WIDELEC.ONLINE STORE PRIVACY AND COOKIE POLICY

I. GENERAL PROVISIONS

1. The controller of personal data collected via the Online Store (hereinafter referred to as the "Store") is WIDELEC.ONLINE, with its registered office at: KRASZEWSKIEGO 193C, 33-380 KRYNICA-ZDRÓJ.
2. Contact the Controller via:
   • Email address: INFO@WIDELEC.ONLINE
   • Telephone number: 795909518
   • Correspondence address: KRASZEWSKIEGO 193C, 33-380 KRYNICA-ZDRÓJ
   • The Controller declares that it processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Polish personal data protection regulations.
3. The Store makes every effort to protect Users' privacy and ensure the security of transmitted data by using appropriate technical security measures (including SSL).

II. PURPOSES, LEGAL BASIS, AND PROCESSING PERIOD

We process data for various purposes, depending on how you use the Store:

1. Fulfillment of the order and sales contract
   • Purpose: Processing is necessary to complete the transaction, including the preparation of goods and the delivery of goods (on-site pickup only).
   • Basis: Article 6, paragraph 1, letter b of the GDPR (necessity for the performance of the contract).
   • Period: Until the completion of the contract and then until the expiry of the limitation periods for claims and tax and accounting obligations.
2. Handling personal pickups at a stationary location
   • Purpose: Verification of the person receiving the order to prevent the goods from being released to an unauthorized person.
   • Basis: Article 6, paragraph 1, letter f of the GDPR (legitimate interest of the Controller – protection of property).
   • Period: Until the goods are delivered and the receipt is signed.
3. Customer Account Registration and Management
   1. Purpose: Enabling the use of Store features (order history, status tracking).
   2. Basis: Article 6, paragraph 1, letter b of the GDPR.
   3. Period: Until the Customer deletes the account.
4. Direct Marketing and Newsletter
   • Purpose: Sending information about promotions and new products.
   • Basis: Article 6, paragraph 1, letter a of the GDPR (Customer's consent).
   • Period: Until consent is withdrawn.
5. Handling Complaints and Returns
   1. Purpose: Considering reports of product defects or withdrawal from the contract.
   2. Basis: Article 6, paragraph 1, letter c of the GDPR (legal obligation).
   3. Period: For the duration of the warranty or complaint procedures.

III. DATA RECIPIENTS – TO WHOM DO WE TRANSFER YOUR DATA?

To ensure the proper operation of the Store, we use the services of external entities:

1. IT service providers: hosting companies and store software (e.g., Shoper, PrestaShop).
2. Accounting office: to settle transactions and issue invoices.
3. Brick-and-mortar store staff: Your data (name, surname, order number) is transferred to the store staff so they can prepare and deliver the ordered goods to you.

IV. PROFILING AND ANALYTICS

1. The Administrator may use profiling for marketing purposes, which involves automatically assessing which products you may be interested in based on your previous activities in the Store.
2. The customer has the right to object to profiling.
3. The Store may use analytical tools (e.g., Google Analytics, Facebook Pixel) that collect information about your visits to the website (time spent on the website, products clicked). This data is anonymized and is used to improve the website's performance.

V. USER RIGHTS (IN ACCORDANCE WITH THE GDPR)

Every data subject has the right to:

• Access to data: You can ask what data we are processing.
• Rectification: You have the right to correct inaccurate data.
• Deletion (Right to be forgotten): If there is no basis for further processing.
• Processing restrictions: In certain situations, you can request that your data be "freezed."
• Data portability: You can request that your data be released in a machine-readable format.
• Objection: To processing based on the Controller's legitimate interest.
• Complaints to the supervisory authority: If you believe we are violating the law, you can write to the President of the Personal Data Protection Office (ul. Stawki 2, Warsaw).

VI. COOKIE POLICY

1. The store uses cookies (small text files stored on your device). Cookies:
   • Essential: They enable the website to function (login, shopping cart). They cannot be disabled.
   • Analytical: They help us understand how users use the website (e.g., Google Analytics).
   • Marketing: They are used to display advertisements tailored to your interests.
2. Cookie management: You can change cookie settings in your browser (Chrome, Firefox, Safari, etc.) or use the cookie management panel available on our website.
3. Not changing your browser settings constitutes acceptance of the use of cookies.

VII. SERVER LOGS

1. Information about certain user behavior is logged at the server level. This data includes: IP address, time of request, and browser information.
2. This data is used solely for server administration and security (detection of attacks).

VIII. PERSONAL COLLECTION – ADDITIONAL INFORMATION

1. When choosing personal collection, the Customer must provide the order number and first and last name.
2. At the customer's physical location, they may be asked to present a photo ID solely for identity verification purposes. The Administrator does not copy or scan ID documents.
3. It is possible to authorize a third party to collect the order – in such a case, it is necessary to provide this person's details in the order comments or by email. This option is disabled for reservations and alcohol purchases – the Customer is obligated to collect the order in person.

IX. PRIVACY POLICY CHANGES

1. The Administrator reserves the right to amend this policy in the event of technological or legal changes.
2. The current version of the policy is always available at: [LINK].