Privacy Policy on the lynka.eu Website

General Information

1. The Privacy Policy defines the rules for processing and protecting personal data provided by Users in connection with their use of the website available at: lynka.eu.

2. To ensure the security of the personal data entrusted to us, we have implemented procedures to prevent breaches of personal data security. The applicable procedures comply with legal regulations, in particular:

a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR),

b) The Personal Data Protection Act of 10 May 2018,

c) The Electronic Communications Law of 12 July 2024.

3. Personal data may be processed by us based on the consent given by the User and in cases where legal provisions authorize us to process personal data to fulfil a contract between the parties, based on legal regulations, or when processing is necessary for purposes arising from legitimate interests pursued by us as the Data Controller.

4. The website collects information about Users and their behaviour in the following ways:

a) Through information voluntarily entered in forms available on the website, such as name, surname, email address, phone number, country, region, tax identification number (NIP), and address details.

b) Through information obtained during the use of the website:

IP address: Every computer connected to the Internet is assigned a unique number, the IP address, which can be used to identify the country from which a user connects to the network.

Cookies: Text files created and stored on the User's computer during visits to the website.

Server logs: Our servers automatically record data such as the User's page request, the date and time of the request and response, device data (e.g., hardware model), browser name and version, browser language, and operating system type.

c) The website may also store information about connection parameters (including timestamps and IP addresses).

5. The data collected in point 4 is not used for marketing purposes in any way.

6. Personal data left on our website will not be shared with third parties or transferred to third countries or international organizations.

7. Individuals who have entered personal data in the contact form or sent it to us via email have the right to access their data. They also have the right to correct personal data, request its deletion or restriction of processing, transfer data, object to processing, and withdraw consent to processing – in cases and under conditions specified in the GDPR. The detailed scope of User rights is provided in the information clause below.

8. We reserve the right to amend the privacy policy, which may be influenced by the development of Internet technologies, changes in data protection laws, or the development of our website. We will inform about any changes in a visible and understandable manner.

9. The website may contain links to other websites, especially in articles, news, or in the form of images. Such websites are not supervised by our service. These websites may have their own privacy policies and regulations, which we recommend reviewing.

Information About Cookies

1. The website uses cookies, which are IT data, particularly text files, stored on the User's end device and intended for use on the website. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number. The entity placing cookies on the User's end device and accessing them is the website operator.

2. Cookies are used for the following purposes:

a) Creating statistics that help understand how Users interact with the website, enabling improvements to its structure and content.

b) Maintaining the User's session.

c) Remembering changes to font size and contrast settings.

3. The website uses two main types of cookies: "session" cookies and "persistent" cookies.

Session cookies are temporary files stored on the User's end device until they leave the website or close the browser.

Persistent cookies are stored on the User's end device for a period specified in the cookie parameters or until the User deletes them.

4. Web browsers typically allow cookies to be stored on the User's end device by default. Users can change these settings. Browsers also allow the deletion of cookies or automatic blocking of cookies. Detailed information on this can be found in the help section or documentation of the browser. Restrictions on the use of cookies may affect some functionalities available on the website.

5. Cookies placed on the User's end device may also be used by advertisers and partners cooperating with the website operator. We recommend reading the privacy policies of these companies to understand the rules for using cookies in statistics, such as the Google Analytics Privacy Policy. Cookies may also be used by advertising networks, particularly Google, to display ads tailored to how the User interacts with the website. For this purpose, they may store information about the User's navigation path or time spent on a specific page. Regarding information about User preferences collected by the Google advertising network, the User can view and edit the information derived from cookies using the following tool: https://www.google.com/ads/preferences/.

If you have any questions regarding the provisions of this privacy policy, please contact us via our website.

INFORMATION ON THE PROCESSING OF PERSONAL DATA

In connection with the processing of your personal data, we inform you – in accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1), hereinafter referred to as "GDPR" – that:

I. DATA CONTROLLER

The controller of your personal data is Lynka Sp. z o.o..

You can contact the Data Controller at the following address:

ul. Ppor. Mieczysława Majdzika 16, 32-050 Skawina, or via email: kontakt@lynka.eu.

II. LEGAL BASIS AND PURPOSES OF PERSONAL DATA PROCESSING

Your personal data will be processed for the following purposes:

1) Providing website services – for this purpose, we process information such as your IP address, cookie data, data about the web browser you use, activity on our website, and session data (legal basis: Article 6(1)(f) of the GDPR).

2) Handling inquiries or responding to your questions or requests sent to us via email or through the contact form (legal basis: Article 6(1)(f) of the GDPR).

3) Creating and maintaining a User account (legal basis: Article 6(1)(b) and (f) of the GDPR).

4) Fulfilling legal obligations imposed on us as the Data Controller, including accounting, bookkeeping, and archiving obligations (legal basis: Article 6(1)(c) of the GDPR).

5) Conducting quality analyses of the services we provide to improve their functionality and compiling statistics on the use of our website, using cookies, IP addresses, browser data, website activity, and session data (legal basis: Article 6(1)(f) of the GDPR).

6) Establishing, pursuing, or defending against claims (legal basis: Article 6(1)(f) of the GDPR).

7) Sending commercial information electronically, direct marketing via telephone contact, organizing promotional campaigns, and other marketing activities – only based on your consent (legal basis: Article 6(1)(a) of the GDPR).

When using the services of our store, the Administrator will process Customer data for the following purposes:

1. Entering into and performing a contract, as well as taking other actions at the Customer's request prior to entering into the contract, such as preparing a personalized offer (legal basis: Article 6(1)(b) of the GDPR).

2. Proper execution of the contract, including processing payments, necessary communication with the Customer, order shipment, and creating an account in our online store (legal basis: Article 6(1)(b) and (f) of the GDPR).

3. Fulfilling legal obligations imposed on the Administrator, including accounting and bookkeeping obligations (legal basis: Article 6(1)(c) of the GDPR).

4. Sending messages in the form of a newsletter – only based on the Customer's consent (legal basis: Article 6(1)(a) of the GDPR).

5. Establishing, pursuing, or defending against claims (legal basis: Article 6(1)(f) of the GDPR).

III. INFORMATION ON THE REQUIREMENT/VOLUNTARINESS OF PROVIDING DATA AND THE CONSEQUENCES OF NOT PROVIDING PERSONAL DATA

Providing personal data is voluntary but necessary to achieve the purpose of processing. Without providing personal data, it will not be possible to achieve this purpose. Providing data for the issuance of an invoice is a legal requirement under the Value Added Tax Act.

IV. RECIPIENTS OF PERSONAL DATA

The recipients of your personal data will only be entities authorized under legal regulations, such as the National Tax Administration or other state authorities.

Recipients of personal data may also include entities providing courier or postal services.

Your data may be transferred to entities processing personal data on behalf of the Administrator, such as IT service providers, entities providing accounting, HR, or payroll services, entities providing marketing or website hosting services, and other entities processing data for purposes defined by the Administrator. Such entities process data solely based on a contract with the Administrator.

V. PERIOD OF PERSONAL DATA STORAGE

Your personal data will be processed:

1) Until you stop using our website – in the case of providing website services.

2) For a period of 3 months in the case of responding to or resolving an issue resulting from an email message sent to us or for statistical purposes.

3) Until consent is withdrawn, if processing is based on the consent provided.

4) For a period of 5 years after the contract is completed.

5) For the purpose of establishing, pursuing, or defending against claims – for a period of 3 years after the end of cooperation/contract execution, or in the case of ongoing proceedings, until their final resolution and until the expiration of claims.

VI. RIGHTS OF DATA SUBJECTS

In connection with the processing of personal data, you have the right to:

1) Access your personal data – the right to obtain confirmation of whether the Administrator processes your data and information regarding such processing.

2) Receive a copy of your personal data – the right to obtain a copy of your personal data processed by the Administrator. The first copy is free of charge, but the Administrator may charge a reasonable fee for subsequent copies.

3) Rectify your personal data – if the data processed by the Administrator is incorrect or incomplete.

4) Delete your personal data – in situations where the data is no longer necessary for the purposes for which it was collected, consent for processing has been withdrawn, an objection to processing has been raised, or the data is being processed unlawfully.

5) Restrict the processing of your personal data – if the data is incorrect, you may request a restriction on processing for the time needed to verify its accuracy; if the data is being processed unlawfully but you do not want it deleted; if the data is no longer needed by the Administrator but may be required by you to establish or defend claims; or if you object to processing – until it is determined whether the Administrator's legitimate grounds override your objection.

6) Transfer your personal data – the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another Administrator without hindrance, provided the processing is based on consent or a contract and is carried out automatically.

7) Object to the processing of your personal data – the right to object at any time, for reasons related to your particular situation, to the processing of your personal data by the Administrator for tasks performed in the public interest, under public authority, or based on the Administrator's legitimate interest, including processing for direct marketing purposes.

8) Withdraw consent for the processing of personal data at any time without affecting the lawfulness of processing carried out before the withdrawal of consent, if processing is based on your consent.

– These rights can be exercised in the cases and under the conditions specified in the GDPR. To exercise the rights listed in points 1–8 above, you can contact the Administrator.

VII. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that your personal data is being processed by the Administrator in violation of the GDPR regulations.

VIII. AUTOMATED DECISION-MAKING, INCLUDING PROFILING

Your personal data will not be processed in an automated manner, including in the form of profiling.

IX. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION

Your personal data will not be transferred to international organizations or third countries.