Datenschutzerklärung

The controller of your personal data is:

*PRIFE INTERNATIONAL EU SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ*
ul. Sienna 39
00-121 Warsaw, Poland

KRS: *0000978209*
NIP: *5252912766*
REGON: *522365393*

For matters relating to personal data, you may contact us at:

[eu.support@prifeintl.biz]

hereinafter referred to as the “Controller”.

Using the Store does not require creating a user account.

When you place an order, we may process the following personal data:

•⁠ ⁠first and last name,
•⁠ ⁠delivery address,
•⁠ ⁠billing address, if different from the delivery address,
•⁠ ⁠email address,
•⁠ ⁠telephone number,
•⁠ ⁠information relating to your order and purchased products,
•⁠ ⁠payment information to the extent provided to us by the payment service provider,
•⁠ ⁠information relating to complaints, returns and customer service enquiries,
•⁠ ⁠technical data connected with the use of the website, such as IP address, browser information and cookies.

We do not store full payment card details where payments are processed by an external payment service provider.

We may process personal data for the following purposes:

1. Order fulfilment

Your first and last name, delivery address, email address and telephone number may be processed in order to accept and fulfil your order, deliver purchased products and communicate with you regarding your order.

The legal basis for this processing is *Article 6(1)(b) GDPR*, as the processing is necessary for entering into and performing a contract.

2. Payment processing

Personal data necessary to process a payment may be transferred to the payment service provider selected by the customer.

The legal basis for this processing is *Article 6(1)(b) GDPR*.

3. Compliance with legal obligations

Certain data relating to orders may be processed and retained in order to comply with applicable tax, accounting and other legal obligations.

The legal basis for this processing is *Article 6(1)(c) GDPR*.

4. Complaints, returns and customer service

Personal data may be processed in order to handle complaints, returns, withdrawal from the contract and customer enquiries.

Depending on the circumstances, the legal basis for this processing is *Article 6(1)(b) GDPR* or *Article 6(1)(f) GDPR*, where processing is necessary for the legitimate interests of the Controller, including providing appropriate customer service and protecting against claims.

5. Establishing, exercising or defending legal claims

Personal data may be processed where necessary to establish, exercise or defend legal claims connected with the operation of the Store.

The legal basis for this processing is *Article 6(1)(f) GDPR*.

Providing personal data when placing an order is voluntary, but it is necessary in order to enter into and perform a sales contract.

If you do not provide the information required to fulfil an order, such as your first and last name, delivery address, email address and, where necessary for delivery, telephone number, we may not be able to process your order.

Personal data may be shared only with entities that require access to it for a specific purpose.

These may include, in particular:

•⁠ ⁠courier and logistics companies,
•⁠ ⁠payment service providers,
•⁠ ⁠banks,
•⁠ ⁠hosting and IT infrastructure providers,
•⁠ ⁠software providers used to operate the Store,
•⁠ ⁠accounting, legal or IT service providers,
•⁠ ⁠public authorities where disclosure is required by applicable law.

Entities processing personal data on behalf of the Controller are required to ensure an appropriate level of data protection.

Personal data relating to an order is retained for the period necessary to fulfil the order and subsequently for the period required under applicable tax and accounting laws and for the period during which legal claims may be established, exercised or defended.

Accounting and tax documentation is generally retained for the period required by applicable law, usually for at least 5 years in accordance with the relevant rules governing how such periods are calculated.

Personal data relating to enquiries and customer service is retained for the time necessary to resolve the matter and, where justified, for an additional period necessary to protect against potential claims.

The website *[www.prifestore.eu](http://www.prifestore.eu)* may use cookies and similar technologies.

Cookies may be used for the following purposes:

•⁠ ⁠ensuring the proper functioning of the Store,
•⁠ ⁠remembering the contents of the shopping cart,
•⁠ ⁠ensuring the security of the website and purchasing process,
•⁠ ⁠remembering user preferences,
•⁠ ⁠carrying out statistical and analytical activities, where the user has given consent,
•⁠ ⁠conducting marketing activities, where the user has given consent.

Cookies that are strictly necessary for the proper functioning of the Store may be used without additional consent where they are required to provide a service explicitly requested by the user.

Analytics, advertising and other non-essential cookies are used only after the user has given the appropriate consent.

Users may change or withdraw their cookie consent at any time through the cookie settings available on the website.

Users may also manage cookies through their web browser settings.

Under the GDPR, and where applicable, you have the following rights:

•⁠ ⁠the right to access your personal data,
•⁠ ⁠the right to rectify your personal data,
•⁠ ⁠the right to request deletion of your personal data,
•⁠ ⁠the right to restrict the processing of your personal data,
•⁠ ⁠the right to data portability,
•⁠ ⁠the right to object to processing based on the legitimate interests of the Controller,
•⁠ ⁠the right to withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, please contact the Controller at:

[eu.support@prifeintl.biz]

If you believe that your personal data is being processed unlawfully, you also have the right to lodge a complaint with the competent supervisory authority.

In Poland, the competent supervisory authority is the *President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO)*.

Some service providers used by the Store may process personal data outside the European Economic Area.

Where such a transfer takes place, the Controller ensures that the transfer is carried out in accordance with the GDPR, including, where applicable, on the basis of an adequacy decision issued by the European Commission or appropriate safeguards such as Standard Contractual Clauses.

The Controller does not make decisions concerning customers based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.

The Controller applies appropriate technical and organisational measures designed to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.

Access to personal data is limited to persons and entities that require such access in order to perform their duties.

This Privacy Policy may be updated from time to time, in particular where there are changes to applicable law, the operation of the Store or the services used by the Store.

The current version of the Privacy Policy will always be available at [www.prifestore.eu]