Privacy policy

PERSONAL DATA ADMINISTRATOR

The administrator of the online store available at www.milao.pl is Kamila Wakulińska, conducting business under the name Milao Kamila Wakulińska, with an address at ul. Kożuchowska 11/33, 04-715 Warsaw, Tax Identification Number (NIP): 9522233156, National Business Registry Number (REGON): 524797620.

Seller's contact information: telephone number +48 733 151 801, email address: hello@milao.pl. Customers can also contact the Seller through the contact form provided on the Store's website.

The administrator processes personal data of Users solely for the purposes described below and in accordance with the Personal Data Protection Act of May 10, 2018, the Act on the Provision of Electronic Services of July 18, 2002, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"). The administrator processes data, in particular, based on Article 6(1)(a), (b), (c), and (f) of the GDPR.

  1. DEFINITIONS AND GENERAL INFORMATION
  1. All capitalized terms used in the Privacy Policy have the meanings assigned to them in the Store's Terms and Conditions.
  2. User - any natural person, legal person, or organizational unit without legal personality, to whom the law grants legal capacity, using the Store. The Store's offer is directed to the above-mentioned entities located in the territory of Poland.
  3. The Administrator takes the necessary legal, technical, and organizational measures to protect the personal data of Users and Customers of the Store. This data is protected by the Administrator against unlawful use, modification, or destruction.
  4. Users/Customers provide their personal data voluntarily. However, it should be remembered that providing basic personal data is necessary to fulfill the Sales Agreement and make purchases in the Store.
  5. The Administrator will store the personal data of Users/Customers for the time necessary to fulfill the Sales Agreement and until any claims arising from the Sales Agreement have expired, until the User revokes their consent, or until the User/Customer raises an objection.
  6. For the purpose of fulfilling the Sales Agreement and proper communication with the User/Customer, the Administrator may disclose the User's/Customer's personal data to service providers (including payment providers, courier companies, mailing service providers, and the platform on which the Store is based).
  7. The Administrator makes every effort to ensure that the personal data of Users/Customers is not transferred outside the European Union. However, to ensure the highest quality of services provided, some service providers may be based outside the European Economic Area. In such cases, to protect personal data in accordance with the GDPR, data transfer will be based on the use of tools for international data transfers, including decisions of the European Commission recognizing an adequate level of data protection in a given third country (such decisions have been issued, among others, for the United Kingdom and Canada) or by using standard contractual clauses and appropriate supplementary measures. Standard contractual clauses are available, among other places, at: https://eurlex.europa.eu/legalcontent/PL/TXT/?uri=uriserv%3AOJ.L_.2021.199.01.0031.01.POL&toc=OJ%3AL%3A2021%3A199%3ATOC.
  8. The Administrator undertakes not to disclose the personal data of Users/Customers to other entities, except those justified by a legal basis and to which the transfer of this data is necessary for the proper performance of the Sales Agreement and the lawful functioning of the Store.
  9. The Administrator processes only the necessary personal data of Users/Customers to fulfill the Sales Agreement and provide other services of the Administrator. Processing is carried out in accordance with applicable laws and only for the legitimate purpose of the Administrator or with the prior consent of the User/Customer (newsletter subscription, account management, product availability notification).
  1. WHAT DATA DO WE COLLECT
  1. In order to fulfill the Sales Agreement, record payments, deliver the Product, as well as provide the Newsletter service, product availability notifications, and account administration in the Store, the Administrator collects the following personal data of Users and Customers:
    • Email address used by the User/Customer,
    • First and last name (or company name),
    • Contact details - residential address or delivery address, postal code, city,
    • Phone number,
    • Other information that is legally justified and necessary to fulfill the Sales Agreement and the services of the Administrator.
  1. PURPOSES OF DATA COLLECTION AND PROCESSING

The personal data of Users and Customers of the Store are processed by the Administrator and on its behalf for the following purposes:

  1. Conclusion and performance of the Sales Agreement between the Administrator and the Customer, handling returns and product complaints in accordance with the Store's Terms and Conditions and this Privacy Policy.
  2. Providing the Newsletter service, product availability notifications, account administration, and marketing of the Administrator's products and services based on the legitimate interests of the Administrator or with the prior consent of the User or Customer. The Newsletter, product availability notifications, and account administration are carried out with the prior consent of the User or Customer.
  3. Communication with the User or Customer of the Store before, during, and after the performance of the Sales Agreement.
  4. Sending commercial information by electronic means.
  5. Fulfillment of legal obligations incumbent on the Administrator.
  6. Other purposes that are justified based on the legitimate interests of the Administrator.
  1. USER'S RIGHTS IN CONNECTION WITH DATA SHARING
  1. Each User and Customer of the Store, whose personal data and other data are collected and processed by the Administrator, has the right to:
    • Access their data collected and processed by the Administrator,
    • Correct and rectify their data,
    • Request the erasure of their data,
    • Request the restriction of the processing of their data,
    • Object to further processing by the Administrator,
    • Lodge a complaint with the supervisory authority (the Office for Personal Data Protection).
  2. In order to exercise their rights as described above, the User/Customer should contact the Administrator via email. The Administrator can be reached at hello@milao.pl.
  3. The User/Customer has the right to withdraw any previously given consent for the processing of data for marketing and commercial purposes. To do so, the User/Customer should contact the Administrator via email at hello@milao.pl. After withdrawing such consent, the Administrator will stop sending any advertising materials and commercial information to the User/Customer.
  4. The Administrator informs that the User/Customer has the right to file a complaint with the President of the Office for Personal Data Protection if they believe that the processing of their personal data violates the law in this regard.
  1. COOKIES
  1. The entity placing cookies on the User's/Customer's end device is the operator of the platform on which the Store is based. The Administrator has access to these cookies.
  2. The Administrator also collaborates with third parties, including platforms such as Facebook, Instagram, Google, advertisers, and business partners of the Administrator. This cooperation mainly concerns advertising activities and creating statistics. These entities also use cookies and may store them on the User's/Customer's end device and use them.
  3. Cookies (so-called "cookies") are computer data, in particular text data, which are stored on the User's/Customer's end device and are intended for using websites.
  4. Cookies include, among others: the name of the website from which the cookies originate, the time of storage on the end device, the name of the website from which the User/Customer of the Store was redirected, a unique number.
  5. No personal data of the User/Customer is collected through cookies.
  6. Cookies are used for the following purposes:
    • Generating statistics for the Store,
    • Adapting the Store to the User's/Customer's requirements. In this case, cookies can recognize the User's/Customer's end device and adjust the view of the Store to their individual needs,
    • Increasing the functionality of the Store and its optimization,
    • Creating advertisements and customized promotional materials for our products, especially on social media. These materials may then be displayed to the User/Customer as recommended products based on the analysis of the User's/Customer's browsing habits (e.g., most viewed products).
  7. Depending on their storage time, cookies are divided into:
    • Permanent cookies are stored on the User's/Customer's end device until they are deleted from that device. These cookies are placed for a specified period of time, as indicated in the parameters of the cookie,
    • Temporary (session) cookies are stored on the User's/Customer's end device for the time the User/Customer uses the Store. This means that after leaving the Store, these cookies are not stored on the User's/Customer's device.
  8. Depending on their purpose, cookies are divided into:
    • Cookies that collect information about the performance of the Store,
    • Cookies used to ensure the security of using the Store and the confidentiality of data,
    • Functional cookies that allow the User/Customer to remember individual preferences, including the selected language and other Store settings,
    • Advertising cookies that allow delivering advertisements tailored to the User's/Customer's individual preferences.
  9. Cookies can always be blocked by the User/Customer. The User/Customer is not obliged to consent to the use of cookies. Consent to their use is voluntary. The User/Customer can change the settings of cookies themselves and determine the rules for their storage. To do this, the User should change the settings in their web browser, where it is possible to completely block the operation of cookies.
  10. Limiting the use of cookies may, however, affect some of the functions available in the Store, and in extreme cases, may prevent the use of the Store.
  11. The User/Customer has the option to disable third-party cookies in the same way as Administrator's cookies. Detailed information about third-party cookies is available in their privacy policies.
  12. The User/Customer may use additional tools to block data collection by Google Analytics. For this purpose, Google has provided a special blocking add-on. More information can be found here: https://tools.google.com/dlpage/gaoptout.
  13. The Administrator's Store is based on the Shopify platform, operated by Shopify Inc., which enables the operation of the Store and the provision of services by the Administrator free of charge. Personal data and any other data are stored on Shopify's servers. The User/Customer can review Shopify's privacy policy at https://www.shopify.com/legal.
  1. FINAL PROVISIONS
  1. The Administrator reserves the right to change the Privacy Policy at any time. Such changes will be published on the Store's website and will take effect from the date of publication. The text of the new Privacy Policy will be available on the Store's website with information about the date of its effectiveness.
  2. The User/Customer may contact the Administrator at any time to clarify the provisions of the Privacy Policy, as well as to access their data collected by the Administrator. Communication takes place via email or by phone at +48 733 151 801. All correspondence should be sent to hello@milao.pl.

Effective date: May 25, 2023.