LAGUNA STORE Sp. z o.o. PRIVACY POLICY

§ 1. General Information

Who is the Controller of Your Personal Data?

1. This Privacy Policy of Laguna Store Sp. z o.o. sets out the principles governing the processing, collection, use, protection and deletion of personal data provided by Users, Customers and Business Partners in connection with all types of agreements, electronic services, including the online store, the B2B portal, and any other forms of providing personal data. Hereinafter, Laguna Store Sp. z o.o. shall be referred to as “Laguna”.
2. The Controller of your personal data (the “Data Controller”) is Laguna Store Sp. z o.o., with its registered office in Elbląg, Poland, at 2A Lotnicza Street, 82-300 Elbląg, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court in Elbląg, 5th Commercial Division of the National Court Register (KRS), under KRS No. 0001199019, NIP (Tax Identification Number): 5783181120, REGON: 542953401. The Seller and the provider of the IT systems supporting Laguna Store Sp. z o.o. also act as Data Controllers where required by applicable law.
3. If you have any questions regarding the processing of your personal data, you may contact the Data Controller by e-mail at info@lagunastore.pl

                                                      § 2. Personal Data Protection

How does Laguna protect your personal data?

1. Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
2. Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. As a general rule, providing personal data is voluntary and is based on your consent. However, in certain circumstances, providing such consent may be necessary. Failure to provide the required consent may result in the inability to make proper use of all functionalities offered by Laguna.
4. In exceptional cases, personal data may be processed without your consent where such processing is necessary for the conclusion and performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. Failure to provide the personal data required in such cases, within the scope specified in the forms available through Laguna’s electronic services, will make it impossible to conclude the relevant contract. The categories of personal data required for the performance of a contract are described in this Privacy Policy or will be communicated to you in subsequent correspondence.

5.   Your personal data may also be processed without your consent where such processing is necessary for compliance with a legal obligation to which the Data Controller is subject (for example, where personal data is required to fulfil statutory obligations, including accounting and tax obligations), and failure to provide such data would prevent the Controller from fulfilling those obligations. Personal data may also be processed where such processing is necessary for the purposes of the legitimate interests pursued by the Data Controller.

6.   To learn more about your rights in relation to the processing of your personal data, please refer to the following sections of this Privacy Policy.

7.  Laguna implements appropriate technical and organisational measures to ensure the security of your personal data, exercising particular care to ensure that personal data is:

a. processed lawfully, fairly and in a transparent manner;

b. collected for specified, explicit and legitimate purposes;

c. adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed;

d. retained in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed;

e. processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, through the implementation of appropriate technical and organisational measures.

8. Laguna has implemented appropriate technical and organisational measures to ensure that the processing of personal data complies with the applicable legal requirements. These measures are reviewed and updated whenever necessary.

What Personal Data Do We Collect? How Long Do We Retain It?

1. The Data Controller collects personal data for the purpose of providing the services offered by Laguna and carrying out activities requested by the data subject, including, but not limited to, the conclusion and performance of contracts, the provision of after-sales services, and the administration of loyalty programmes.

2. The Data Controller may process the following categories of personal data (to the maximum extent necessary):

    a. Personal data provided through forms, including the account registration form, contact form, order form, loyalty programme registration form, and information contained in contracts, such as: first name and surname, e-mail address, date of birth, correspondence address and delivery address.

    b. Personal data obtained from other sources, in particular through the use of Cookies, including information such as: device ID, MAC address, IP address, operating system, device settings, preferred language, browser type, information regarding your activity within our electronic services, and information concerning your interactions with the content made available through those services.

    c. First name and surname, e-mail address, contact telephone number, delivery address (street, building number, apartment number, postal code, city, country), and residential address where different from the delivery address. In the case of business customers, the Data Controller also processes information identifying the business activity, including the company name, Tax Identification Number (NIP), the registered office or business address, as well as personal data identifying the customer’s authorised representative.

3. As a general rule, personal data is processed and retained only for the period necessary to perform contracts, administer loyalty programmes, and enable Laguna to comply with its obligations under applicable laws and regulations.

4. Thereafter, your personal data may be retained for the periods prescribed by the applicable laws governing the limitation of legal claims.

5. Personal data processed on the basis of your consent will be processed and retained by Laguna until such consent is withdrawn.

6. Personal data processed on the basis of the Data Controller’s legitimate interests will be retained for the period necessary to fulfil those interests or until you object to such processing, provided that Laguna determines that the objection is justified.

What Are the Legal Bases for Processing Personal Data? For What Purposes Do We Use Your Data?

1. Personal data is processed in accordance with Article 6(1) of the General Data Protection Regulation (GDPR). Subject to the fulfilment of the applicable legal requirements, your personal data may be processed on one or more of the following legal bases:

    a. Article 6(1)(a) GDPR – the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

    b. Article 6(1)(b) GDPR – processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.

    c. Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the Data Controller is subject.

    d. Article 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular where the data subject is a child.

2. Personal data may be processed only where at least one of the legal bases referred to above applies. Where processing is carried out on the basis referred to in point 1(d) above, namely the legitimate interests of the Data Controller, Laguna will inform you of the existence of such legitimate interest whenever it is not already covered by the purposes described in this Privacy Policy.

3. The Data Controller may process personal data for the following purposes:

    a. The conclusion and performance of service agreements, or the taking of steps at the request of a prospective Customer prior to entering into such agreements. Personal data is therefore processed to enable the provision of Laguna’s electronic services, allowing you to make full use of their functionalities and benefits, including placing orders without having to complete purchase forms on each occasion, managing your consents within the services, and using other available features.

    b. The conclusion and performance of Sales Agreements, or the taking of steps at the request of a prospective Customer prior to entering into a Sales Agreement. Personal data is required to process your order and to ensure the proper performance of the concluded agreement. Without the necessary information, Laguna will be unable to reserve products, dispatch them to you, or contact you regarding your order.

    c. Receiving, handling and resolving complaints. In order to maintain the highest quality standards, Laguna offers its Customers products of the highest quality. Nevertheless, despite rigorous quality control procedures, it is not possible to eliminate entirely the risk of manufacturing defects that may remain undetected.

    d. Presenting advertisements, offers and promotions relating to products and services provided by Laguna and its business partners, in particular in connection with the provision of electronic services.

    e. Assessing and analysing Customers’ activity by means of automated processing of personal data (profiling) in order to present advertisements, offers, promotions and products tailored to your interests, particularly in connection with the provision of electronic services, as well as through market research and statistical analyses. Such profiling, advertisements, offers and promotions will not produce legal effects concerning you or otherwise significantly affect your decisions.

    f. Conducting correspondence with Customers and responding to enquiries.

    g. Complying with legal obligations arising from applicable laws and regulations, including, in particular, tax and accounting legislation, especially in connection with the performance of paid contracts.

    h. Pursuing the legitimate interests of the Data Controller, including, in particular, the establishment, exercise or defence of legal claims.

What Rights Do You Have as a Data Subject?

1. In accordance with the applicable data protection laws, you have the right to request access to your personal data, the right to rectification, erasure or restriction of processing, the right to object to the processing of your personal data, and the right to data portability. Where processing is based on your consent, you also have the right to withdraw your consent at any time.
2. The withdrawal of consent shall not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.
3. Please note that we may not be able to comply with all requests relating to the processing of your personal data where we are required to retain or process such data in accordance with applicable legal obligations.

What Should You Do If You Believe Your Personal Data Is Being Processed Improperly?

1. You may exercise your rights by contacting us via e-mail at ado@laguna.pl. Upon receipt of your request, we will inform you, as soon as reasonably practicable, of the actions taken or, where applicable, the reasons why your request cannot be fulfilled.
2. If you are not satisfied with the way your personal data is processed or protected, you have the right to lodge a complaint with the competent supervisory authority, namely the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

Is Your Personal Data Shared with Third Parties?

1. Your personal data may be disclosed to service providers and other entities engaged by Laguna to perform contracts concluded with you and to provide services necessary for the proper operation of Laguna’s electronic services, including the performance of contracts, websites, the B2B portal, the loyalty programme and the online store. Such entities include, for example, courier companies, software providers and payment service providers.
2. Your personal data is disclosed only to the extent necessary. All recipients of your personal data are bound by confidentiality obligations and, pursuant to the relevant agreements, are authorised to process such data solely for the purposes entrusted to them while applying data protection standards that are no less stringent than those applied by Laguna.
3. In exceptional cases, depending on the nature of the services provided, certain recipients of your personal data may independently determine the purposes and means of processing within the scope of the agreements concluded with Laguna and the legal obligations applicable to them. This applies in particular to postal operators, transport service providers and the law firms providing legal support to Laguna.
4. Laguna may disclose your personal data to competent public authorities where required to do so under applicable law.
5. If you consent to the use of cookies (hereinafter referred to as “Cookies”), your personal data may also be shared with external service providers responsible for delivering content and marketing communications. Further information is available in the section entitled “Cookies.”
6. As a general rule, Laguna does not transfer your personal data to third countries outside the European Economic Area (EEA).
7. In exceptional circumstances, your personal data may be transferred to our partners processing data outside the European Economic Area (EEA), primarily in the United States of America.
8. Where such a transfer takes place, your personal data will be transferred only to the extent necessary for the provision of services to Laguna by those partners, particularly IT-related services.
9. The security of your personal data is ensured through the use of Standard Contractual Clauses (SCCs) approved by the European Commission. Wherever possible, Laguna also seeks to cooperate with partners participating in recognised international data protection frameworks applicable under the relevant legislation.
10. A copy of the safeguards applied by Laguna in relation to transfers of personal data outside the EEA is available from the Data Controller upon request.

Marketing Communications and How to Opt Out of Receiving Information from Laguna

1. When using Laguna’s electronic services (including the online store, the B2B portal, websites and the loyalty programme registration form), you may choose to consent to receiving additional marketing communications relating to the products and services offered by Laguna, as well as products and services offered by our business partners.
2. By granting the above consent, you agree to receive commercial information from Laguna by electronic means at the e-mail address provided by you. Such communications may include information regarding products and services offered by Laguna, as well as marketing communications relating to products and services offered by entities cooperating with Laguna, within the meaning of the Polish Act of 18 July 2002 on the Provision of Electronic Services (Journal of Laws of 2020, item 344, as amended).
3. If you wish to stop receiving marketing communications, including information about promotions, special offers, product updates or other information relating to Laguna’s electronic services, you may withdraw your consent at any time by notifying us in accordance with the procedures set out in this Privacy Policy. You may also withdraw your consent by using the unsubscribe function available within our electronic services, by clicking the unsubscribe link included in the marketing messages you receive, or by sending an e-mail requesting the cessation of marketing communications to ado@laguna.pl

Cookies

1. Laguna uses Cookies to ensure that its electronic services, including the websites www.laguna.pl, www.gustavson.com.pl, www.animadomus.com.pl and www.skleplaguna.pl, together with the functionalities available through them, operate properly and display content tailored to your interests and preferences.

• Cookies are small text files stored by your web browser on the hard drive of your computer, tablet, smartphone or other mobile device. They are used to store information that enables the identification of you and your browser, as well as to remember your most recent activities.
• Cookies are divided into essential cookies, which are necessary for the proper functioning of our electronic services, and optional cookies, the use of which is not required for the provision of those services.
• Most web browsers accept Cookies by default. You may configure your browser settings to define the conditions for the use of Cookies. Accordingly, you may partially (for example, temporarily) restrict or completely disable the storage of Cookies on your device. Please note that disabling Cookies may affect the functionality of certain electronic services, including the online store and Laguna’s websites. Optional Cookies will not be stored on your device until you have given your consent.
• Your browser settings relating to Cookies are important for determining your consent to the use of Cookies by our electronic services. In accordance with applicable law, such consent may also be expressed through your browser settings. If you do not wish to consent to the use of Cookies, you should change your browser settings accordingly. Detailed information on changing Cookie settings and deleting Cookies in the most popular web browsers can be found in the relevant browser help section.
• The Data Controller may use Google Analytics services provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) within its electronic services, including its websites, in order to analyse traffic on Laguna’s electronic services. Information collected through these services is processed in an anonymised form (so-called operational data that does not allow the identification of individual users) for the purpose of generating statistical reports supporting the administration and improvement of our electronic services.The data collected is aggregated and anonymous and does not contain information that directly identifies visitors to Laguna’s electronic services. Through Google Analytics, the Data Controller may collect information such as the traffic sources and acquisition channels of visitors, their behaviour on the websites, information about the devices and web browsers used to access the services, IP address, domain, geographical information, demographic data (such as age and gender), and users’ interests.

§ 3. Final Provisions

1. In the operation of its electronic services, including the online store, websites and other online platforms, Laguna makes every reasonable effort to ensure that your personal data is protected to the greatest extent possible. Nevertheless, Laguna’s electronic services may contain links to third-party websites.
2. The Data Controller makes every reasonable effort to ensure that links provided within Laguna’s electronic services do not lead to websites that process your personal data unlawfully. However, Laguna shall not be responsible for the personal data processing practices adopted by such third-party websites or platforms, nor for their compliance with applicable data protection laws. Accordingly, Laguna encourages you to review the privacy policies of any external websites you choose to visit.