Dear Sir or Madam,

On May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”). With your security in mind, which is our priority, we assure you that we use all legally provided measures to protect personal data and, moreover, we apply the principle of extreme caution. Below, we would like to present the rules according to which we collect and store your data, the rights you are entitled to, as well as the persons responsible for the security of your personal data processed by us. Please read the following information and accept the terms of use of our website. All processing of personal data will be based on generally applicable laws, including in particular the aforementioned GDPR regulation, as well as the provisions of the Polish Act of May 10, 2018, on the protection of personal data.

What is personal data and what does its processing involve?

Article 4(1) of the GDPR defines personal data as any information that can be used to identify a natural person, either directly or indirectly. This includes, for example, name, identification number (personal identification number), telephone number, email address, IP address, and physical or physiological characteristics. Furthermore, this data also includes information about your location sent by smartphones, tablets and other electronic devices.

In addition, we would like to inform you that according to the “GDPR”, the protection of personal data only applies to data of natural persons, i.e. it does not extend to legal persons.

The processing of personal data is basically any activity on personal data, regardless of whether it is done automatically or not, e.g. collecting, storing, recording, organizing, modifying, viewing, using, sharing, restricting, deleting or destroying.

Who is the Personal Data Administrator?

The administrator is the entity responsible for collecting personal data. The administrator is also the addressee to whom you can direct all your requests related to the collection and processing of your personal data by us. In our case, the Administrator is KGK TREND sp. z o.o. ul. Ujastek 5B 31-752 Kraków, District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, Share capital: PLN 100,000.00, National Court Register (KRS) number: 0001008122, Statistical Number (REGON): 361816905, NIP: 6783155146. The personal data controller can be contacted by post, by email at admin@kgktrend.pl or by phone: 012 307 07 15.

What personal data do we process?

As a rule, we only process personal data if it is absolutely necessary for the provision of a service or the fulfillment of a contract. In this case, we process the personal data of customers KGK TREND sp. z o.o. ul. Ujastek 5B, 31-752 Kraków, District Court for Kraków Śródmieście in Kraków, 11th Commercial Division of the National Court Register, Share capital: 100,000.00 PLN, KRS: 0001008122, REGON: 361816905, NIP: 6783155146, persons contacting KGK TREND sp. z o.o. ul. Ujastek 5B, 31-752 Kraków, District Court for Kraków Śródmieście in Kraków, 11th Commercial Division of the National Court Register, Share capital: 100,000.00 PLN, KRS: 0001008122, REGON: 361816905, NIP: 6783155146, tel: 12 307 07 15 in order to obtain information about the offer, share comments regarding services or products, start cooperation or conclude a contract, i.e. in particular the following personal data: name and surname, e-mail, telephone, delivery address, invoice billing addresses, tax identification number, telephone numbers.

Furthermore, if you give your consent, we may process your sensitive data for the proper performance of our services. At the same time, we would like to point out that each time you personally provide information from a special category of personal data, such as sensitive data, via websites, e-mail or during a telephone conversation, will constitute explicit consent for us to collect and use such information in the manner specified herein or specified in the location where the information was disclosed.

On what basis and for what purpose do we process data?

We process personal data in accordance with the law, in a fair and transparent manner. We process your personal data on the basis of:

1. the voluntary consent you have given (e.g. by sending us an e-mail or agreeing to receive a newsletter or other form of marketing),
2. the performance of a contract, as well as the commencement of cooperation or the signing of a contract,
3. legitimate interest of KGK TREND sp. z o.o. ul. Ujastek 5B 31-752 Kraków, District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, Share capital: PLN 100,000.00, National Court Register (KRS) number: 0001008122, Statistical Number (REGON): 361816905, NIP: 6783155146 as the Data Controller (e.g. in the scope of creating a database, analytical and profiling activities, including activities related to the analysis of the use of products, direct marketing of own products, securing documentation for the purposes of defense against possible claims or for the purposes of pursuing claims),
4. legal obligations (e.g. tax law or accounting regulations).

We process your personal data for the following purposes:

a) to ensure the highest possible quality of our services, i.e. in a situation where you are or will be a party to a contract between us, we will only process the personal data necessary for its execution, for example your name, telephone number or home or delivery address. b) the legitimate interests pursued by the Controller, which are: the performance of contracts and orders, the proper provision of services to you, the keeping of statistics relating to visits to our website, the improvement of our services and their adaptation to your personalized needs, as well as marketing and our own promotion on the services market.

To whom may we transfer your data?

If you give your consent, your data will only be passed on to trusted partners cooperating with us, i.e. in particular, your data may be passed on to our contractors, subcontractors, associates or service providers who will help us to provide the service (e.g. providers of IT, postal, courier, accounting or order fulfillment services). The transfer of personal data to another entity does not entitle it to use them arbitrarily, but only to process them for the purposes specified in the data processing agreement, ensuring the security of the processing and to the extent necessary for the proper provision of services to you and the performance of the agreements binding on us. The transfer of personal data does not release us (as the transferor) from responsibility for their processing. We would like to point out that your data may also be transferred to a public authority, but only if such authorization results from generally applicable laws and provided that the authority submits a relevant request in this regard.

How long will we process your personal data?

Your personal data will be processed for as long as it is necessary in terms of our legal relationship, i.e. as long as there is a basis for processing your personal data. For example, in the case of consent, until such consent is withdrawn, restricted or other actions are taken by you that limit this consent; if the data is necessary for the performance of a contract, for the duration of the contract and after its completion until the expiry of the limitation periods for claims arising from the contract; and if the basis for data processing is the legitimate interest of the Controller, until such legitimate interest exists. Furthermore, we will process your personal data for as long as it is necessary due to applicable legal regulations; the periods of data processing for this purpose are specified in these regulations.

What rights do you have?

The GDPR provides for a number of rights for persons whose personal data is collected and processed. According to the GDPR, you have:

1. the right to access your personal data,
2. the right to request the rectification of your personal data,
3. the right to request its erasure or restriction of its processing,
4. in the case of consent to the processing of personal data - the right to withdraw it,
5. the right to data portability,
6. the right to object to the processing of your personal data.

If you have any questions, concerns or doubts regarding the content of this information or the way we process personal data, as well as any complaints regarding these issues (although we hope that it will not be necessary to lodge such complaints), please send an email with detailed information regarding the complaint to admin@kgktrend. pl All complaints will be reviewed and answered.

In addition, you also have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection (address: ul. Stawki 2, 00-193 Warsaw), if, in your opinion, our processing of personal data violates the provisions of the EU GDPR regulation.

You can contact the Administrator at any time to exercise any of your rights. For this purpose, we provide the exact contact details:

Personal data controller, company KGK TREND sp. z o.o. ul. Ujastek 5B 31-752 Kraków, District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, Share capital: 100,000.00 PLN, KRS: 0001008122, REGON: 361816905, NIP: 6783155146. Direct contact with the personal data administrator is possible at the following address: admin@kgktrend.pl, or by phone: 012 307 07 15.

Collection, acquisition, scope and purpose of personal data collection

1. The administrator informs Users that it entrusts the processing of personal data to the following entities: - Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197 – for the purpose of using the edrone.me mailing system for sending newsletters, - Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Krakow, NIP: 676-248-20-64, KRS: 0000537197: - for marketing purposes only for the needs of email, text message, and social media campaigns launched or indicated by the Administrator using the edrone system,
2. The Administrator informs that it uses the following technologies to track the activities undertaken by the user/Customer within the Store's website: - edrone tracking codes - to analyze the statistics of the Store's website, as well as for marketing purposes only for the needs of e-mail, sms, social media campaigns launched or indicated by the Administrator using the edrone system.

COOKIES USED BY THE WEBSITES The WEBSITES use cookie technology (cookies are small pieces of information in text form that are sent by a server and stored on the USER's computer). This data is used for automatic identification of a specific USER by the server, which can then generate a page intended for that USER, support the login process, and handle some forms. Two types of cookies are used within the WEBSITE: Session cookies and persistent cookies. Session cookies are files that are defined as temporary. They are stored on the USER's end device until logging out, leaving the website or turning off the software (web browser). Persistent cookies are files stored on the USER's end device for the time specified in the cookie file parameters or until they are deleted by the USER. The following types of cookies are used on the WEBSITES: - “necessary” - enable the use of basic services available on the WEBSITE - “security” - are used to ensure security, e.g. used to detect abuse in the use of WEBSITE services; - “performance” - enable the collection of information on how the WEBSITE is used; - “functional” – enable the memorization of settings selected by the USER and personalization of the USER interface, e.g. interface language, interface color, stylization, size and type of fonts displayed on the computer screen, etc.; – “advertising” – enable the delivery of advertising content to USERS that is more tailored to their interests. – “integration” – related to third-party services used on the WEBSITES. In particular, the WEBSITE uses cookies necessary for the operation of the following services:

A. Google Analytics

B. YouTube

C. Displaying ADMINISTRATOR messages – Information on the types of cookies used by Google – can be found here: https://policies.google.com/technologies/types?hl=pl information on their handling and disabling – can be found here: https://support.google.com/accounts/answer/61416.Zablokowanie Some cookies may cause certain functions of the WEBSITE to not work properly or not be available (e.g. the ability to send messages via the form window, communication via chat, use of reCAPTCHA anti-spam protection).