PRIVACY POLICY

The data controller of the personal data of the Store Users is Aleksandra Byrczek, owner of the Thesu store, NIP 8392015850 (hereinafter “Administrator”).

HOW PERSONAL DATA IS USED:

Users’ personal data will be processed for the following purposes:
1. Conclusion and fulfillment of orders and sales agreements between the Administrator and the User under the terms described in these Regulations (Art. 6(1)(b) GDPR).
2. Marketing of the Administrator’s own Products and services, including by sending commercial information messages with prior consent, in particular in the form of a Newsletter or Availability Notification, based on the Administrator’s legitimate interest (Art. 6(1)(f) GDPR) or based on separately given consent (Art. 6(1)(a) GDPR).
3. Sending commercial information electronically in accordance with Art. 10(2) of the Act on the Provision of Electronic Services of 18 July 2002 (Journal of Laws 2017, item 1219, as amended) – based on separately given consent.
4. Other purposes resulting from the Administrator’s legitimate interests. Providing personal data by the User is voluntary but necessary to complete transactions within the Store.

If the User subscribes to the informational newsletter (Newsletter), electronic messages containing commercial information about promotions and new Products available in the Store will be sent to their email address.

When placing an order in the Store, the User provides the following personal data:
- Email address
- Address details – residential address, postal code, city
- Telephone number
- First and last name

When using the Newsletter or Availability Notification service, the User provides only their email address.

Navigation data may also be collected from Users, including information about links and references clicked or other actions taken in the Store. Upon request, the Administrator provides personal data to authorized state authorities.

Users’ personal data are protected by the Administrator against unauthorized use, modification, or destruction through appropriate technical and organizational measures.

The Administrator also collects so-called operational data (not personal data) of Users visiting the Store’s website. Collected data are used to generate statistics and advertising services. Such data include visits, navigation paths, usage of Store functions, time spent on the Store website, information about devices and browsers used by the User, as well as geographical data and interests.

Operational data of Store visitors may be used to conduct online advertising campaigns targeted according to Users’ interests

The Administrator uses personalized retargeting services to offer Users relevant advertising content. Ads are displayed based on the User’s activity in the Store.

To this end, the Administrator uses external advertising platforms such as Facebook, Google, Instagram, etc., which match the User’s profile in their database to determine the optimal time and place to display an advertisement relevant to the User.

COOKIES

The Administrator uses cookies. Cookies are data stored on the User’s device, intended for use on websites. Cookies usually contain the name of the website they come from, the duration of storage on the device, standard login-related information such as IP address, browser type, language, access times, the address of the referring website, and a unique number. The entity placing cookies on the User’s device and accessing them is the Administrator.

Cookies are used for the following purposes:
- Creating statistics that help understand how Users use the Store’s websites, which allows improving their structure and content.
- Adapting the Store’s content to the User’s preferences and optimizing the use of the websites; for example, cookies allow recognizing the User’s device type (e.g., laptop, smartphone, tablet) and displaying a version of the website suited to the capabilities of the device;
- Determining the User’s profile to display product recommendations and tailored materials in advertising networks, particularly through services provided by Google LLC, Google Ireland Limited, and Facebook Ireland Ltd. Cookies enable the display of ads, offers, and promotions based on browsing patterns on the Store’s website. This makes the Store’s content and advertising messages better suited to the User and aligned with their interests and preferences. Cookies can also limit the number of times an advertisement is displayed. Marketing cookies may also be used to track the effectiveness of advertising campaigns on third-party websites.
- Ensuring that Users have read the Cookies information.

The User can independently change cookie settings at any time, specifying the conditions for storing and accessing cookies on their device. However, limiting the use of cookies may affect certain functions available on the Store’s website.

Cookies can be categorized:

According to their lifespan:
- Persistent cookies, which are stored on the User’s device for the period specified in the cookie parameters or until they are physically deleted by the User.
- Session cookies, which are temporary files stored on the User’s device until they leave the Store’s website.

Przeznaczenia:
– cookies statystyczne – służą do zbierania anonimowych danych statystycznych o korzystaniu ze Sklepu;
– cookies bezpieczeństwa – zapewniają bezpieczeństwo i poufność danych;
– cookies funkcjonalne – umożliwiają zapamiętanie preferowanych funkcji Sklepu;
– cookies reklamowe – pozwalają na dostarczanie treści reklamowych lepiej dopasowanych do zainteresowań Użytkownika.

THIRD-PARTY COOKIES

The Administrator cooperates with third parties, in particular social media platforms, regarding their advertising activities. For the purposes of this cooperation, the browser or other software installed on the User’s device also stores cookies from these third parties. This is intended to display personalized advertisements to the User through the services of these third parties. The third party may directly link the visit to the Store with the User’s profile in their service.

As part of marketing activities, the Administrator uses the services of the following entities, which deploy cookies on the Store:
1. Google LLC, Google Ireland Limited
2. Facebook Ireland Ltd., Facebook Inc.

More information about cookies used by these entities can be found in their privacy policies. The User can prevent the loading of third-party plugins and cookies on the website, for example, by using the appropriate settings in their browser.

SHARING PERSONAL DATA WITH OTHER ENTITIES

The User’s personal data are shared with service providers used by the Administrator in running the Store. In particular, personal data may be shared with payment operators to process payments and with courier companies to deliver the Product to the specified address.

If the User subscribes to the Newsletter or Availability Notification, the User’s email address and preferred language version will be provided to .

The personal data will not be shared by the Administrator with other entities, except those that have a proper legal basis, in particular when personal data are necessary to perform an agreement to which the User is a party.

INTERNATIONAL TRANSFER OF PERSONAL DATA

The Seller’s servers are located within the European Union. User data may be transferred to countries outside the European Economic Area. All such countries comply with the required principles for storing and processing the personal data of EU citizens.

STORAGE AND DELETION OF PERSONAL DATA

Users’ personal data will be stored by the Administrator for as long as necessary to perform the agreement, and thereafter for a period corresponding to the statute of limitations for claims (in relation to agreements concluded for the User, e.g., contact details, correspondence records, and transaction records), until the User withdraws consent (for data processed based on consent) or submits an objection.

Consent to the processing of data for marketing purposes or for sending commercial information can be withdrawn at any time by sending an email containing a withdrawal request specifying the consent to be withdrawn to: hello@thesu.com. After withdrawal, the User will no longer receive marketing materials or commercial information from the Administrator.

Withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.

It is possible to object to the processing of personal data by the Administrator by sending an email containing such an objection to: hello@thesu.com.

After submitting the objection, the User will no longer receive any marketing materials from the Administrator.

The User has the right to access their personal data and request rectification, deletion, restriction of processing, and to object to processing. To exercise these rights, the User should contact the Administrator via email at: hello@thesu.com.

UPDATING THE PRIVACY POLICY

The Seller may update the Privacy Policy by publishing a new version on the Store’s website, indicating the date of publication.