Privacy Policy

1.  In connection with users' use of the website operating under the domain address www.galilu.pl (“Store”), the administrator collects information about the Store's users, including personal data. Data are collected solely for the purpose of providing services within the Store, for responding to the Store's users, as well as for the Store's marketing purposes. The Administrator also collects information about the activity of the Store's users. 

2.  This Policy defines the purposes and manner of processing the Store users' personal data, the legal basis for processing personal data, as well as the rights of data subjects and the rules for the protection of personal data. The Policy also indicates the types of cookies and other tools used within the Store, as well as the purposes and rules of their use. 

3.  Before starting to use the Store, each User is obliged to read this Policy, accept it and comply with its provisions. 

4.  This Policy constitutes an integral part of the Terms and Conditions of the Online Store Galilu.pl.

I. DEFINITIONS

1.  Administrator – GALILU SPÓŁKA JAWNA - WARYNIA GRELA, AGNIESZKA ŁUKASIK with its registered office in Warsaw, ul. Mokotowska 26, 00-561 Warsaw, entered in the register of entrepreneurs kept by the District Court for m.st. Warsaw in Warsaw – XII Commercial Division of the National Court Register under number KRS 0000245783, NIP 5252350392. The Administrator is the controller of the Store's personal data within the meaning of the provisions of the GDPR. 

2.  Cookies – text files placed on the end user's device by websites visited by the user. Cookies collect information that facilitates users' use of the website by remembering site visits and actions taken. 

3.  Personal data – information about an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name and surname, an identification number, location data, an online identifier or one or more specific factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4.  GDPR – Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). 

5.  Store – the website operated by the Administrator at the domain address www.galilu.pl. 

6.  User – a natural person visiting the Store or using the Store's functionality.  

II. PERSONAL DATA

1. The personal data of the Store Users are processed for the purposes of: providing electronic services within the Store, including use of the Store, maintaining an individual account (“My Account”) and sending the Newsletter, preparing responses to product inquiries, publishing product reviews, concluding and performing sales contracts for products ordered by the User and their delivery to the indicated address, handling complaints, for marketing of the Store's products and services, for statistical purposes, for the purpose of fulfilling legal obligations incumbent on the Administrator (warranty provisions, tax regulations), as well as to provide answers and explanations in case the User contacts the Store. 

2. The legal basis for processing Personal Data is:

·     Art. 6(1)(b) GDPR – performance of a contract for the provision of electronic services including maintaining and servicing My Account, providing information and the ability to place orders, providing contact forms, providing the Newsletter service;  
·     Art. 6(1)(b) GDPR - fulfillment of the placed order and performance of the sales contract for products in the Store;
·     Art. 6(1)(c) GDPR – compliance with legal obligations incumbent on the Administrator, resulting in particular from tax regulations and accounting rules;
·     Art. 6(1)(f) GDPR - the Administrator's legitimate interest, consisting in the protection of its rights, which includes pursuing claims or defending against claims;
·      Art. 6(1)(f) GDPR - the Administrator's legitimate interest, consisting in conducting analyses of Users' activity and the way the Store is used in order to improve the Store's functionality;
·     Art. 6(1)(f) GDPR - the Administrator's legitimate interest, consisting in marketing and advertising the Store's activities;
·     Art. 6(1)(a) GDPR – the data subject’s consent in the case of Personal Data provided optionally when such consent has been obtained. 

3. For the purpose of fulfilling orders in the Store (preparation and conclusion of the sales contract) the following categories of personal data are processed: first name, surname, contact address, e-mail address, telephone number (for the purpose of contact with the courier company). In the case of issuing an invoice, the User's VAT ID (NIP) and company name are also processed. Personal data regarding a specific order will be stored for the period required by law and for the period in which claims under warranty or other claims related to the sale of products may be made.

4. For the purpose of creating and maintaining My Account, the following categories of personal data are processed: first and last name and e-mail address, as well as other data provided by the User while using My Account. In the event of deletion of My Account, the data will be deleted immediately, unless the obligation to process the data results from the fulfillment of legal obligations incumbent on the Store (resulting from warranty provisions and tax regulations).

5. For the purpose of handling complaints the following data are processed: e-mail address and other User data indicated in the complaint. These data will be processed to the extent necessary to handle the complaint, in accordance with the provisions of applicable law and to resolve any dispute that may arise as a result of the submitted complaint.

6. For the purpose of providing electronic services in the form of sending the Newsletter, the following category of personal data is processed: e-mail address. Details regarding the processing of personal data of Newsletter recipients are described in the Newsletter Terms and Conditions.

7. In connection with contact with the Store (e-mail, telephone, Chat) the following personal data related to product inquiries and providing answers are processed: first and last name and e-mail address or telephone number, depending on the method of contact with the Store. The data will be processed solely for the purpose of providing an answer to the question asked. The data will be deleted within 30 days from the matter being resolved or the question being answered.

8. In the case of exercising the right of withdrawal from the contract and returning received payment, information about the User's bank account number may also be processed if the refund is to be made by bank transfer to that account.

9.  For the Administrator's internal needs, including conducting analyses of the Store's operation and improving the Store's quality for its visitors, the Administrator also collects the following data ______. Some of the information indicated in the previous sentence may be collected by means of cookies and similar tracking technology. This information will constitute personal data where the Administrator is able to associate it with specific Users. 

10. Personal data will be disclosed to external entities providing services to the Administrator, including IT service providers, entities such as banks and payment service operators, entities providing accounting and legal services, couriers for the purpose of order fulfillment and entities providing marketing and advertising services for the Store. User data may be transferred to the product manufacturer or distributor for the purpose of handling complaints. 

11. Providing personal data by the User is voluntary, however failure to provide them may make it impossible to provide electronic services and to fulfill orders in the Store or to respond to questions and process complaints. 

12. Under the rights granted by law, the User has the right to:

·     obtain information about the processing of his or her personal data, including the categories of data and any recipients of his or her data;
·     rectify incorrect or complete incomplete or outdated personal data;
·     delete personal data - by submitting an objection to their processing;
·     restrict the processing of personal data – if the legal requirements justifying such restriction are met;
·     data portability – i.e. to receive personal data in a readable format or transfer data to a designated entity,
·     lodge an objection to the processing of personal data. 

12. Every User has the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office, ul. Stawki 2, 00 - 193 Warsaw, if they consider that their personal data are being processed unlawfully or not adequately protected. 

III. CONTACT WITH THE ADMINISTRATOR 

1.  All requests, questions and demands of the User related to the processing of Personal Data, the rules for using cookies and the privacy policy applied by the Administrator may be directed:

·     by post to the Administrator's registered office address,
·     by telephone at 22 121 99 32 ,
·     electronically to the e-mail address [email protected].

IV. DATA SECURITY

1.  The Administrator ensures the security of personal data through appropriate technical and organizational measures aimed at preventing unlawful processing of data and their accidental loss, destruction or damage. 

2. The Administrator continuously conducts risk analysis to ensure that personal data are processed by him in a secure manner. The Administrator ensures that access to data is granted only to authorized persons and only to the extent necessary due to the tasks performed. The Administrator ensures that all operations on personal data are logged.

3. The Administrator takes necessary actions to ensure that subcontractors and other cooperating entities provide guarantees of applying appropriate security measures in each case when they process Personal Data at the Administrator's instruction.

VI. COOKIES

1. The Store's website uses cookies, web analytics services and plugins of selected social media. 

2. Cookies are small text files sent and stored on the User's end device. Cookies allow recognition of the User's preferences and adaptation of website functionalities to his or her needs. A cookie file usually contains the name of the website from which it originates, the cookie's lifetime and its value, which is usually a randomly generated unique number. Detailed information about the Store's use of cookies and other services is provided below. 

VII. TYPES OF COOKIES

1. The Store uses the following types of cookies:

·     session cookies, which are stored on the device until the browser session ends, after which they are permanently removed from the device's memory. The use of session cookies does not allow for the collection of personal data or other confidential information about the user;

·     persistent cookies, which are stored on the device until they are deleted by the user, and the end of the browser session or turning off the device does not remove them from that device. The use of persistent cookies does not allow the retrieval of personal data or any confidential information from the device. Persistent cookies are used in particular to store information about the preferred start page, or information about favorite products and the User's individual settings; 

·     technical (necessary) cookies, which are required for the proper use of the service (Store) and its functionalities; 

·     analytical cookies, which provide information about how Users use the Store, providing data about visited subpages, selected or viewed products and the time spent in the Store. These cookies do not allow the collection of personal data and do not identify the user as a specific person, but only help to improve the Store's operation based on observed anonymous behaviors of individual users. 

2. The Store also uses external cookies that monitor the user's use of other websites, which enables the Store to make its marketing materials available on other sites and through various communication channels.
3. Cookies used by the site

Name
TYPE (necessary/analytical)
Validity period
description

4. The Store uses cookies in particular to:

·     adapt the content of the Store's web pages to the User's preferences and optimize the use of the Store;
·     recognize the User's device and locate it and display the website adjusted to the User's needs;
·     remember selected settings and personalize the Store interface (language or user's region) and adjust font size and the Store's website appearance; 
·     remember which pages the user visits and recommend appropriate content based on that; 
·     maintain the session after the User logs into the Store;
·     remember the location to correctly configure selected Store functions, taking location into account; 
·     improve the structure and content of the Store by analyzing viewership statistics of visits to the Store's web pages; 
·     display advertisements that may interest users;
·     ensure the security and reliability of the Store and properly protect Users' data. 

VII. OTHER TOOLS

1.  The Store and its partners use the solutions and tools indicated below for analytical and marketing purposes. Detailed information about the tools used can be found in each partner's privacy policy.

·     Google Analytics cookies - used by Google to analyze how users use the Store to create statistics and reports. Google does not use the collected data to identify individuals nor does it combine this information to enable identification of natural persons. Detailed information: https://www.google.com/intl/pl/policies/privacy/partners.
·     Facebook pixels - enabling measurement of the effectiveness of advertising campaigns run by the Store on Facebook. Detailed information: https://pl-pl.facebook.com/help/443357099140264?helpref=about_content. 

VIII. HOW TO MANAGE COOKIES

1. At any time the User may independently change cookie settings and determine the conditions under which cookies are stored on his or her device and how they can access it. Cookie settings can be changed using the web browser settings or via the service configuration. Settings may block automatic handling of cookies in the web browser settings or prompt every time that cookies have been placed on the device. Detailed information on the possibility and methods of handling cookies is available in the settings of the web browser used by the User. 

2. At any time the User may delete cookies using the available functions in the web browser.

3. Limiting the use of cookies may affect some Store functionalities. The data that the Store transfers to external entities is used solely to provide the services described in this document. Analytical tools collect only statistical data to optimize the Store's website and present information that may interest the Store's users.