Privacy policy

The www.littlelights.pl online store is run by LLMNF Krzysztof Stefaniak running a business under the name LLMNF Krzysztof Stefaniak,

pl. Jana Matejki 12/327 31-157 Kraków, NIP: 9710646644, REGON: 364176978.

Contact with the Store and the Administrator is possible via e-mail: contact@littlelights.pl and by phone: + 48 12 356 57 00

1) General provisions The administrator of your personal data is Krzysztof Stefaniak
running a business under the name LLMNF Krzysztof Stefaniak, pl. Jana Matejki 12/327 31-157 Kraków, NIP: 9710646644, REGON: 364176978. Personal data is processed in accordance with applicable law, in particular in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation) - hereinafter referred to as "GDPR". The administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are processed in accordance with the principle of lawfulness, reliability and transparency, the principle of limiting the purpose of data processing, the principle of data minimization, the principle of data correctness, the principle of limiting data storage, the principle of data integrity and confidentiality and accountability.
The administrator guarantees the confidentiality of all personal data provided and ensures that all security and personal data protection measures required by applicable regulations are taken. Personal data is collected with due diligence and properly protected against access by unauthorized persons. Personal data is processed only on the territory of the European Union.

2) Purpose of personal data processing and legal basis Your personal data will be
processed: pursuant to art. 6 sec. 1 point b) GDPR - in order to perform the contract
between the Administrator and you, including making payments, handling complaints,
withdrawing from the contract, answering inquiries directed by e-mail and contacting you,
including for purposes related to the performance of the contract. based on Article. 6 sec. 1 point c) GDPR - in order to fulfill the legal obligation incumbent on the Administrator, i.e. for tax and accounting purposes, pursuant to art. 6 sec. 1 point f) GDPR - the legitimate interests of the Administrator, in order to conduct marketing activities towards you, including direct marketing

of your own services, matching advertisements in accordance with the content you have previously viewed, contacting you, including for purposes related to permitted marketing activities , in particular and with your consent - by e-mail and telephone, handling your inquiries sent by e-mail in a situation where they are not directly related to the performance of the contract, debt collection, statistical analysis, data storage for archiving purposes, and ensuring accountability, pursuant to art. 6 sec. 1 point a) - your consent in order to save data in cookies, collect data from websites and mobile applications.

3) Recipients of personal data We provide your personal data to entities
supporting the Administrator in the implementation of the purchase and sale agreement and the provision of electronic services, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting, legal, auditing and consulting services, couriers (in connection

with the implementation of the order), marketing agencies (in the field of marketing services) and entities or bodies authorized under the law. The administrator does not intend to transfer your data to a third country or to international organizations.

4) Period
of personal data processing Your personal data will be processed for the duration of the contract concluded with you, as well as after its completion for the purposes of: pursuing claims in connection with the performance of the contract, performance of obligations under the law, including in particular tax and accounting, statistical and archiving. We
store your personal data for marketing purposes for the duration of the contract or until
you object to such processing, whichever occurs first. In order to be accountable, i.e. to prove compliance with the provisions on the processing of personal data, we will store data for the period in which the Administrator is obliged to keep data or documents containing them to document the fulfillment of legal requirements and enable control of their fulfillment by public authorities.

5) The rights of data subjects You have the following rights: the right to access data,
the right to rectify data, the right to delete data ("the right to be forgotten"), the right
to limit processing, the right to transfer data, the right to object, the right to withdraw consent to the processing of personal data for a specific purpose, if you have previously given such consent, the right to lodge a complaint with the supervisory authority in relation to the processing of personal data by us. The above rights can be exercised in accordance with the principles described in Regulation (EU) 2016/679 of the European Parliament and of
the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / WE (GDPR) by contacting the Administrator at shop@littlelights.pl. You can exercise your rights: in the event of a request for data rectification when: you notice that your data is incorrect or incomplete; in the event of a request for deletion of data, when: your data will
no longer be necessary for the purposes for which it was collected by the Administrator,
you will withdraw your consent to the processing of data, you will object to the processing
of your personal data, your data will be processed unlawfully, the data should be deleted in order to fulfill the legal obligation or the data has been collected in connection with the provision of electronic services offered to the child; in the event of a request to limit data processing, when: you notice that your data is incorrect - you can request that the processing of your data be limited for a period that allows the Administrator to check the correctness of this data, your data will be processed unlawfully, but you will not want it to
be deleted; Your data will not be anymore

The Administrator needs but may be necessary for you to defend or pursue claims,
or you object to data processing - until it is determined whether the legitimate grounds
on the part of the Administrator override the grounds for objection; in the case of a
request for data transfer when: the processing of your data takes place on the basis of
your consent or a contract concluded with you and when this processing is carried out automatically; in the event of an objection when: the processing of your personal data takes place on the basis of a legitimate interest or for statistical purposes, and the objection is justified by the specific situation in which you have found yourself, your personal data is processed for direct marketing purposes, including profiling for this purpose. You also have the right to lodge a complaint with the Personal Data Protection Office when you believe that the processing of personal data concerning you

violates the provisions of the GDPR. Consent to the processing of personal data may be withdrawn in the same way as it was granted, at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal. Providing your personal data is voluntary, but necessary to place an order and create an account. Your personal data will not be processed in an automated manner (including in the form of profiling).

6) Cookies and other tracking technologies The Store does not automatically collect any data, except for the data contained in cookies when using the Store itself. Cookies are small text files sent by the Store and stored on your computer, containing certain information related to your use of the Store. Cookies are used by the Store to operate
the Store's website and to provide you with the opportunity to provide you with interesting information and during the purchasing process, e.g. to remember your purchases. Cookies used by the Store may be temporary or permanent. Temporary cookies are deleted when the browser is closed, while permanent cookies are also stored after you have finished using the Store and are used to store information such as your password or login, which speeds up and facilitates the use of the Store. In any case, you can block the installation of cookies or delete permanent cookies using the appropriate options of your web browser. In case of problems, we advise you to use the browser's help file or contact the manufacturer of the browser you are using. In addition to cookies, the Store may also collect data normally collected by system administrators as part of the so-called logs or log files. The information contained in the logs may include, among others IP address, type of platform and web browser, Internet provider and the address of the website from which you entered the Store's website. Some subpages within the Store and other means of communication with you may contain the so-called "Web beacons" (electronic pictures). Web beacons allow you to receive information such as, for example, the IP address of the computer on which the page on which the web beacon was placed was loaded, the page URL, the page loading time, browser type, as well as information contained in cookies, in order to evaluate the effectiveness our ads. These data will be archived and used for the purposes of statistical analysis and evaluation of the global traffic of the Store's users. These data will not be combined with the personal data provided.

7) The online store processes your personal data for the following purposes:

a) Sales and shipping b) transfer of your personal data to ING Bank ÿlÿski SA
("Bank") in connection with: a. the Bank's provision to the Online Store of the
service of providing infrastructure for handling payments via the Internet (legal
basis: Art. 6 (1) (f) of the Regulation). b. handling and settlement by the Bank of
payments made by customers of the Online Store via the Internet using payment instruments (legal basis: Article 6 (1) (f) of the Regulation). c. in order for the Bank to
verify the proper performance of contracts concluded with the Online Store, in particular
to ensure the protection of the interests of payers in connection with the submitted by them complaints (legal basis: Article 6 (1) (f) of the Regulation). c) transfer of your personal data to Twisto Polska       sp. z oo in connection with the possibility of
offering payment for the purchased goods or service by Twisto Polska sp. z oo under the contract of mandate including the purchase formula "Buy with Twisto" and sharingthis purchasing formula by the Online Store, as well as the purpose of verification by Twisto Polska Sp. z o. o. the proper performance of such contracts, mandate (legal basis: Article 6 (1) (f) Regulation).

In connection with the processing of personal data for the purposes set out in para. 3 and 4, your personal data may be made available by the Online Store to other recipients or categories of recipients of personal data, which may be:

a. ING Bank SA b. Twisto Polska sp. z oo

If you provide your personal data to the Bank in connection with the handling and settlement of payments made by you payments to the Online Store via the Internet using payment instruments, the provision of data is required in order to make the payment and provide confirmation of its payment by the Bank on Online Store item.

If your personal data is transferred to the Bank for the purpose of verification by the Bank of the proper performance of contracts concluded with the Online Store, in particular to ensure the protection of the interests of payers in connection with their complaints, providing this data is required to enable the implementation of the contract concluded between the Online Store and the Bank.

If your personal data is transferred to Twisto Polska sp.z o.o. in connection with the possibility of offering you the payment of the price for the goods or services purchased by you by Twisto Polska sp.z o.o. under the contract of mandate including the "Buy with Twisto" purchasing formula and the provision of this formula by the Online Store, providing this data and processing it for this purpose is required in connection with the business model adopted by the Online Store and in order to implement the contract concluded between the Online Store and Twisto Polska Sp. z o.o.