Privacy Policy
We make every effort to protect your privacy. Protecting the personal information you give us when you use the site and make purchases from the store is a priority for us. In our operations, we use appropriate technological solutions that prevent intrusion into the privacy of third-party users.
The content below is based on personal data laws, including, but not limited to, the provisions of RODO (General Data Protection Regulation of April 27, 2016), the Personal Data Protection Act of May 10, 2018.
In it you will find information, among other things, about the principles of processing personal data and the purposes for which we process them, as well as the legal basis enabling us to do so, information about the tools we use and about the recipients of your data and your rights.
The administrator of the www.lgmp.pl website and personal data submitted within it is Izabela Jagosz, doing business under the name LGMP La Gosh My Passion Izabela Jagosz, NIP:5531189027, registered in the Central Register and Information on Business Activity of the Republic of Poland, maintained by the Minister of Economy.
For any matter related to the protection of your personal data, you can contact us at: info@lgmp.pl
What data do we collect by automated means?
We only automatically collect the data contained in cookies, so-called "cookies" (small textual information sent by our site and stored on your computer, containing information related to your use of both the site and the Online Store). We use them to:
- customize the content of the site to your preferences,
- to create statistics that help us better understand your needs and, consequently, improve the structure and content of the site,
- Remembering products added to the shopping cart,
- maintain the session of the Internet Store user (after logging in), so that there is no need to enter login and password on each subpage,
- Providing content in line with interests (including advertising).
What personal information do we collect and for what purpose?
When you make a purchase and the registration process on the Online Store, we collect and store the following data:
- name,
- residential address,
- Mailing address (if different from residence address),
- electronic mail (e-mail) address,
- phone number
- additionally: TIN and business details
- name,
- residential address,
- electronic mail (e-mail) address,
- In addition: TIN and details of the business conducted
Processing of complaints and processing of withdrawal from the contract:
- name,
- residential address,
- Mailing address (if different from residence address),
- electronic mail (e-mail) address,
- phone number
- data included in the content of the complaint
- bank account number
The legal basis for such processing is, first, Article 6(1)(b) of the RODO, which allows personal data to be processed if it is necessary for. performance of a contract or taking steps to enter into a contract, and second, Article 6(1)(c) of the RODO, which allows personal data to be processed if such processing is necessary for the controller to comply with its obligations under the law.
- name,
- electronic mail (e-mail) address,
- phone number
- data contained in the body of the message
- other data provided by you in your correspondence
- name,
- electronic mail address (e-mail)
The legal basis for such data processing is primarily Article 6(1)(a) of the RODO, i.e. your consent to receive commercial information, marketing content from us, and Article 6(1)(f) of the RODO, which allows personal data to be processed if by doing so the controller pursues its legitimate interest (in this case, it is the purpose of marketing its own services and products).
Archival and evidentiary purpose, for the purpose of securing information that can be used to prove facts:
- All of the above mentioned data.
The legal basis for such processing is Article 6(1)(f) of the RODO, which allows the processing of personal data if by doing so the controller pursues its legitimate interest (in this case, the controller's interest is to have personal data to prove facts related to the use of the site, performance of a contract, processing of data on a legitimate legal basis).
Determination, investigation or defense of claims:
- All of the above mentioned data.
The legal basis for such processing is Article 6(1)(f) of the RODO, which allows the processing of personal data if, by doing so, the controller pursues its legitimate interest (in this case, the controller's interest is to have personal data to establish, assert or defend against claims by users of the site or third parties or customers).
Site management, used tools to improve the site and analyze data related to site usage:
- IP
- website behavior
The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data to be processed if, by doing so, the controller realizes its legitimate interest (in this case, the controller's interest is an action aimed at optimizing the site, including content presented on the site to the needs of users, improving the controller's offer).
Use of cookies on the site:
- IP
- website behavior
The legal basis for such processing is Article 6(1)(a) of the RODO, which allows us to process personal data with your consent. You give your consent when you first visit the site.
Managing the Administrator's social media profiles
- Data that is related to the use of a particular social media platform.
The basis for the processing is the administrator's authorization exercised on the basis of Article 6(1)(f) of the RODO, i.e. the administrator's legitimate interest to manage the profile on a given platform and your consent (Article 6(1)(a) of the RODO) which you express, e.g. by joining a group created by the administrator on a given platform.
Fulfillment of personal data protection obligations (e.g., obligation to create registers and records):
- The scope of the data is defined by law and varies depending on the content of the given legal obligation of the controller.
The basis for the processing is Article 6(1)(c) of the RODO, i.e. it is carried out on the basis of legal provisions that mandate the processing of personal data.
Posting comments and opinions on the site:
- Name,
- electronic mail address (e-mail)
The basis for processing is Article 6(1)(a) of the RODO, i.e. your consent, which you give by adding a comment on our site.
At any time you have the right to access the content of your personal data and the right to correct it. You can do this from your account after logging in or by sending information to: info@lgmp.pl
Your rights include:
The right of access to information - means that every person whose data is processed has the right to know what is happening to their personal data. Among other things, the privacy policy you are about to read was created for this purpose.
Right of access to personal data - means that if we, as the controller of your data, receive a request from you for access to your data, we are obliged to provide you with such information. As a data controller, we are to perform our duties in this regard immediately, no later than within one month. If it is not possible to do so within this timeframe, we are obligated to at least inform you whether we are processing your data, and we may then extend the deadline for a complete response to your request by two months.
Right to rectification of personal data - means that you can request that the controller of your data rectify incorrect data or complete incomplete data.
The right to erasure of personal data, the right to be forgotten - means that you can demand that we, as the administrator of your personal data, delete it, informing the person to whom your data has been transferred of its deletion. You also have the right to demand that your data that we have made public be subject to deletion by other administrators as well. As the controller of your data, we are also obliged, upon your request, to inform you to which recipients your data subject to deletion has been transferred.
The right to restrict processing of personal data - means that you can request that the processing of your personal data be restricted. This happens, for example, when you disagree with the accuracy of the processed data, or when you decide that you no longer need the data for the purposes of processing.
Right to object to the processing of personal data - means that you can object to your data being processed by the controller.
The right to data portability - means that under certain conditions you can request that your data be transferred directly to a designated other controller.
The right to lodge a complaint - means that as soon as you consider that our processing of your data violates the law, you can lodge a complaint with the President of the Office for Personal Data Protection.
Right to withdraw consent-means that in the case of processing based on your consent, you have the right to withdraw it at any time. The withdrawal of consent does not affect the legitimacy of the processing of your personal data until you withdraw your consent.
Who do we share your data with?
In order to be able to complete the purchase-sale contract between us, we share your data:
- courier companies delivering our products to you,
- entities that handle electronic payments,
- companies offering accounting services
- companies that enable the sending of newsletters
- companies to send links to download digital files
- entities that handle purchases in the installment system.
In any such case, the amount of data transferred is limited to the required minimum.
Below is a list of the aforementioned entities:
- MailerLite Limited, an Irish registered company at Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland- for the purpose of sending newsletters and using the mailing system.
- Thecamels Sp. z o.o. based in Lodz, Wróblewskiego 18, 93-578, KRS 0000910352 - to store personal data on the server and operate the domain.
- Fakturownia Sp. z o.o., 00-389 Warsaw, 6/8 Smulikowskiego St., NIP 5213704420 - for the purpose of issuing accounting documents.
- WeTransfer B.V. Willem Fenengastraat 19 1096 BL Amsterdam The Netherlands - for sending emergency links to download digital files.
- Imoje payment system, operated by the company ING Bank Śląski S.A. ul. Sokolska 34, 40-086 Katowice, entered in the Register of Entrepreneurs in the District Court of Katowice - Wschód, VIII Economic Department of the National Court Register under the KRS number 0000005459, NIP: 634-013-54-75, REGON: 271514909 - in order to operate the payment system and electronic transactions.
- Przelewy24 belonging to PayPro S.A., 8 Pastelowa St., 60-198 Poznań, entered in the Register of Entrepreneurs of the National Court Register under the number 0000347935, NIP: 779 236 98 87 - in order to handle the payment system and electronic transactions.
- PayPal (Europe) S. à r.l. et Cie, S.C.A - to operate the payment system and electronic transactions.
- Google Cloud Poland Sp. z o.o. 53 Emilii Plater St., 00-113 Warsaw- in order to use Google services, including Google Workspace.
- Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025 - in order to use the tools and platform
Facebook or Instagram, especially for advertising tools. - Facebook Ireland Ltd. - regarding the use of Meta Platforms (Facebook) advertising tools and the entrustment of data within the custom audience group.
DO WE TRANSFER YOUR DATA OUTSIDE THE EUROPEAN UNION AND TO THIRD COUNTRIES?
User data may be transferred outside the European Union, to third countries, and if this situation occurs it will be transferred only to recipients who guarantee the highest protection and security of the data, among others:
- cooperation with processors of personal data in countries for which a relevant decision of the European Commission has been issued,
- Use of standard contractual clauses issued by the European Commission (as is the case with Google, for example),
- application of binding corporate rules approved by the relevant supervisory authority, or to those whose personal data you, the User, have consented to transfer.
Due to the use of services such as Google, Facebook, or Mailerlite, your data may be transferred to the United States of America (US) in connection with their storage on US servers (in whole or in part). Google and Facebook use the compliance mechanisms provided by the RODO (e.g. certificates) or standard contractual clauses. Detailed information is available in the content of the privacy policies of each of these service providers, available on their websites
In addition, we may disclose your personal information:
- Other contractors or subcontractors engaged to provide technical, administrative, or legal assistance to the Administrator and its clients, e.g., accounting, IT, graphic design, copywriting assistance, debt collection companies, lawyers, etc.
- Offices, e.g., the tax office - in order to fulfill legal and tax obligations related to billing and accounting.
We can do it:
- To the extent required by law,
- in connection with any legal proceedings or expected legal proceedings,
- in order to establish, exercise and protect our rights (including providing information to protect against fraud and minimize credit risk).
Withdrawal of consent for data processing:
- If the processing of personal data is based on consent, you may withdraw this consent at any time - at your own discretion. If you would like to withdraw your consent to the processing of personal data, to do so, simply send an email directly to: info@lgmp.pl
- If the processing of your personal data was carried out on the basis of your consent, revoking it does not make the processing of your personal data illegal up to that point. In other words, we have the right to process your personal data until you revoke your consent, and revoking it does not affect the legality of previous processing.
Requirement for personal information:
- The provision of personal data is voluntary and depends on your decision, but the provision of certain personal data is necessary to meet your expectations for entering into a contract or using our services. If you place an order for a product - providing your data is necessary to fulfill your requests related to the concluded contract.
- If you contact us on any matter related to the site, our products or the services we provide, it may be necessary for you to provide your contact information to answer your question.
- If the requirement to provide your data arises from the law - providing data is your obligation.
Automated decision-making and profiling:
- Your data is not used by us for automated decision-making that could affect your legal situation or have other similarly momentous effects on you.
- The tools implemented as part of the site may profile user behavior in order to improve the site and match the content displayed to the user's preferences, while analyzing in this case data of a primarily anonymous nature (location, age, interests).
- We use cookies and analytics tools like any website. In the following Privacy Policy, we indicate how cookies work and how these actions affect you.
How long do we process your data?
In accordance with applicable laws, we will process your data only for the period of time needed to achieve the stated purpose. After this period, your personal data will be irreversibly deleted or destroyed. The additional year associated with the processing of personal data collected for the performance of a contract is due to the fact that a request may be made by you just before the statute of limitations expires.
What do we use your data for?
-
to process and handle the order placed by you,
to improve the user experience of our website,
-
To administer the site,
-
To send you financial documents (statements, invoices),
-
to handle inquiries and any complaints or grievances,
-
sending general commercial messages,
-
to send marketing and advertising information regarding the activities of our or our cooperating entities (as long as you agree),
-
sharing statistical data about our users with third parties (without being able to identify you from it).
How do we keep your data safe?
We make every possible effort to secure your data and protect it from the actions of third parties. We use the necessary server and connection security. All electronic transactions directed by you to us or from us to you are encrypted using SSL.
Remember, however, that the measures we have taken may not be sufficient if, for your part, you do not maintain security rules. In particular - if you do not keep your logins and passwords confidential, you will not leave the site using the "logout" option. It is your responsibility to keep your password and user information confidential. We will not demand your password (except at the time of logging into the site).
How does it work with other websites?
Notwithstanding our use of cookies and the related and above-described technologies, we may allow selected third parties to co-create advertisements with us that we believe may be of interest to you. We may also collect and use data about your behavior on our Sites and/or Services (e.g., allowing us to create personalized ads on third-party services). The companies in question may deliver advertisements, which in turn may place cookies or otherwise track your behavior. These companies may use the information they collect about the habits of Internet users to place personalized advertisements on a variety of services and products.
SOCIAL MEDIA ACTIVITY - FACEBOOK, INSTAGRAM, YOUTUBE
We maintain profiles on social media platforms, and our website contains plugins that redirect to them. We are the administrator of a profile on a given platform, and we process your data (name, nickname, other data indicated by you on your profile) mainly for the purpose of managing our profile, creating a community and interacting with observers.
In each case, the provider of a given social media platform determines the rules of the platform and the rules of processing data for its own purposes, so we encourage you to read the rules and policies of each platform. We do not process data collected by social media platforms for our own purposes.
Plug-ins leading to our profiles allow you to connect directly to our profile when you click on the platform icon. The social platform may acquire information that you are using our site, particularly when you are logged in as a user of the platform.
If you do not want social networks to obtain information about your activities we recommend logging out of your profiles and using your browser in incognito mode.
Within our site you will find plugins that redirect you to our profiles on the platforms indicated below, we also indicate the privacy policies of the platforms so that you can read them in accordance with our recommendations:
FACEBOOK:
Your personal information provided on the Fanpage https://www.facebook.com/LaGoshMyPassion/ or in the KITTING ACADEMY by LGMP Group will be processed for the purpose of administering and managing the Fanpage or Group, communicating with you, interacting with you, targeting you with marketing content, and creating a Fanpage or Group community.
The basis for their processing is your consent. You voluntarily choose to like/watch a Fanpage or join a Group. The rules of the Fanpage or Group are set by the Administrator, however, the rules of being on the Facebook social network are based on Facebook's regulations.
You can stop following the Fanpage or resign from the Group at any time. However, you will not then see any content from the Administrator related to the Group/Fanpage.
The administrator sees your personal data, such as for example your first name, last name or general information that you post on your profile as public. The processing of other personal data is carried out by the social network Facebook and under the terms of its regulations.
Your personal data will be processed for the duration of the Fanpage or Group's operation/existence based on your consent expressed by liking/clicking "Observe" the Fanpage, joining the Group or interacting, e.g. leaving a comment, and for the purpose of the Administrator's legitimate interests, i.e. marketing its own products or services or defending against claims.
INSTAGRAM:
Together with Instagram, we co-administer data related to our operation of our profile on Instagram, including in pursuit of our joint business purposes such as, among other things, the processing of data related to visits to our profile (including those related to the display of our profile through the use of a plug-in available on our websites).
We process data within the profile for administering our profile, informing you about our activities, promoting our services, campaigns, products and staying in touch with our recipients. We also analyze the data collected as part of the profile for statistical purposes and for possible defense against claims.
The scope of your data that we process as part of your profile is the data that you make publicly available as part of your profile (name, surname possibly image or other data that you have added to your profile or that you have provided to us as part of a message or in a comment).
We do not process data collected by the Instagram social media platform for its own purposes, and we do not have access to data collected by the Instagram portal for its own purposes and under the terms of Instagram's Terms and Conditions.
Our profile on Instagram can be found at:
https://www.instagram.com/lgmp.pl/
We process your personal data on the basis of your consent, which you give by observing our profile, leaving a comment, and our legitimate interest in interacting with those who observe or use our profile or for profile management purposes. You can stop observing our profile at any time.
We recommend you to read Instagram's privacy policy, which is available at:
https://help.instagram.com/519522125107875?helpref=page_content
YOUTUBE:
Together with YouTube, we co-administer data related to our operation of our profile on YouTube, including in pursuit of our joint business purposes such as, among other things, the processing of data related to visits to our profile, including the display of our profile through the use of a plug-in available on our websites.
We process data within the profile for administering our profile, informing you about our activities, promoting our services, campaigns, products and staying in touch with our recipients. We also analyze the data collected as part of the profile for statistical purposes and for possible defense against claims.
The scope of your data that we process as part of your profile is the data that you make publicly available as part of your profile (name, surname possibly image or other data that you have added to your profile or that you have provided to us e.g. in a comment).
We do not process data collected by the YouTube social media platform for its own purposes, and we do not have access to data collected by YouTube for its own purposes and under the terms of YouTube's Terms of Service.
Our YouTube profile can be found at:
https://www.youtube.com/@LGMPLaGoshMyPassion/featured
We process your personal data on the basis of your consent, which you give by observing our profile, leaving a comment, and our legitimate interest in interacting with those who observe or use our profile or for profile management purposes. You can stop observing our profile at any time.
We recommend you to read YouTube's privacy policy, which is available at:
https://policies.google.com/privacy?hl=pl
NEWSLETTER
Your data provided in the newsletter subscription form (name, surname, e-mail address, telephone number) is processed for the purpose of sending the newsletter and on the basis of your consent. Remember to confirm your subscription to our newsletter after you receive the first message.
We use a newsletter provider that ensures the protection of your data, i.e. MAILER LITE LIMITED. The provider's system records your activity related to subscribing to our newsletter.The data you provide in the newsletter subscription form is voluntary, but necessary to send you the newsletter based on your consent, as well as to send you information about marketing of our own products or services based on our, as the administrator, legitimate interest (i.e., Article 6(f) of the RODO) and to pursue possible claims in connection with the newsletter delivery.
You will continue to receive our newsletter until you terminate your subscription or we stop sending the newsletter. If you do not subscribe for 1 year, we may stop sending the newsletter, in which case we will remove you from our subscriber list.
The mechanism for unsubscribing from the newsletter service is not complicated and consists in clicking on the active link with the information I unsubscribe from the newsletter. Once you have exercised this right and unsubscribed from the newsletter, your newsletter subscription data will be stored for the period necessary to defend against potential claims. This is our legitimate interest as data controller.
We may transfer personal data provided when signing up for the newsletter to the following entities: IT system maintenance and hosting service provider, email service provider and newsletter service provider.
As in any case where we process your data, you have the right to access the content of your data, to receive a copy of it, the right to rectification, deletion, restriction of processing, the right to data portability, the right to object, the right to withdraw consent at any time.
Keep in mind, however, that if you withdraw your consent to data processing, this fact will not affect the lawfulness of data processing that was carried out on the basis of your consent before its withdrawal.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection as soon as you consider that the processing of your data violates the law. Your data will not be processed by automated means
Who is the controller of personal data?
The administrator of personal data collected on www.lgmp.pl isLGMP La Gosh My Passion Izabela Jagosz, based in Klecza Dolna 34-124, Szmaragdowa 23 Street, NIP:5531189027 - entered in the Central Register and Information on Business Activity of the Republic of Poland, maintained by the Minister of Economy.
As a Personal Data Controller, I hereby inform you that a Data Protection Officer (DPO) has not been appointed and I carry out the duties related to the processing of personal data myself.
The User acknowledges that his/her personal data may be transferred to authorized state authorities in connection with their proceedings, at their request and upon fulfillment of the prerequisites confirming the necessity of obtaining such data from the Administrator.
