Privacy and Cookies Policy

1. Introduction to Personal Data Processing

This policy describes how we use and protect personal data and informs that our employees are aware of the rules governing the use of personal data to which they have access in the course of their work. This policy is in addition to our other policies regarding IT security, Internet security and the like.

This policy aims to meet the requirements of the General Data Protection Regulation (GDPR).

 

2. General Provision on Personal Data Processing

The processing of personal data in our company is subject to the principles of legality, fairness and transparency. Personal data is collected only for legitimate purposes that have been clearly indicated. We make every effort to ensure that all information is correct and up-to-date, and we strive to limit storage, integrity and confidentiality.

If you have questions about how we process personal data and this privacy policy, you can always contact our data administrator via e-mail: pp @ ilumia.pl.


3. Data Administrator

ESTON is the data controller and we ensure that your personal data is processed in accordance with the law.

Contact information:

ESTON
Data administrator: Przemysław Sieradzki
Kościuszki 15
98-220 Zduńska Wola
Contact number: +48 690 913 850
e-mail: pp @ ilumia.pl
Website: ilumia.pl

 

4. Purpose of the Processing; Data Processing Categories

There can be many reasons for processing personal data, but the examples below are the most common. We will inform you if, in exceptional cases, we process personal data for purposes that do not fall under the categories below. The same applies when we collect or process personal data from persons other than yourself.

  • Processing orders
  • Implementation of complaints and warranty obligations
  • Continued sale
  • Communication in relation to your orders or other inquiries that you have sent us
  • Ensuring user-friendliness and security
  • Optimizing our digital solutions
  • Opportunity to participate in customer surveys, competitions, draws, etc. via digital solutions
  • Archive of registered products and related personal data

What data are collected results directly from the forms into which the data are entered. We use the data provided by you in accordance with Art. 6 sec. 1 lit. b GDPR in order to perform the contract and answer your inquiries. Moreover, if, pursuant to Art. 6 sec. 1 lit. a GDPR, you give your consent to set up a customer account - we will process your personal data necessary for this purpose. Further information on the processing of your data, in particular regarding the transfer of data to our service providers for order processing, payment and shipping, can be found in the following sections of this privacy policy.

After the full performance of the contract or deletion of your customer account, the processing of your data will be limited, and after the retention periods specified in the tax regulations and the Accounting Act, the data will be deleted (Article 6 (1) (c) of the GDPR), unless you express express consent (Article 6 (1) (a) of the GDPR) for further use of this data or, in accordance with applicable law, we reserve the right to further use the data for other purposes, about which we inform you in this privacy policy. Your customer account can be deleted at any time. For this purpose, please send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the settings of your customer account.

 

5. Transmission of data for the purpose of delivery

In order to perform the contract (Article 6 (1) (b) of the GDPR), we transfer your data to the shipping company selected by you in the ordering process, which was commissioned to deliver the ordered products.

 

4. Data processing for the purpose of making payments

In order to make payments in our online store, we cooperate with external service providers that support online electronic payments and transfer your data to the payment processing company selected by you in the ordering process. The above serves the purpose of performing the contract (Article 6 (1) (b) of the GDPR).

4.1 Data processing to prevent fraud and optimize payments

In some situations, we may provide our service providers with additional information that they may use along with the information necessary to complete the payment. These service providers then act on our behalf as processors and provide us with services in the field of fraud prevention and optimization of payment processes (e.g. invoicing, analysis of disputed payments, accounting support). Pursuant to Art. 6 sec. 1 lit. f GDPR, this serves to fulfill our legitimate interests in protection against abuse and fraud and in the effective management of payments.

 

5. Channels of marketing activities: e-mail (eg newsletter), traditional mail, telephone contact

5.1 Email advertising after subscribing to the newsletter

If you subscribe to our newsletter, we will use the data provided by you necessary for the purpose of regularly sending you our newsletter by e-mail based on your consent (Article 6 (1) (a) of the GDPR). You can unsubscribe from receiving the newsletter at any time by sending us a message to our contact address indicated in the section "Our contact details and your rights" or by using the appropriate link in the newsletter. After unsubscribing, we will delete your e-mail address, if not you expressly consent to the further use of your data for other purposes or we do not reserve the right to further use this data in cases permitted by law, about which we inform you in this privacy policy.

5.2 Sending the newsletter

The newsletter is sent as part of entrusting data processing on our behalf by an external service provider. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

5.3 Sending an invitation to issue a purchase review

If, during or after placing the order, you have given your consent to it (Article 6 (1) (a) of the GDPR), then we will use your e-mail address to send you an electronic invitation to evaluate the purchase made in our store. The opinion / evaluation is issued via the feedback system we use. You can withdraw your consent at any time by sending an appropriate message to our contact address indicated in the section "Our contact details and your rights" or by using the appropriate link in the message with the invitation to issue an opinion.

Invitations to provide feedback are sent by our review service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

5.4 Post-Mail Advertising and Your Right to Object

In addition, we reserve the right to process your data - name and postal address for our own advertising purposes regarding our products, e.g. sending you the latest offers and information about our products by post. The above serves to protect our legitimate interest (Article 6 (1) (f) of the GDPR), consisting in contact with customers for the purpose of advertising our own products. You can object to the processing of your data for this purpose at any time by sending a message to our contact address indicated in the section "Our contact details and your rights".

5.5 Telephone advertising

If, during or after placing the order, you have given your consent to this (Art.6 (1) (a) GDPR), we will use your data for our own advertising purposes, e.g. to inform you about our new products and promotions. You can withdraw your consent at any time by sending us a message to our contact address indicated in the section "Our contact details and your rights" or by making an appropriate oral statement during a telephone conversation. After withdrawing your consent, we will delete your phone number, unless you give your consent expressly consent to its further use for other purposes or we do not reserve the right to further use this data in cases permitted by law, about which we inform you in this privacy policy.

 

6. Cookies and Similar Technologies

6.1 General information

In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools for this purpose, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the site (so-called persistent cookies). We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. shopping cart function). These technologies process data such as your IP address, the time of visiting the website, information about the device and browser, as well as information about the use of our website (e.g. about the contents of the shopping cart). This serves in accordance with Art. 6 sec. 1 lit. f GDPR for the implementation of our legitimate interest in the optimal presentation of our offer.

In addition, we also use technology tools to comply with legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for internet analytics and internet marketing. Further information on this, including the relevant legal grounds for data processing, can be found in the following sections of this privacy policy.

In the auxiliary menu of the web browser you will find explanations about changing cookie settings. They are available at the following links: Microsoft Edge ™ / Safari ™ / Chrome ™ / Firefox ™ / Opera ™

If you have given us your consent to use certain technological tools (Article 6 (1) (a) of the GDPR), this may be withdrawn by you at any time. In order to withdraw your consent, please contact us via the contact address provided in the section "Our contact details and your rights".

 

7. The use of cookies and similar technological tools for the purposes of web analytics and marketing

Provided you have given your consent (Article 6 (1) (a) of the GDPR), we use the following cookies and other similar technological tools of external service providers on our website. After the purpose of processing is achieved and the use of a given technological tool is completed, the data collected as part of the use of these tools will be deleted. The consent granted may be withdrawn by you at any time. Detailed information on the possibility to revoke consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

7.1 Use of Google Services

We use the following technology tools from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google technologies regarding the use of our website is usually transferred to the server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the US. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google technology tools, your IP address is shortened due to the activated IP anonymization before being stored on Google servers. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise stated for individual Google technologies described in this privacy policy, data processing is carried out on the basis of a data processing agreement concluded with Google in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in the privacy policy of the Google website.

Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics - a web analytics tool from Google, which automatically processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information on the use of our website. ) and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. As a rule, your IP address is not combined with other data collected by Google. Data processing as part of the Google Analytics service is based on the data entrustment agreement concluded with Google.

In order to optimize and make the offer on our website attractive and attractive, we have also activated the data sharing settings for "Google products and services". This allows Google to access the data collected and processed as part of the Google Analytics service and use them to improve the products and services provided by Google. The provision of data to Google for this purpose takes place on the basis of an additional agreement concluded between the data controllers. We have no influence on the subsequent processing of the data by Google.

To create and perform A / B tests on our website, we also use the Google Optimize tool, which is an extension of Google Analytics services.

For the purposes of web analytics, we also use the Google signals tool, which is an extension of Google Analytics services and enables the so-called "cross-device tracking" (identifying users using multiple devices). This means that if your devices with internet access are connected to your Google account and you have activated the "personalized advertising" option in your Google account, then Google may generate reports on the use of our website (in particular on the number of users using different websites). devices) even if you change device. We do not process your personal data in this regard, we only receive statistics based on the functions and technologies of Google signals.

In order to analyze the use of our website and advertising, we also use the so-called Google Analytics. DoubleClick-Cookie, which allows your browser to be recognized when you use other websites. Google will use this information to compile reports on your website activity and to provide other services related to website activity.

Google AdSense

Our website uses Google AdSense to promote advertising space from other providers and ad networks. These advertisements are displayed to you at various places on our website. As part of the integration of the Google AdSense service, the so-called DoubleClick cookie by Google, which allows you to display advertisements based on your interests and processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information on the use of our website) and automatically assigns you a pseudonymous user identifier (UserID).

Google Ads

With the help of Google Ads, we promote our website in search results and on third party websites. For this purpose, when visiting our website, a Google cookie remarketing file will be automatically saved on your device, which, based on the pages you visit, allows you to display advertisements based on your interests, processing for this purpose your data (IP address) using a pseudonymous identifier (ID). , time of visit to the website, information about the device and browser, as well as information on the use of our website). Further data processing only takes place if you have activated the ad personalization option in your Google account settings. In this case - if you are logged in to Google while visiting our website, Google will use your data together with the data collected as part of Google Analytics in order to create and define the so-called. target group lists for remarketing purposes on different devices.

For web analytics purposes, we use the Google Ads Conversion Tracking tool to measure and analyze your behavior when you visited our website via an advertisement within the Google Ads tool. For this purpose, cookies may be used and data processed, such as: IP address, visit time, information about the device and browser, as well as information on the use of our website, e.g. visit to the website or registration for the newsletter. Based on this data, pseudonymous user profiles are then created.

Google Maps

For the visual presentation of geographic information, Google Maps will save and process information about your use of maps and individual functions, including, for example, your IP address and location data. We have no influence on the above data processing by Google.

Google reCAPTCHA

In order to protect against spam and prevent abuse and misuse of our web forms (e.g. using malicious bots), our website has been integrated with the Google reCAPTCHA tool that processes your data for this purpose (IP address, time of visit to the website, information about the device). and browser as well as information on the use of our website) and uses them to analyze the use of our website using JavaScript and cookies. Personal data entered by you in the individual form fields on our pages will not be read or saved.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing a video: IP address, time of visit, information about the user's device and browser.

7.2 Use of Facebook services

Facebook Pixel

We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The scope of the functionalities of the Pixel Facebook tool used by us is indicated below. Facebook pixel automatically collects and saves data (your IP address, time of visit to the website, information about the device and browser, as well as information on the use of our website, e.g. visit to the website or registration for the newsletter). Based on this data, pseudonymous user profiles are then created.
As part of the so-called extended data comparison in Facebook Analytics - for comparison purposes, hashed information is also collected and stored, which can be used to identify natural persons (e.g. names and surnames, e-mail addresses and telephone numbers).
For this purpose, when visiting our website, Facebook Pixel saves a cookie on your device, which, using a pseudonymous Cookie-ID, allows you to automatically recognize your browser when visiting other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the purpose of personalizing advertising. The information collected automatically by Facebook technologies about how our website is used is usually transferred to a Facebook, Inc. server. 1601 Willow Road, Menlo Park, California 94025, USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. The data is processed in accordance with Art. 26 GDPR on the basis of joint arrangements concluded between the joint controllers. To the extent that the transfer of data to the USA is our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the privacy policy of Facebook.

Facebook Analytics

As part of Facebook Analytics - based on the data collected by the Facebook Pixel tool regarding your use of our website, statistics of users' activity on our website are created. Data processing by Facebook takes place on the basis of the concluded data entrustment agreement. The data analysis (statistics on the use of the website) serves to optimize and make our website attractive.

Facebook Ads

Facebook Ads enables us to advertise our website on Facebook and other platforms. We set the parameters of a given advertising campaign. Facebook is responsible for the exact implementation and in particular for the decision to display a given advertisement to individual users. Unless otherwise stipulated for individual functions and tools, data processing is carried out on the basis of a co-administration agreement in accordance with Art. 26 GDPR. The joint responsibility is limited to the collection of data and their transmission to Facebook Ireland. This does not include any subsequent data processing by Facebook Ireland.

Based on the statistics created by the Facebook Pixel tool regarding the activity of users visiting our websites, we use the Facebook Custom Audience function to broadcast advertisements among the appropriate group of recipients, specifying the profile / characteristics of a given target group. As part of the extended data comparison function (see above), Facebook is the data processor on our behalf.

Based on the pseudonymous Cookie-ID saved by the Facebook Pixel and the collected information about user activity on our website, we create personalized advertising via the Facebook Pixel Remarketing function.

For the purposes of web analytics and optimization of our offer - using the Facebook Pixel Conversions function, we analyze the activity of users who visit our website through advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of the concluded data entrustment agreement.

7.3 Other service providers for analytical and marketing tools

Use of Vimeo Video Plugin

For the integration of third-party content via the Vimeo video plug-in, processed by Vimeo LLC, 555 West 18th Street, New York 10011, USA ("Vimeo") when played back. the following data: IP address, time of visit, information about the user's device and browser.

The data is processed in accordance with Art. 26 GDPR on the basis of joint arrangements concluded between the joint controllers.

Google Analytics is automatically integrated into the Vimeo Video Plugin. For the purposes of web analytics, Google Analytics automatically processes data (your IP address, time of visit to the website, information about the device and browser, as well as information on the use of our website) and creates pseudonymous user profiles based on them, using cookies for this purpose. Google Analytics is a product of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google technologies regarding the use of our website is usually transferred to the server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. If your IP address is processed as part of the use of Google technology, thanks to the enabled IP anonymization, it will be shortened before being stored on Google's servers. Only in exceptional cases will the full IP address be sent to a Google server and truncated there. We have no influence on and access to data processing by Vimeo, including the settings for Google Analytics. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission.

 

8. Integration with the Trusted Shops Trustbadge

In order to display our Trusted Shops Quality Mark, as well as collected customer reviews and the Trusted Shops offer available to buyers after placing an order - the Trusted Shops Trustbadge is integrated with our website.

Integration with the Trusted Shops Trustbadge serves to implement our legitimate interests (Article 6 (1) (f) of the GDPR), consisting in optimal marketing of our offer by enabling safe purchases. The Trustbadge (so-called Trust ID) and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. The Trustbadge is put at our disposal as part of CDN (Content-Delivery-Network) services. Trusted Shops GmbH uses for this purpose, among others from the services of US suppliers. An adequate level of data protection is ensured. More information on the data protection rules of Trusted Shops GmbH can be found here.

In the case of calling the Trustbadge, the server automatically remembers the so-called server logs (log files), containing e.g. your IP address, date and time of the call, the amount of data transferred and the Internet service provider submitting the inquiry (access data / so-called server logs) and documents the call. Server logs are stored for vulnerability analysis and are automatically deleted at the latest 90 days after they are created. Other personal data is only transferred to Trusted Shops GmbH if you voluntarily decide to use Trusted Shops products after placing an order in our shop or if you have already registered for use. In such cases, a contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you are already registered as a buyer for the use of Trusted Shops products is checked automatically on the basis of a neutral parameter - an e-mail address encrypted with cryptographic one-way encryption. Before transmission, the email address is encrypted with a hash value so that it cannot be decrypted by Trusted Shops. After checking for compliance, the parameter is automatically deleted. The above is necessary to achieve the goals arising from our and Trusted Shops legitimate interests (Article 6 (1) (f) of the GDPR) in the scope of providing services related to a specific order each time, i.e. buyer protection services (Trusted Shops guarantee) and issuing services purchase reviews. Other information, including your rights, is contained in the Trusted Shops privacy policy available above and via the Trustbadge tool.

 

9. Social media

9.1 Social media plugins: Facebook, Twitter, Instagram, Pinterest

Our website uses so-called plugins (buttons) of social networks. These plug-ins are available via an HTML link, which ensures that when visiting our website containing such plug-ins (buttons), no automatic, direct connection is established with the servers of the operator of the given social network. After clicking on one of the buttons (plug-in), a new window of your browser will open, displaying the page of a given social networking site, where you can approve the use of a given button, eg "Like" or "Share".

9.2 Our activity on social networks: Facebook, Twitter, Instagram, Youtube, Pinterest

If you have given your consent in this regard to a given social network (Article 6 (1) (a) of the GDPR), when visiting our account / profile in the above-mentioned social networks, your data will be automatically collected and stored for the purposes of web analytics and marketing. Based on this data, pseudonymous user profiles are created. They can be used, for example, to place within social networks and outside them, the so-called personalized ads that are likely to match your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social networking sites, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for the purpose of submitting an inquiry are described in the privacy policies of individual social networking sites linked below. Should you require assistance in this regard, you can also contact us.

Facebook is a social networking site operated by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland ("Facebook Ireland"). Automatically processed information about your activity and how you use our fan page on Facebook is usually sent to the server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing as part of visiting a fan page on Facebook is carried out in accordance with art. 26 GDPR on the basis of the joint arrangements made by the joint controllers, which are available here. Further information on the processing of your personal data when visiting the Facebook fanpage (information on page statistics functions) is available here.

Twitter is a social networking site operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("Twitter"). Automatically processed information about your activity and how you use our Twitter profile is usually transmitted to and stored by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 in the USA. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Instagram is a social networking site provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). Automatically processed information about your activity and how you use our fanpage account on Instagram is usually transmitted to and stored by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing as part of visits to a fanpage account on Instagram is carried out in accordance with art. 26 of the GDPR based on the joint arrangements made by the joint administrators. Further information on the processing of your personal data when visiting the Facebook fan page (information on page statistics functions) is available here.

YouTube is a social networking service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Automatically processed information about your activity and how you use our YouTube profile is usually transferred to the server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043 in the USA and stored there. In relation to the USA, the European Commission has not issued an adequacy decision. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Pinterest is a social networking site provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). Automatically processed information about your activity and how you use our Pinterest profile is usually transferred to the server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107 in the USA and stored there.

In relation to the USA, the European Commission has not issued an adequacy decision. 

 

10. Our contact details and your rights

Persons whose data is processed have the following rights:

in accordance with Art. 15 GDPR: the right to obtain information on data processing in the scope specified in this article;
in accordance with Art. 16 GDPR: the right to rectify your inaccurate or incomplete personal data;
in accordance with Art. 17 GDPR: the so-called "Right to be forgotten", i.e. the right to delete your personal data stored with us, unless further processing is necessary:
for exercising the right to freedom of expression and information;
to comply with a legal obligation;
for reasons of public interest;
to establish, assert or defend claims;
in accordance with Art. 18 GDPR: the right to limit the processing of personal data, provided that:
the accuracy of this personal data is contested by you;
the processing is unlawful and you oppose its deletion;
we no longer need personal data, but you need them to establish, assert or defend claims;
pursuant to Art. 21 objection to data processing;
in accordance with Art. 20 GDPR: the right to receive the data provided to us in a structured, commonly used machine-readable format and to send it to another administrator;
in accordance with Art. 77 GDPR: the right to lodge a complaint with the supervisory body (the President of the Personal Data Protection Office "UODO").
In case of questions regarding the collection, processing and use of your personal data, as well as in the event of a request for information, rectification, restriction of processing or deletion of data, and in order to revoke granted consents or object to the use of specific data, please contact the data controller indicated at the beginning of this privacy policy.

 

11. Access data and hosting

You can visit our website without providing any personal information. Each time the website is accessed, the server automatically saves only the so-called server logs, e.g. the name of the requested file, your IP address, date and time of the call, the amount of data transferred and the Internet service provider submitting the inquiry (so-called access logs) and documents the page call

These data are analyzed exclusively for the purpose of ensuring the proper functioning of our website and improving our offer. The above serves in accordance with Art. 6 sec. 1 lit. f GDPR, securing our legitimate interest, consisting in the optimal and correct presentation of our websites and offers. All access data will be deleted no later than seven days after the end of your visit to the website.

11.1 Hosting

Our website hosting and display services are partly provided on our behalf by our service providers as part of entrusting data processing. Unless otherwise provided in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis of cooperation with them, please contact us. Our contact details can be found under "Our contact details and your rights."

 

Right to object

If we process personal data in the manner described in this privacy policy in order to protect our legitimate interests, you may object to the processing of your data for this purpose - with effect for the future. If the processing takes place for direct marketing purposes, you can exercise your right to object at any time. If the processing takes place for other purposes, you only have the right to object for reasons arising from your particular situation.

After you exercise your right to object, we will not continue to process your personal data, unless we demonstrate the existence of valid, legally justified grounds for processing and they override your interests and rights, or if the data processing is to assert, exercise or defend legal claims .

The above sentence does not apply when data processing is carried out for direct marketing purposes. In this case, after you object, we will always stop processing your personal data.

 

List of cookies we collect

The table below lists the cookies we collect and what information they store.

Cookie Name Cookie Description
FORM_KEY Stores randomly generated key used to prevent forged requests.
PHPSESSID Your session ID on the server.
GUEST-VIEW Allows guests to view and edit their orders.
PERSISTENT_SHOPPING_CART A link to information about your cart and viewing history, if you have asked for this.
STF Information on products you have emailed to friends.
STORE The store view or language you have selected.
USER_ALLOWED_SAVE_COOKIE Indicates whether a customer allowed to use cookies.
MAGE-CACHE-SESSID Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE-SECTION-INVALIDATION Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-TIMEOUT Facilitates caching of content on the browser to make pages load faster.
SECTION-DATA-IDS Facilitates caching of content on the browser to make pages load faster.
PRIVATE_CONTENT_VERSION Facilitates caching of content on the browser to make pages load faster.
X-MAGENTO-VARY Facilitates caching of content on the server to make pages load faster.
MAGE-TRANSLATION-FILE-VERSION Facilitates translation of content to other languages.
MAGE-TRANSLATION-STORAGE Facilitates translation of content to other languages.
To Top