Nota prawna

Information on the processing of personal data

  1. This notice contains key information on the processing of personal data. Full information is available in the Privacy Policy on leposse.com.

Data controller

  1. The controller of personal data is LE POSSÉ sp. z o.o., with its registered office in Kraków, ul. Rynek Główny 34/15, 31-010 Kraków, Poland, NIP: 6762691721, KRS: 0001167385.

Contact

  1. For matters related to personal data, you may contact us at:
    1. email: care@leposse.com
    2. phone: +48 532 88 66 11
    3. address: Rynek Główny 34/15, 31-010 Kraków, Poland
    4. correspondence address: Oboźna 11/1, 30-011 Kraków, Poland

Data Protection Officer

  1. The Controller has not appointed a Data Protection Officer.
  2. For all matters concerning personal data, please contact the Controller directly.

Scope and source of data

  1. We process personal data provided voluntarily by the User, including:
    1. first name and last name
    2. email address
    3. phone number
    4. delivery address
    5. IP address
  2. Data may also be obtained, with the User’s consent, from social media platforms during registration or login, if such option is available.

Purposes of data processing

  1. Personal data is processed for the purpose of:
    1. fulfilling orders and managing the user account
    2. handling communication and enquiries
    3. sending marketing information, if consent has been given
    4. ensuring security and protecting the rights of the Controller

Legal bases

  1. Personal data is processed on the basis of:
    1. Article 6(1)(a) GDPR, consent of the User
    2. Article 6(1)(b) GDPR, performance of a contract or taking steps prior to entering into a contract
    3. Article 6(1)(f) GDPR, legitimate interest of the Controller

Data retention period

  1. Personal data is stored for the period necessary to provide the services and fulfil orders.
  2. After the end of the use of the services, the data is deleted or anonymized, unless further storage is required by law or justified by the legitimate interest of the Controller.
  3. In justified cases, data may be stored for a longer period, no longer than necessary for the purposes for which it is processed.

Recipients of data

  1. Personal data may be transferred to entities supporting the operation of the store, in particular:
    1. hosting providers
    2. payment operators
    3. courier and logistics companies
    4. IT service providers
    5. accounting service providers

Transfer of data outside the EU

  1. Personal data is not transferred outside the European Union, except where this results from the User’s actions or the use of external tools, in accordance with applicable law.

Automated decision-making

  1. Personal data is not used for automated decision-making or profiling.