PRIVACY POLICY OF THE INFINITY LINE ONLINE STORE

CONTENTS:

1. GENERAL PROVISIONS
2. BASIS OF DATA PROCESSING
3. PURPOSE, BASIS AND PERIOD OF DATA PROCESSING IN THE ONLINE STORE
4. RECIPIENTS OF DATA IN THE ONLINE STORE
5. PROFILING IN THE ONLINE STORE
6. RIGHTS OF THE DATA SUBJECT
7. COOKIES
8. FINAL PROVISIONS

1. GENERAL PROVISIONS

1.) The online store's privacy policy is informative, which means that it does not impose any obligations on the online store's customers. Acceptance of the terms and conditions arising from the Privacy Policy at the stage of purchase is binding.

2.) The privacy policy contains the rules regarding the processing of personal data by the Administrator in the Online Store, including the basis, purposes and period of personal data processing and the rights of data subjects, as well as information on the use of cookies in the Online Store.

3.) The administrator of personal data collected via the Online Store is "INFINITY LINE" SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000350516, address of the place of business and address for delivery: 32-551 Babice ul. Zakopiańska 3A, share capital 80 000 PLN, represented by two members of the management board, e-mail address: detal@infinityline.pl, contact telephone numbers: 515 169 661, 515 167 998, (32) 627 22 31 - hereinafter referred to as the "Administrator" and being also the Service Provider of the Online Store and the Seller.

4.) Personal data in the Online Store are processed by the Administrator in accordance with applicable law, including: in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation data) - hereinafter referred to as "GDPR". The text of the GDPR Regulation, as amended, can be found at: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679.

5.) Using the Online Store, and in particular making purchases via the Online Store, is voluntary. The Online Store Customer or Service Recipient is obliged to provide personal data when starting the purchasing procedure. Failure to provide personal data in the cases and to the extent indicated on the Online Store website, in the Online Store Regulations and in this Privacy Policy, which are necessary to conclude and perform the Sales Agreement or the contract for the provision of Electronic Services with the Administrator, results in the inability to conclude the contract.

6.) The scope of data required to conclude a contract is indicated on the Online Store website and in the Online Store Regulations;

7.) Providing personal data is also necessary in order for the Personal Data Administrator to fulfill statutory obligations, because providing personal data is a statutory requirement resulting from generally applicable legal provisions imposing an obligation on the Administrator to process personal data (e.g. data processing for the purpose of keeping tax or accounting books) and the lack of providing them will prevent the Administrator from fulfilling his statutory obligations.

8.) The administrator ensures protection and is fully responsible for ensuring that personal data is:

a.) processed lawfully;

b.) collected for specified, lawful purposes and not subjected to further processing incompatible with these purposes;

c.) correct and adequate in relation to the purposes for which they are processed;

d.) stored in a form enabling identification of data subjects for no longer than necessary to achieve the purpose of processing;

e.) processed in a way that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organizational measures;

Taking into account the nature, scope and purposes of processing as well as the risk of violating the rights and freedoms of natural persons and the seriousness of the threat regarding personal data protection violations, the Administrator implements appropriate technical and organizational measures to ensure that processing takes place in accordance with the GDPR. These measures are updated on an ongoing basis by the Personal Data Administrator.

The privacy policy is an integral part of the Online Store Regulations. To the extent not regulated, the provisions of the Online Store Regulations apply.

2. BASIS OF DATA PROCESSING

The administrator is entitled to process personal data when at least one of the following conditions occurs and the processing takes place only to the following extent:

(1) the data subject has consented to the processing of his or her personal data for one or more specific purposes;

(2) processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject before concluding the contract;

(3) processing is necessary to fulfill the legal obligation imposed on the Administrator;

(4) processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except for situations where these interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data, in particular when the data subject is a child.

1. The basis for the processing of personal data of Online Store Customers by the Administrator is detailed in the Privacy Policy - in relation to the given purpose of processing personal data by the Administrator.

3. PURPOSE, BASIS AND PERIOD OF DATA PROCESSING IN THE INFINITY LINE ONLINE STORE

1. Each time, the purpose, basis and period as well as the recipients of personal data processed by the Administrator result from the actions taken by a given Service Recipient or Customer in the Online Store or by the Administrator. If the Customer decides to make purchases in the Online Store and chooses personal collection of the purchased Product instead of a courier shipment, his or her personal data will be processed for the purpose of executing the concluded Sales Agreement, but will no longer be made available to the carrier carrying out the shipment on behalf of the Administrator.
2. The Administrator may process personal data within the Online Store for the following purposes, on the basis and during the periods indicated below:

4. RECIPIENTS OF DATA IN THE ONLINE STORE
5. The operation of the Online Store, in particular the implementation of concluded Sales Agreements, depends on the Personal Data Administrator using the services of external entities, including: courier companies, accounting, entities handling bank payments, software providers, e-mail services. The Administrator uses the services of processors who ensure the protection of the entrusted personal data. Processing entities also ensure the implementation of appropriate technical and organizational measures so that the processing meets the requirements of the GDPR and protects the rights of data subjects.
6. Data is transferred by the Administrator only in the cases indicated in the Privacy Policy for a specific category of recipients. The Administrator provides data only when it is necessary to achieve a given purpose of personal data processing and only to the extent necessary to achieve it.
7. Personal data of Online Store Customers may be transferred to the following recipients or categories of recipients:
8. ) Entities handling electronic or payment card payments. In the case of a Customer who uses electronic or payment card payment in the Online Store, the Administrator provides the Customer's collected personal data to the selected entity handling the above payments in the Online Store at the request of the Administrator to the extent necessary to process the payment made by the Customer and only to that extent.

2.)  Service providers supplying the Administrator with technical, IT and organizational solutions enabling the Administrator to conduct business activities, including the Online Store and Electronic Services provided through it (in particular suppliers of computer software for running the Online Store, e-mail and hosting providers and software providers to manage the company and provide technical assistance to the Administrator). The Administrator makes the collected personal data of the Customer available to the selected supplier acting on his behalf only in the case and to the extent necessary to achieve the given purpose of data processing in accordance with the Privacy Policy.

3. ) Providers of accounting, legal and debt collection advisory services providing the Administrator with accounting, legal or advisory support. The Administrator makes the collected personal data of the Customer available to the selected supplier acting on his behalf only in the case and to the extent necessary to achieve the given purpose of data processing in accordance with the Privacy Policy.
4. ) Carriers, forwarders, entities handling the warehouse and/or shipping process. In the case of a Customer who uses the Online Store to deliver the Product by post or courier, the Administrator makes the Customer's collected personal data available to the selected carrier, forwarder or intermediary carrying out the shipment on behalf of the Administrator.
5. PROFILING IN THE ONLINE STORE
6. The Personal Data Administrator informs about automated decision-making, including profiling, referred to in Art. 22 section 1 and 4 of the GDPR.
7. The Personal Data Administrator informs that profiling in the Online Store involves the automatic analysis or forecast of a given person's behavior on the Online Store's website, e.g. by adding a specific Product to the cart, browsing the page of a specific Product in the Online Store, or by analyzing the previous history of purchases made in the Online Store (in the case of customer registration). The condition for such profiling is that the Administrator has personal data of a given person.
8. The Administrator may use profiling in the Online Store for direct marketing purposes, but decisions made on its basis by the Administrator do not concern the conclusion or refusal to conclude a Sales Agreement or the possibility of using electronic banking services in the Online Store. The effect of using profiling in the Online Store may be, for example, granting a given person a discount or sending a discount code, or reminding about unfinished purchases. Despite profiling, a given person freely and ultimately decides whether he or she wants to use the proposed solutions offered by the Online Store.
9. RIGHTS OF THE DATA SUBJECT

1. The right of access, rectification, restriction, deletion or transfer - the data subject has the right to request from the Administrator access to his or her personal data, rectification, deletion ("right to be forgotten") or limitation of processing and has the right to lodge a complaint to processing and has the right to transfer his data. Detailed conditions for exercising the above-mentioned rights are indicated in Art. 15-21 of the GDPR Regulations.
2. The right to withdraw consent at any time - a person whose data is processed by the Administrator on the basis of consent (pursuant to Article 6 section 1 letter a) or Art. 9 section 2 letter a) of the GDPR), the data subject has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
3. The right to lodge a complaint with the supervisory authority - the person whose data is processed by the Administrator has the right to lodge a complaint with the supervisory authority in the manner specified in the provisions of the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.
4. Right to object - the data subject has the right to object at any time - for reasons related to his or her particular situation - to the processing of his or her personal data based on Art. 6 section 1 letter e) (public interest or tasks) or f) (legitimate interest of the Administrator), including profiling based on these provisions. In such a case, the Administrator is no longer allowed to process this personal data, unless he demonstrates the existence of valid legally justified grounds for processing, overriding the interests, rights and freedom of the data subject, or grounds for establishing, pursuing or defending claims.
5. The right to object regarding direct marketing - if personal data are processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of his or her personal data for the purposes of such marketing, including profiling, to the extent that processing is related to such direct marketing.
6. In order to exercise the rights referred to in this point of the privacy policy, you can contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator's address indicated at the beginning of the privacy policy or using the contact form available on the Online Store website.
7. COOKIES IN THE ONLINE STORE
8. Cookies are short text information in the form of text files, sent by the server and saved on the side of the person visiting the Online Store website (e.g. on the hard drive of a computer, portable device such as a laptop or on a memory card.
9. The Administrator may process data contained in Cookies when visitors use the Online Store website in order to remember Products added to the cart or to conduct anonymous statistics showing how the Online Store website is used.
10. Visitors to the Online Store can specify the conditions for the use of Cookies using the settings of their own web browser. This means that you can partially limit or completely disable the ability to save cookies. If you do not give such consent, you should change your web browser settings regarding cookies accordingly. Restricting the use of cookies may affect the purchasing procedure.
11. FINAL PROVISIONS

The privacy policy applies only to the Online Store of the Personal Data Administrator.