Privacy Policy

Whenever the following terms are used in this Privacy Policy, they should be understood as defined below:

Administrator: Galeria Lagos

Personal Data: Information relating to an identified or identifiable natural person (data subject). An identifiable person is one who can be identified, directly or indirectly, especially by reference to an identifier such as a name, identification number, location data, online identifier, or one or more specific factors relating to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

Data Subject: Any natural person whose personal data is processed by the Administrator in connection with their business activities, e.g., a person accessing restricted areas at the Administrator’s locations, a person entering into a contract with the Administrator, or a person sending an email inquiry to the Administrator.

User: Any individual who has registered an account on the online service.

Online Service: Owned by Galeria Lagos that also acts as the data administrator.

Registration Form: A form completed by the User to create an account.

Contact Form: A form completed by the User for communication purposes.

Account: A set of resources and settings created for the Service Recipient within the Services. The User can use the Account to manage the Services.

Chat: A “conversation” between two or more people involving the exchange of text messages.

Privacy Settings: An account functionality that allows users of selected Services to manage those Services, including modifying their scope.

Profile: A verified set of data belonging to the holder in online services.

Services: Any activity involving intangible elements aimed at impacting the client or their objects, which does not result in the transfer of ownership. This is voluntary action offered by one party to another.

Business Days: Weekdays from Monday to Friday, excluding public holidays.

GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

§1 Technical Requirements

To use the online service, the following minimum technical requirements must be met:

1. Possession of a computer or another multimedia device with Internet access.
2. Having an up-to-date web browser:
   • Opera
   • Mozilla Firefox
   • Google Chrome
   • Safari or Safari Mobile
   • Microsoft Edge
   • Or another compatible browser.
3. Possession of an active email account.
4. Ability to open HTML documents.
5. Acceptance and use of cookies.

If no registration, contact, reporting, ordering form, or Chat function is available, the definitions in paragraphs 2.3–4 are not applicable.

§2 Data Processing Principles

1. This Privacy Policy outlines the principles for processing personal data collected through the website (hereinafter referred to as the “Online Service”).
2. Personal data collected by Galeria Lagos through the Online Service is processed in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
3. The Administrator takes utmost care over protecting the privacy of users visiting the website.

§3 Types of Processed Data, Purposes, and Legal Bases for Processing

1. Galeria Lagos collects information about natural persons conducting business on their own behalf or representing legal entities or other organizational units with legal capacity, hereinafter collectively referred to as “Users.”
2. Types of processed data:
   • Data provided during the use of chat services for the purpose of fulfilling contracts for electronic services or sales agreements. Legal basis: necessity for contract performance (Article 6(1)(b) GDPR).
   • Data about the user’s device, such as IP address, cookies, session data, browser information, and activity data within the Online Service, to ensure proper functionality.
   • Geolocation data, if the user has consented, used to deliver tailored product and service offers.
   • Navigational data, including opened links and actions taken on the website, for improving the functionality of electronic services (Article 6(1)(f) GDPR).
   • Data necessary for the Administrator to pursue claims or defend against them (Article 6(1)(f) GDPR).
3. Providing personal data to Galeria Lagos is voluntary but required for contract or service execution.

§4 Recipients of Shared or Entrusted Data and Data Retention Period

1. The Administrator discloses personal data only to processors under data processing agreements for service delivery, e.g., hosting, IT, accounting, marketing, and legal services.
2. Data may be processed for no longer than necessary to achieve processing purposes (Article 5(1)(e) GDPR). For claims, this period generally lasts three years.
3. Navigational data may be used for statistical purposes, service improvement, and website management.

§5 Cookies and IP Addresses

1. Cookies are small text files stored on the user’s device. Galeria Lagos uses:
   • Session Cookies: Deleted after closing the browser.
   • Persistent Cookies: Remain until expiration or manual deletion.
   • First-Party Cookies: Set by the website.
   • Third-Party Cookies: Set by external providers.
2. Users can manage cookies through browser settings.

§6 Rights of Data Subjects

1. Data subjects have rights under GDPR, including access, rectification, erasure, data portability, and objection.

§8 Privacy Policy Changes

1. Updates to the Privacy Policy will be communicated on the website.

For questions, please contact: sklep@galerialagos.pl.

This Privacy Policy is effective as of August 10, 2023.

For legal inquiries: rationis@op.pl.