PRIVACY POLICY OF EXSTRACTS.PRO ONLINE STORE

TABLE OF CONTENTS:

1. GENERAL PROVISIONS

2. GROUNDS FOR DATA PROCESSING

3. PURPOSE, BASIS AND PERIOD OF DATA PROCESSING IN THE ONLINE STORE

4. RECIPIENTS OF DATA IN THE ONLINE STORE

5. PROFILING IN THE ONLINE STORE

6. RIGHTS OF THE DATA SUBJECT

7. COOKIES IN THE ONLINE STORE AND ANALYTICS

8. FINAL PROVISIONS

1.GENERAL PROVISIONS

1.1.This privacy policy of the Online Store is for informational purposes, which means that it is not a source of obligations for Service Recipients or Customers of the Online Store. The privacy policy primarily contains the rules regarding the Administrator's processing of personal data in the Online Store, including the basis, purposes and duration of personal data processing and the rights of data subjects, as well as information regarding the use of cookies and analytical tools in the Online Store.

1.2.The administrator of the personal data collected for KRZYSZTOF GRUSZCZYK conducting business activity under the name KRZYSZTOF GRUSZCZYK NATURA EKSPERT registered in the Central Register and Information on Business Activity of the Republic of Poland conducted by the minister competent for economy, holding: address of the place of business: ul. Fryderyka Chopina 14, 20-023 Lublin and address for delivery: ul. Zachodnia 8, 21-110 Ostrów Lubelski, NIP: 9191005609, REGON: 950221501, e-mail address: witamy@extracts.pro, telephone number: 500-400-014 - hereinafter referred to as the “Administrator” and being at the same time the Service Provider of the Online Store and the Seller.

1.3.Contact details of the Data Protection Officer appointed by the Administrator: Name, e-mail address: ____@_____, contact phone: +48 ________

1.4.Personal data in the Online Store are processed by the Administrator in accordance with applicable laws, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) - hereinafter referred to as “RODO” or “RODO Regulation”. The official text of the RODO Ordinance: HERE

1.5.The use of the Online Store, including making purchases, is voluntary. Likewise, the related provision of personal data by the Customer or Client using the Online Store is voluntary, subject to two exceptions: (1) conclusion of contracts with the Administrator - failure to provide, in the cases and to the extent indicated on the website of the Internet Shop and in the Terms and Conditions of the Internet Shop and this privacy policy, personal data necessary for the conclusion and performance of a Sales Contract or an agreement for the provision of Electronic Services with the Administrator, results in the impossibility of concluding such a contract. The provision of personal data in such a case is a contractual requirement, and if the data subject wishes to conclude a given agreement with the Administrator, he/she is obliged to provide the required data. Each time the scope of data required to conclude a contract is indicated in advance on the website of the Online Store and in the Terms and Conditions of the Online Store; (2) the Administrator's statutory obligations - providing personal data is a statutory requirement resulting from generally applicable laws imposing an obligation on the Administrator to process personal data (e.g. processing of data for tax or accounting purposes), and failure to provide such data will prevent the Administrator from fulfilling these obligations.

1.6.The Administrator shall exercise special care to protect the interests of persons whose personal data it processes, and in particular shall be responsible for and ensure that the data it collects are: (1) processed in accordance with the law; (2) collected for designated legitimate purposes and not subjected to further processing incompatible with those purposes; (3) substantively correct and adequate in relation to the purposes for which they are processed; (4) kept in a form that allows identification of the data subjects for no longer than necessary to achieve the purpose of processing; and (5) processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures.

1.7.Taking into account the nature, scope, context and purposes of the processing and the risk of violation of the rights or freedoms of natural persons of varying probability and gravity, the Controller shall implement appropriate technical and organizational measures to ensure that the processing is carried out in accordance with this Regulation and to be able to demonstrate this. These measures shall be reviewed and updated as necessary. The Administrator shall use technical measures to prevent unauthorized persons from obtaining and modifying, personal data sent electronically.

1.8.All words, phrases and acronyms appearing in this privacy policy and beginning with a capital letter (e.g., Seller, Online Store, Electronic Service) shall be understood in accordance with their definition in the Terms and Conditions of the Online Store available on the pages of the Online Store.

2.GROUNDS FOR DATA PROCESSING

2.1.The Administrator shall be entitled to process personal data in cases where, and to the extent that, at least one of the following conditions is met: (1) the data subject has given his or her consent to the processing of his or her personal data for one or more specified purposes; (2) the processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject prior to entering into a contract; (3) the processing is necessary for compliance with a legal obligation incumbent on the Administrator; or (4) processing is necessary for the purposes of legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

2.2.The processing of personal data by the Controller requires, in each case, the existence of at least one of the grounds indicated in sec. 2.1 of the Privacy Policy. The specific grounds for the processing of personal data of Service Recipients and Customers of the Online Store by the Administrator are indicated in the next section of the privacy policy - in relation to the given purpose of processing personal data by the Administrator.

3.PURPOSE, BASIS AND PERIOD OF DATA PROCESSING IN THE ONLINE STORE

3.1.Each time, the purpose, basis and period and recipients of the personal data processed by the Administrator results from the activities undertaken by a given Service Recipient or Customer in the Online Store or by the Administrator. For example, if a Customer decides to purchase from the Online Store and chooses personal collection of the purchased Product instead of courier delivery, his/her personal data will be processed for the purpose of executing the concluded Sales Agreement, but will no longer be made available to the carrier performing the shipments on behalf of the Administrator.