Back to start

PERSONAL DATA PRIVACY POLICY

www.luon.me

In force from: 3 June 2022

1 Data Administrator

LuON Spółka Akcyjna, Lektykarska 54 01-687 Warszawa, Tax Identification Number (NIP) 5272744183, REGON no. 36246052800000

  1. The Administrator of the personal data provided during the use of the Website run under the name LuON, available at luon.me, is
    LuON Spółka Akcyjna, Lektykarska 54 01-687 Warszawa, Tax Identification Number (NIP) 5272744183, REGON no. 36246052800000, e-mail address [email protected], entered into the KRS (0000705341).
  2. The data is processed pursuant to the current rules of law, i.e. the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to personal data protection and on the free movement of such data, and repealing the Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR), the Act of 10 May 2018 on data protection and the Act of 18 July 2002 on the provision of online services.

 

2 Definitions

  1. The following definitions are used in this policy:
  2. Website – website available at luon.me, using which the User can: view its contents, contact the Data Administrator, order trade and marketing information.
  3. Personal Data Administrator – the entity which decides upon the purpose and means of data processing, understood in this policy as: Emil Borusławski, who is conducting a business activity under the name HK Store EMIL BORUSŁAWSKI, Szarych Szeregów 3/5 lokal 29, 97-200 Tomaszów Mazowiecki, Tax Identification Number (NIP) 1132986694, REGON no. 381697856.
  4. User – natural person constituting the data subject and using the services available on the Website.
  5. Personal data – any information that without excessive time and cost will lead to the natural person’s identification, including his or her identification, address and contact details.

 

3 Purposes of Data Processing

  1. The Personal Data Administrator processes the personal data for the following purposes:
    1. registration and account creation on the Website,
    2. providing answers to questions submitted using the contact form or via the contact details available on the Website,
    3. marketing of the Data Administrator’s own products and services in the traditional manner,
    4. sending the Data Administrator’s trade and marketing information to the e-mail address provided by the User during the newsletter subscription application based on the data subject’s consent,
    5. seeking the rights and claims of the Data Administrator of the data subject.
  2. The provision of the data is required to process an order, issue a sales document, seek claims and to provide answers to questions.
  3. The provision of other data is voluntary.
  4. Failure to provide the required data prevents the provision of the services, including ordering and contact.

 

4 Data Acquisition Methods

  1. The User’s personal data is collected directly from the data subjects, i.e. via the following:
    1. completing a contact details form when submitting a query via the Website’s form,
    2. completing the newsletter subscription form,
    3. registering an account on the Website,
    4. direct contact with the Data Administrator using the contact details available on the Website or in traditional form at the place of business.

 

5 Scope of Processed Data

  1. The scope of the processed personal data was restricted to the minimum required for providing the services as for the following:
    1. submitting a query via the contact form or via the contact details available on the Website: e-mail address, telephone number, electronic mail address, name and surname, possibly other data provided voluntarily by the data subject,
    2. newsletter subscription: name, e-mail address,
    3. registering an account on the Website or the online shop: name and surname, e-mail address, password, username,

 

6 Data Processing Period

  1. The personal data is processed for the period required to achieve the purpose for which it was collected, i.e.:
    1. throughout the term of the concluded agreement,
    2. for the period required to provide an answer to the question submitted via the contact form or telephone,
    3. until the consent’s withdrawal, if the data processing is based on the data subject’s consent.

 

7 Data Recipients

  1. The User’s personal data can be entrusted to other entities to provide services based on the Data Administrator’s commission, especially entities dealing in the following:
  2. website hosting,
  3. servicing and maintenance of the IT systems in which the data is stored, including for newsletter automation, invoice issuing, order processing purposes, etc.
  4. The User’s personal data are not provided to third countries or international organisations.

 

8 Rights of Data Subjects

  1. The data subject is entitled to:
  2. access his or her data and correct them,
  3. delete the data, provided that there are no other rules of law that oblige the Data Administrator to keep the data on archives for a specific time,
  4. transfer the data, provided that the basis for data processing is an agreement or the data subject’s consent and that the data processing takes place automatically,
  5. object against the data processing for the purpose of direct marketing performed by the Data Administrator as part of a legitimate interest, and to restrict the data processing,
  6. not be the subject of automatic profiling, provided that the Data Administrator would make decision based solely on automatic profiling and having legal implications for the data subject or similarly affecting it,
  7. inspect the processing of the data and information on who the Data Administrator is, and to obtain information about the purpose, scope and manner of data processing, the contents of the data, data source and on the manner of providing the data, including information about the recipients or the data recipient categories.
  8. withdraw consent at any time, provided that the basis for data processing was the data subject’s consent, The withdrawal of consent does not affect the legal compliance of processing done based on it prior to its withdrawal,
  9. file a complaint to the Head of the Personal Data Protection Office, if the natural person deems the personal data processing to be infringing the current relevant rules of law.
  10. It is necessary to contact the Data Administrator to exercise the right to inspect the data, access the data’s contents, correct them and to exercise other rights.

 

9 Final Provisions

  1. The Data Administrator restricts the right to amend this Privacy Policy, especially if required to do so by the applied technical solutions, amended rules of law on the data subjects’ privacy or other, substantial changes affecting the information provided to the Users.
  2. If the current Privacy Policy is amended, adequate modifications to the aforementioned entry will be made and will be in force on the date of their publication on the Website/Shop.