We process the personal data of all persons using the Service (including: first name, last name, mailing address, email address, phone number, VAT number), IP address or other identifiers, and information collected via cookies or similar technologies, even if they are not registered Users (i.e. persons without a profile on the Service) for the following purposes:

1. in order to provide electronic services by making available to Users the content collected on the Service – the legal basis for processing is the necessity for the performance of a contract (Art. 6(1)(b) GDPR);

2. for analytical and statistical purposes – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in analyzing user activity and preferences to improve the functionalities and services provided;

3. in order to establish and enforce claims or defend against them – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in protecting our rights;

4. for marketing purposes (our own and those of our partners), in particular related to the presentation of behavioral advertising – the rules for processing personal data for marketing purposes are described in the “MARKETING” section.

Your activity on the Service, including your personal data, is recorded in system logs. The information collected in the logs is processed primarily for the purposes related to the provision of services. We also process it for technical and administrative purposes, to ensure the security and management of the IT system, as well as for analytical and statistical purposes – in this regard, the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR).

During registration on the Service, you will be asked to provide the data necessary to create and manage an account. To facilitate the service, you may provide additional data, thereby giving your consent to its processing. Such data can be removed at any time. Providing the data marked as mandatory is required to create and manage an account, and failure to do so will result in us being unable to create your account. Providing other data is voluntary.

Your personal data is processed:

1. in order to provide services related to operating and managing your account on the Service – the legal basis for processing is the necessity for the performance of a contract (Art. 6(1)(b) GDPR), and for data provided optionally – the legal basis is your consent (Art. 6(1)(a) GDPR);

2. for analytical and statistical purposes – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in analyzing user activity and how the account is used, as well as their preferences to improve functionalities;

3. in order to establish and enforce claims or defend against them – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in protecting our rights;

4. for marketing purposes (our own and our partners’) – the rules for processing personal data for marketing purposes are described in the “MARKETING” section.

If the Service enables logging in via other portals such as Facebook, Google, Instagram, Twitter, or Apple, the Service will only retrieve from your account on the respective portal the data necessary for registration and account management. By changing the plugin settings yourself, you can easily extend the scope of data retrieved to include those that may be useful when using the account functionalities on the Service.

If you place an order (purchase of a product or service) on the Service, we will process your personal data for the following purposes:

1. in order to fulfill the placed order – the legal basis for processing is the necessity for the performance of a contract (Art. 6(1)(b) GDPR); for optionally provided data, the legal basis is consent (Art. 6(1)(a) GDPR);

2. in order to fulfill statutory obligations imposed on us, particularly arising from tax and accounting regulations – the legal basis for processing is a legal obligation (Art. 6(1)(c) GDPR);

3. for analytical and statistical purposes – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in analyzing your activity on the Service and your purchasing preferences to improve the functionalities provided;

4. in order to establish and enforce claims or defend against them – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in protecting our rights.

The Service provides you with the possibility to contact us using electronic contact forms. Using the form requires you to provide your personal data necessary so that we can contact you and respond to your inquiry. You may also provide additional data to facilitate our contact or the handling of your query. Providing data marked as mandatory is required in order to receive and process your inquiry, and failure to provide them will result in us being unable to process your question. Providing other data is voluntary.

The personal data you send us via the contact form is processed:

1. in order to identify you as the sender and to handle your inquiry submitted through the provided form – the legal basis for processing is the necessity for the performance of a service contract (Art. 6(1)(b) GDPR);

2. for analytical and statistical purposes – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in conducting statistics of inquiries submitted by Users via the Service to improve its functionalities.

We process your personal data in order to carry out marketing activities, which may include:

1. displaying marketing content that is not tailored to your preferences (contextual advertising);

2. displaying marketing content corresponding to your interests (behavioral advertising);

3. sending you email notifications about interesting offers or content, which in some cases contain commercial information (newsletter service);

4. conducting other forms of direct marketing for goods and services (sending commercial information electronically and telemarketing activities);

For the purpose of conducting marketing activities, in some cases we use profiling (if you give your consent). This means that by automatically processing data we assess selected factors concerning natural persons in order to analyze their behavior or create a forecast for the future.

We provide a newsletter service under the terms specified in the regulations, only if you provide us with your email address. Providing the data is required to deliver the newsletter service, and failure to do so will result in its non-delivery.

The personal data collected for the newsletter are processed:

1. in order to provide the newsletter delivery service – the legal basis for processing is the necessity for the performance of a contract (Art. 6(1)(b) GDPR);

2. in the case of sending you marketing content as part of the newsletter – the legal basis for processing, including profiling, is our legitimate interest (Art. 6(1)(f) GDPR) in connection with your expressed consent to receive the newsletter;

3. for analytical and statistical purposes – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) in analyzing the activity of Users on the Service to improve its functionalities;

4. in order to establish and enforce claims or defend against them – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR).

Your personal data may also be used by us so that we can send you marketing content through various channels, i.e. via email, MMS/SMS, or telephone. Such actions are taken only if you have given your consent, which you may withdraw at any time.

We process your personal data when you visit our profiles on social media platforms (Facebook, YouTube, Instagram, Twitter). Such data is processed solely in connection with operating the profile, including to inform you about our activities and to promote various events, services, and products. The legal basis for processing personal data for this purpose is our legitimate interest (Art. 6(1)(f) GDPR) in promoting our own brand.

Cookies are small text files installed on your device when you browse the Service. Cookies collect information that facilitates the use of the website – e.g., by remembering your visits to the Service and your actions. Within the Service, we may use the following types of cookies:

We use so-called service cookies primarily in order to provide you with services delivered electronically and to improve the quality of these services. In this regard, we and other entities providing analytical and statistical services on our behalf use cookies, storing information or accessing information already stored on your telecommunications end device (computer, phone, tablet, etc.). The cookies used for this purpose include:

1. cookies with data entered by you (session identifier cookies) for the duration of the session;

2. authentication cookies used for services requiring authentication for the duration of the session;

3. cookies used to ensure security, e.g., for detecting authentication abuses (user-centric security cookies);

4. session cookies for multimedia players (e.g. Flash player cookies) for the duration of the session;

5. persistent cookies used for personalizing the user interface for the duration of the session or a bit longer (user interface customization cookies);

6. cookies used to monitor website traffic, i.e. for data analytics, including Google Analytics cookies (these are cookies used by Google to analyze how you use the Service, and to create statistics and reports regarding the Service’s performance). Google does not use the collected data to identify the User nor does it combine this information to enable identification. Detailed information on the scope and rules of data collection in connection with this service can be found at: https://www.google.com/intl/pl/policies/privacy/partners.

We, as well as our trusted partners, also use cookies for marketing purposes, e.g. in connection with delivering behavioral advertising to you. For this purpose, we and our trusted partners store information or access information already stored on your telecommunications end device (computer, phone, tablet, etc.). The use of cookies and the personal data collected through them for marketing purposes, particularly for promoting services and goods of third parties, requires your consent, which can be withdrawn at any time.

If you do not wish to receive cookies, you can change your browser settings. Please note that disabling cookies necessary for authentication, security, or maintaining user preferences may hinder the use of the Service.

To manage cookie settings, select your web browser from the list below and follow the instructions:

1. Edge

2. Internet Explorer

3. Chrome

4. Safari

5. Firefox

6. Opera

7. Mobile devices:

8. Android

9. Safari (iOS)

10. Windows Phone

We use statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). We do not transfer personal data to the operator of this service, but only anonymized information. The service is based on the use of cookies on your end device. In the case of information about user preferences collected by Google’s advertising network, the user can view and edit the information derived from cookies using the tool: https://www.google.com/ads/preferences/

Within the Service, we use the Facebook pixel. This technology causes the Facebook service (Facebook Inc. based in the USA) to know that a registered person on it is using the Service. In this case, it is based on data for which it is the data controller. We do not transfer any additional personal data of yours to Facebook. The service is based on the use of cookies on your end device.

Within the Service, we use the X pixel. This technology causes the X service (X Corp. based in the USA) to know that a registered person on it is using the Service. In this case, it is based on data for which it is the data controller. We do not transfer any additional personal data of yours to X. The service is based on the use of cookies on your end device.

Within the Service, we use the Linkedin pixel. This technology causes the Linkedin service (Linkedin Corp. based in the USA) to know that a registered person on it is using the Service. In this case, it is based on data for which it is the data controller. We do not transfer any additional personal data of yours to Linkedin. The service is based on the use of cookies on your end device.

The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility for User contact and rights in this regard, are described in the privacy policies of the service providers. We may use:

1. https://www.facebook.com/policy.php

2. https://policies.google.com/privacy?hl=pl&gl=ZZ

3. https://twitter.com/pl/privacy

4. https://www.linkedin.com/legal/privacy-policy

We may use remarketing techniques that allow for tailoring advertising messages to your behavior on the Service, which may give the impression that your personal data is being used for tracking, however in practice we do not transfer any of your personal data to advertising operators. The technological prerequisite for such actions is the enabled use of cookies.

We may use a solution that examines user behavior by creating heat maps and recording activity on the Service. This information is anonymized before being sent to the service operator so that they do not know which natural person it concerns. In particular, entered passwords and other personal data are not recorded.

The period for which we process your data depends on the type of service provided and the purpose of processing. In principle, data is processed for the duration of the service provision or order fulfillment, until you withdraw your consent or effectively object to the processing of data (in cases where the legal basis for processing is our legitimate interest).

The processing period may be extended if the processing is necessary to establish and enforce potential claims or defend against them, and after that period only to the extent and in the scope required by law.

After the processing period, your data is irreversibly deleted or anonymized.

Since we process your personal data, you are entitled to the following rights:

1. Right to Information about Data Processing – upon your request, we will provide you with information about the processing of your data, including the purposes and legal grounds of the processing, the scope of the data held, the entities to which it is disclosed, and the planned data deletion schedule;

2. Right to Obtain a Copy of the Data – upon your request, we will provide you with a copy of the processed data concerning the person submitting the request;

3. Right to Rectification – upon your request, we are obliged to correct any inaccuracies or errors in the processed personal data and supplement them if they are incomplete;

4. Right to Erasure of Data – you may request the deletion of data that is no longer necessary for any of the purposes for which it was collected;

5. Right to Restriction of Processing – upon your request, we will cease performing operations on your personal data – except for operations to which you have consented – and store it, in accordance with the applicable retention policies or until the reasons for restricting the processing cease;

6. Right to Data Portability – to the extent that your data is processed in connection with a concluded contract or your expressed consent, we will provide you with the data you supplied in a format that allows computer readability. You may also request that we send these data to another entity – provided that we have the technical capability to do so.

7. Right to Object to Data Processing for Marketing Purposes – you may, at any time, object to the processing of your personal data for marketing purposes without the need to provide any justification for such an objection;

8. Right to Object to Other Purposes of Data Processing – you may, at any time, object to the processing of your personal data based on our legitimate interest (e.g. for analytical or statistical purposes or for reasons related to property protection); such an objection should include justification;

9. Right to Withdraw Consent – if your data is processed based on your consent, you have the right to withdraw it at any time, which does not affect the lawfulness of the processing carried out before the consent was withdrawn.

10. Right to Lodge a Complaint – if you believe that the way we process your personal data violates the GDPR or other applicable data protection regulations, you may lodge a complaint with the President of the Personal Data Protection Office.

Since we want to provide you with the best possible services, we will disclose your personal data to our trusted partners, in particular to providers responsible for IT system management, such as banks and payment operators, accounting service providers, couriers (in connection with order fulfillment), marketing agencies (in the scope of marketing services), and our affiliated entities.

Your personal data will be disclosed to other entities for their own purposes, including marketing, only if you give your consent.

The level of protection of personal data outside the European Economic Area (EEA) may differ from that provided by European law. Therefore, we will transfer your personal data outside the EEA only when it is necessary and with the assurance of an adequate level of protection. You will be informed each time this occurs.

Be assured that we take all necessary measures to ensure that your personal data is processed by us securely – ensuring that only authorized persons have access to your data and only to the extent necessary for the performance of their tasks.

We take all necessary steps to ensure that our subcontractors and other cooperating entities provide a guarantee of applying appropriate security measures in every case when processing your personal data on our behalf.

For all matters referred to in this Policy, particularly those related to the processing of your personal data, you can contact us via:

1. email: [email protected]

2. by mail at: atexbox, Iwiny 51 51, 32-089 Biały Kosciół, Poland,