Privacy policy

This Privacy Policy sets out the rules for processing personal data of individuals using the Lesens online store available at www.lesens.pl.

1. General Provisions

This Privacy Policy sets out the rules for processing personal data of individuals using the Lesens online store available at www.lesens.pl.

This document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable data protection laws.

The Controller makes every effort to ensure that personal data is processed lawfully, transparently, securely and in a manner appropriate to the purpose for which it is processed.

2. Data Controller

The Controller of personal data is:

Contact regarding the processing of personal data:

E-mail: biuro@lesens.pl
Phone: +48 34 365 79 73

3. What Personal Data We May Process

Depending on how the online store is used, we may process, in particular:

• first and last name,
• company name,
• e-mail address,
• telephone number,
• delivery address or registered office address,
• data necessary for issuing sales documents,
• information relating to orders placed,
• information provided through contact forms,
• information relating to communication with our customer service department,
• customer account data,
• technical data relating to the use of the website, such as IP address, device information and browser information, to the extent resulting from the operation of the website and the technical solutions used.

The scope of processed data depends on whether the user makes a purchase, has an account, contacts us or uses specific website functions.

4. Sources of Personal Data

We primarily receive personal data directly from the user, including when:

• placing an order,
• creating an account,
• contacting us,
• using contact forms available on the website,
• subscribing to the newsletter or other marketing communications, where the user has provided the required consent.

In certain circumstances, data may also be obtained from other sources where this is lawful and necessary for a specific processing purpose.

5. Purposes and Legal Bases for Processing

Personal data may be processed in particular for the following purposes:

• order fulfilment and entering into contracts – for accepting, processing and fulfilling orders and performing the concluded contract;
• customer service and communication – for responding to enquiries, handling requests and conducting correspondence;
• issuing accounting documents and complying with legal obligations – to the extent required by law;
• establishing, pursuing or defending claims – on the basis of the Controller's legitimate interest;
• direct marketing – to the extent permitted by applicable law;
• sending electronic marketing communications – on the basis of consent where such consent is required by law;
• ensuring security and proper operation of the website – on the basis of the Controller's legitimate interest.

The legal basis for processing may in particular be Article 6(1)(a), (b), (c) or (f) GDPR, depending on the specific purpose of processing.

6. Order Fulfilment

Data provided when placing an order is used to fulfil the order, including preparing the products, contacting the customer, delivering the order and processing the payment.

Providing the data necessary to fulfil an order is required to conclude and perform the contract.

7. Customer Accounts and Contact Forms

If a user creates an account in the online store, the data is processed for the purpose of creating and maintaining the account and providing access to functions available to registered customers.

Data submitted through contact forms is processed for the purpose of handling the enquiry and providing a response.

8. Newsletter and Marketing Communications

Lesens may provide the option to subscribe to a newsletter and receive information relating to the store's offer.

If the user provides consent to receive marketing communications, their contact details may be used to send information about products, services, promotions or the Lesens offer.

Consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Where direct marketing is based on the Controller's legitimate interest, the user may object to such processing.

9. Recipients of Personal Data

Personal data may be transferred to entities supporting the Controller in conducting its business, in particular in the following areas:

• delivery of orders,
• payment processing,
• accounting services,
• IT services,
• maintenance and operation of the online store,
• legal or technical services.

In the case of online payments, data necessary to process the transaction may be transferred to the Paynow payment operator.

The scope of data transferred in connection with payment processing depends on the selected payment method and the requirements associated with its processing.

Entities processing data on behalf of the Controller receive access to data only to the extent necessary to perform the relevant service and are required to maintain appropriate security and confidentiality standards.

The Lesens online store operates on the Sky-Shop platform, which provides the infrastructure and technical solutions necessary for the operation of the online store.

10. Transfers of Data Outside the European Economic Area

If, in connection with the use of specific services, personal data is transferred outside the European Economic Area, the Controller will ensure that appropriate legal grounds and safeguards required by the GDPR are applied.

11. How Long We Retain Personal Data

Personal data is retained for the period necessary to fulfil the purpose for which it was collected.

Data relating to the performance of a contract may also be retained for the period required by law, in particular tax and accounting regulations.

Data processed on the basis of consent is retained until the consent is withdrawn, unless further processing is permitted on another legal basis.

Data may also be retained for the period necessary to establish, pursue or defend against claims.

12. Rights of Data Subjects

Subject to the conditions provided by the GDPR, individuals whose personal data is processed have the right to:

• access their personal data,
• rectify their data,
• erase their data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time where processing is based on consent,
• lodge a complaint with the President of the Personal Data Protection Office (UODO).

The scope of individual rights may depend on the legal basis and purpose of processing.

13. Right to Object

Where personal data is processed on the basis of the Controller's legitimate interest, the data subject may, on grounds relating to their particular situation, object to such processing.

In the case of direct marketing, an objection may be made at any time.

14. Automated Decision-Making and Profiling

Users' personal data is not used by the Controller to make decisions producing legal effects concerning them or similarly significantly affecting them solely on the basis of automated processing, unless otherwise provided by applicable law.

15. Data Security

The Controller applies appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Access to personal data is limited to authorised persons and entities whose access is appropriate to the tasks they perform.

16. Cookies

The Lesens online store uses cookies and similar technologies to ensure the proper operation of the website, remember user preferences and support store functionality.

Cookies may also be used to the extent resulting from analytical, statistical or marketing tools implemented on the website, where such tools are active.

Detailed information concerning the use of cookies, their types, purposes and available settings is provided in the separate Cookie Policy available in the online store.

17. Changes to the Privacy Policy

The Controller may update this Privacy Policy, in particular in the event of changes to applicable laws, changes to the functionality of the online store or changes to the way personal data is processed.

The current version of the Privacy Policy is published at www.lesens.pl.

18. Contact Regarding Personal Data Protection

For matters concerning the processing of personal data or the exercise of rights under the GDPR, you may contact the Controller:

LESENS POLSKA
ul. Oficerska 43
42-202 Częstochowa
Poland

E-mail: biuro@lesens.pl
Phone: +48 34 365 79 73

The Controller will respond to requests concerning the rights of data subjects without undue delay and within the time limits specified by the GDPR.