Privacy Policy

Privacy Policy

The personal data administrator responsible for their processing is:
Maciej Rogulski
Jana Kasprowicza 12d
Lodz 92-781
rodo@fashion4lady.com

Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal data. For each website call-up, the server automatically saves only so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting Internet service provider (so-called access logs) and documents the page call-up. This data is analyzed exclusively for the purpose of ensuring the proper functioning of our website and improving our offer. This serves to protect our legitimate interest in the optimal, correct presentation of our websites and offers pursuant to Art. 6, paragraph 1, letter f of the GDPR.

Hosting

The services for hosting and displaying the website are partly provided on our behalf by our service providers as part of a data processing contract. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis for cooperation with them, please contact us. You will find our contact details in the section "Our contact details and your rights".

2. Collection and processing of data for the purposes of contract execution and contact

2.1 Data processing for the purposes of contract execution

We process the personal data you voluntarily provide when placing an order in order to perform the contract (including inquiries regarding the handling of claims for warranty for defects or guarantees and the obligation to provide information on necessary updates). The legal basis in this respect is Article 6, paragraph 1, letter b of the GDPR. Mandatory fields are marked as such because they concern data that are necessary to perform the order and without their provision we are unable to perform it. What data is collected results directly from the forms into which the data is entered.

Further information on the processing of your data, in particular the transfer of data to our service providers for the purpose of order processing, payment and shipping, can be found in the following sections of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted and after the retention periods required under tax regulations and the Accounting Act have expired, the data will be deleted (Article 6 paragraph 1 letter c GDPR), unless you expressly consent (Article 6 paragraph 1 letter a GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy.

Merchandise management system

We also use an external goods management system to process orders and execute the contract. Our service providers provide us with services in this regard under a data processing agreement. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find their contact details in the section "Our contact details and your rights".

2.2 Customer account

If, in accordance with Art. 6 sec. 1 lit. a GDPR, you give your consent to set up a customer account, we will process your personal data required for this purpose. They will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the customer account settings. After deletion of your customer account, the processing of your data will be restricted and after the retention periods specified in tax regulations and the Accounting Act have elapsed, the data will be deleted (Art. 6 sec. 1 lit. c GDPR), unless you expressly consent (Art. 6 sec. 1 lit. a GDPR) to the further use of this data or, in accordance with applicable law, we reserve the right to continue using the data for other purposes, about which we inform you in this privacy policy.

2.3 Data processing for contact purposes

As part of customer communication, we process personal data in order to process your enquiries (Article 6, paragraph 1, letter b of the GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they concern data that is necessary to process the enquiry. The data that is collected results directly from the forms into which the data is entered. After your enquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy.

3. Data processing for the purpose of delivery

In order to execute the contract (Article 6, paragraph 1, letter b of the GDPR), we transfer your data to the shipping company selected by you during the ordering process, which was commissioned to deliver the ordered products.

4. Data processing for the purpose of payment execution

In order to process payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the payment service company you selected during the ordering process. The above serves to perform the contract (Article 6, paragraph 1, letter b of the GDPR).

Data processing for the purpose of preventing abuse and optimizing payments

In some cases, we may provide our service providers with additional information that they may use together with the information required to process payments. These service providers then act on our behalf as processors and provide us with services to prevent abuse and optimize payment processes (e.g. invoicing, analysis of rejected payments, accounting support). In accordance with Article 6 (1) (f) of the GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.

5. Cookies and similar technologies

General information

In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser when you next visit the website (so-called persistent cookies).

Privacy protection for end devices
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user's end device or access to information already stored on his end device does not require the user's consent.

For functions that are not strictly necessary, storing information on the user's end device or accessing information already stored on the user's end device requires the user's consent. Please note that in the absence of consent, some functions or elements of the website may not be fully available. Any consent granted by the user remains valid until the consent is withdrawn, the settings are configured or the relevant settings on the end device are reset.

Other cases of data processing using cookies and other technologies

We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. the shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about your device and browser, as well as information about the use of our website (e.g. the contents of the shopping cart). This serves, in accordance with Art. 6 para. 1 letter f GDPR, to pursue our legitimate interest in the optimal presentation of our offer.

In addition, we also use technological tools to comply with legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the relevant legal bases for data processing, can be found in the following sections of this privacy policy.

In the help menu of your web browser you will find explanations on how to change cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have given us your consent to use certain technological tools (Article 6, paragraph 1, letter a of the GDPR), you may withdraw your consent at any time. To withdraw your consent, please contact us using the contact address provided in the section "Our contact details and your rights".

6. Use of cookies and similar technological tools

On our website, we use the cookies and other similar tools/technologies of external service providers indicated below. Unless otherwise indicated in the description of the individual technologies, their use takes place on the basis of your consent within the meaning of Art. 6 sec. 1 lit. a GDPR. Once the purpose of processing has been achieved and the use of the tool/technology has ended, the data collected as part of the use of these tools/technologies will be deleted. You may withdraw your consent at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis for our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

6.1 Use of Google services

We use the technological tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") indicated below. The information automatically collected by Google technologies regarding your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing is based on a joint data controller agreement with Google in accordance with Art. 26 of the GDPR. Further information on data processing by Google can be found in the privacy policy on the Google website .

Our service providers are headquartered in and/or use servers located in countries outside the EU and EEA for which the European Commission has issued a so-called adequacy decision stating an adequate level of data protection.

Our service providers are based and/or use servers located in countries outside the EU and EEA. The European Commission has not issued decisions regarding the adequacy of data protection in these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics, a web analytics tool from Google that automatically processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. When a user visits our website from the EU, their IP address is stored on a server located in the EU to obtain location data and then immediately deleted before the traffic is redirected to further Google servers. Data processing within the Google Analytics service is carried out on the basis of a data processing agreement concluded with Google.

In order to optimize and make our website offer more attractive, we have also activated the data sharing settings for "Google products and services" . This allows Google to access the data collected and processed within Google Analytics and to use it to improve the products and services provided by Google. The data is shared with Google for this purpose on the basis of an additional agreement concluded between the data controllers. We have no influence on the subsequent processing of the data by Google.

For web analytics purposes, we also use the Google Signals tool, which is an extension of Google Analytics services and enables so-called "cross-device tracking" (identifying users using multiple devices). This means that if your internet-enabled devices are connected to your Google account and you have activated the "personalized advertising" option in your Google account, then Google can generate reports on how our website is used (in particular, the number of users using different devices), even if you change devices. We do not process your personal data in this respect, we only receive statistics based on the functions and technologies of Google Signals.

If you do not consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, no cookies will be read or stored on your end device. The data processing described in the previous paragraphs does not take place. In order to fill gaps in the statistical analysis of the website by means of behavior and conversion modeling, pings with data (so-called user agent, information on user behavior, screen resolution, IP address) are sent to Google.

Google Ads

With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, when you visit our website, a Google remarketing cookie is automatically saved on your device, which enables the display of interest-based advertising based on the websites you visit, processing your data (IP address, time of visit, information about your device and browser, as well as information about your use of our website) using a pseudonymous identifier (ID). Further data processing only takes place if you have activated the option of personalizing ads in your Google account settings. In this case - if you are logged into Google while visiting our website, Google will use your data together with the data collected within Google Analytics to create and define so-called target group lists for cross-device remarketing purposes.

For web analytics purposes, we use Google Ads Conversion Tracking to measure and analyze your behavior when you visit our website via a Google Ads ad. Cookies may be used for this purpose and data such as IP address, time of visit, device and browser information, as well as information about the use of our website, e.g. website visit or newsletter registration, may be processed. Pseudonymized user profiles are then created based on this data.

Google reCAPTCHA

In order to protect against spam and to prevent abuse and misuse of our web forms (e.g. by using malicious bots), our website has integrated the Google reCAPTCHA tool, which processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website) and, on the basis of this, uses JavaScript and cookies to analyze your use of our website. Personal data entered by you in individual form fields on our pages will not be read or saved.

Google Fonts

In order to ensure a consistent presentation of the content on our websites, a script called "Google Fonts" is integrated into our website, which processes your data (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website). We have no influence on the above data processing by Google.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing the video: IP address, time of visit, information about the user's device and browser.

6.2 Use of Facebook services

Facebook Pixel

We use the Facebook Pixel tool provided by Meta Platforms Ireland Ltd , Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). The scope of the functionalities we use is indicated below. The Facebook Pixel automatically collects and stores data (your IP address, time of visit to the website, information about your device and browser, as well as information about your use of our website, e.g. visit to the website or registration for the newsletter). Pseudonymous user profiles are then created based on this data. As part of the so-called extended data comparison in Facebook Analytics - for comparison purposes, hashed information is also collected and stored by which natural persons can be identified (e.g. names, e-mail addresses and telephone numbers).
For this purpose, when you visit our website, the Facebook Pixel stores a cookie on your device that enables automatic recognition of your browser using a pseudonymised cookie ID when you visit other websites. Facebook (by Meta) will link this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the purpose of personalising advertising. The information automatically collected by Facebook (by Meta) technologies regarding your use of our website is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Further information on data processing by Facebook can be found in the Facebook (by Meta) privacy policy . Our service providers are headquartered and/or use servers in countries for which the European Commission has issued decisions on an adequacy level of data protection. The headquarters of our service providers are located in: USA, Canada, Japan, South Korea, New Zealand, Great Britain, Argentina. The decision on the adequacy of data protection for the USA applies as a basis for transferring data to third countries, provided that the service provider has been certified. A certificate has been obtained. Our service providers have their headquarters and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
The European Commission has not issued decisions regarding the adequacy of data protection in relation to these countries. Data transfers within the framework of our cooperation with service providers from these countries are based on the following safeguards: standard data protection clauses of the European Commission.

Facebook Analytics Tools

As part of Facebook Business tools – based on the data collected using the Facebook pixel code regarding your use of our website, statistics of user activity on our website are created. Data processing by Facebook takes place on the basis of a concluded data entrustment agreement. Data analysis (statistics regarding website use) serves to optimize and make our website more attractive.

Facebook Ads (ad management)

Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint data controller agreement pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.

Based on statistics generated using the Facebook Pixel tool regarding the activity of users visiting our websites, we use the Facebook Custom Audience function to broadcast advertisements to the appropriate group of recipients, defining the profile/characteristics of the target group. As part of the extended data comparison function (see above), Facebook is the entity processing data on our behalf.

Based on the pseudonymous Cookie ID stored by Facebook Pixel and the information collected about user activities on our website, we create personalised advertising via the Facebook Pixel Remarketing function.

For the purposes of web analytics and optimisation of our offer – using the Facebook Pixel Conversions function, we analyse the activity of users who visit our website via advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data processing agreement.

7. Social media

7.1 Social media plug-ins: Facebook (Meta), Instagram (Meta), Pinterest

Our website uses so-called social media plugins (buttons). These plugins are accessible via an HTML link, which ensures that when you visit our website containing such plugins (buttons), no automatic, direct connection is established to the servers of the operator of the social media service. When you click on one of the buttons (plugins), a new browser window opens displaying the page of the social media service in question, where you can confirm the use of the button, e.g. "Like" or "Share".

7.2 Our activity on social media: Facebook, Twitter, Instagram, YouTube

If you have given the social networking site consent in this regard (Article 6, paragraph 1, letter a of the GDPR), your data will be automatically collected and stored when you visit our account/profile on the aforementioned social networking sites for the purposes of web analytics and marketing. Pseudonymous user profiles are created based on this data. They can be used, for example, to place so-called personalized advertisements within and outside social networking sites that are likely to match your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social media portals, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for submitting inquiries are described in the privacy policies of the individual social media portals linked below. If you need help in this regard, you can also contact us.

Facebook (by Meta) is a social network provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The automatically processed information about your activities and use of our fan page on Facebook (by Meta) is usually transferred to a server of Meta Platforms Ireland, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and saved there. Data processing within the framework of visiting the fan page on Facebook (by Meta) is carried out in accordance with Art. 26 GDPR on the basis of the joint agreements concluded by the joint controllers, which are available here . Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) is available here .

Our service providers have their headquarters and/or use servers in countries for which the European Commission has issued decisions confirming an adequate level of data protection. The headquarters of our service providers are located in: USA, Canada, Japan, South Korea, New Zealand, Great Britain, Argentina.

The decision on the adequacy of data protection for the USA applies as a basis for transferring data to third countries, provided that the service provider in question has been certified. The certificate has been obtained.

Our service providers are headquartered in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
The European Commission has not issued decisions regarding the adequacy of data protection in relation to these countries. Data transfers within the framework of our cooperation with service providers from these countries are based on the following safeguards: standard data protection clauses adopted by the European Commission.

Twitter is a social network provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("Twitter"). The automatically processed information about your activities and use of our Twitter profile is usually transferred to a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 in the USA and stored there.

Instagram (by Meta) is a social network provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The automatically processed information about your activities and use of our Instagram fan page account is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and saved there. The data processed within the framework of the visit to the Instagram fan page account (by Meta) is processed in accordance with Art. 26 GDPR on the basis of the joint agreements concluded by the joint controllers. Further information on the processing of your personal data within the framework of the visit to the Facebook fan page (information on the page statistics function) can be found here .

YouTube is a social networking service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The automatically processed information about your activities and use of our YouTube profile is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 in the USA and stored there.

8. Our contact details and your rights

8.1 Your rights

Persons whose data is processed have the following rights:

in accordance with Article 15 of the GDPR: the right to obtain information about data processing within the scope specified in that Article;
in accordance with Article 16 of the GDPR: the right to rectify your inaccurate or incomplete personal data;
in accordance with Article 17 of the GDPR: the so-called "right to be forgotten", i.e. the right to delete your personal data stored by us, provided that their further processing is not necessary:
- to exercise the right to freedom of expression and information;
- to comply with a legal obligation;
- for reasons of public interest;
- to establish, pursue or defend legal claims;
in accordance with Article 18 of the GDPR: the right to restrict the processing of personal data, provided that:
- the accuracy of this personal data is disputed by you;
- the processing is unlawful and you oppose their deletion;
- we no longer need the personal data but you require it to establish, pursue or defend legal claims;
- you have objected to the processing of your data pursuant to Article 21;
in accordance with Article 20 of the GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller;
in accordance with Article 77 of the GDPR: the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office "UODO").

The right to object

If we process personal data in the manner described in this privacy policy in order to protect our legitimate interests, you may object to the processing of your data for this purpose - with effect for the future. If the processing takes place for direct marketing purposes, you may exercise your right to object at any time. If the processing takes place for other purposes, you only have the right to object for reasons arising from your particular situation.

Once you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests and rights, or the processing is for the purpose of asserting, exercising or defending legal claims.

The previous sentence does not apply when the data is processed for direct marketing purposes. In such a case, we will always cease further processing of your personal data after you have expressed your objection.

8.2 Contact Us

If you have any questions regarding the collection, processing and use of your personal data, or if you wish to request information, rectification, restriction of processing or deletion of data, or to revoke consent or object to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.