Privacy Policy

Privacy protection

Information on data protection

Dear users of our online store, please remember that our primary goal is to protect your personal data and comply with the relevant provisions on the protection of personal data, in particular the EU General Data Protection Regulation ("GDPR") and Polish provisions on the protection of personal data.

In this information on data protection, we explain what information (including personal data) is processed by us in connection with your visit to our online store and use of our digital offer ("Online Store").

Additionally, for review:

Information on the protection of personal data for individual customers

Information on the processing of personal data and update of the privacy policy of Stanlux Piotr Klikowicz

Since we use the services and software of Shoper as part of the implementation of the online store service, it is worth familiarizing yourself with their:

Regulations

Privacy Policy

We reserve that as part of the use of Shoper services, we comply with the principles contained in the above-mentioned documents.

Online store www.stanlux.istore.pl

Who is responsible for the processing of personal data?
The administrators of your personal data are two entities operating on the principle of joint administration. These are:

StanLux Sp. z o.o. with its registered office at ul. Leśniówka 123, 25-146 Kielce, NIP: 9591960735, REGON: 361035361, email contact: office@stanlux.com
StanLux "Body Mind Soul" Piotr Klikowicz with its registered office at ul. Leśniówka 123, 25-146 Kielce NIP: 9591686926, REGON: 260444681, email contact: bodymindsoulpoland@gmail.com
The administrators have designated a common contact point, at ul. Leśniówka 123,
25-146 Kielce, email contact: office@stanlux.com

What principles do we follow?
In order to ensure compliance with the relevant data protection regulations, we process your personal data only on the basis of your consent or another basis provided for by law. This also applies to the processing of personal data for marketing purposes.

In our online shop, we may collect information that does not allow us to draw any direct conclusions about you. In certain cases - especially in connection with other data - this information may, however, be considered "personal data" within the meaning of the data protection regulations. In this online shop, we may also collect information that does not allow you to be directly or indirectly identified; such cases include, for example, the collection of aggregate information about all users of this online shop.

What data do we process?
You can access our online shop without entering your personal data (e.g. your name, address or email address). In this case, too, we must process certain information in order to provide you with access to our online shop. In addition, we use and have installed third-party functions ("social plug-ins") in this online shop.

Log files: When you visit this online store, our web server automatically stores the domain name or IP address of the requesting computer (usually your Internet service provider), including the day, time and duration of your visit, the subpages/URLs you visit and information about the applications and end devices you use to browse our pages. Cookies: Like many other website operators, we use cookies to make our online store as user-friendly as possible. Cookies are small text files stored in your browser. These files help us recognize the specific preferences of our visitors when surfing the Internet and to redesign our site accordingly. Most of the cookies we use are session cookies. They are automatically deleted after your visit to the site ends. However, we also use permanent cookies. They serve to improve user guidance. Our cookies do not collect any personal data and are not suitable for identifying you in a third-party online store. You can use your browser settings to inform you about the placement of cookies so that their use is transparent to you. In principle, you can also refuse to accept cookies via your browser settings. However, this may result in you being unable to use all the functions of the online store.

Information and advice
We offer several different options for contacting us via the Contact Form subpage and the contact details (phone number and e-mail address) available on the home page of our online store. Depending on 

d the option you choose, we process different personal data:

a) Contact

If you contact us via the channels indicated on our website, we will process the personal data contained in your message in order to respond.

b) Information provided by post / email

If you request the sending of information materials, we will process your data contained in the contact form, including at least your name and surname and the data of the contact channel you have chosen (post and / or email) in order to send you the requested materials on a one-off basis.

c) Telephone advice

If you request telephone advice, we will process your data contained in the contact form, including at least your name and surname and telephone number, in order to provide the requested telephone advice.

d) Personal advice

If you request personal advice, we will process your data contained in the contact form, including at least your name and surname and telephone number and/or e-mail address, in order to contact you and arrange a meeting for personal advice.

Online orders
It is possible to order construction materials directly via the Contact Form on the Contact Form subpage of the online store. If you request such an order, we will process your data contained in the contact form, including your: investment location, postal code, name / company, e-mail address, contact telephone number, in order to contact you and complete the order.

4. For what purposes and on what legal basis do we process your personal data?

1. We process personal data possibly contained in log files to enable you to use our online store; the processing takes place on the basis of Art. 6 para. 1 lit. f) GDPR for the purposes of pursuing our legitimate interests in operating our online store.

2. We process the data collected through the use of cookies and pseudonymised user profiles for the purpose of conducting direct marketing and market research and for the further development of our digital offer in line with user needs on the basis of Art. 6 par. 1 letter f) GDPR for the purposes of pursuing our legitimate interests in analysing the use of our online store.

3. In order to respond to your inquiry sent through the channels indicated on our website, we process your personal data in each case for the purpose of establishing and maintaining business contacts on the basis of Art. 6 par. 1 letter f) GDPR. If the inquiry relates to the conclusion of a contract or pre-contractual measures, your personal data will be processed on the basis of Art. 6 par. 1 letter b) GDPR.

4. We process the data provided to us for the purpose of using our information and advice options in order to ensure that you make use of the selected option. We process this personal data on the basis of your consent and in accordance with Art. 6 par. 1 letter a) GDPR.

5. If you place an order via our online store, we will process the data collected in connection with this for the purpose of fulfilling contracts concluded with you on the basis of art. 6 par. 1 letter b) GDPR.

6. We may also process data in connection with your use of our online store in order to ensure compliance with legal obligations imposed on us; this processing is carried out on the basis of art. 6 par. 1 letter c) GDPR.

7. To the extent necessary, we process personal data (regardless of processing them for the purposes of implementing employment relationships or ensuring compliance with legal obligations) for the purposes of pursuing the legitimate interests of our company or third parties on the basis of art. 6 par. 1 letter f) GDPR. Legitimate interests may include:

making or defending against legal claims
preventing and investigating crimes
managing and further developing our business activities, including risk management
Are you obliged to provide data?

Information necessary for providing information and advice, processing online orders, is marked as required information in the relevant field of the online shop (e.g. online form); without providing this information, we will not be able to enable you to use the corresponding functions.

In the event that additional data is collected from you, we will inform you whether the transfer of such information is based on a legal or contractual obligation or is necessary for the performance of a contract. We usually indicate information that can be optionally provided as information that does not result from a legal or contractual obligation and is not necessary for the performance of a contract.

Who obtains or holds d

access to your personal data?

Your personal data is generally processed within Stanlux "Body Mind Soul" Piotr Klikowicz and Stanlux sp. z o. o. Depending on the category of personal data, only the relevant departments/organizational units have access to your personal data. Such units include in particular the departments responsible for our digital offers (e.g. Website) and our IT department. Depending on the role/rights management concept, access to personal data is limited to the functions and scope necessary for the relevant processing purpose.

If (and to the extent permitted by law), we may transfer your personal data to recipients outside our companies. Such external recipients may include:

affiliated companies within our companies (Stanlux "Body Mind Soul" Piotr Klikowicz and Stanlux sp. z o. o.), to whom we may transfer personal data for the purpose of conducting statistical analyses and providing technical support for our systems;
service providers who, based on separate agreements concluded with us, provide certain services that may include the processing of personal data, as well as approved subcontractors of our service providers;
private or public entities, to the extent that we are obliged to transfer your personal data on the basis of a legal obligation imposed on us; external service providers who provide services on our behalf and based on separate agreements, such as collecting your data, hosting our websites, operating our call center, sending e-mails and written information or individual advice.

Do we use automated decision-making?

In connection with the operation of our online store, we generally do not use automated decision-making (including profiling) within the meaning of Art. 22 of the GDPR. If we use such processes in the future, you will receive separate information from us in accordance with the relevant statutory provisions.

Is data transferred to countries outside the EU/EEA?
Personal data is generally processed within the territory of the European Union or the European Economic Area; we do not intend to transfer personal data to other countries.

How long is your data stored?

In general, we store personal data as long as we have a legitimate interest in storing it and the data subject's interest in preventing further processing is not binding. We may also continue to store data without a legitimate interest, provided that a corresponding legal obligation exists (e.g. to fulfil statutory retention obligations). We delete personal data, even without any action on the part of the data subject, immediately as soon as its further storage is no longer necessary for the purposes for which it was collected or otherwise processed or as soon as its further storage is otherwise prohibited by law.

With regard to the above processing, we regularly:

delete data processed in connection with online orders after expiry of the statutory retention periods for this data;

delete data processed in connection with user registration or the creation of a customer account after termination of the registration or after deletion of the customer account.

If personal data must be stored in order to fulfil a legal obligation, it is stored until the expiry of the respective retention period. If personal data is processed solely for the purpose of fulfilling a statutory obligation to store it, access to it is usually restricted in such a way that the data is only available at the time it is needed for the purpose of fulfilling this obligation.

What are your rights as a data subject?

As a data subject, you have the right to:

request access to your personal data, Art. 15 GDPR;
request the rectification of incorrect personal data, Art. 16 GDPR;
request the deletion of your personal data, Art. 17 GDPR;
request the restriction of the processing of your personal data, Art. 18 GDPR;
exercise the right to data portability, Art. 20 GDPR;
object to the processing of your personal data, Art. 21 GDPR.
The above rights can be asserted against us, e.g. by sending us a notification using the contact details provided on the first page of this data protection notice.

You also have the right to lodge a complaint with the competent supervisory authority regarding the processing of your personal data, Art. 77 GDPR.