I. General Provisions

1. The Privacy Policy defines how personal data of Users necessary for the provision of electronic services through the website https://woosabi.pl/en/shop is collected, processed, and stored.
2. The website collects only the personal data necessary for providing and developing the services offered.
3. Personal data collected through the Website is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR), and the Personal Data Protection Act of 10 May 2018.

II. Data Administrator

1. The administrator of personal data collected by the Website is: Good Vibes Sp. z o. o., ul. Braniborska 14, 53-680 Wrocław, Lower Silesian Voivodeship, NIP: 8971956107, email address: shop@woosabi.pl.

III. Purpose of Collecting Personal Data

1. Order Processing and Sales

Personal data is collected to enable order placement, processing, and execution, including:

• Delivery of goods,
• Issuing invoices or receipts,
• Contacting the customer regarding order processing (e.g. order confirmation, status updates, changes in the order).

2. Returns and Complaints Handling

Personal data is processed to facilitate the handling of returns or complaints, including:

• Verification of customer identity,
• Conducting the return or exchange procedure,
• Refunding payments for returned or complained products.

3. Marketing and Promotions

Data may be used for marketing purposes, such as:

• Sending newsletters (with customer consent),
• Informing about new products, promotions, and special offers,
• Personalizing offers based on customers’ shopping preferences (e.g. product recommendations).

4. Legal Obligations Fulfillment

Data is processed for the fulfillment of obligations under the law, including:

• Storing data for tax and accounting purposes,
• Storing data for settlements with tax authorities,
• Complying with consumer protection laws.

5. Managing User Account (if applicable)

Data is collected to create and manage the customer account, including:

• Storing order history,
• Facilitating the order placement process (e.g. remembering address details),
• Providing easy access to order data and delivery statuses.

6. Transaction Security and Fraud Prevention

Data is collected to ensure the security of transactions, including:

• Preventing fraud and financial abuse,
• Verifying data to protect against unauthorized transactions.

7. Service Improvement and Analytics

Data may be used for analytical and statistical purposes, such as:

• Analyzing user behavior on the online store (e.g. most viewed products),
• Optimizing and improving store performance,
• Collecting feedback and ratings from customers regarding products and services.

8. Customer Contact

Data is processed to enable contact with the customer, including:

• Responding to inquiries and information requests (e.g. pre-purchase questions),
• Customer account support, assistance with logging in, and data updates.

IV. Types of Processed Personal Data

1. The Administrator may process the following personal data of the User:
   1. For booking purposes: name, email address, phone number, NIP (Tax Identification Number), dietary preferences.
   2. To establish and pursue potential claims: name, phone number, email address, and other data necessary to prove the existence of a claim and the extent of damage.
   3. For marketing purposes: name, email address.
2. When using the Website, the following data may be automatically collected: IP address, browser type, operating system type, domain name, and access time to the Website.

V. Data Recipients

1. The Administrator takes all necessary measures to protect User data from unauthorized access by third parties.
2. Personal data will only be shared with recipients if necessary to fulfill a legally justified purpose and is required for the proper execution of the service. Therefore, Users’ personal data may be shared with the following categories of recipients:
   1. Entities handling electronic payments – if electronic payments are available through the Website,
   2. External service providers supporting the Website,
   3. Entities managing accounting records,
   4. Lawyers – for the purpose of pursuing potential claims,
   5. Entities providing services enabling reservations through IT systems or telecommunication systems.

   Additionally, personal data may only be shared with institutions authorized to receive them under applicable laws.

VI. Period of Personal Data Processing

1. Users’ personal data will be processed for the period:
   • When the basis for data processing is contract performance – until the expiration of claims after its execution,
   • When the basis for data processing is consent – until the consent is withdrawn, and after withdrawal of consent until the expiration of claims.

   In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to business activity – 3 years (unless a specific provision provides otherwise).

VII. Users’ Rights

1. The User of the Website has the right to: access their personal data, rectify, delete, restrict processing, transfer, object to processing, withdraw consent at any time (without affecting the legality of processing based on consent before its withdrawal).
2. Requests regarding these rights should be sent to: shop@woosabi.pl.
3. The Administrator will fulfill or deny the request promptly – no later than within one month from receiving the request.
4. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe their rights and freedoms have been violated (GDPR).

VIII. Cookies

1. The Website collects information using cookies – session cookies, persistent cookies, and third-party cookies.
2. The collection of cookies helps to properly provide services on the Website and is used for statistical purposes.
3. The User can specify the scope of cookie access to their device in the browser settings.
4. The Administrator informs that restrictions on cookie usage may affect some functionalities available on the Website.

IX. Automated Decision-Making and Profiling

1. Users’ data will not be processed in an automated manner that could result in any decisions being made against them.
2. Users’ data may be profiled to personalize content and offers, provided that they consent.

X. Final Provisions

1. The Administrator reserves the right to amend the Privacy Policy, however, the Users’ rights will not be restricted.
   
2. Information about changes will be provided through a notice available on the Website.
3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and Polish law shall apply.