Dear Sirs,

We care about your privacy – below we present the most important information about our principles of processing your personal data and cookies used by our Website (taotaospa.pl and subdomains of taotaospa.pl) and/or Online Store (taotaospa.pl/sklep) (hereinafter collectively referred to as: “Service“).

PERSONAL DATA ADMINISTRATOR (“Administrator”) – THAI THAI SP. Z O.O. with its registered office in Warsaw, NIP: 951 252 15 40, KRS: 0000906758.

PERSONAL INFORMATION AND PRIVACY. If you intend to create a user account on the Website and use our services, you will be asked to provide us with your personal data. Your data is processed by us for the purposes indicated below, related to the operation of the Website and the provision of the services offered therein.

Purpose of processing:

• Provision of services offered on the Website
• Fulfillment of your orders
• Direct marketing of services offered, other than newsletters
• Sending newsletters – in case of your consent.

Basis for processing:

Sales agreement or actions taken at your request, aimed at concluding it (Article 6(1)(b) GDPR)

Your consent expressed in the Service (Article 6(1)(a) GDPR)

Agreement for the provision of services or actions taken at your request, aimed at concluding it (Article 6(1)(b) GDPR)

Our legitimate interest, consisting of processing data for the purpose of establishing, pursuing or defending potential claims (Article 6(1)(f) GDPR)

Providing data is voluntary, but in some cases may be necessary to conclude an agreement. The consequence of not providing data may be the inability to register in the Service. Remember that you always have the option to withdraw your consent at any time.

As part of the Service, we may automatically tailor certain content to your needs, i.e., perform profiling, using the personal data you provided. In the event that profiling could result in decisions that have legal effects on you or affect you in a similarly significant way, we will only carry it out if you give your consent. Remember that you can revoke your consent at any time. Processing data until you withdraw your consent remains lawful.

Scope of processed personal data: name and surname, residential address, phone number, email address, IP address.

We will process your data only for the period in which we have a legal basis to do so, that is until: the legal obligation requiring us to process your data ceases to exist; the possibility of establishing, pursuing or defending potential claims related to the agreement concluded through the Service by the parties ends; you withdraw your consent for data processing, if it was its basis; your objection to the processing of your personal data is accepted – in the case where the basis for processing your data was the legitimate interest of the administrator or when the data was processed for direct marketing purposes, including profiling – depending on what applies in a given case and what happens latest.

When processing your personal data, we apply organizational and technical measures in accordance with relevant legal provisions, including using SSL certificate encryption for the connection.

Remember that you have the right to request:

• Access to your personal information,
• their correction,
• removals,
• processing restrictions,
• request the transfer of data to another controller,
• object at any time to the processing of your data:

for reasons related to your particular situation – against the processing of your personal data, based on Article 6(1)(f) GDPR (i.e., on legitimate interests pursued by the administrator), including profiling based on these provisions, if personal data is processed for direct marketing purposes, including profiling, to the extent that processing is related to such direct marketing.

If you believe that your data is being processed unlawfully, you can file a complaint with the supervisory authority.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION

Accordingly, your personal data may also be processed by entities outside the European Union. An adequate level of protection of your data, including through the application of appropriate safeguards, is ensured by the participation of these entities in the EU-U.S. Privacy Shield, established by an executive decision of the European Commission as a set of principles guaranteeing adequate protection of your privacy

CONTACT THE ADMINISTRATOR

newsletter@taotaospa.pl

In matters not regulated by the Rules and Regulations, the provisions of the Civil Code and relevant laws of Poland, as well as the laws of the European Union, in particular RODO (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC) shall apply.