PRIVACY POLICY

This Policy provides basic information about the purposes, methods of processing, and security of your personal data as a user of the website: kosmospottery.pl (hereinafter referred to as the Website). By reading this Privacy Policy, you will learn who the controller of your personal data is, what personal data is collected by the Website, for what purposes it is used, and how it is protected.

§1. Basic Information

1. The Controller of your personal data is: Kamila Malawska, an entrepreneur registered in the Central Register and Information on Economic Activity (CEIDG) under the business name: Kamila Malawska, with its registered office in Kraków (30-376), ul. Kameralna 29/2, NIP: 9442192009.
2. Contact with the Controller is possible via:
   • Email: contact@kosmospottery.pl
   • Telephone: 886625172

§2. Data Processing Principles

The Controller processes personal data respecting the following principles:

1. Based on a legal ground and in accordance with the law (lawfulness);
2. Fairly and honestly (fairness);
3. In a transparent manner for the data subject (transparency);
4. For specific purposes and not "in reserve" (purpose limitation);
5. No more than necessary (data minimization);
6. With care for data accuracy (accuracy);
7. No longer than necessary (storage limitation);
8. Ensuring adequate data security (integrity and confidentiality).

§3. Purposes, Legal Grounds, and Scope of Data Processing

1. We will process your data for:
   • Contact purposes: to respond to messages sent directly via email, contact form, social media channels, or telephone, based on the Controller's legitimate interest in responding to your inquiry.
   • Marketing purposes: exclusively on the basis of your consent.
   • Informational purposes: to provide important information regarding services you use via our Website.
   • Social media management: for running our business profile on social media (such as Facebook/Instagram) and informing you about products, promotions, and news, which we consider our legitimate interest.
   • Technical purposes: using technical cookies based on the Controller’s legitimate interest related to the proper functioning of the Website.
   • Statistical and analytical purposes: if you have consented to our use of analytical cookies.
   • Marketing cookies: if you have consented to our use of marketing cookies.
   • Archiving purposes: archiving phone numbers, messages, and emails based on the Controller's legitimate interest in defending against potential claims.
   • Analysis of anonymous information: information such as browser type, operating system, time spent on the site, transitions between pages, and approximate location. This data is anonymized and collected via our partners' systems to improve our marketing and statistical activities.
2. Scope of processing:
   • If you send us a message or call us, we process the data contained in that communication. Providing this data is voluntary.
   • If you interact with our social media profiles (likes, comments, reactions), we process the data you have made available in that specific medium.
   • Other data includes IP addresses and data stored in cookies. You decide the extent to which we can use cookies through your browser settings or our consent manager.
   • We use APIs provided by external partners (maps, analytics, social media), which may involve additional cookies or data processing by those partners according to their own privacy policies.

§4. Automated Profiling

1. We do not use automated profiling on the Website to create marketing campaigns based on individual activity measurements that would allow us to target a specifically identified user.
2. Although we use advertising systems from partners (Facebook, Google), the data they obtain allows us to create campaigns for groups of users based on general statistics; we cannot target a specific, identifiable individual with a chosen ad based on their specific activity.

§5. Data Recipients and Transfers Outside the EEA

1. Depending on the purpose of processing, recipients of your data may include:
   • State authorities and public institutions as required by Polish law.
   • Software providers (hosting, server, domain).
   • Entities providing technical and programming support for the Website.
   • Marketing and social media management agencies.
   • Cloud storage and document management providers.
   • Cookie management software providers.
   • Advertising partners (Facebook, Google) – if you consented to marketing cookies.
   • Analytical software providers (e.g., Google Analytics) – if you consented to analytical cookies.
2. Your data is not transferred outside the European Economic Area (EEA) except for:
   • Google Inc. (USA): for traffic analysis (Google Analytics), maps, and search functions.
   • Facebook Inc. (USA): for social media management (Facebook, Instagram) and measuring ad effectiveness via the Facebook Pixel and Conversion API.
   • YouTube (Google Inc., USA): for embedded videos.

§6. Data Retention Period

1. We cannot define a single period for processing all data.
2. Data from direct contact (email, phone, forms) will be processed until you request its deletion, object to the processing, or until we determine that the legitimate interest of the Controller has been fulfilled.

§7. User Rights

1. In connection with the processing of your data, you have the following rights:
   • To access your data, rectify it, delete it, or restrict its processing.
   • To data portability.
   • To object to the processing.
   • To withdraw consent at any time (if processing is based on consent).
2. You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

§8. Information about Cookies

1. We use cookies on our Website.
2. We have installed a plugin that allows you to manage your cookie preferences. This plugin is compliant with Consent Mode v2, ensuring high levels of privacy protection.
3. Cookies are small text files stored on your device to facilitate site usage, improve service quality, and analyze traffic.
4. We use first-party cookies (for site functionality) and third-party cookies (for analytics, ads, and social media integration).
5. You can control or restrict the use of cookies through your browser settings, though this may affect site functionality.

§9. Why do we use cookies?

We use cookies for:

• User comfort and personalization: adapting content to your preferences.
• Remembering settings: such as language or layout.
• Login and session maintenance: allowing you to navigate the site without re-logging.
• Performance optimization: analyzing traffic and behavior to improve the site.
• Advertising: displaying personalized ads that are relevant to your interests.
• Social media integration: allowing for easy sharing and interactions (likes, comments).

§10 - §12. Specific Functions of Cookies

• Technical Cookies: Essential for site operation, session maintenance, form handling, and security (e.g., protection against CSRF attacks).
• Analytical Cookies: Used to measure traffic, analyze user behavior, and perform A/B testing to optimize the website experience.
• Marketing Cookies: Used for personalized advertising, remarketing, and measuring the effectiveness of ad campaigns across multiple channels.