Privacy Policy

1. Administrator
The Administrator of your personal data is … as well as entities with whom we cooperate mainly in the marketing area.

These are our Partners who help us efficiently run the Store, such as hosting or IT service providers, entities handling electronic payments or credit card payments on the portal, companies that service software, support us in marketing campaigns, as well as advisory service providers. Such entities are obliged to use the personal data provided to them only for the purpose of providing services and to treat the User’s personal data as strictly confidential. All entities that may receive your personal data operate within Poland. We do not foresee transferring your personal data abroad.

For matters concerning the processing of your personal data by the Administrator, please contact us at: …

The Administrator can also be contacted:

• by correspondence to the Administrator’s registered office address

• by email to: hello@luxvilla.eu

3. Purposes, legal basis, and period of data processing

The fundamental principle applied by the Administrator is compliance with legal provisions regarding privacy and personal data protection. The Administrator acts with respect for every individual’s right to privacy. All personal data obtained through the Store are collected and stored in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), and the Act of 18 July 2002 on the provision of electronic services.

Personal data that we process is any information about an identified or identifiable natural person, meaning one who can be identified directly or indirectly, in particular by reference to an identifier such as: a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Providing any personal data when using our Store is voluntary.

Personal data are processed for the purposes of:

Creating an account in the Store and performing the contract by the Administrator for the benefit of Users (sale of goods, provision of services), including adapting Services to Users’ needs, analyzing and improving Services, and ensuring the security of Services (hereinafter “Service performance”). We will require this data from you each time you make purchases without logging in, i.e., without creating an Account in the online Store, or once when creating an Account.

Legal basis: Article 6(1)(b) GDPR – necessity for the performance of a contract to which the User is party.

Purpose of processing: Data processing will take place for the purpose of fulfilling a sales contract or in connection with the intention to conclude one, as well as fulfilling obligations imposed by applicable law.

Processing period: until the expiration of the contract between the User

and the Administrator, with the proviso that sometimes this data may also be processed after the contract expires, but only if permitted or required by applicable law, e.g., for statistical, accounting purposes, for pursuing claims, or processing personal data resulting from current information about entities entered in the National Court Register and the Central Register and Information on Economic Activity.

Processing criteria: personal data contained in the Account will be processed for the duration of the Account’s operation, i.e., for the duration of the Account management service

in the online Store. You can decide to delete your Account at any time,

which will also result in the deletion of your personal data from the database.

• statistical measurements, marketing (including data analysis and profiling for marketing purposes) of the Administrator’s products and other services.

Legal basis: Article 6(1)(f) GDPR – legitimate interest of the Administrator.

Purpose of data processing: We use personal data solely to answer your questions submitted via the contact form, during a phone call, chat, or complaint submission.

Processing period: We will process data for the time necessary to protect against potential claims. In the case of complaints, we will process personal data until a response to the complaint is provided, and then until the end of the calendar year in which the 6-year limitation period expires, for the purpose of protection against potential claims. If a dispute or proceedings are ongoing, particularly judicial proceedings, the storage period will be counted from the date of termination of the dispute or final conclusion of the proceedings.

• marketing (including data analysis and profiling for marketing purposes) concerning products and services of third parties.

Legal basis: Article 6(1)(a) GDPR – voluntary consent given

Purpose of data processing: personal data provided as part of marketing services are processed for the purpose of sending information containing image and product advertisements, and news. You can unsubscribe at any time free of charge

from receiving marketing messages.

Processing period: until consent is withdrawn. If consent is withdrawn, your data will be immediately blocked and then deleted.

3. Is there a requirement to provide personal data?

The provision of personal data is voluntary; however, failure to provide data marked as necessary for the provision of Services to you will make their provision impossible.

4. Recipients of personal data

To the extent necessary for the provision of Services to you, your data may be transferred to authorized employees of the Administrator and entities processing personal data on behalf of the Administrator, including IT service providers, research companies, as well as entities authorized to obtain them under applicable law, including law enforcement agencies in the event of a relevant request from the authority in accordance

with the appropriate legal basis.

5. Your rights related to the processing of personal data

Under applicable regulations, you have the following rights in connection with the processing of your personal data by … Wrocław:

You have the right to:

• Right of access (Art. 15 GDPR), i.e., to request information from the Administrator about the processing of your personal data, meaning confirmation as to whether personal data concerning you are being processed. If data about a person is being processed, they are entitled to obtain access to it, obtain a copy of it, and obtain the following information: about the purposes of processing, categories of personal data, information about recipients or categories of recipients to whom the data has been or will be disclosed, about the data retention period or the criteria for determining it, about the rights of the person related to the processing of their personal data, about the possibility of lodging a complaint with the supervisory authority, about the source of personal data acquisition, if not obtained directly from the data subject, and about profiling and automated decision-making;

• Right to rectification (Art. 16 GDPR), i.e., if a person obtains information that their personal data processed by the Administrator is inaccurate, outdated, or incomplete, they have the right to request its immediate rectification or completion;

• Right to erasure (Art. 17 GDPR), meaning they can request the erasure of their personal data, provided that if the person has given consent to the processing of personal data, the request for erasure will have the same effect as withdrawing consent;

• Right to restriction of processing (Art. 18 GDPR), meaning to request the cessation of their processing, with the exception of their storage, in situations where: the data subject contests the accuracy of the personal data; the data subject contests the lawfulness of the processing of personal data by the Administrator; the Administrator no longer needs the data, but they are required by the data subject for the establishment, exercise, or defense of legal claims; the data subject has objected to the processing and this objection has been acknowledged by the Administrator;

• Right to data portability (Art. 20 GDPR), which means the right to receive personal data provided to the Administrator in a structured, commonly used, machine-readable format, so that it can be transmitted directly to another entity, provided that this is technically feasible;

• Right to object to processing (Art. 21 GDPR), which means the right of the data subject to object to the use of their personal data for direct marketing purposes of products and services, as well as other marketing activities carried out by the Administrator sent via email or SMS. An objection does not result in the deletion of data, but only in the cessation of its use by the Administrator for marketing purposes.

• Right to withdraw consent, which means that in cases where data processing is based on granted consent, the data subject has the right to withdraw the granted consents for specific processing purposes at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal;

• Right to lodge a complaint with the competent supervisory authority (Art. 77(2) GDPR) if the data subject believes that data is being processed unlawfully, they have the right to lodge a complaint with the competent supervisory authority: the Personal Data Protection Office.

To exercise the rights indicated above, please contact the Administrator at: hello@luxvilla.eu or contact form https://luxvilla.eu/formularz-kontaktowy

To the extent that your data is processed based on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Consent can be withdrawn by sending a declaration of withdrawal of consent via the contact form https://luxvilla.eu/#formularz-kontaktowy

6. Cookie Policy

We use cookies to improve the functionality of the website and its speed. We also use cookies to tailor content offers to your expectations and preferences established based on your online activity while browsing websites. Offers directed to you may be placed both on our Website and on the websites of other entities. Due to our cooperation with other entities in the promotion and advertising of our products, cookies may be placed by these entities. Cookies may collect data about your online behavior or your IP address. Cookies are also used to collect anonymous aggregated statistics about browsing articles and products on our service’s pages, to maintain the user’s session on the website (after logging in), thanks to which the user does not have to re-enter their login and password on each subpage of the service.

• Store, also known as Cookies, which are information saved by servers on the User’s end device. This information can be read by servers each time a connection is made from that end device.

• Cookies are used by us, among other things, to adapt the content and services available on the Website to the individual needs and interests of individual Users. Cookies provide statistical data on User traffic and their use of individual pages. Cookies are also placed to monitor User traffic between the Website and cooperating websites.

• You can disable the option to accept Cookies in your browser at any time; however, disabling Cookies may hinder or prevent the use of certain services. In some cases, you can also set your browser to ask for user consent for Cookies each time. This will give you control over Cookies but may also slow down your browser.

• Failure to change the settings regarding Cookies means that they will be placed on your end device, and thus we can store information on your end device and access it.

• We inform you that we are not responsible for the use of Cookies on other websites, accessible to Users through links placed on our Portal.

• We may also use other technologies with functions similar or identical to Cookies. The rules set out in this Privacy Policy regarding “Cookies” also apply to these other similar technologies used within websites.

• Cookies usually contain the name of the website domain from which they originate, their storage time on the end device, and a unique number. Cookies may be placed on the User’s end device and then used by us to monitor traffic and activity on the Portal.

• Our Portal uses the following types of Cookies:

– “essential” Cookies, enabling the use of services available within the service, e.g., enabling session use

– “functional” Cookies, enabling the “remembering” of settings selected by the User and personalization of the User interface, e.g., regarding the selected mobile/classic version, last phrases entered by the User, website appearance, bookmark mechanism status, etc.

– “analytical” Cookies, enabling the monitoring of User activity on the service.

• Cookies are not used for processing or storing personal data, they cannot directly identify the User, and they do not introduce configuration changes in the browser and telecommunications end device.

7. Questions and complaints regarding privacy protection:

Any questions and complaints related to how the Administrator processes personal data should be directed to: hello@luxvilla.eu

8. Retention period for other data:

We store data for the duration of the contract for the provision of electronic services to you by the Store.

We also store data after the contract period ends, for the following purposes:

• pursuing claims arising from the above contract or contracts concluded in connection with the purchase of services or goods by Store customers

• fulfilling legal obligations, e.g., tax obligations;

• combating fraud or abuse to the detriment of the Store, customers, and other persons;

• statistics and archival documentation.

• We store personal data for marketing purposes for the duration of the electronic services contract or until an objection is raised.

The Administrator reserves the right to make changes or updates to the Privacy Policy, about which it will inform by publishing relevant content on the website.