**Privacy Policy**
**GENERAL PROVISIONS**
The administrator of personal data collected via the online store of Studio Modelowania Sylwetki “Joanna” Paweł Kapusta, based in Grudziądz, at Mokre, Turkusowa Street 4, 86-302 Grudziądz, registered in CEIDG with NIP number 8392581319 and REGON number 871654460, hereinafter referred to as the “Store,” is Studio Modelowania Sylwetki “Joanna” Paweł Kapusta.
For matters related to your personal data, you can contact us via email at **kontakt@byamelie.net** or by phone at **+48 605 167 033**.
Personal data collected by the Administrator through the online store is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.
**TYPE OF PROCESSED PERSONAL DATA, PURPOSE, AND SCOPE OF DATA COLLECTION**
**PURPOSE OF PROCESSING AND LEGAL BASIS**
The Administrator processes personal data through the online store in the following cases:
– When the user uses the contact form. Personal data is processed based on Article 6(1)(f) of the GDPR as the Administrator’s legitimate interest.
– When the user subscribes to the Newsletter to receive commercial information by electronic means. Personal data is processed upon obtaining separate consent.
– For the conclusion and execution of an agreement until the expiration of the claims limitation period concerning the execution of the agreement.
– For the creation and maintenance of an account until the expiration of the claims limitation period concerning the execution of the agreement.
**TYPES OF PROCESSED PERSONAL DATA**
The Administrator processes the following categories of user personal data:
– First and last name,
– Date of birth,
– Home address,
– Shipping address,
– Email address,
– Phone number,
– NIP (Tax Identification Number),
– Company name,
– Company address.
**PERSONAL DATA STORAGE PERIOD**
User personal data is stored by the Administrator for the period necessary to fulfill the purposes of the data processing or until the withdrawal of consent unless legal provisions require a longer storage period.
**DISCLOSURE OF PERSONAL DATA**
User personal data may be transferred to service providers used by the Administrator in operating the online store, but only within the European Economic Area (EEA).
**RIGHT OF ACCESS, CONTROL, AND CORRECTION OF PERSONAL DATA**
The person whose data is being processed has the right to access their personal data, rectify, delete, limit the processing, transfer the data, object to the processing, and withdraw consent at any time.
**SUBMITTING DATA PROCESSING REQUESTS ELECTRONICALLY**
You can submit requests regarding the processing of personal data via email to the Administrator at: **kontakt@byamelie.net**.
**COOKIES**
The Administrator’s store uses cookies necessary for the proper provision of services on the online store and for compiling general statistics on website visits.
**DO WE PROFILE YOUR DATA?**
User personal data will not be used for automated decision-making that impacts the rights, obligations, or freedoms of the User within the meaning of the GDPR.
Within the website and tracking technologies, the User’s data may be profiled to better personalize the company’s offerings directed to the User (mainly through behavioral advertising). However, this should not affect the User’s legal situation, particularly the terms of any contracts they have or plan to enter into. It may only assist in better tailoring content and advertisements to the User’s interests. The used information is anonymous and not associated with the personal data provided by the User, e.g., during the purchasing process. It stems from statistical data, such as gender, age, interests, approximate location, and website behavior.
Every User has the right to object to profiling if it negatively impacts their rights and obligations.
**FINAL PROVISIONS**
The Administrator applies appropriate technical and organizational measures to ensure the protection of processed personal data in accordance with applicable Polish law and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). For matters not covered by this Privacy Policy, the provisions of the GDPR and other relevant Polish laws apply accordingly.
**INFORMATION ON THE CLIENT’S RIGHT TO FILE A COMPLAINT WITH A SUPERVISORY AUTHORITY**
You have the right to file a complaint with the supervisory authority responsible for personal data protection, which is the President of the Personal Data Protection Office (UODO).