Privacy Policy

1. For all matters concerning the protection of personal data, you can contact the administrator. You can contact us personally by sending an e-mail to: kontakt@petitepants.pl
2. The Administrator processes your personal data to send you its own commercial information and content promoting the administrator's products and activities - based on art. 6 sec. 1 lit. a of Regulation 2016/679 - i.e. your consent, art. 6 sec. 1 lit b GDPR - performance of agreements for the provision of electronic services provided by the Administrator within the framework of the website, art. 6 sec. 1 lit. c GDPR - fulfillment of statutory obligations incumbent on the Administrator, resulting from legal provisions, art. 6 sec. 1 lit. f. GDPR - the Administrator's legitimate interest, consisting in protecting its rights, which includes pursuing claims or defending against claims, including for the purpose of considering complaints, art. 6 sec. 1 lit. f GDPR - the Administrator's legitimate interest, consisting in conducting analyzes of user activity on the website and how the website is used to improve the functionalities used, art. 6 sec. 1 lit. f GDPR - the Administrator's legitimate interest, consisting in marketing and advertising of the website's activities, as well as maintaining relations with users and responding to contact from users. Additionally, your personal data will be processed for statistical and analytical purposes.
3. Your personal data is disclosed to entities cooperating with the administrator. Such entities are called data recipients. Disclosure of data by the administrator is generally possible in the following cases:
a. when such an obligation results from legal provisions - this applies to the disclosure of your data by the administrator;
b. when the administrator must disclose data to be able to fulfill an agreement with the newsletter distribution system provider - such action is always carried out on the basis of a concluded data processing entrustment agreement;
c. when the administrator decides to disclose personal data due to its own, legitimate
interest. This particularly concerns the situation of transferring (disclosing) data to the Administrator's legal successor;
d. when it results from your consent to data processing. All the above cases are practices fully compliant with the GDPR. The entities to whom the administrator will disclose your personal data will be the mailing system provider and hosting service provider.
4. Your personal data will be transferred to countries other than those belonging to the European Economic Area - so-called third countries. This is necessary to ensure the proper functioning of the newsletter. To counteract any potential risks, data processing entrustment agreements have been concluded, ensuring an appropriate level of security for your data. The transfer of data outside the European Economic Area is based on standard contractual clauses approved by the European Commission. This method of processing is fully legal and compliant with the GDPR.
5. Your personal data will be processed for the duration of the consent. When you withdraw your consent, your data will be irretrievably deleted and their processing will end. Due to technical and organizational limitations, the deletion process takes up to 30 days.
6. You have the right to request from the administrator the rectification, erasure, or restriction of your personal data, the right to request access to personal data, restriction of processing, the right to object to processing, as well as the right to data portability. These rights are granted to you only in situations where such a request is actually justified. You also have the right to withdraw your consent to the processing of your personal data at any time. Withdrawal of consent will not affect the lawfulness of data processing carried out until its withdrawal.
7. You do not have to provide your personal data. Just remember that without providing your personal data (e-mail address), you will not be able to subscribe to the newsletter and receive the information contained therein.
8. Your personal data will be processed in an automated manner, but will not be subject to profiling.
9. You have the right to lodge a complaint regarding how your personal data is processed with the supervisory authority, which is the President of the Personal Data Protection Office based in Warsaw (00-193), at ul. Stawki 2.