A formal piece of information at the beginning – the administrator of the site is

Natalia Podatki w Holandii

T.a.v Natalia Dawiec

Stoomloggerweg 8

3133KT Vlaardingen

This privacy policy has been constructed in the form of questions and answers. The choice of this form was dictated by the care for the clarity and readability of the information presented to you. Below you will find the table of contents of this policy corresponding to the questions we answer in turn.

1: Who is the administrator of your personal data?

2: Who can you contact regarding the processing of your personal data?

3: What information do we have about you?

4: Where did we get your personal data from?

5: Is your data safe?

6: For what purposes do we process your personal data?

User account – details
Orders – details
Complaints and withdrawals from the contract – details
Newsletter – details
Comments and opinions about products – details
Correspondence service – details
Tax and accounting obligations – details
Archive – details
Own marketing – details
Analysis, statistics, optimization – details

7: How long will we store your personal data?

8: Who are the recipients of your personal data?

9: Do we transfer your data to third countries or international organizations?

10: Do we use profiling? Do we make automated decisions based on your personal data?

11: What rights do you have regarding the processing of your personal data?

12: Do we use cookies and what are they actually?

13: On what basis do we use cookies?

14: Can you disable cookies?

15: For what purposes do we use our own cookies?

16: What third-party cookies are used?

Google Analytics – details

Google Tag Manager – details

Google AdWords – details

Google AdSense – details

17: Do we track your behaviors on our website?

18: Do we direct targeted ads to you?

§ 19: How can you manage your privacy?

20: What are server logs?

21: Is there anything else you should know?

If you have any doubts related to the privacy policy, you can contact us at any time by sending a message to ………..@………….

1: Who is the administrator of your personal data?

The administrator of your personal data is

Natalia Podatki w Holandii

T.a.v Natalia Dawiec

Stoomloggerweg 8

3133KT Vlaardingen

2: Who can you contact regarding the processing of your personal data?

As part of the implementation of personal data protection in our organization, we have decided not to appoint a personal data protection inspector because it is not mandatory in our situation. In matters related to the protection of personal data and broadly understood privacy, you can contact us at the e-mail address info@nataliapodatki.nl

3: What information do we have about you?

Depending on the purpose, we may process the following information about you:

name and surname, residential address, business activity address, tax identification number (NIP), e-mail address, phone number, data contained in correspondence addressed to us, bank account number, IP address, image (profile photo).

We have described the scope of processed data precisely in relation to each purpose of processing. Information in this regard can be found in the further part of this policy.

§ 4: Where did we get your personal data from?

In most cases, you provide it to us yourself. This happens when:

you register a user account, you place an order, you send a complaint or withdraw from the contract, you sign up for the newsletter, you add a comment or an opinion about a product, you contact us.

Additionally, some information about you may be automatically collected by the tools we use:

the mechanism of the website and the newsletter system collect your IP address, the website mechanism collects information about the products you viewed, the details of the orders placed, including those unfinished, the newsletter system mechanism collects information about your activity in relation to the content sent to you as part of the newsletter, such as opening messages, clicking on links, etc., Google Analytics and Facebook Pixel collect a number of information about how you use our website.[WW1]

5: Is your data safe?

We care about the security of your personal data. We have analyzed the risks associated with individual data processing processes, and then implemented appropriate data security and personal data protection measures. We continuously monitor the state of our technical infrastructure, train our staff, review the procedures applied, and introduce necessary improvements. If you have any questions about your personal data, we are at your disposal at the address info@nataliapodatki.nl

6: What are the purposes of processing your personal data?

There are more than one reasons. Below is a list of them, followed by a more detailed discussion. We have also assigned the appropriate legal bases for processing to each purpose.

• User account registration and maintenance – Art. 6(1)(b) GDPR,
• Order processing – Art. 6(1)(b) GDPR,
• Handling complaints or withdrawal from contracts – Art. 6(1)(f) GDPR,
• Newsletter distribution – Art. 6(1)(a) GDPR,
• Handling comments or reviews about a product – Art. 6(1)(a) GDPR,
• Correspondence management – Art. 6(1)(f) GDPR,
• Fulfilling tax and accounting obligations – Art. 6(1)(c) GDPR,
• Creating an archive for potential defense, claims establishment or pursuit, as well as for identifying returning customers [WW2] – Art. 6(1)(f) GDPR,
• Own marketing – Art. 6(1)(f) GDPR,
• Analysis, statistics, and optimization – Art. 6(1)(f) GDPR.[WW3]

User Account – Details When setting up a user account, you must provide data necessary to create an account: an email address and a password. Providing this information is voluntary but necessary to create an account.

During account data editing, you may provide additional data, especially those that can be used when placing orders, such as your name and surname, residential or business address, tax identification number, phone number. You may also set up your avatar, e.g., a profile picture including your likeness.

If you create an account through integration with a social media account, based on your prior authorization, we will access certain data collected within your social media account (name and surname, email address, profile picture).

Additionally, our system used for user account management saves your IP address used when registering a user account.

Moreover, we utilize the integration of Google Analytics with the user account mechanism. In this way, the data collected by Google Analytics tracking code about your use of our website is assigned to your user account. This includes information such as:

We analyze such information about you to optimize our websites in terms of user experience, effectiveness, and conversion, which constitutes our legally justified interest mentioned in Art. 6(1)(f) GDPR.

You can modify the information about you provided to us in connection with the registration of a user account at any time. However, in the case where you have created an account using integration with a social media account, the data obtained from this social media service cannot be modified.

The data provided by you in connection with the creation of an account is processed to provide you with an electronic service that allows you to use the user account. This service is provided based on the contract concluded under the terms described in the regulations, which means that in this respect, the legal basis for processing your personal data is Art. 6(1)(b) GDPR.

Data will be stored for the duration of the user account’s existence. At any time, you can decide to delete your account, but this will not lead to the deletion of information about your orders placed using the account. Order data is stored in our archive until the expiration of the limitation period for claims from the contract / for the entire period of the website’s operation due to the need to identify returning customers, recreate their purchase history, granted discounts, etc., which constitutes our legally justified interest mentioned in Art. 6(1)(f) GDPR.

Orders – Details When placing an order, you must provide data necessary to fulfill the order. Depending on the order details, the data catalog may vary. For example, if you order physical products, we need to know the address to deliver the order. If you request a VAT invoice for a company, we need to know the tax identification number and the business address. Providing this information is voluntary but necessary to place an order.

Additionally, our system used for handling the ordering process, records your IP address used when placing an order.

Each order is recorded in our database, which means that your personal data assigned to the order is accompanied by information about the order, such as ordered products, chosen payment method, chosen delivery method, payment deadline.

Data collected in connection with the order is processed to perform the contract concluded by placing the order (Art. 6(1)(b) GDPR), issue an invoice (Art. 6(1)(c) GDPR in connection with regulations governing invoice issuance), consider the invoice in accounting documentation, and fulfill other tax and accounting obligations (Art. 6(1)(c) GDPR in connection with regulations governing tax and accounting obligations) and for archival purposes for potential defense, claims establishment or pursuit, as well as identifying returning customers, which constitutes our legally justified interest (Art. 6(1)(f) GDPR).

Order data will be processed for the time necessary to fulfill the order, and then until the expiration of the limitation period for claims from the contract. Additionally, after this period, data may still be processed by us for archival purposes for potential defense, claims establishment or pursuit, as well as identifying returning customers. Remember also that we are obliged to keep accounting documentation, which may contain your personal data, for the period required by law.

Complaints and Withdrawal from Contracts – Details If you submit a complaint or withdraw from a contract, you provide personal data contained in the content of the complaint or the statement of withdrawal, which includes name and surname, residential address, phone number, email address, bank account number. Providing this data is voluntary but necessary to submit a complaint or withdraw from a contract.

Data provided to us in connection with the submission of a complaint or withdrawal from the contract is used to carry out the complaint procedure or the withdrawal procedure, and then for archival purposes, which constitutes our legally justified interest (Art. 6(1)(f) GDPR).

Data will be processed for the time necessary to carry out the complaint procedure or withdrawal procedure. Complaint documents will be stored until the expiration of warranty rights. Statements of withdrawal from the contract will be stored with accounting documentation for the period required by law.

Newsletter – Details By signing up for the newsletter, you provide us with your name and email address. Providing this data is voluntary but necessary to sign up for the newsletter.

Additionally, our system used for handling the newsletter records your IP address used when signing up for the newsletter, determines your approximate location, the email client you use to handle emails, and tracks your actions taken in connection with the messages sent to you. In this regard, we also have information about which messages you opened, in which messages you clicked on links, etc.

The data provided by you in connection with signing up for the newsletter is used to send you the newsletter, and the legal basis for their processing is your consent (Art. 6(1)(a) GDPR) expressed during signing up for the newsletter. As for the processing of information that does not come from you but has been automatically collected by our mailing system, we rely on our legally justified interest (Art. 6(1)(f) GDPR) in analyzing the behavior of newsletter subscribers in order to optimize mailing activities.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link found in each message sent as part of the newsletter or simply by contacting us. Despite unsubscribing from the newsletter, your data will still be stored in our database to identify returning subscribers and potentially defend claims related to sending you the newsletter, particularly to demonstrate the fact of your consent to receive the newsletter and the moment of its withdrawal, which constitutes our legally justified interest mentioned in Art. 6(1)(f) GDPR.

You can modify your data provided for receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or simply by contacting us.

Comments and Reviews about Products – Details When adding a comment or review about a product, you must provide at least a username, which will be assigned to the comment or review (the name may contain personal data, such as your first or last name) and an email address. Providing this data is voluntary but necessary to add a comment or review. You can also add your avatar (may contain your likeness, e.g., a photo) and provide your website address, but this is not mandatory.

Data provided in connection with adding a comment or review will be processed to publish the comment or review on the site. The basis for processing is your consent (Art. 6(1)(a)) resulting from submitting the form used to publish the comment or review. You can withdraw consent at any time, requesting the removal of the comment or review.

Your comment or review will be publicly available on the site for as long as it is accessible on the Internet unless you request the removal of the comment or review earlier. At any time, you can also modify the content of the comment, as well as modify the data assigned to it as the person who added the comment or review.

Correspondence Management – Details By contacting us, you naturally provide us with your personal data contained in the content of the correspondence, especially the email address and name and surname. Providing this data is voluntary but necessary to make contact.

In this case, your data is processed to contact you, and the basis for processing is Art. 6(1)(f) GDPR, i.e., our legally justified interest. The legal basis for processing after the contact has ended is also our justified purpose in archiving correspondence for the future possibility of demonstrating certain facts (Art. 6(1)(f) GDPR).

Order-related data will be processed for the duration necessary to fulfill the order, and then until the expiration of the limitation period for claims under the concluded contract. Furthermore, after this period, data may still be processed by us for archival purposes for potential needs of defense, establishment, or pursuit of claims, as well as for identifying returning customers. Remember also that we are obligated to retain accounting documentation, which may contain your personal data, for the period required by law.

Complaints and Withdrawals from Contracts – Details If you submit a complaint or withdraw from a contract, you provide personal data contained in the complaint or the withdrawal statement, which includes your name and surname, residential address, phone number, email address, and bank account number. Providing this data is voluntary but necessary to submit a complaint or withdraw from the contract.

Data provided to us in connection with the submission of a complaint or withdrawal from the contract are used for the purpose of carrying out the complaint procedure or withdrawal procedure, and then for archival purposes, which constitutes our legitimate interest (Article 6(1)(f) of the GDPR).

Data will be processed for the time necessary to carry out the complaint procedure or withdrawal procedure. Complaint documents will be stored until the expiration of the warranty rights period. Withdrawal statements will be stored along with accounting documentation for the period required by law.

Newsletter – Details By signing up for the newsletter, you provide us with your name and email address. Providing this data is voluntary but necessary to subscribe to the newsletter.

Additionally, our system used for managing the newsletter records your IP address used when signing up, determines your approximate location, the email client you use, and tracks your actions taken in connection with the messages sent to you. Therefore, we also have information about which messages you opened, in which messages you clicked on links, etc.

Data provided by you in connection with the newsletter subscription are used to send you the newsletter, and the legal basis for their processing is your consent (Article 6(1)(a) of the GDPR) expressed during the subscription. Regarding the processing of information not provided by you but automatically collected by our mailing system, we rely on our legitimate interest (Article 6(1)(f) of the GDPR) in analyzing the behavior of newsletter subscribers to optimize mailing activities.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link in each message sent as part of the newsletter or simply by contacting us. Despite unsubscribing, your data will still be stored in our database for the purpose of identifying a returning subscriber and any defense of claims related to sending you the newsletter, in particular to demonstrate the fact of your consent to receive the newsletter and the moment of its withdrawal, which constitutes our legitimate interest, as referred to in Article 6(1)(f) of the GDPR.

You can modify your data provided for receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or simply by contacting us.

Product Comments and Opinions – Details When adding a comment or opinion about a product, you must provide at least a username, which will be assigned to the comment or opinion (the name may contain personal data, such as first or last name), and an email address. Providing this data is voluntary but necessary to add a comment or opinion. You may also add your avatar (which may contain your image, e.g., a photo) and provide the address of your website, but this is not mandatory.

The data provided in connection with adding a comment or opinion will be processed for the purpose of publishing the comment or opinion on the website. The basis for processing is your consent (Article 6(1)(a)) resulting from submitting the form used to publish the comment or opinion. You can withdraw your consent at any time, requesting the deletion of your comment or opinion.

Your comment or opinion will be publicly available on the website for the duration of its availability on the Internet unless you request the removal of the comment or opinion earlier. You can also modify the content of the comment, as well as modify the data assigned to it as about the person who added the comment or opinion.

Correspondence Handling – Details By contacting us, you naturally provide us with your personal data contained in the content of the correspondence, in particular your email address and name. Providing this data is voluntary but necessary to establish contact.

Your data in this case are processed for the purpose of contacting you, and the basis for processing is Article 6(1)(f) of the GDPR, i.e., our legitimate interest. The legal basis for processing after the end of the contact is also our justified purpose of archiving correspondence for future proof of certain facts (Article 6(1)(f) of the GDPR).

The content of the correspondence may be archived, and we are unable to unequivocally determine when it will be deleted. You have the right to request the history of correspondence you have conducted with us (if it has been archived), as well as to request its deletion, unless its archiving is justified due to our overriding interests, e.g., defense against potential claims from you.

Tax and Accounting Obligations – Details If we issue an invoice on your behalf, it becomes part of the accounting documentation, which will be stored for the period required by law. Your personal data in such a situation are processed for the purpose of fulfilling the tax and accounting obligations incumbent on us (Article 6(1)(c) of the GDPR in connection with the regulations governing tax and accounting obligations).

Archive – Details In the description of each purpose of personal data processing provided above, we have indicated the retention periods for personal data. These periods are often related to archiving specific data by us for future proof of certain facts, reconstruction of the course of cooperation with the client, exchanged correspondence, defense, establishment, or pursuit of claims. We base this on our legitimate interest, as referred to in Article 6(1)(f) of the GDPR.

Own Marketing – Details On our website, we use a mechanism for recovering abandoned carts. If you start the order process but do not complete it, our system will record this fact in order to take action to encourage you to finalize the order. These actions may include, in particular, sending you an email encouraging you to finalize the order or displaying targeted advertising while browsing the Internet.

Our site may also collect information about your activity and display targeted ads to you while browsing the Internet based on this. However, if you are not a registered user, the information used for this purpose does not constitute personal data. Only when combined with your personal data collected in the user account do they take on the character of personal data.

The above actions are carried out based on our legitimate interest, as referred to in Article 6(1)(f) of the GDPR, consisting of marketing our own products.

Analysis, Statistics, Optimization – Details We collect statistical information about user behavior when browsing our websites, such as clicks on links, transitions between sub-pages, time spent on individual pages, etc. This information is analyzed to optimize our pages in terms of user experience, effectiveness, and conversion. In most cases, information processed in this way does not constitute personal data. The exception is when you are a registered user. Then we can combine this information with other data collected in your user account.

The above actions are carried out based on our legitimate interest, as referred to in Article 6(1)(f) of the GDPR, consisting of optimizing our websites.

7: How Long Will We Store Your Personal Data?

The retention periods for data have been specified separately in relation to each purpose of processing. You can find this information in the details dedicated to each separate processing purpose.

8: Who Are the Recipients of Your Personal Data?

We risk saying that modern business cannot do without services provided by third parties. We also use such services. Some of these services involve the processing of your personal data. External service providers who participate in processing your personal data include:

• Hosting provider, who stores data on the server,
• Cloud computing service provider, where backup copies containing your personal data are stored,
• Mailing system provider, where your data is stored if you are a newsletter subscriber,
• CRM system provider, where we store your data to improve customer service and for archival purposes,
• Invoicing system provider, where your data is stored for the purpose of issuing invoices,
• Accounting office, which processes your data visible on invoices,
• Courier companies, which process your data as necessary to deliver your order,
• Law firm, which gains access to data if necessary to provide legal assistance on our behalf,
• Technical support service provider, who gains access to data if technical work involves areas where personal data is located,
• Other subcontractors, who gain access to data if the scope of their activities requires such access.

Your personal data may also be transferred to tax offices as necessary to fulfill tax and accounting obligations. This particularly concerns all declarations, reports, statements, and other accounting documents that contain your personal data.

Furthermore, if necessary, your personal data may be made available to entities, authorities, or institutions authorized to access data under legal provisions, such as police, security services, courts, prosecutors.

Moreover, we use tools that collect a range of information about your use of our website. This includes, in particular, the following information:

• Information about the operating system and internet browser you use,
• Visited pages,
• Time spent on the site,
• Transitions between individual sub-pages,
• Clicks on specific links,
• The source from which you came to our site,
• Your age range,
• Your gender,
• Your approximate location limited to the city.
• Your interests determined based on online activity.

These pieces of information, in our assessment, do not constitute personal data themselves. Since these pieces of information are collected through external tools we use, they are also processed by the tool providers based on their terms and privacy policies. Essentially, this information is used to provide and improve services, manage them, develop new services, measure the effectiveness of advertisements, protect against fraud and abuse, and personalize content and ads displayed in various services, sites, and applications. We have tried to describe the details in this regard in the further part of this policy, in the explanations dedicated to individual tools.

9: Do We Transfer Your Data to Third Countries or International Organizations?

Yes, some of the operations for processing your personal data may involve transferring them to third countries.

We transfer your personal data to third countries in connection with using tools that store personal data on servers located in third countries, especially in the USA. Providers of these tools guarantee an adequate level of personal data protection through appropriate compliance mechanisms provided by the GDPR, particularly by joining the Privacy Shield program or using standard contractual clauses.

The storage of personal data on servers located in third countries occurs within the framework of the following tools:

Both Rocket Science Group LLC and Google Ireland Limited ensure an adequate level of personal data protection by using compliance mechanisms envisaged by the GDPR, particularly by joining the Privacy Shield program. Below are links to the Privacy Shield program participation confirmations, where you can learn about the processing of personal data by these entities.

• Privacy Shield Participant – Rocket Science Group LLC
• Privacy Shield Participant – Google Ireland Limited

We also remind you that we use external tools that may collect anonymous information about you. We have already mentioned this several times in this policy, including in response to the previous question. Providers of these tools often use servers located around the world, particularly in the United States of America (USA), to store the collected information.

10: Do We Use Profiling? Do We Make Automated Decisions Based on Your Personal Data?

We do not make decisions based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

Yes, we use tools that may take specific actions based on information collected through tracking mechanisms, but we believe these actions do not significantly affect you, as they do not differentiate your situation as a customer, do not affect the terms of the contract you may enter into with us, etc.

Using certain tools, we may, for example, direct personalized advertisements to you based on previous actions you have taken on our site or suggest products that may interest you. This is referred to as behavioral advertising. We encourage you to deepen your knowledge about behavioral advertising, especially regarding privacy issues. Detailed information, along with the ability to manage settings in the area of behavioral advertising, can be found here: Your Online Choices.

We emphasize that within the tools we use, we do not have access to information that would allow your identification. The information we are talking about here, in particular, includes:

• The information indicated above is not combined with your personal data in our databases. This information is anonymous and does not allow us to identify you. This information is stored on servers of individual tool providers, and these servers are often located worldwide.

The exception to the anonymous nature of the information mentioned above occurs when you have a user account. Then this information may be combined with your data collected in the user account. However, even then, we do not make decisions based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you. We believe that actions regarding directing advertisements to you based on your activity on our site and taking optimization actions do not significantly affect you. Therefore, in this regard, we rely on our legitimate interest, as referred to in Article 6(1)(f) of the GDPR.