Privacy Policy of the WoolSoCool Service

1. DEFINITIONS

Whenever the terms listed in paragraph 1 are used in this Privacy Policy, they shall be understood in accordance with the definitions indicated below.

1.1. Administrator or WoolSoCool - Mateusz Wójtowicz running his sole proprietorship under the business name "Mateusz Wójtowicz Gmoods", 03-528 Warsaw, Poland, Smoleńska St. 82/45, Tax Identification Number (NIP): 8732870319, National Business Registry Number (REGON): 121147749. Contact with the Administrator is possible via e-mail: contact@woolsocool.com.

1.2. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

1.3. Newsletter Terms and Conditions - WoolSoCool's terms and conditions for the delivery of marketing content, located at: www.woolsocool.com/en/terms-and-conditions-newsletter

1.4. User - means any natural person visiting the Website or using one or more of the functionalities described in the Policy.

1.5. Personal Data or Data - any information about a natural person identified or identifiable by one or more factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity, including device IP, location data, internet identifier, information collected through cookies and other similar technology.

1.6. Policy - this Privacy Policy, located at: www.woolsocool.com/en/privacy-policy

1.7. Service or Website - the website including the collection of all data, information, content, and functionalities available through it, located at: www.woolsocool.com/en/home

1.8. Social Media - Facebook, Instagram, and Pinterest accounts used by WoolSoCool.

1.9. Terms of Service - the terms and conditions of the WoolSoCool Service, located at: www.woolsocool.com/en/terms-and-conditions

2. DATA PROCESSING IN CONNECTION WITH THE USE OF THE SERVICE

2.1. In connection with the User's use of the Website, the Administrator collects personal data to the extent necessary to provide the services offered, as well as information about the User's activity on the Website. The detailed principles and purposes of the processing of personal data collected during the use of the Website by the User are described below.

2.2. The administrator of the personal data used on the WoolSoCool website is Mateusz Wójtowicz running his sole proprietorship under the business name "Mateusz Wójtowicz Gmoods", 03-528 Warsaw, Poland, Smoleńska St. 82/45, Tax Identification Number (NIP): 8732870319, National Business Registry Number (REGON): 121147749, e-mail: contact@woolsocool.com.

3. PURPOSES AND LEGAL BASES OF DATA PROCESSING AND CATEGORIES OF DATA

3.1. Personal data of all persons using the Website (including IP address or other identifiers and information collected through cookies or other similar technologies), and who are not registered Users (i.e. persons who do not have an account on the Website), are processed by the Administrator:

3.1.1. in order to provide services electronically in terms of providing Users with access to content collected on the Website - in which case the legal basis for processing is the necessity of processing for the performance of the contract (legal basis for processing: Article 6(1)(b) GDPR);

3.1.2. for analytical and statistical purposes, in which case the legal basis for the processing is the Administrator's legitimate interest (legal basis for processing: Article 6(1)(f) GDPR), consisting of conducting analyses of Users' activities, as well as their preferences in order to improve the functionalities used and services provided.

3.2. The Administrator processes Users' personal data in order to:

3.2.1. registration of the customer's account on the Website in accordance with the Terms and Conditions of the Website (legal basis: Article 6(1)(b) of the GDPR);

3.2.2. in order to provide services related to the registration, maintenance and operation of an account on the Website in accordance with the Terms and Conditions of the Website - the legal basis for processing is the necessity of processing for the performance of the agreement (legal basis for processing: Article 6(1)(b) GDPR).

3.3. In the account registration process, the provision of personal data such as an e-mail address and a password is necessary for the registration of a customer account on the Website. The provision of additional data within the account is voluntary.

3.4. The Administrator processes Users' personal data in order to:

3.4.1. the establishment, shaping of the content and proper execution of the agreement concerning the services provided by the Administrator electronically within the Service (legal basis: Article 6(1)(b) GDPR);

3.4.2. The Administrator processes Users' personal data in order to manage orders placed and payments made (legal basis: Article 6(1)(b) GDPR);

3.4.3. for statistical purposes and for ICT security related to the website (legal basis Article 6(1)(b) GDPR).

3.5. The provision of personal data is necessary for the proper performance of the contract relating to the services provided by the Administrator electronically within the Service.

3.6. The Administrator processes Users' personal data in order to process complaints and handle returns, in accordance with the Terms of Service (legal basis: Article 6(1)(b) GDPR).

3.7. The provision of personal data is necessary to process complaints and handle returns in accordance with the Terms of Service.

3.8. The Administrator processes Users' personal data in order to carry out the service concerning the provision of marketing content, provided by the Administrator electronically, in accordance with the Newsletter Terms and Conditions (legal basis Art. 6(1)(b) GDPR).

3.9. The provision of personal data is necessary for the correct performance of the service regarding the provision of marketing content, provided by the Administrator electronically.

3.10. The Administrator processes the personal data of Users who follow and interact with WoolSoCool's profiles on Facebook, Instagram and Pinterest in order to:

3.10.1. to inform you about the services we provide and to build a positive image of WoolSoCool (legal basis: Article 6(1)(f) of the GDPR), which is the Administrator's legitimate interest in undertaking marketing and recognition-building activities for WoolSoCool;

3.10.2. responding to queries and comments received via social media (legal basis: Article 6(1)(f) GDPR), which is the Administrator's legitimate interest in responding to the queries and comments of observers.

3.11. The provision of personal data is necessary in order to observe WoolSoCool's social media profiles and to respond to queries and comments via these media.

3.12. The following data may be processed: your name or nickname, other information that is publicly available on your Social Media profile or that you voluntarily provide to WoolSoCool.

3.13. For detailed information on the processing of data by the portals, please follow the link below:

Meta Privacy Policy

Pinterest Privacy Policy

3.14. The Administrator processes personal data in order to identify the sender and to handle the enquiry, request or notification sent via the contact form on the Website or sent via e-mail by the User to the following address: contact@woolsocool.com (legal basis: Article 6(1)(f) GDPR), which constitutes the Administrator's legitimate interest in responding to the reported enquiry.

3.15. The following data may be processed: your name, email address or other information you provide to us in the course of contact.

3.16. The Administrator processes Users' personal data for the purpose of possibly establishing and asserting claims or defending against claims (legal basis: Article 6(1)(f) GDPR), which constitutes the Administrator's legitimate interest.

3.17. Fulfilment of legal obligations incumbent on WoolSoCool, in particular those arising from accounting obligations (legal basis Article 6(1)(c) of the GDPR).

4. COOKIES AND OTHER SIMILAR TECHNOLOGIES

4.1. On the Website, the Administrator and trusted partners, use cookies and other similar technologies. Cookies are small text files installed on the User's device when browsing our Website. Cookies collect information making it easier to use the Website, e.g., by remembering a User's visits to the Website and his/her actions.

4.2. The Administrator processes Users' personal data in order to:

4.2.1. Provision of services - in order to provide Users with the services and functionalities of the Website that the User wishes to use. The necessary cookies may only be installed by the Administrators through the Service (legal basis: Article 6(1)(b) GDPR);

4.2.2. for analytical purposes - for analytics and statistical purposes - the legal basis for processing involving analysis of User activity in order to improve functionality and services provided is the administrator's legitimate interest in keeping statistics on the use of the Website in connection with the consent expressed by the User via a cookie banner (legal basis: Article 6(1)(f) GDPR);

4.2.3. for marketing purposes - in order to provide advertisements and evaluate their performance within the Service - the legal basis of the processing consisting in analyzing the activity of Users in order to improve the functionality and services provided is the administrator's legitimate interest in carrying out advertising activities on the basis of consent expressed by the User via a cookie banner (legal basis: Article 6(1)(a) GDPR).

4.3. The use of cookies for the purposes of providing services is necessary for the use of the Website. The use of cookies for analytical and marketing purposes is voluntary and takes place in accordance with the User's consent. Consent can be withdrawn at any time using the functionalities of the Service.

4.4. The following User data may be processed: IP address, other identifiers, and data stored in cookies or other similar technologies.

4.5. Cookies can be managed via the consent management platform, which allows the cookies used to be adapted to the User's preferences.

4.6. The user can change the settings of his or her browser accordingly to disable cookies. Changing your browser settings may restrict the use of both service and analytical and marketing cookies. However, we would like to inform you that this may significantly hinder or prevent your use of the Website.

4.7. To do this, use the option of the browser used to connect to the Website and select the option to automatically reject cookies. These settings usually also allow you to manage cookies.

4.8. Below you will find links to examples of the official websites of the manufacturers of the most commonly used web browsers, where you will find information on the steps required to change the settings of the browser in question to the extent described above:

4.8.1. Microsoft Edge: Microsoft Edge Support

4.8.2. Mozilla Firefox: Mozilla Firefox Privacy

4.8.3. Google Chrome: Google Chrome Privacy

4.8.4. Opera: Opera Privacy

4.8.5. Safari: Safari Privacy

4.9. The user can also determine the possibility of storing or accessing cookies at any time and via the settings of the software installed on their device.

5. DATA RETENTION

5.1. As a general rule, data shall be processed for the duration of the service, until the consent given is withdrawn or an effective objection is made to the processing in cases where the legal basis for the processing is the legitimate interest of the Administrator.

5.2. The processing period may be extended if the processing is necessary for the establishment and assertion of possible claims or the defence against claims, and thereafter only if and to the extent required by law. After the expiry of the processing period, the data shall be irreversibly deleted or anonymised.

6. RECIPIENTS OF THE DATA

6.1. Depending on the purpose of processing, personal data may be transferred to entities cooperating with the Administrator;

6.1.1. to entities related to the Administrator;

6.1.2. entities providing services to the Administrator, such as providers of IT systems and services, platform to support the Administrator, law firms, business partners, shipping companies, marketing agencies (for marketing services).

6.2. For those who have consented to the sending of commercial information, Users' personal data may be disclosed to service providers and IT systems that we use to send commercial information.

6.3. Personal data may be transferred outside the European Economic Area ("EEA"), to third countries that do not guarantee the same level of protection as required in the EU. In order to protect personal data, WoolSoCool will only transfer data either (i) on the basis of an enabling decision by the European Commission or (ii) on the basis of EU-approved standard contractual clauses. Please be advised that WoolSoCool, on the basis of EU standard contractual clauses, has entered into agreements for the transfer of personal data from the EEA to third countries, including the USA. To access the documents that WoolSoCool uses to transfer your personal data from the territory of the EEA, please contact the Administrator.

7. DATA SUBJECTS' RIGHTS

7.1. Every person has the right to request access to their data, rectification, erasure, portability, restriction of processing, to lodge a complaint with the President of the Office for Personal Data Protection, as well as to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.

7.2. You have the right to object to the processing if the processing is based on a legitimate interest of the administrator.

8. CHANGES TO THE PRIVACY POLICY

8.1. The provisions of the WoolSoCool Privacy Policy may be subject to improvements and changes, and the latest version of the Privacy Policy will be published on the WoolSoCool Website each time and will be dated as of the last update.

8.2. In matters not covered by the Privacy Policy, the provisions of the Civil Code and the relevant acts of Polish law, as well as European Union law, in particular the GDPR, shall apply.

8.3. The policy is effective as of 01.01.2024.