Privacy Policy

  1. The Seller processes the personal data of its Users who are natural persons, as well as natural persons acting on behalf of Users that are legal entities or organizational units with legal personality, in accordance with the General Data Protection Regulation (GDPR).
  2. Providing personal data by Users constitutes a contractual requirement necessary for the Seller to provide services to the User. Failure to provide such data may result in the inability to provide services to the User.
  3. By using the Online Store, including during the preliminary stage of negotiating cooperation terms, Users entrust the Seller with their personal data.
  4. By providing any personal data, the User consents to its processing by the Seller for the purposes specified in these Terms and Conditions, both at the time of submission and in the future.
  5. The Seller is also entitled to process Users’ personal data to the extent necessary for the provision of services or for taking steps at the User’s request prior to entering into a contract.
  6. The controller of personal data processed in accordance with these Terms and Conditions, taking into account the nature, scope, context, and purposes of processing, as well as the risks to the rights and freedoms of Users, is Jaroszewicz i Synowie Limited Liability Company: The following communication channels are available for matters related to personal data protection:
    • Jaroszewicz i Synowie Limited Liability Company, ul. Tumska 5, 99-100 Łęczyca
    • e-mail: kontakt@mlynleczyca.pl
  7. Users’ personal data may be processed for the following purposes:
    • preparation for entering into a contract with the User;
    • marketing activities, including profiling and analytics;
    • provision of electronic services;
    • tailoring website content to Users’ preferences and interests;
    • detection of bots and service abuse;
    • statistical analysis and service improvement (analytical purposes).
  8. Subject to obtaining the User’s consent, the Online Store may entrust the processing of Users’ personal data to entities within its corporate group and to trusted partners, solely for the purposes described in these Terms and Conditions. In addition, personal data may be shared with data processors acting on behalf of the controller under data processing agreements, including IT service providers, marketing agencies, and research companies.
  9. Users’ personal data will not be transferred to third countries outside the European Economic Area (EEA).
  10. Personal data processed on the basis of the User’s consent will be stored by the Controller in a form permitting identification of the data subject for no longer than necessary for the purposes for which the data is processed, subject to the User’s right to withdraw consent at any time. Following the effective withdrawal of consent, the Controller will process personal data only for the period corresponding to the limitation period for claims that may be asserted by or against the Controller.
  11. The Controller does not process any personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, addictions, or data concerning a person’s sex life. Users are prohibited from providing the above-mentioned categories of personal data.
  12. The data retention periods specified in Section 6.10 of these Terms and Conditions may be modified to the extent required by specific legal provisions, such as accounting regulations.
  13. Users’ personal data is processed on the following legal bases:
    • For marketing purposes, including profiling and analytics – on the basis of explicit consent in accordance with Article 6(1)(a) GDPR;
    • For preparing to enter into a contract with the User and for providing electronic services – pursuant to Article 6(1)(b) GDPR, where processing is necessary for taking steps at the User’s request prior to entering into a contract or for performing a contract;
    • For tailoring website content to Users’ preferences and interests, detecting bots and service abuse, and conducting statistical analysis and service improvements – pursuant to Article 6(1)(f) GDPR, based on the Controller’s legitimate interest.
  14. In connection with the processing of personal data, Users have the following rights:
    • the right to request access to personal data, rectification, erasure, or restriction of processing;
    • the right to object to processing;
    • the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office);
    • the right to data portability;
    • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
  15. To ensure a personalized offering and during procedures aimed at entering into or performing a contract, as well as where the User has provided explicit consent, the Owner may apply profiling, understood as the processing of personal data involving the use of such data to analyze or predict the User’s individual interests and preferences.
  16. The Owner does not make decisions based solely on automated processing of the User’s personal data.
  17. If the Customer has any questions or concerns regarding the processing of personal data or this Privacy Policy, they may contact the Data Controller via the contact form available on the Online Store’s website or directly via the email address specified in this Privacy Policy.