PRIVACY POLICY OF THE MIVI SHOP ONLINE STORE

1. General provisions

1. This Privacy Policy defines the rules for processing the personal data of Customers and Users of the online store www.mivishop.shop hereinafter referred to as the “Store”.

2. The controller of personal data is Mivita&Emporio Mateusz Felchner, with its registered office at Demlin 99H, 83-209 Demlin, Poland, Tax Identification Number NIP: 592-227-07-10, REGON: 368335400.

3. Contact with the Controller is possible by e-mail at: mivibiuro@gmail.com or in writing to the registered office address.

4. The Controller takes special care to protect the privacy and personal data of Store Users, in particular by protecting data against disclosure to unauthorized persons.

2. Scope and purpose of data processing

1. The Controller processes personal data such as: first and last name, delivery address (street, house/apartment number, postal code, city, country), phone number, e-mail address, company details (name, Tax Identification Number) – in the case of entrepreneurs.

2. Personal data is processed for the following purposes:

1. performance of the sales agreement and delivery of products,
2. handling complaints and returns,
3. maintaining the Customer account in the Store,
4. carrying out marketing activities – after obtaining consent,
5. fulfilling legal obligations imposed on the Controller.

3. Legal basis for processing

1. Personal data is processed on the basis of:

1. Article 6(1)(b) GDPR – necessity for the performance of a contract,
2. Article 6(1)(c) GDPR – legal obligation,
3. Article 6(1)(a) GDPR – consent of the data subject,
4. Article 6(1)(f) GDPR – legitimate interest of the Controller.

4. Recipients of personal data

1. Recipients of the data may include entities providing services to the Controller, such as:

2. courier and postal companies,
3. payment operators,
4. hosting and IT companies,
5. accounting offices,
6. providers of marketing tools.

Personal data may be transferred only to the extent necessary to achieve the purpose for which it was collected.

5. Data retention period

1. Personal data is stored for the period of:

the duration of the agreement and the time necessary to pursue claims,
the period required by law, e.g. tax regulations,
until consent is withdrawn – in the case of data processed on the basis of consent.

6. Rights of the data subject

1. Every data subject has the right to:

1. access their data,
2. rectify their data,
3. delete their data,
4. restrict the processing of their data,
5. data portability,
6. object to the processing of their data,
7. withdraw consent at any time.

7. Cookies

1. The Store uses cookies to ensure proper operation, traffic analysis and marketing activities.

2. The User may change cookie settings in their web browser at any time.

3. Limiting the use of cookies may affect the functionality of the Store.

8. Data security

1. The Controller applies technical and organizational measures ensuring the protection of personal data appropriate to the risk.

2. Access to data is granted only to persons authorized by the Controller.

9. Final provisions

1. The Controller reserves the right to make changes to this Privacy Policy, which will be published on the Store’s website.

2. In matters not regulated herein, the provisions of Polish law shall apply, in particular the GDPR and the Act on the Provision of Electronic Services.

```