Privacy and Cookie Policy of the Stara Szkoła online store

This Privacy Policy sets out the rules for the processing of personal data and the use of cookies in the online storewww.staraszkola.com (Old School), operated by: Stara Szkoła sp. z o.o. ul. Placu Kilińskiego 616-100 Sokółka NIP: 5451827968, REGON: 527269257, e-mail: kontakt@staraszkola.com

1. Personal data administrator

The administrator of personal data (hereinafter: “Administrator”) is: Stara Szkoła sp. z o.o.ul. Placu Kilińskiego 616-100 Sokółka e-mail: kontakt@staraszkola.comAdministrator processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”).Personal

2. Scope and source of data

data is obtained directly from the User, in particular through:

• • order form in the online store,

• • contact form,

• • product review system,

• • cookies and analytical and marketing tools (after obtaining the relevant consent).

The store is intended for adults – we do not knowingly collect data from children.

3. Purposes and legal basis for data processing

3.1. Order fulfillment and customer service

The data is processed for the following purposes: Legal

• • acceptance and fulfillment of orders,

• • contacting customers in matters related to orders,

• • handling any returns and complaints.

basis: Article 6(1)(b) of the GDPR – necessary for the performance of a contract.

3.2. Issuing accounting documents and tax obligations

The data is processed for the purpose of issuing invoices, bills, and fulfilling tax and accounting obligations. Legal basis: Article 6(1)(c) of the GDPR – legal obligation incumbent on the Controller.

3.3. Marketing and remarketing activities

The data may be used for marketing purposes, including:

• • conducting remarketing activities,

• • displaying targeted advertisements,

• • analyzing the effectiveness of marketing campaigns.

For this purpose, we use, among others, the following tools: Google Analytics 4, Google Search Console, Meta Pixel. Legal basis: Article 6(1)(a) of the GDPR – User consent (given, among others, through cookie settings).

3.4. Website traffic statistics and analysis

Data collected in an anonymized or pseudonymized manner is used for: Legal

• • analyzing website traffic,

• • improving website functionality and ergonomics,

• • creating statistics on store usage.

basis: Article 6(1)(a) of the GDPR – User consent (analytical cookies).

3.5. Contact form

If you contact us via the contact form, we process data such as: name (or nickname), email address, message content. Legal basis: Article 6(1)(f) of the GDPR – the legitimate interest of the Administrator, which is to respond to your inquiry.

3.6. Product reviews

After your purchase, you can add a review of the product. In this case, we process data such as: name/nickname, review content, product rating. Legal basis: Article 6(1)(f) of the GDPR – the legitimate interest of the Controller in presenting product reviews.

4. Voluntary provision of data

Providing personal data is voluntary, but in some cases necessary in order to: Personal

• • place and complete an order,

• • receive a response to a message sent via the contact form,

• • issue an accounting document.

5. Data recipients (to whom we transfer data)

data may be transferred to the following categories of recipients:

• • Payment operator: Tpay – Krajowy Integrator Płatności S.A., ul. Św. Marcin 73/6, 61-808 Poznań – for the purpose of processing online payments.

• • Delivery entities (via the Furgonetka service): DPD Pickup, Orlen Paczka, Paczkomaty InPost, InPost Kurier, DPD Kurier – for the purpose of delivering the order.

• • Hosting entity: hosting provider (Cyberfolks) – for the purpose of maintaining the store on the server.

• • Accounting office/accountant – if used for accounting purposes.

• • Analytics and marketing tool providers: Google (Google Analytics 4, Google Search Console), Meta (Meta Pixel) – in connection with the use of these services.

In each case, we only transfer data that is necessary to achieve a specific purpose.

6. Data retention period

• • data related to order fulfillment – for the period necessary to perform the contract and for the time required by law (e.g., tax, accounting – as a rule, up to 5 years),

• • data from the contact form – as a rule, up to 12 months from the end of correspondence,

• • data processed on the basis of consent (e.g., marketing and analytical cookies) – until consent is withdrawn or the cookies expire,

• • product reviews – until the review is deleted or an objection is raised.

7. Rights of the data subject

You have the right to:

• • access to their personal data,

• • rectification (correction) of their data,

• • to erase data (“right to be forgotten”),

• • restriction of processing,

• • to transfer data to another controller,

• • object to the processing of data – in the case of processing based on the legitimate interest of the Controller,

• • withdraw consent at any time – to the extent that processing is based on consent,

• • lodge a complaint with a supervisory authority (President of the Personal Data Protection Office).

To exercise the above rights, you can contact us at

8. Cookies

adresem:kontakt@staraszkola.com.Sklep. The website uses cookies, which are small text files stored on the User’s end device (computer, phone, tablet) when using the website.

8.1. Purposes of using cookies

• • ensuring the proper functioning of the website (essential cookies),

• • remembering selected User settings (preference cookies),

• • analyzing website traffic and compiling statistics (analytical cookies – Google Analytics 4),

• • conducting marketing and remarketing activities (marketing cookies – Meta Pixel and other advertising tools).

8.2. Cookiebot – consent management

The website uses the Cookiebot cookie consent management system, which:

• • displays a banner informing about cookies on the first visit to the website,

• • allows the User to select the categories of cookies to which they consent,

• • blocks the execution of analytical and marketing scripts until consent is given.

You can change your cookie preferences at any time using the function provided by Cookiebot (e.g., the “Change consent” link available on the website).

8.3. Managing cookies in your browser

The User can manage cookies independently through the appropriate settings in their web browser (including blocking their storage and deleting previous cookies). Restricting the use of cookies may affect some of the functionality of the online store.

9. Profiling

As part of our marketing activities, we may use analytical and advertising tools (including Google Analytics 4, Meta Pixel), which may involve so-called profiling, i.e., analyzing the User’s behavior on the website and adjusting the displayed content or advertisements. Profiling is based on the User’s consent to the use of appropriate categories of cookies and does not lead to decisions that have legal effects on the User within the meaning of the GDPR.

10. Security measures

The Administrator uses appropriate technical and organizational measures to protect personal data, in particular:

• • connection encryption using the SSL protocol,

• • server and store backend security,

• • access to data only for authorized persons.

11. Changes to the Privacy Policy

The Privacy Policy may be updated periodically, in particular in the event of changes in the law, the implementation of new functionalities in the store, or changes in the tools used. The current version of the Policy is always available at www.staraszkola.com.

12. Contact regarding data protection

In matters related to the protection of personal data and the exercise of Users’ rights, you can contact the Administrator at e-mail:kontakt@staraszkola.com.