This Privacy Policy has been devised on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC, hereinafter referred to as RODO.

PERSONAL DATA ADMINISTRATOR
1. SVAMAR Marzena König-Kozok with headquarters in Tarnowskie Gory at Maszynistow 3, tax number PL6452400020. Contact with the Administrator is also possible via office@nylko.eu

REQUEST AND CATEGORIES OF PROCESSED PERSONAL DATA
2. The administrator processes the following personal data of the buyers:

• a. name and surname, company,
• b. address of doing business,
• c. e-mail address,
• d. phone number,
• e. number nip. 

3. Providing personal data specified in point 2 is not a statutory requirement and is voluntary, but it is a condition to conclude a sales agreement with the Administrator, hereinafter referred to as the "Agreement". If the buyer does not provide this data, then the Agreement will not be concluded.
4. During the term of the Agreement, the Administrator may enter into other buyer data - the IP number of the device used by the buyer and data on the buyer´s use of a specific telecommunications network, software or devices, as well as the method of using the Administrator´s website.

PERSONAL DATA PROCESSING OBJECTIVES 
5. The administrator processes the personal data of buyers for the following purposes: 

• a. conclusion and execution of the parties connecting the Contract, in particular delivery of the purchased goods and consideration of complaints, 
• b. fulfilling the legal obligations of the Administrator, in particular issuing and storing invoices and other accounting documents,
• c. claiming and defending against them, 
• d. detection and prevention of fraud, 
• e. direct marketing, 
• f. creating analyzes and statistics, for the Administrator´s own needs, in particular reporting, marketing and market research, service development planning, testing preferences and behavior of buyers, to improve the quality of services provided by the Administrator,
• g. specified in items 5e and f after the Contract has been executed - with the consent of the buyer,
• h. transfer to third parties - with the consent of the buyer, to the extent and purpose covered by this consent.

LEGAL DEFENSE OF PROCESSING OF PERSONAL DATA 
6. The legal basis for the processing of personal data of buyers for the purpose specified:

• a. in item 5a - constitutes art. 6 par. 1 b RODO (performance of the Contract), 
• b. in item 5b - constitutes art. 6 par. 1 c RODO (legal obligation), 
• c. in point 5c-f - is art. 6 par. 1 f. RODO (legally justified interest of the Administrator), 
• d. in items 5g and h - is art. 6 par. 1 and RODO (consent of the buyer).

TIME OF STORING PERSONAL DATA 
7. The administrator will store personal data processed for the purpose specified: 

• a. in point 5a - for the duration of the Agreement and settlements after its completion, 
• b. in point 5b - for the period in which the Administrator orders the law, 
• c. in items 5c and d - until the claims under the Agreement are time-barred, 
• d. in points 5e and f - for the duration of the Agreement, 
• e. in items 5g and h - until the buyer withdraws the consent. 

8. If the Administrator provided to the purchaser of the service electronically related to the conclusion and performance of the Agreement, then in accordance with art. 19 para. 2 of the Act on the provision of electronic services, after using the services, the Administrator may process only personal data of service recipients who are:

• a. necessary to settle the service and claim for payments for using the service, 
• b. necessary for the purposes of advertising, market research and behavior and preferences of service recipients with the purpose of research results for the purpose of improving the quality of services provided by the Administrator - with the consent of the service recipient, 
• c. necessary to explain the circumstances of unauthorized use of the service,
• d. allowed to be processed on the basis of mandatory legal provisions or contract.

RECIPIENTS OF PERSONAL DATA 
9. The administrator does not provide the personal data of the buyers to third parties, unless he obtains the prior explicit consent of the buyer or if the right or obligation to provide such data results from the generally applicable provisions of law. 
10. The administrator entrusts personal data of buyers to the following processors: a. providing marketing and advertising services on behalf of the Administrator, b. supporting the Administrator´s IT systems, c. providing the Administrator with postal, courier, payment, auditing, legal and accounting services.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES AND INTERNATIONAL ORGANIZATIONS 
11. The personal data of buyers will not be transferred outside the European Economic Area.

BUYERS RIGHTS   
12. The buyer has the following rights:

• a.    the right to request access to your data, i.e. to obtain confirmation of whether personal data concerning it are being processed,
• b.    the right to rectify data, i.e. to demand the rectification of personal data concerning him that is incorrect,
• c.    the right to demand the removal of his personal data, 
• d.    the right to demand the restriction of his personal data,
• e.    the right to object to the processing of data,
• f.    the right to transfer data.

13. The scope of each of the powers specified in point 12 and the situations in which they can be exercised are determined by generally applicable laws, in particular the GDP.
14. The Buyer may the rights specified in point 12 by contacting the Administrator.

THE RIGHT TO WITHDRAW CONSENT
15. If the processing of the buyer´s personal data takes place on the basis of his consent, the buyer has the right to withdraw it at any time without affecting the lawfulness of the processing which was carried out on its basis prior to its withdrawal.

PROFILING
16. For the purposes set out in point 5c-f, the Administrator may perform an automated analysis of buyers´ data and prepare predictions about their preferences or future behavior. Profiling can in particular be used to analyze and forecast personal preferences or interests of buyers. Such action of the Administrator will not cause any legal consequences for the buyers, nor will it significantly affect their situation.

COOKIES
17. For the purposes set out in point 5c-f, the Administrator may use so-called cookies. These are small text files placed on the buyer´s device, based on which information is collected, which allows in particular to identify the buyer´s device, its IP number and the browser used by the buyer.
18. The buyer can set his browser so - thanks to the appropriate options available in it - to disable the automatic installation of cookies, prevent their use or completely remove them from their device. The procedure for handling and deleting cookies varies depending on the browser used by the buyer.
19. Cookies are divided into:

• a.    temporary (session) - files temporarily contained in the browser cache, which remain in it until the session ends,
• b.    permanent - files remaining in the browser cache as long as the browser settings selected by the buyer allow it,
• c.    own - files managed by the Administrator,
• d.    external - files managed by third parties,
• e.    configuration - files related to the movement of the buyer on the Administrator´s website and ensuring proper navigation. In particular, they allow you to follow the choices made by the buyer (choice of language, size of the font used), recognize the device used by the buyer and manage the browsing session,
• f.    analytical - files used for statistical and analytical purposes,
• g.    advertising - files used for advertising purposes, e.g. for displaying personalized ads.

20. Detailed rules of operation of cookies placed on the website the administrator of the application are defined under the following links:

• a. https://policies.google.com/privacy/update?hl=pl,
• b. https://www.google.com/analytics/learn/privacy.html?hl=pl
• c. https://www.smartsupp.com/help/privacy/ 
• d. https://www.facebook.com/policies/cookies/ 
• e. https://www.facebook.com/about/privacy/update 
• f. https://www.pinterest.com/_/_/about/cookie-policy/
• g. https://policy.pinterest.com/en/terms-of-service

COMPLAINT TO THE SUPERVISORY AUTHORITY
21. The buyer has the right to lodge a complaint to the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw, if it considers that the processing of his personal data violates the law.

SECURITY THE PERSONAL DATA OF BUYERS
22. The administrator applies appropriate technical and organizational measures to protect the buyers´ personal data against loss, misuse or modification. The access rights to the buyers´ personal data have been limited in a restrictive way so that these data are not in the hands of unauthorized persons.