order (Article 6(1)(a) of the GDPR), then we will use your e-mail address to send you an electronic invitation to evaluate the purchase made in our store. Issuing an opinion/rating takes place through the opinion system we use. You can withdraw your consent at any time by sending a message with information about the withdrawal of consent to our contact address indicated in the section "Our contact details and your rights". Alternatively, you can also use the unsubscribe link from the list of newsletter recipients included in the message with the invitation to issuing an opinion.

Invitations to write reviews are sent by our service provider Trusted Shops GmbH Subbelrather Str. 15C, 50823 Cologne, Germany (Trusted Shops). As part of sending invitations, we receive status information from Trusted Shops (e.g. whether the respective invitation to write a review has been sent and whether it has reached the addressee). This is done in accordance with Art. 6 sec. 1 lit. f GDPR for the purposes of our legitimate interest in receiving information on invitations to write reviews in order to be able to optimize on this basis if necessary, as well as for the legitimate interest of Trusted Shops in being able to offer this service.

We share responsibility with Trusted Shops for sending review invitations and for collecting and displaying feedback and rating or status information.

As part of this joint responsibility between us and Trusted Shops, if you have any questions about the protection of your data or wish to assert your rights, please contact Trusted Shops. Contact details are available on this page. There you will also find further information on data protection at Trusted Shopsj. Regardless of this, you can also always contact us directly. If necessary, your request will be forwarded to Trusted Shops, which is jointly responsible for data processing.

6. Cookies and similar technologies
General Information
In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools for this purpose, including the so-called cookies. cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after it is closed (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser the next time you visit the website (so-called persistent cookies).

End device privacy protection
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user's end device or access to information that is already stored on his end device does not require the user's consent.

For functions that are not strictly necessary, the storage of information on the user's end device or access to information already stored on his end device requires the user's consent. It should be taken into account that in the absence of consent, some functions or elements of the website may not be available in full. Any consents granted by the user remain valid until the consent is withdrawn, the settings are configured or the relevant settings are reset on the end device.

Any further data processing using cookies and other technologies

We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website (e.g. about the contents of the shopping cart). This serves in accordance with Art. 6 sec. 1 lit. f GDPR, our legitimate interest in the optimal presentation of our offer.

In addition, we also use technological tools to comply with legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and internet marketing. Further information on this, including the applicable legal bases for data processing, is provided in the following sections of this privacy policy.

In the auxiliary menu of the web browser you will find explanations on changing the cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

When you have given us your consent to use certain technological tools (Article 6(1)(a) of the GDPR), you may withdraw your consent at any time. In order to withdraw your consent, please contact us via the contact address indicated in the section "Our contact details and your rights".

7. Use of cookies and similar technological tools
Provided you have given your consent (Article 6(1)(a) of the GDPR), we use the following cookies and other similar technological tools of external service providers on our website. After the purpose of processing is achieved and the use of a given technological tool is completed, the data collected as part of the use of these tools will be deleted. The consent given may be withdrawn by you at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the respective service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

7.1 Use of Google Services
We use the following technology tools from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google technologies regarding the use of our website is usually transferred to the server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the US. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google's technological tools, then thanks to the activated IP anonymization, your address is shortened before being stored on Google's servers. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise specified for individual Google technologies described in this privacy policy, data processing is carried out on the basis of an agreement concluded with Google for the co-control of personal data in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in the privacy policy on the Google website.

Google Analytics
For the purpose of analyzing the use of our website, we use Google Analytics - a web analytics tool from Google, which automatically processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website ) and creates pseudonymous user profiles on their basis. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing as part of the Google Analytics service takes place on the basis of a data entrustment agreement concluded with Google.

Google Ads
With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, when visiting our website, a Google remarketing cookie file will be automatically saved on your device, which, based on the pages you visit, allows you to display advertisements based on your interests by processing your data (IP address) for this purpose using a pseudonymous identifier (ID). time of visit, device and browser information, as well as information regarding the use of our website). Further data processing only takes place if you have activated the option to personalize ads in your Google account settings. In this case - if you are logged in to Google while visiting our website, Google will use your data together with the data collected as part of the Google Analytics service in order to create and define the so-called. target group lists for cross-device remarketing.

For the purpose of web analytics, we use the Google Ads Conversion Tracking tool to measure and analyze your behavior when you have visited our website through an advertisement within the Google Ads tool. For this purpose, cookies may be used and processed data such as: IP address, time of visit, information about the device and browser, as well as information about the use of our website, e.g. visiting the website or registering for the newsletter. Pseudonymized user profiles are then created from this data.

Google Maps
For the visual presentation of geographical information, Google Maps will store and process information about your use of the maps and individual functions, including, for example, your IP address and location data. We have no influence on this data processing by Google.

Google Fonts
In order to ensure consistent presentation of content on our websites, the "Google Fonts" script is integrated with our website, which processes your data (IP address, time of visit, device and browser information, as well as information on the use of our website ). We have no influence on this data processing by Google.

YouTube Video Plugin
In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing the video: IP address, time of visit, information about the user's device and browser.

7.2 Use of Facebook Services
Facebook Pixel
We use the Facebook Pixel provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The scope of the functionalities of the Facebook Pixel tool we use is indicated below. The Facebook pixel automatically collects and stores data (your IP address, time of visit, device and browser information, as well as information about the use of our website, e.g. website visit or newsletter registration). Pseudonymized user profiles are then created from this data.
Within the so-called extended data comparison in the Facebook Analytics tool - for comparison purposes, hashed information is also collected and stored by means of which natural persons can be identified (e.g. names, e-mail addresses and telephone numbers).
For this purpose, the Facebook pixel stores a cookie on your device when you visit our website, which enables your browser to be automatically recognized by using a pseudonymous cookie ID when you visit other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the purpose of personalizing advertising. Information automatically collected by Facebook technologies about how you use our website is usually sent to a Facebook, Inc. server. 1601 Willow Road, Menlo Park, California 94025, USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. To the extent that the transfer of data to the USA is our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in Facebook's privacy policy.

Facebook analytics tools
As part of the Facebook Business tools - based on the data collected using the Facebook pixel code regarding your use of our website, statistics of user activity on our website are created. Data processing by Facebook takes place on the basis of a concluded data processing agreement. Data analysis (web usage statistics) serves to optimize and make our website more attractive.

Facebook Ads (ads management)
Facebook Ads enables us to advertise our website on Facebook and other platforms. We set the parameters of a given advertising campaign. Facebook is responsible for the exact implementation and, in particular, for the decision to display the respective advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing is carried out on the basis of a contract for the co-administration of personal data in accordance with art. 26 GDPR. The joint responsibility is limited to data collection and transmission to Facebook Ireland. This does not include subsequent data processing by Facebook Ireland.

On the basis of statistics created using the Facebook Pixel tool regarding the activity of users visiting our websites, we conduct, through the Facebook Custom Audience function, the emission of advertisements among the appropriate group of recipients, while specifying the profile / characteristics of a given target group. As part of the extended data matching function (see above), Facebook is a data processor on our behalf.
Based on the pseudonymous Cookie-ID saved by the Facebook Pixel and the collected information about the activity of users on our website, we create personalized advertising via the Facebook Pixel Remarketing function.

For the purpose of web analytics and optimization of our offer - using the Facebook Pixel Conversions function, we analyze the activity of users who visit our website through advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data processing agreement.

7.3 Other service providers in the field of analytical and marketing tools
Use of Hotjar for web analytics
For the purpose of analyzing the use of our website - through the web analytics tool Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta ("Hotjar"), when you visit our website data is automatically collected and saved (your IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website) on the basis of which pseudonymous user profiles are created. Cookies may be used for this purpose. Without a separate, explicit consent - pseudonymous user profiles are not combined with the personal data of the entity to which the pseudonym was given. Data processing in connection with the services provided by Hotjar takes place under the concluded data entrustment agreement.

Use of the Pinterest Tag for web analytics and advertising purposes
For the purposes of web analytics and advertising on the Pinterest platform and on third party websites - through the technology of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"), when you visit our website, automatically collected and saved data (your IP address, time of visit on the website, information about the device and browser, as well as information on the use of our website) on the basis of which pseudonymous user profiles are created. For this purpose, cookies will be used, which, based on the information collected and the pages you visit, then enable the display of advertisements based on your interests.

Pinterest combines the information collected with other data from your Pinterest account and uses it to compile reports on website activity and to provide other services related to website use. We have no influence on Pinterest's data processing and only receive the statistics created as part of the Pinterest Tag function. This allows us to measure the behavior of users who visit our website via an ad placed on Pinterest. The information Pinterest collects automatically is usually transferred to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107 in the USA. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing is carried out in accordance with Art. 26 of the GDPR on the basis of joint arrangements concluded between the joint controllers.

Use of the Vimeo Video Plugin
For the integration of third-party content via the Vimeo video plug-in, the videos are processed by Vimeo LLC, 555 West 18th Street, New York 10011, USA ("Vimeo"). the following data: IP address, time of visit, information about the user's device and browser.

Data processing is carried out in accordance with Art. 26 of the GDPR on the basis of joint arrangements concluded between the joint controllers.

Google Analytics is automatically integrated into the Vimeo Video Plugin. For the purposes of web analytics, Google Analytics automatically processes data (your IP address, time of visit, device and browser information, as well as information about the use of our website) and creates pseudonymous user profiles based on them using cookies. Google Analytics is a product of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google technologies regarding the use of our website is usually transferred to the server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. If your IP address is processed as part of the use of Google technology, thanks to the activated IP anonymization, it will be shortened before being stored on Google servers. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. We have no influence or access to data processing by Vimeo, including the settings for Google Analytics. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission.

8. Integration with Trusted Shops Trustbadge and other widgets
In order to present the Trusted Shops services (quality mark and customer reviews collected using the Trusted Shops review system) and the Trusted Shops offer available to buyers after placing an order - Trusted Shops widgets are integrated into our website.

The above serves in accordance with art. 6 sec. 1 lit. f GDPR, our legitimate interest in the optimal marketing of our offer by enabling safe online shopping. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (hereinafter Trusted Shops) with which we are jointly responsible for the protection of jointly controlled data in accordance with Art. 26 GDPR. We hereby inform you about the essential content of the joint arrangements of the joint controllers (Article 26(2) of the GDPR). If you have any questions regarding the processing of your data jointly controlled by us and Trusted Shops GmbH, or if you would like to assert your rights, please contact Trusted Shops. Contact details can be found in the Trusted Shops privacy policy, available here. Further information on data processing and data protection by Trusted Shops is available here. Notwithstanding the foregoing, you can always ask us using the contact details provided in this privacy policy in the section "Our contact details and your rights". Your inquiry or request may, if necessary, be forwarded to the other joint controller (Trusted Shops ) in order to develop it and provide answers.

8.1 Data processing as part of the integration of Trustbadga and other widgets
The Trustbadge is provided under co-control by the American content provider CDN (Content-Delivery-Network). An adequate level of data protection is ensured by standard data protection clauses and additional contractual agreements. Further information on data protection by Trusted Shops GmbH can be found here. When the Trustbadge is called up, the web server automatically saves a so-called log file (server logs), which also contains your IP address, date and time of the request, the amount of data transferred and the requesting operator (access data) and documents the request. The IP address is anonymized immediately after collection, so that the saved data cannot be assigned to a specific person. The anonymized data is used in particular for statistical and error analysis purposes.

8.2 Post-Order Data Processing
After you have placed an order in the shop, your e-mail address, encrypted using a one-way crypto function, will be forwarded to Trusted Shops GmbH. The legal basis for processing is Art. 6 sec. 1 point 1 lit. f GDPR. This is done to check whether you are already registered in the Trusted Shops GmbH system and is necessary for the fulfillment of overriding, legitimate interests - both ours and Trusted Shops - consisting in being able to provide buyer protection in connection with a specific order and in providing services transaction evaluation. If you are already registered for the use of Trusted Shops, then further data processing takes place in accordance with the contract between you and Trusted Shops. People who have not registered will have the opportunity to register for the first time. Further data processing after registration also depends on the type of contract you have with Trusted Shops GmbH. If you do not register for the use of Trusted Shops, all submitted data will be automatically deleted by Trusted Shops GmbH and cannot be associated with a specific person.

Trusted Shops uses external service providers for hosting, monitoring and log recording. The above serves to ensure trouble-free operation of the systems, the legal basis in this respect is art. 6 sec. 1 lit. f GDPR. Data processing may take place in third countries (USA and Israel). In the case of the USA, adequacy is ensured by the contractual stipulation of standard data protection clauses and further contractual measures, and in the case of Israel by the existence of an adequacy decision.

9. Social media
9.1 Social Media Plugins: Facebook (Meta), Instagram (Meta), Pinterest
On our website, so-called cookies are used. plugins (buttons) of social networking sites. These plugins are available via an HTML link, which ensures that when visiting our website containing such plugins (buttons), no automatic, direct connection to the servers of the operator of a given social networking site is established. After clicking on one of the buttons (plug-in), a new window of your browser will open, displaying the page of a given social networking site, where you can approve the use of a given button, e.g. "Like" or "Share".

9.2 Our activity on social networks: Facebook, Instagram, Youtube, Pinterest, LinkedIn
If you have given your consent to a given social networking site in this regard (Article 6(1)(a) of the GDPR), when visiting our account/profile on the above-mentioned social networking sites, your data will be automatically collected and stored for internet analytics and marketing purposes. Pseudonymous user profiles are created on the basis of this data. They can be used, for example, to place so-called cookies within and outside social networks. personalized advertisements that are likely to match your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social networking sites, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for the purposes of submitting an inquiry are described in the privacy policies of individual social networking sites linked below. If you need assistance in this regard, you can also contact us.

Facebook (by Meta) is a social networking service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Automatically processed information about your activity and the way you use our fan page on Facebook (by Meta) is usually sent to the server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and stored there . In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting the Facebook fan page (by Meta) is carried out in accordance with Art. 26 of the GDPR based on the joint arrangements of the joint controllers, which are available here. Further information on the processing of your personal data when visiting a Facebook fan page (information on the page statistics function) is available here.

Instagram (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). Automatically processed information about your activities and the use of our Instagram fan page account is usually sent to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting the Instagram fan page account (by Meta) is carried out in accordance with Art. 26 of the GDPR based on the concluded joint arrangements of the joint controllers. Further information on the processing of your personal data when visiting a Facebook fan page (information on the page statistics function) is available here.

YouTube is a social networking service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Automatically processed information about your activity and the use of our profile on YouTube is usually sent to the server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043 in the USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Pinterest is a social networking service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The automatically processed information about your activities and the use of our profile on Pinterest is usually sent to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107 in the USA and stored there.

In relation to the USA, the European Commission has not issued an adequacy decision.


LinkedIn is a social network provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The automatically processed information about your activity and the use of our LinkedIn profile is usually sent to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 in the USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission.

10. Our contact details and your rights
10.1 Your rights
Persons whose data is processed have the following rights:

in accordance with Art. 15 of the GDPR: the right to obtain information about the processing of data to the extent specified in this article;
in accordance with Art. 16 GDPR: the right to have your inaccurate or incomplete personal data rectified;
in accordance with Art. 17 GDPR: the so-called "the right to be forgotten", i.e. the right to delete your personal data stored with us, unless further processing is necessary:
to exercise the right to freedom of expression and information;
to comply with a legal obligation;
for reasons of public interest;
to establish, pursue or defend claims;
in accordance with Art. 18 GDPR: the right to limit the processing of personal data, provided that:
the accuracy of this personal data is contested by you;
the processing is unlawful and you oppose their erasure;
we no longer need personal data, but you need them to establish, pursue or defend claims;
you have submitted pursuant to Art. 21 objection to data processing;
in accordance with Art. 20 GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to send it to another controller;
in accordance with Art. 77 of the GDPR: the right to lodge a complaint with the supervisory body (President of the Personal Data Protection Office "UODO").

Right to object

If we process personal data in the manner described in this privacy policy to protect our legitimate interests, then you may object to the processing of your data for this purpose - with effect for the future. If the processing takes place for direct marketing purposes, you can exercise your right to object at any time. If the processing takes place for other purposes, you have the right to object only for reasons arising from your particular situation.

After you have exercised your right to object, we will not continue to process your personal data, unless we demonstrate the existence of valid, legitimate grounds for processing and they override your interests and rights, or when the data processing is for the purpose of asserting, exercising or defending legal claims .

The previous sentence does not apply when data processing is carried out for direct marketing purposes. In this case, after expressing your objection, we will always stop further processing of your personal data.

10.2 Contacting us
In case of questions regarding the collection, processing and use of your personal data, as well as in the event of a request for information, rectification, limitation of processing or deletion of data, and in order to withdraw consents granted or object to the use of specific data, please contact the data controller directly indicated at the beginning of this privacy policy.