Privacy Policy and Use of "Cookies" in the Online Store www. marioinex.pl

General Information

This document defines the Privacy Policy in the Online Store (hereinafter referred to as "Online Store"). The administrator of the Online Store is Marian Suchanek conducting business activity under the name MARIOINEX Toy Factory Marian Suchanek, entered into the register of entrepreneurs of the Central Registration and Information on Business conducted by the Minister of Entrepreneurship and Technology at the address ul. Bieszczadzka 6/8, 42-226 Częstochowa, VAT ID (NIP) 5730201481, National Business Registry Number (REGON) 002753548.

Terms capitalized are defined in the regulations of this Online Store.

Personal data collected by the Online Store Administrator are processed in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), hereinafter referred to as GDPR.

The Administrator of the Online Store makes particular efforts to protect the privacy and information provided to him regarding the customers of the Online Store. The Administrator with due diligence selects and applies appropriate technical measures, including of a programming and organizational nature, ensuring the protection of the processed data, in particular, secures the data against being made available to unauthorized persons, disclosure, loss and destruction, unauthorized modification, as well as against processing in violation of applicable law.

The recipients of the Services available on the website (in particular, the possibility of placing an Order in the Store) are not persons below the age of 16. The personal data administrator does not anticipate the intentional collection of data concerning persons below the age of 16.

Personal Data

Personal Data Administrator

The administrator of your personal data is:

MARIOINEX Toy Factory Marian Suchanek

1. Bieszczadzka 6/8, 42-226 Częstochowa

Regarding your personal data, you can contact the Personal Data Administrator via:

• email: biuro@marioinex.com.pl
• traditional mail: ul. Bieszczadzka 6/8, 42-226 Częstochowa
• phone: (34) 368 25 06

Purposes and Legal Bases for Processing Personal Data

The personal data administrator processes your personal data for the following purposes and scope:

• For the purpose of taking actions prior to entering into a contract at your request (e.g., account creation), i.e., data provided in the registration form in the Online Store, namely email address and established password, gender; if the account registration takes place via an external authentication service (e.g., Google+, Facebook), we collect your first and last name, and if you register during the purchase of Goods, we collect your first and last name and data provided for the purpose of order fulfillment such as shipping address; For the purpose of providing Services that require an Account creation such as: managing order history, informing about the status of order fulfillment, we process your data provided in the Account and when purchasing Goods;
• For the purpose of providing Services that do not require Account creation and the purchase of Goods, i.e., browsing the Online Store's web pages, Goods search engine, we process personal data related to your activity in the Online Store, namely data concerning the Goods you have viewed, data concerning your device's session, operating system, browser, location, and unique ID, IP address;
• For the purpose of executing the sales contract of Goods (e.g., delivery of ordered Goods), we process personal data provided by you when purchasing Goods, such as first and last name, email address, address details, payment details, and if you make a purchase via an Account, additionally an established password;
• For the purpose of statistics on the use of individual functionalities available in the Online Store, facilitating the use of the Online Store and ensuring the IT security of the Online Store, we process personal data concerning your activity in the Online Store and the amount of time spent on each of the subpages in the Online Store, your search history, location, IP address, device ID, data concerning your web browser and operating system;
• For the purpose of establishing, pursuing, and enforcing claims and defending against claims in judicial proceedings and other enforcement authorities, we may process your personal data provided when purchasing Goods or setting up an Account and other data necessary to prove the existence of a claim or which arise from a legal requirement, court order, or other legal procedure;
• For the purpose of considering complaints, claims, and requests and responding to customer inquiries, we process the personal data provided by you in the contact form, complaints, claims, and requests, or to provide a response to questions in another form, and some personal data provided by you in the Account, as well as data concerning the order of Goods and other Services provided by us that are the cause of the complaint, claim, or request and data contained in documents attached to complaints, claims, and requests;
• For the purpose of marketing our Goods and Services and those of our clients and partners, including remarketing, for this purpose we process personal data provided by you upon Account creation and its update, data concerning your activity in the Online Store including orders, which are registered and stored via cookies, and in particular order history, search history, clicks in the Online Store, login and registration dates, history and your activity associated with our communication with you. In the case of remarketing, we use data about your activity to reach you with our marketing communications outside of the Online Store and use the services of external providers for this purpose. These services consist of displaying our messages on websites other than the Online Store. You can find details about this in the records concerning Cookies;
• For the purpose of organizing competitions and loyalty programs, i.e., notifications about accumulated points, notification of winning, and advertising our offer, we use your personal data provided in the Account and when registering for a contest or loyalty program. Detailed information on this is provided each time in the terms of participation of a given contest or loyalty program;
• For the purpose of market and opinion research by us or our partners, i.e., information about the order, your data provided in the Account or during the purchase of Goods, email address. Data collected as part of market research and opinion surveys are not used by us for advertising purposes. Exact guidelines are provided in the information about a given survey or where you enter your data.

Categories of Personal Data

The personal data controller processes the following categories of relevant personal data:

• contact details;
• data related to activity in the Online Store;
• data concerning orders in the Online Store;
• data related to complaints, grievances, and inquiries;
• data related to marketing services.

Voluntariness of Providing Personal Data

Providing your required personal data is voluntary and constitutes a condition for the provision of services by the Personal Data Administrator via the Online Store.

Duration of Data

Processing Personal data will be processed for the period necessary to execute orders, services, marketing activities, and other services performed for the Customer. Personal data will be deleted in the following cases:

• when the person to whom the data pertains requests their removal or withdraws their consent;
• when the person to whom the data pertains has not taken any action for over 10 years (inactive contact);
• upon obtaining information that the stored data is outdated or inaccurate.

Some data in the scope of: email address, first and last name, may be stored for a subsequent period of 3 years for the purposes of evidence, considering complaints, grievances, and claims related to services provided by the Online Store - this data will not be used for marketing purposes.

Data concerning orders for goods and paid services, competitions, and loyalty programs will be stored for a period of 5 years from the date of order delivery.

Data concerning unregistered Customers is stored for a period corresponding to the lifecycle of the cookies saved on devices or until their deletion in the Customer's device by the Customer.

Your personal data related to preferences, behaviors, and the selection of marketing content may be used as a basis for making automated decisions to determine sales opportunities for the Online Store.

Recipients of Personal Data

We transfer your personal data to the following categories of recipients:

• state authorities, e.g., the prosecutor's office, Police, the Office for Personal Data Protection (PUODO), the President of the Office of Competition and Consumer Protection (UOKiK), if they reach out to us;
• service providers that we use in running the Online Store e.g., to fulfill an order. Depending on contractual arrangements and circumstances, these entities act on our instruction or independently determine the purposes and means of their processing, a list of suppliers can be found on the website of our Online Store at the link: ………….

Rights of the Data Subject

Under the GDPR, you have the right to:

• request access to your personal data;
• request rectification of your personal data;
• request erasure of your personal data;
• request restriction of processing of your personal data;
• object to the processing of your personal data;
• request the transfer of your personal data.

The personal data controller shall, without undue delay and in any event within one month of receiving the request, provide you with information on the actions taken in relation to your request. If necessary, the one-month period may be extended by a further two months due to the complex nature of the request or the number of requests.

In any case, the personal data controller will inform you of such an extension within one month of receiving the request, stating the reasons for the delay.

Right of Access to Personal Data (Article 15 GDPR)

You have the right to obtain confirmation from the personal data controller as to whether or not your personal data are being processed.

If the controller processes your personal data, you have the right to:

• access your personal data;
• receive information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of the data, the planned duration of storage of your data, or the criteria for determining this period, the rights you have under the GDPR, and about the right to lodge a complaint with a supervisory authority, the source of this data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of this data outside the European Union;
• obtain a copy of your personal data.

If you want to request access to your personal data, submit your request to:biuro@marioinex.com.pl.

Right to Rectification of Personal Data (Article 16 GDPR)

If your personal data is incorrect, you have the right to request the controller to promptly rectify your personal data.

You also have the right to request the controller to complete your personal data.

If you want to request rectification of personal data or their completion, submit your request to: biuro@marioinex.com.pl.

If you have registered in the Online Store, you can rectify and complete your personal data yourself after logging into the Online Store.

Right to Erasure of Personal Data, the “Right to be Forgotten” (Article 17 GDPR)

You have the right to request the personal data controller to erase your personal data when:

• your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you have withdrawn your consent on which the processing is based, and where there is no other legal ground for the processing;
• your personal data have been unlawfully processed;
• you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing is related to such direct marketing;
• you have objected to the processing of your personal data which is necessary for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by the personal data controller or a third party.

Despite your request for erasure, the personal data controller may continue to process your data for the establishment, exercise, or defense of legal claims, of which you will be informed.

If you wish to request the erasure of your personal data, submit your request to: biuro@marioinex.com.pl.

Right to Request Restriction of Processing Personal Data (Article 18 GDPR)

You have the right to request the restriction of processing your personal data when:

• you contest the accuracy of your personal data – the personal data controller will restrict the processing of your personal data for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
• your personal data is no longer needed for processing purposes but is required by you for the establishment, exercise, or defense of legal claims;
• you have objected to processing pending the verification whether the legitimate grounds of the personal data controller override those of your objection.

If you wish to request the restriction of processing your personal data, submit your request to: biuro@marioinex.com.pl.

Right to Object to Processing of Personal Data (Article 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, when it is:

• necessary for the performance of a task carried out in the public interest or necessary for the purposes of the legitimate interests pursued by the personal data controller or a third party;
• for direct marketing purposes.

If you wish to object to the processing of your personal data, submit your request to: biuro@marioinex.com.pl.

Right to Data Portability (Article 20 GDPR)

You have the right to receive your personal data from the data controller in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from the controller to which the personal data have been provided.

You also have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

If you want to request the transfer of your personal data, submit your request to: biuro@marioinex.com.pl.

Right to Withdraw Consent

You may withdraw your consent to the processing of your personal data at any time.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, submit your request to: biuro@marioinex.com.pl or use the appropriate functionalities in your Account.

Complaint to the Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement.

In Poland, the supervisory authority under the GDPR is the President of the Personal Data Protection Office (Prezes UrzęduOchronyDanychOsobowych - PUODO).

Cookies

General Information

While browsing the pages of the Online Store, cookies are used, hereinafter referred to as "Cookies," which are small text files that are saved on your end device in connection with the use of the Online Store. Their use is intended to ensure the proper functioning of the Online Store's websites.

These files allow the identification of the software used by you and to tailor the Online Store individually to your needs.

Cookies typically contain the domain name from which they originate, their storage time on the device, and an assigned value.

Security

The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or malicious software to penetrate your devices via cookies.

Types of Cookies

We use two types of cookies:

• Session cookies: These are stored on your device and remain there until the end of the session of the given browser. The stored information is then permanently deleted from your device's memory. The session cookies mechanism does not allow for any personal data or any confidential information from your device to be collected.
• Persistent cookies: These are stored on your device and remain there until they are deleted. Ending a browser session or turning off a device does not delete them from your device. The persistent cookies mechanism does not allow for any personal data or any confidential information from your device to be collected.

Purposes

We also use third-party cookies for the following purposes:

• configuring the Online Store;
• presenting a Certificate of Compliance via the solidnyregulamin.pl website, administered by GP Kancelaria Poniatowska-Maj Strzelec-Gwóźdź sp. p. with its registered office in Krakow. The Privacy Policy is available at the following link: - http://solidnyregulamin.pl/polityka-prywatnosci/;
• creating statistics that help understand how Customers use the web pages, which enables improving their structure and content through the analytical tools of Google Analytics, administered by Google Inc. based in the USA. Google's privacy policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;
• determining the Customer's profile in order to display tailored materials in advertising networks, using the Google AdSense online advertising tool, administered by Google Inc. based in the USA. Google's privacy policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/.
• determining the Customer's profile in order to display tailored materials in advertising networks, using the Google Adwords online advertising tool, administered by Google Inc. based in the USA. Google's privacy policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/.
• promoting the Online Store using the social networking site Facebook.com, administered by Facebook Inc. based in the USA or Facebook Ireland based in Ireland. Facebook's privacy policy is available at the following link: https://www.facebook.com/help/cookies/.
• researching customer satisfaction with purchases or covering purchases with buyer protection by Trusted Shops GmbH based in Cologne.
• presenting and expressing opinions on external web pages of the Ceneo.pl website, administered by Ceneo.pl sp. z o.o. based in Poznan. The cookie policy is available at the following link: http://info.ceneo.pl/polityka_plikow_cookies.
• posting product reviews or researching customer satisfaction levels with purchases through Skąpiec sp. z o.o. based in Wroclaw.
• presenting opinions on the web pages of the Online Store, which are downloaded from the external website Opineo.pl, administered by Opineo.pl sp. z o.o. based in Wroclaw. The cookie policy is available at the following link: http://www.opineo.pl/i/informacje-o-ciastkach.
• promoting the Online Store using the social networking site Instagram.com, administered by Instagram LLC. based in the USA. Instagram.com's privacy policy is available at the following link: https://help.instagram.com/155833707900388.

To learn about the rules for using Cookies, we recommend reviewing the privacy policies of the above-mentioned companies.

Cookies can be used by advertising networks, especially Google, to display ads that match your preferences. For this purpose, information about how you navigate the web or the time you use the website may be retained. To view and edit information about your preferences collected by the Google advertising network, you can use the tool located at the link https://www.google.com/ads/preferences/.

By using the settings of the web browser or by configuring the service, you can independently and at any time change the settings related to Cookies, specifying the conditions for their storage and access by Cookies to your device. You can change these settings to block the automatic handling of Cookies in the settings of the web browser or to be informed each time Cookies are placed on your device. Detailed information about the possibilities and ways of handling Cookies is available in the settings of your software (web browser).