COOKIE POLICY

1. For all matters concerning personal data protection, you can contact the administrator. You can do this by sending an email to: kontakt@petitepants.pl
2. The administrator processes your personal data to send you its own commercial information and content promoting the administrator's products and activities – based on Art. 6 sec. 1 lit. a of Regulation 2016/679 – i.e., your consent, Art. 6 sec. 1 lit b of the GDPR – performance of agreements for the provision of electronic services provided by the Administrator within the service, Art. 6 sec. 1 lit. c of the GDPR – fulfillment of statutory obligations imposed on the Administrator resulting from legal provisions, Art. 6 sec. 1 lit. f. of the GDPR – the Administrator's legitimate interest, consisting in protecting their rights, which includes pursuing claims or defending against claims, including for the purpose of considering complaints, Art. 6 sec. 1 lit. f of the GDPR – the Administrator's legitimate interest, consisting in conducting analyses of user activity on the service and how the service is used to improve the functionalities applied, Art. 6 sec. 1 lit. f of the GDPR – the Administrator's legitimate interest, consisting in marketing and advertising the service's activities, as well as maintaining relationships with users and responding to user contact. Additionally, your personal data will be processed for statistical and analytical purposes.
3. Your personal data is disclosed to entities cooperating with the administrator. Such entities are called data recipients. Disclosure of data by the administrator is generally possible in the following cases:
a. when such an obligation arises from legal provisions – this applies to the disclosure of your data by the administrator;
b. when the administrator must disclose data to be able to fulfill an agreement with the provider of the newsletter system – such action always takes place on the basis of a concluded data processing entrustment agreement;
c. when the administrator decides to disclose personal data due to its own legitimate
interest. This particularly concerns the situation of transferring (disclosing) data to the Administrator's legal successor;
d. when it results from your expressed consent to data processing. All the above cases are practices fully compliant with the GDPR. The entities to whom the administrator will disclose your personal data will be the mailing system provider and the hosting service.
4. Your personal data will be transferred to countries other than those belonging to the European Economic Area – so-called third countries. This is necessary to ensure the proper functioning of the newsletter. To counteract potential risks, data processing entrustment agreements have been concluded, ensuring an adequate level of security for your data. The transfer of data outside the European Economic Area is based on standard contractual clauses approved by the European Commission. This method of processing is fully legal and compliant with the GDPR.
5. Your personal data will be processed for the duration of your consent. When you withdraw your consent, your data will be permanently deleted and its processing will cease. Due to technical and organizational limitations, the deletion process takes up to 30 days.
6. You have the right to request from the administrator the rectification, erasure, restriction of your personal data, the right to request access to personal data, restriction of processing, the right to object to processing, as well as the right to data portability. These rights are granted to you only in situations where making such a request is actually justified. You also have the right to withdraw your consent to the processing of your personal data at any time. Withdrawal of consent will not affect the legality of data processing carried out until its withdrawal.
7. You do not have to provide your personal data. Just remember that without providing your personal data (email address), you will not be able to subscribe to the newsletter and receive the information contained therein.
8. Your personal data will be processed in an automated manner, but will not be subject to profiling.
9. You have the right to lodge a complaint regarding how your personal data is processed with the supervisory authority, which is the President of the Personal Data Protection Office with its registered office in Warsaw (00-193), at ul. Stawki 2.