This document contains information regarding the functioning of our website and online store www.lamarqueuse.pl (hereinafter: the Website) as well as the processing of your personal data. Protecting user privacy is particularly important to us, which is why we have implemented numerous safeguards to ensure it.

DATA CONTROLLER, CONTACT DETAILS

The controller of personal data provided on the Website is La Marqueuse Spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw at ul. Okopowa 58/72 (01-042), entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw under KRS number: 0000270478, NIP: 525-23-82-848, REGON: 140804626, share capital: PLN 50,000.00 (hereinafter: the Controller).

For any information regarding the processing of personal data by the Controller or to exercise your rights, you may contact the Controller via email at: [email protected] or by post at: ul. Okopowa 58/72, 01-042 Warsaw, with the note "PERSONAL DATA".

To verify the identity of a person requesting a specific operation on personal data, the Controller may request additional data to confirm the requester's identity.

PERSONAL DATA PROCESSED BY THE CONTROLLER

The Controller collects personal data directly from Website users, for example, when making a purchase or completing the contact form.

Depending on the context, the Controller processes the following personal data:

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

The purposes for which the Controller processes users’ personal data depend on how the user interacts with the Website and the functionalities available on it.

Account Registration: If you register on the Website, your personal data will be processed for the purpose of creating and managing your account (Legal basis: performance of a contract for the provision of electronic services – Article 6(1)(b) GDPR).

Online Store Purchase: If you choose to make a purchase, your data will be processed to establish and perform the sales contract concluded via the Website (Legal basis: Article 6(1)(b) GDPR). Due to the nature of the sales contract, the Controller is also subject to public-law obligations, including tax duties, and may process your data to fulfill these obligations (Legal basis: Article 6(1)(b) and (c) GDPR, along with relevant tax regulations).

Complaints or Inquiries: If you submit a complaint or contact us with other issues, your data will be processed to respond to such inquiries (Legal basis: Article 6(1)(b), (c), and (f) GDPR – legitimate interest of both the Controller and the user in maintaining mutual communication and resolving disputes).

Marketing Communication: If you voluntarily give your consent (e.g., by subscribing to a newsletter), your data may be processed for marketing purposes, including communication via email or phone calls (Legal basis: Article 6(1)(a) and (f) GDPR – the Controller’s legitimate interest in promoting its products and services).

Contact Form or Email Inquiry: If you use the contact form available on the Website or send an email to [email protected] (under the “Contact” tab), your data will be processed to respond to your inquiry (Legal basis: Article 6(1)(f) GDPR – mutual interest in maintaining communication).

The Controller also reserves the right to store personal data for the purpose of establishing, pursuing, or defending legal claims, as well as for fraud prevention (Legal basis: Article 6(1)(f) GDPR – the Controller’s legitimate interest).

DATA RETENTION PERIOD

The period for which users' personal data is stored depends on the purposes for which the data is processed by the Controller, specifically:

Personal data necessary for the conclusion and performance of contracts will be stored for the duration of those contracts;

Personal data provided for communication purposes will be retained for the duration of the correspondence;

Personal data required to fulfill public-law obligations will be stored for the period defined by applicable laws (e.g., 5 years for tax obligations);

Personal data processed for marketing purposes will be retained until consent is withdrawn or an objection is raised.

The retention period may be extended if justified by applicable legal regulations or the Controller’s legitimate legal interest, such as establishing, pursuing, enforcing, or defending against claims.

DATA RECIPIENTS INCLUDING OUTSIDE EEA

Data Processors

The Controller uses the services of other entities that process personal data on its behalf, including those providing marketing, accounting, IT, server hosting, IT system maintenance, and database management services. Additionally, employees of public authorities authorized to supervise or control the Controller's activities may gain access to users’ personal data.

Transfer of Personal Data Outside the EEA

In exceptional cases, the Controller may transfer data related to the use of the Website outside the European Economic Area (EEA). More details on this can be found in the section titled "Other Technologies."

Sharing Data with Other Controllers

• If you choose the “PayU” payment method, your personal data will be shared with the payment operator – PayU S.A., headquartered in Poznań, ul. Grunwaldzka 186 (60-166), to complete the transaction.
  
  

• If you select “UPS” as your delivery method, your personal data will be shared with the courier company UPS Polska Sp. z o.o., based in Warsaw, ul. Prądzyńskiego 1/3 (01-222), to fulfill the delivery.

USER RIGHTS

In connection with the processing of your personal data by the Controller, you have the right to:

• access your data and receive a copy of it,
  
  

• rectify (correct) your personal data,
  
  

• restrict the processing of your personal data,
  
  

• erase your personal data,
  
  

• object to the processing of your personal data,
  
  

• transfer your data to another controller,
  
  

• withdraw your consent at any time if the data processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal,
  
  

• lodge a complaint with the President of the Personal Data Protection Office (address: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
  
  

To exercise any of the above rights, please contact the Data Controller as described in the "Privacy Policy" section above.

PROFILING

The Controller does not intend to profile users’ personal data. Exceptionally, if the user provides consent via the consent management tool available on the Website, the Controller may automatically create a user profile and deliver personalized advertisements in Google Ads campaigns based on the user’s interests, location, age, and gender. More information about cookies can be found in the section below.

VOLUNTARY DATA PROVISION

Providing certain personal data by the user:

• for the purpose of receiving marketing communication or a response to an inquiry – is voluntary,
  
  

• for the conclusion and performance of contracts – is necessary to establish a legal relationship between the user and the Controller,
  
  

• for fulfilling legal obligations, including accounting – is necessary to ensure compliance with the law.
  
  

COOKIES

Cookies are IT data, in particular text files, stored on the user's end device. They typically contain the name of the website they come from, the time they are stored on the end device, and a unique number.

Cookies are used for the following purposes:

• to create statistics that help understand how users interact with the Website, allowing for improvements in its structure and content,
  
  

• to tailor the Website’s content to the user’s preferences and optimize their experience; in particular, these files allow the Website to recognize the user's device and display the website accordingly,
  
  

• to maintain the user's session after logging in, so the user does not need to enter their login and password on every subpage.
  
  

The Website uses the following types of cookies:

• Essential cookies – required to use basic Website functionalities.
  
  

• Functional cookies – used to analyze Website usage for performance improvement.
  
  

• Marketing cookies – used to display advertising content tailored to user preferences.
  
  

Cookies can also be categorized as:

• Session cookies – temporary cookies deleted after the browser is closed. They store information relevant only during a particular session.
  
  

• Persistent cookies – stored on the user’s device for a specific period (days, months, or years), even after the browser is closed.
  
  

• Performance cookies – collect information about how users interact with the Website.
  
  

• Tracking cookies – enable the display of advertising content based on user preferences.
  
  

To learn more about cookies, how to manage or delete them, visit: allaboutcookies.org or check your browser’s help section.

You can reject all cookies except those that are strictly necessary by using the consent management tool displayed on the Website. Disabling functional or marketing cookies will stop the Website from collecting new data in these categories.

Cookies used on the Website

Marketing Cookies

Marketing Cookies

Unclassified Cookies

Unclassified cookies are those currently in the process of being categorized, in cooperation with the providers of the respective cookies.

Unclassified Cookies

OTHER TECHNOLOGIES

La Marqueuse also collects user data through logs, system services, or other technologies (e.g., pixels, SDKs). These tools allow us to determine which subpages were visited and how many times the Website has been viewed. We use these technologies to enhance the effectiveness and security of the Website, better tailor it to your needs, and enable quicker information retrieval.

We use Google Analytics, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Through this technology, Google may store information such as browser type/version, operating system, referring URL, truncated IP address, or server request time – in a cookie file. The data generated by the cookie about your use of the Website is usually transmitted to a Google server in the USA and stored there. Google Analytics does not collect data that would allow your identification. Therefore, the data collected within Google Analytics is not considered personal data.

Google processes information about your Website usage (within Google Analytics) on our behalf to evaluate the use of the Website, compile reports on activity, and provide other services related to Website usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. More information about terms of use and data protection is available at: https://policies.google.com/technologies/partner-sites.

We also use Hotjar, provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta, to better understand user needs and optimize our Website. Hotjar is a technology service that helps us understand user experience (e.g., how much time is spent on pages, which links are clicked, etc.). This allows us to build and improve our services based on user feedback. Hotjar uses cookies and other technologies to collect data on user behavior and devices, including: IP address (processed during sessions and stored in anonymized form), device screen size, device type (unique device identifiers), browser information, and geographic location (country). Hotjar does not sell any data collected on our behalf. Since Hotjar uses service providers based in the UK and USA, data may be transferred outside the EEA in exceptional cases, under standard contractual clauses. More details: https://help.hotjar.com/hc/en-us/categories/115001323967-About-Hotjar.

We use Meta Pixel on our Website – a small piece of code embedded on the site that measures ad effectiveness by analyzing user actions. Meta Pixel is provided by Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland. It collects five types of data:

• HTTP Headers – all data in HTTP headers, such as IP addresses, browser information, site location, referring source, and user details.
  
  

• Pixel Data – including the Pixel ID and Facebook cookies.
  
  

• Button Clicks – any buttons clicked on the site, their labels, and resulting page views.
  
  

• Optional Values – developers and marketers may send additional data (e.g., conversion value, page type) through custom events.
  
  

• Form Field Names – includes names of form fields like “email address”, “address”, or “quantity” when a product or service is purchased. The Pixel does not read field values unless included by the advertiser via advanced matching or optional values.
  
  

Meta Platforms Ireland Limited may transfer data collected via Pixel to countries outside the EEA, under standard contractual clauses. More information: https://pl-pl.facebook.com/privacy/policies/cookies/?entry_point=cookie_policy_redirect&entry=0

CHANGES

To keep the information contained in this Privacy Policy up to date and in compliance with applicable laws, this Privacy Policy may be amended.

If any changes are made, the update date at the beginning of the document will be modified accordingly. To stay informed about how personal data is protected, the Controller recommends that users regularly review the provisions of this Privacy Policy.