GENERAL PROVISIONS

1. This Privacy Policy of the Online Store is informational in nature, which means it is not a source of obligations for Customers of the Online Store.
2. The controller of personal data collected via the Online Store is BAUND Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw at ul. Marszałkowska 58, entered into the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS number 0001232808, NIP: 7011306545, REGON: 544385125, e-mail address: customercare@pattmond.com – hereinafter referred to as the “Controller” and acting at the same time as the service provider of the Online Store and the Seller.
3. The personal data of the Customer is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as “GDPR” – and with the relevant national provisions, in particular the Personal Data Protection Act and the Act on the Provision of Electronic Services of 18 July 2002 (Journal of Laws 2002 No. 144, item 1204, as amended).
4. The Controller exercises particular care to protect the interests of the data subjects, and in particular ensures that the data collected by it are: processed lawfully; collected for specified, lawful purposes and not subjected to further processing incompatible with those purposes; substantively correct and adequate in relation to the purposes for which they are processed; and stored in a form which permits identification of the data subjects no longer than is necessary to achieve the purpose of the processing.
5. All words, expressions and acronyms used on this page and starting with a capital letter (e.g. Seller, Online Store, Electronic Service) shall be understood in accordance with their definition contained in the Terms and Conditions of the Online Store available on the Online Store website.

PURPOSE AND SCOPE OF DATA COLLECTION AND DATA RECIPIENTS

1. On each occasion, the purpose, scope and recipients of the data processed by the Controller result from the actions taken by the Customer in the Online Store. By way of example, if the Customer chooses personal collection rather than courier delivery when placing the Order, their personal data will be processed for the purpose of conclusion and performance of the Sales Agreement, but will no longer be made available to the carrier delivering shipments on behalf of the Controller.
2. Purposes of processing the personal data of Customers by the Controller:
   1. conclusion and performance of the Sales Agreement or the agreement for the provision of Electronic Services (Article 6(1)(b) GDPR);
   2. direct marketing of the Controller’s own products or services (Article 6(1)(f) GDPR);
   3. handling of complaints (Article 6(1)(b) GDPR).
3. Possible recipients of the personal data of Customers of the Online Store:
   1. In the case of the Customer, the Controller makes the collected personal data of the Customer available to its selected hosting service provider of the website;
   2. In the case of a Customer who uses postal or courier delivery in the Online Store, the Controller makes the collected personal data of the Customer available to the selected carrier or forwarder delivering shipments on behalf of the Controller.
   3. In the case of a Customer who uses electronic payments or payment by payment card in the Online Store, the Controller makes the collected personal data of the Customer available to the selected entity handling the above-mentioned payments in the Online Store.
4. The Controller may process the following personal data of Customers using the Online Store: first name and surname; e-mail address; contact telephone number; delivery address (street, house number, apartment number, postal code, town, country); residence/business/registered office address (if different from the delivery address).
5. Provision of the personal data referred to in the point above may be necessary for the conclusion and performance of the Sales Agreement or the agreement for the provision of an Electronic Service in the Online Store. On each occasion, the scope of data required for the conclusion of the agreement is indicated in advance on the Online Store website and in the Terms and Conditions of the Online Store.

COOKIES AND USAGE DATA

1. Cookies are small pieces of text information in the form of text files, sent by the server and saved on the side of the person visiting the website of the Online Store (e.g. on the hard drive of a computer or laptop, or on the memory card of a smartphone – depending on the device used by the visitor to our Online Store). Detailed information about Cookies, as well as their history, can be found, among others, here: https://en.wikipedia.org/wiki/HTTP_cookie.
2. The Controller may process the data contained in Cookies during the use of the Online Store website by visitors for the following purposes:
   1. identification of Customers as logged in to the Online Store and showing that they are logged in;
   2. remembering Goods added to the cart for the purpose of placing an Order;
   3. remembering the data from completed Order Forms, surveys or login data to the Online Store;
   4. adapting the content of the Online Store website to the Customer’s individual preferences (e.g. concerning colours, font size, page layout) and optimising the use of the Online Store pages;
   5. conducting anonymous statistics showing how the Online Store website is used.
3. By default, most web browsers available on the market accept the saving of Cookies. Everyone has the possibility to determine the conditions for the use of Cookies by means of the settings of their own web browser. This means that one may, for example, partially restrict (e.g. temporarily) or completely disable the possibility of saving Cookies – in the latter case, however, this may affect certain functionalities of the Online Store (for example, it may be impossible to complete the Order path through the Order Form due to the failure to remember Products in the cart during subsequent steps of placing the Order).
4. The settings of the web browser regarding Cookies are relevant from the point of view of consent to the use of Cookies by our Online Store – in accordance with the regulations, such consent may also be expressed via the settings of the web browser. In the absence of such consent, the settings of the web browser regarding Cookies should be changed accordingly.
5. Detailed information on changing the settings concerning Cookies and removing them on one’s own in the most popular web browsers is available in the help section of the web browser and on the following pages (it is sufficient to click on the relevant link):
   • in the Chrome browser
   • in the Firefox browser
   • in the Opera browser
   • in the Safari browser
   • in the Microsoft Edge browser
6. The Controller also processes anonymised usage data related to the use of the Online Store (IP address, domain) for the purpose of generating statistics helpful in the administration of the Online Store. This data is aggregate and anonymous in nature, i.e. does not contain features identifying the persons visiting the Online Store website. This data is not disclosed to third parties.

LEGAL BASIS FOR DATA PROCESSING

1. Provision of personal data by the Customer is voluntary, however, the failure to provide the personal data indicated on the Online Store website and in the Terms and Conditions of the Online Store, necessary for the conclusion and performance of the Sales Agreement or the agreement for the provision of an Electronic Service, results in the inability to conclude such an agreement.
2. The basis for the processing of the Customer’s personal data is the necessity to perform the agreement to which they are a party, or to take steps at their request prior to entering into such an agreement. In the case of processing of data for the purpose of direct marketing of the Controller’s own products or services, the basis for such processing is (1) the prior consent of the Customer, or (2) the pursuit of the legitimate interests of the Controller.

RIGHT TO CONTROL, ACCESS TO AND CORRECTION OF DATA, AND OTHER RIGHTS UNDER THE GDPR

1. The Customer has the right to request from the Controller access to the personal data concerning the data subject, their rectification, erasure or restriction of processing, the right to object to processing, and the right to data portability.
2. Where the Customer has given consent to the processing of data – the consent may be withdrawn at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
3. In order to exercise the rights referred to above, the Customer may contact the Controller by sending an appropriate message in writing or by electronic mail to the Controller’s address indicated at the beginning of this Privacy Policy.
4. The Customer has the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

PERIOD OF PROCESSING OF PERSONAL DATA

The Customer’s personal data are processed for the time necessary to perform the agreement with the Controller, however not longer than the periods resulting from generally applicable provisions of law (tax settlements / limitation of potential claims).

FINAL PROVISIONS

1. The Online Store may contain links to other websites. The Controller encourages the visitor, after navigating to other websites, to read the privacy policy applicable there. This Privacy Policy concerns only this Online Store.
2. The Controller applies technical and organisational measures ensuring the protection of the processed personal data appropriate to the threats and the categories of data covered by the protection, and in particular secures the data against being made available to unauthorised persons, against being taken by an unauthorised person, against processing in breach of applicable provisions, and against alteration, loss, damage or destruction.
3. The Controller makes available the following technical measures preventing the acquisition and modification by unauthorised persons of personal data transmitted electronically:
   1. Securing the data set against unauthorised access.
   2. Access to the Account only after providing an individual login and password.