Privacy Policy

1. BASIC CONCEPTS AND DEFINITIONS

1.1. Controller or Sun&Sea

1.2 Personal data – information about an individual who is identified or identifiable, based on one or more characteristic factors determining physical, physiological, genetic, mental, economic, cultural, or social identity, including the device's IP address, location data, an online identifier, as well as information collected through cookies and other similar technologies.

1.3 Policy – this Privacy Policy, which contains information about the processing of Personal data, as well as the use of cookies and similar tracking technologies within the Website.

1.4 GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

1.5 Website – the website launched by the Controller on the domain https://sunandsea.shop, accessible via web browsers.

1.6 Store – the Sun&Sea online store, accessible via the Website, where Sun&Sea conducts remote sales of goods.

1.7 User – any individual who visits the Website or uses one or more services or functions described in the Policy.

1.8 Device – means an electronic device through which the User accesses the Website.

1. GENERAL INFORMATION

2.1 In connection with your use of the Website, we collect data necessary for providing the offered services, as well as information about your activity on the Website. In this regard, we are the controller of your Personal data and attach great importance to their proper protection. We ensure that our data processing operations comply with relevant legal provisions, in particular, the GDPR. Our goal is to provide you with the opportunity to receive full information about our processing of your Personal data and to provide you with tools that will allow you to exercise your rights. Below we provide information about how we process your Personal data.

2.2 We process your Personal data in accordance with the law, ensuring that it is up-to-date and accurate. Therefore, from time to time, we may remind you of the need to update it by sending a message to the email address you provided or by posting a relevant notification on the Website after you log into your account.

1. HOW CAN I CONTACT THE CONTROLLER AND THE DATA PROTECTION OFFICER?

3.1 If you have any questions regarding our processing of your Personal data, or if you wish to exercise your rights, please write directly to our Data Protection Officer at the email address: sunandsea.brand@gmail.com

1. HOW DO WE OBTAIN YOUR PERSONAL DATA?

4.1 We obtain your Personal data directly from you for the purpose of properly performing our services and the smooth functioning of our Website. You provide us with your data primarily through special forms when you make purchases in our Store, which operates based on the Store Usage Rules, subscribe to our newsletter, or contact us, for example, by using the contact form. We also obtain your data when you use other services available on the Website, for example, when you browse items from the Store's assortment.

1. IS IT MANDATORY TO PROVIDE PERSONAL DATA?

5.1. It is your decision whether or not to provide us with Personal data—it is not mandatory. However, remember that in some cases, providing Personal data is necessary for the proper performance of our offered services or for entering into and executing a contract, which is described in detail below.

1. HOW DO WE PROCESS YOUR PERSONAL DATA?

USING THE WEBSITE

6.1 When you use the Website but are not a registered User (i.e., you do not have an account on the Website), we process your Personal data (including IP address or other identifiers and information collected through cookies or other similar technologies):

6.1.1 for the purpose of providing services electronically within the scope of displaying the content collected on the Website to you – the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR);

6.1.2 for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of analyzing User activity and their preferences in order to improve the functionality and services provided;

6.1.3 for the purpose of potentially establishing and asserting claims or defending against claims – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of protecting its business rights and interests;

6.1.4 for the marketing purposes of the Controller and other entities, in particular, related to displaying behavioral advertising – the rules for processing Personal data for marketing purposes are described in the MARKETING section.

6.2 Your activity on the Website, including your Personal data, is recorded in system logs (a special computer program used to keep a chronological record containing information about events and activity related to the information system used to provide our services). Information collected in logs is processed primarily for purposes related to service provision. We also process it for technical and administrative purposes, for the purpose of ensuring the security of the information system and managing this system, as well as for analytical and statistical purposes – here, the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR).

REGISTRATION AND ACCOUNT MAINTENANCE

6.3 For those who register on the Website, we ask for the data necessary to create and maintain an account. To facilitate maintenance, you may provide additional data, thereby giving your consent to their processing. Such data can be deleted at any time. Providing data marked as mandatory is necessary for creating and maintaining an account, and failure to provide it will result in the inability to create an account. Providing other data is voluntary.

6.4 Your personal data is processed:

6.4.1 for the purpose of providing services related to maintaining and servicing an account on the Website – the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR), and for optional data, the legal basis for processing is consent (Art. 6(1)(a) GDPR);

6.4.2 for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of analyzing User activity on the Website and the method of using the account, as well as User preferences in order to improve the functionalities used;

6.4.3 for the purpose of potentially establishing and asserting claims or defending against claims – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of protecting its business rights and interests;

6.4.4 for the marketing purposes of the Controller and other entities – the rules for processing Personal data for marketing purposes are described in the MARKETING section.

6.5 You can also log into your account on the Website via the social network Facebook. In this case, the Website will download from your social media account only the data necessary for registration and account maintenance. The scope of your data to which we will gain access will be indicated in the notification displayed along with the question of whether to continue logging into the account. By continuing to log in, you agree to the transfer of data to our Website. Facebook will remember your choice, and if you log in again using this social network, the notification will no longer be displayed. Detailed information about the scope and purposes of data processing by the social network, as well as related rights and configuration settings that ensure privacy protection, are described in the Facebook Privacy Policy.

6.5.1. You can use AppleID to log into your account. In this case, our website will request from your Apple account only the data needed for registration or operational maintenance. Your data obtained for registration will be indicated in the notification displayed in the request to continue logging in. By continuing, this data will be transferred to our site. Detailed information about the scope and purposes of data processing by Apple Inc., as well as relevant rights and configuration settings that ensure privacy protection, is described in Apple's privacy policy.

6.5.2. You can also log into your account on the website using your Google account. In this case, the website will download from your Google account only the data necessary for registration and account operation. The scope of your data to which we will gain access will be indicated in the notification that will be displayed along with the request to continue logging in. By continuing to log in, the indicated data will be transferred to our website. Google will remember your choice, and if you log in again in the same way, the notification will no longer be displayed. Detailed information about the scope and purposes of data processing by the website, as well as related rights and configuration settings that ensure privacy protection, are described in Google's privacy policy.

6.6 If a User posts on the Website any Personal data of other persons (including their name and surname, address, phone number, or email address), they may only do so if they do not violate the law and the personal rights of these persons.

PLACING ORDERS

6.7 When placing an order for goods or services offered by us, your Personal data will be processed. Providing data marked as mandatory is necessary for accepting and processing the order, and failure to provide it will result in the inability to fulfill the order. Providing other data is not mandatory.

6.8 Your personal data is processed:

6.8.1 for the purpose of fulfilling the placed order – the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR); and for optional data, the legal basis for processing is your consent (Art. 6(1)(a) GDPR);

6.8.2 for the purpose of fulfilling legal obligations imposed on the Controller, resulting in particular from tax legislation and the "Accounting" Act – the legal basis for processing is a legal obligation (Art. 6(1)(c) GDPR);

6.8.3 for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of analyzing User activity on the Website, as well as the method of using the account and User preferences regarding purchases in order to improve the functionalities used;

6.8.4 for the purpose of potentially establishing and asserting claims or defending against claims – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of protecting its business rights and interests.

CLAIMS AND RETURNS

6.9 When you submit a claim or make a return, we process your Personal data. Providing data in the claim form is not mandatory, but it is necessary for the proper consideration of the claim. Providing data in the return form is not mandatory, but it is necessary for effectively withdrawing from the contract.

6.10 Your personal data is processed:

6.10.1 for the purpose of considering the submitted claim – the legal basis for processing your Personal data is the Controller's obligation arising from the provisions of legislation regarding the warranty for defects of the sold goods (Art. 6(1)(c) GDPR);

6.10.2 for the purpose of processing a return – the legal basis for processing your Personal data is the Controller's obligation arising from the provisions of consumer protection legislation (Art. 6(1)(c) GDPR), if the basis for the return is the provisions on the right to withdraw from a contract, or the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR), if the basis for the return is the rules for using our Store;

6.10.3 for the purpose of fulfilling other legal obligations imposed on the Controller, resulting in particular from tax legislation and the "Accounting" Act – the legal basis for processing is a legal obligation (Art. 6(1)(c) GDPR);

6.10.4 for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of analyzing User activity on the Website, as well as the method of using the account and User preferences regarding purchases in order to improve the functionalities used;

6.10.5 for the purpose of potentially establishing and asserting claims or defending against claims – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of protecting its business rights and interests.

CONTACT FORM

6.11 We provide the opportunity to contact us via a contact form. Using the form requires providing Personal data necessary to contact you and respond to your inquiry. Providing data marked as mandatory is necessary for accepting and processing the inquiry, and failure to provide it will result in the inability to process the inquiry. Providing other data (e.g., in the text of the inquiry) is voluntary.

6.12 Your personal data is processed:

6.12.1 for the purpose of identifying and processing your inquiry sent via the available form – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of the need to resolve the issue you are contacting us about and to conduct correspondence addressed to the Controller in connection with its business activities;

6.12.2 for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which consists of keeping statistics of inquiries made by Users via the Website in order to improve its functionalities.

GEOLOCATION

6.13 Your Personal data, including location information, is processed so that you can find the nearest physical delivery points. Using this function is not mandatory and is not required for the proper use of the Website. The legal basis for processing this data is your consent (Art. 6(1)(a) GDPR), expressed in the form of permission in the "Answear – fashion store" mobile application to use your mobile device's location services. We process your location data only if we have your consent. Consent can be withdrawn at any time by revoking the mobile application's permissions to access location information on your mobile device. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

1. MARKETING

7.1 We process your Personal data for the purpose of carrying out marketing activities, which may consist of:

7.1.1 displaying marketing content to you that matches your interests (behavioral advertising);

7.1.2 taking actions related to direct marketing of goods and services (sending commercial information electronically and telemarketing activities).

7.2 For the purpose of carrying out marketing activities, in some cases, we use profiling. This means that through automatic data processing, we evaluate certain factors relating to you in order to analyze your behavior or create a forecast for the future. This allows us to better adapt the displayed content to your individual preferences and interests.

BEHAVIORAL ADVERTISING

7.3 Together with our trusted partners, we process your Personal data, including Personal data collected through cookies and other similar technologies, for marketing purposes in connection with targeting you with behavioral advertising (i.e., advertising that matches your preferences). In such a case, the processing of Personal data also includes profiling, and its consequence is merely the display of adapted advertising based on your Personal data obtained by us and our partners.

7.4 A list of the Controller's trusted partners can be viewed below in the "Information about the use of cookies" section under the "Our Partners" tab.

DIRECT MARKETING

7.5 In case of consent, your data may be used by us to send you marketing content via various channels, i.e., by email (in the form of a newsletter), via MMS/SMS, or by phone. The legal basis for processing your data in this case is the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR) in connection with the consent provided by you, which consists of marketing the offered goods and services. We perform such actions only after you have provided your consent, which you may withdraw at any time. You can withdraw your consent at any time by clicking on the link we include in every email containing commercial information or by contacting us at the email address: sunandsea.brand@gmail.com. Withdrawal of consent does not affect the lawfulness of data processing in the period prior to its withdrawal.

7.6 We may also conduct direct marketing via traditional postal service to the postal address you have provided. The legal basis for processing your data in this case is the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR), which consists of marketing the offered goods and services. You may object to the processing of your data for this purpose at any time. You can express your objection by writing to us at the email address: sunandsea.brand@gmail.com.

PUSH NOTIFICATIONS

7.7 In case of separate consent to receive push notifications, you may receive messages in the form of notifications displayed on your mobile device and in the web browser you are using, containing marketing content related to our offers, services, and promotions. The legal basis for processing your Personal Data for this purpose is the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR), which consists of marketing the offered goods and services in connection with the consent you expressed to receive notifications in the form of push notifications. You may withdraw your consent to receive push notifications at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent can be withdrawn by changing the settings of the web browser being used or your mobile device.

GOOGLE ADS CUSTOMER MATCH

7.8 Marketing of the products and services we offer may be carried out using the Google Ads Customer Match tool. Google Ads Customer Match is a tool that allows the Controller to upload a hashed database of email addresses (a customer list) into Google tools for the purpose of checking whether user accounts have been created in Google services using the same email addresses (e.g., YouTube, Gmail, etc.). If it is confirmed that the email addresses match, the Controller's advertisements may be displayed to users of Google services after they have logged in.

7.9 Marketing of the products and services we offer may be carried out using the Facebook Custom Audience tool. Facebook Custom Audience is a tool that allows the Controller to upload a hashed database of email addresses into Facebook tools for the purpose of checking whether user accounts have been created in the Facebook network using the same email addresses. If it is confirmed that the email addresses match, the Controller's advertisements may be displayed to Facebook users after they have logged in.

1. PROCESSING OF DATA OF PERSONS VISITING THE CONTROLLER'S SOCIAL MEDIA PROFILES

8.1 The Controller has publicly available profiles on social media: Facebook, Instagram, LinkedIn, Pinterest, and YouTube. In connection with this, it processes data left by visitors to these profiles (in particular, comments, likes, internet identifiers).

8.2 The personal data of such persons are processed:

8.2.1 so that they can be active on the profiles;

8.2.2 for the purpose of effectively managing the profiles by providing social media users with information about the Controller's initiatives and other activities, as well as in connection with the promotion of various types of events, services, and products;

8.2.3 for statistical and analytical purposes;

8.2.4 data may be processed for the purpose of asserting possible claims or defending against claims.

8.3 The legal basis for processing Personal Data is the legitimate interest of the Controller (Art. 6(1)(f) of the GDPR), consisting of:

8.3.1 promoting one's own brand and improving the quality of provided services,

8.3.2 conducting analysis of activity and preferences,

8.3.3 if necessary – in the case of asserting claims or defending against claims.

NOTE: The above information does not apply to the processing of personal data by social media controllers.

1. INFORMATION ON THE USE OF COOKIES

WHAT ARE COOKIES?

9.1 Cookies are small text files that are stored on devices used by the User to access the Website. Cookies collect information that facilitates the use of the Website – for example, by remembering the User's visits and actions. The cookies we use are safe for the user's device. Specifically, this prevents viruses or other unwanted or malicious software from entering the users' devices. These files allow the software used by the User to be identified and the Website's operation to be adjusted individually for each User.

TYPES OF COOKIES USED BY THE CONTROLLER

9.2 We use the following types of cookies:

9.2.1 Necessary cookies are required for the proper functioning of the Website. Thanks to these files, the Controller can ensure the secure execution of actions such as, for example, fulfilling a User's order, "remembering" a User who has logged into the Website after moving to another page, or automatically filling in address data during purchases. Blocking these cookies in the User's browser may lead to improper operation of the Website. These cookies are mandatory and cannot be deactivated.

Specific purposes for using technical cookies:

1. a) ensuring the security and reliability of the Website;

2. b) implementing processes necessary to ensure the full functionality of the Website, including in particular:

- adapting the Website's content to enable the User to make full use of the available functionalities and optimizing the use of the Website's pages. In particular, these files allow for the recognition of the basic parameters of the User's Device and the appropriate display of the Website;

- correct operation of the "Recommend a Friend" program, in particular, ensuring the ability to verify the sources of User referrals to the Website's pages;

- enabling the use of the "Clipboard" and "Cart" functions on the Website.

9.2.2 Analytical cookies are used by the Controller both to analyze User behavior on the Website for business purposes and to understand how Users use the Website. This allows for determining which functionalities need improvement or updates. Information obtained by the Controller via analytical cookies is anonymous – based on it, the Controller cannot identify the User from whom the information was obtained.

9.2.3 Personalization cookies allow for analyzing User behavior on the Website and their shopping preferences, which enables providing Users with personalized product offers, making changes to the Website's functionality, and publishing sponsored content. Data obtained through these types of cookies can also be used to improve existing systems and software, as well as to develop new solutions and functionalities.

9.2.4 Advertising cookies allow the Controller to adapt the displayed advertisements according to the Users' preferences and interests, i.e., to target so-called behavioral advertising at Users. With their help, entities cooperating with the Controller, such as Facebook or Instagram network operators, will be able to appropriately adjust the displayed advertising content so that it matches the User's preferences.

COOKIE RETENTION PERIOD

9.3 The cookies described above can be divided into two types depending on their retention period:

9.3.1 Session cookies are stored on the User's Device and remain there until the end of the given browser session. After this, the stored information is permanently deleted from the device's memory.

9.3.2 Persistent cookies are stored on the Device until they are deleted. Ending the browser session or turning off the Device does not result in their deletion. If the User does not delete persistent cookies from their Device, they will be stored for up to 60 days from the moment they are saved.

MANAGING COOKIES ON THE WEBSITE

9.4 Only necessary cookies are required for the proper functioning of the Website. For other types of cookies, you may provide consent for their use, but it is not mandatory. You can manage the extent of our use of analytical, personalization, and advertising cookies by providing or withdrawing consent for their use. You have the ability to manage consents regarding specific types of cookies at any time via the panel on our website. The panel can be accessed via the "Your cookies" tab at the bottom of the Website.

OUR PARTNERS

9.5 Some cookies are placed on the Website by external entities – partners who cooperate with us. An up-to-date list of partners we cooperate with in the scope of cookie usage, along with the category of cookies they place, can be found in the table below. Detailed information on this matter can be found in the privacy policy of the given partner.

1. TO WHOM WILL WE TRANSFER YOUR PERSONAL DATA?

10.1 We may transfer your Personal Data to entities with whom we cooperate in the implementation of the services we provide.

10.2 Depending on the delivery method you choose for purchased products, we will provide your data necessary for delivery to one of the entities with whom we cooperate in the field of delivery. In case of using the geolocation service when searching for stationary collection points, your Personal Data will also be transferred to entities that provide location services.

10.3 Depending on the payment method you have chosen for the purchased product, we will transfer your data necessary for receiving or making the payment to one of the entities with whom we cooperate in the field of payment processing.

10.4 If you have provided consent to receive commercial information to the email address or phone number you provided, we will transfer your data to entities that provide the service of sending commercial information on our behalf.

10.5 Furthermore, your data will be transferred to entities that process customer Personal Data on our behalf to the extent necessary for hosting the Store's website.

10.6 We may also transfer your Personal Data to other entities with whom we begin cooperation, including legal and tax consultants, as well as entities providing accounting, IT, logistics, and marketing services.

10.7 We also have the right to disclose certain information about our Users to competent authorities or third parties who request such information based on an appropriate legal basis and in accordance with applicable law.

1. FOR HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

11.1 The period for which we process your data depends on the type of service we provide and the purpose of the processing. As a rule, data is processed throughout the period of service provision or order fulfillment, until the withdrawal of the provided consent or the filing of an objection against data processing in cases where the legal basis for data processing is the Controller's legitimate interest.

11.2 The data processing period may be extended if processing is necessary for establishing and asserting possible claims or defending against claims, and after this time – only in the case and to the extent required by law. After the expiration of the processing period, the data is deleted without the possibility of recovery or is anonymized.

1. HOW DO WE PROTECT YOUR DATA?

12.1 We use a range of IT and organizational security measures to minimize the risk of data leakage, destruction, and disintegration. Security measures include tools such as: a firewall system, antivirus and anti-spam systems, internal access and data processing procedures, and emergency recovery procedures, as well as a multi-level backup system. Our Store ensures a very high level of security through the use of a Web Application Firewall (WAF) and a DDoS protection system. We also use a high level of HTTPS/SSL connection encryption in accordance with accepted best practices, and we cooperate with a carefully selected hosting service provider that holds an ISO 9001 quality certificate, an AQAP-2110 certificate of compliance, and a certificate of compliance for an information security management system with the ISO/IEC 27001 standard.

12.2 Please remember that using the internet always carries the risk of certain security incidents. However, we assure you that thanks to the implemented procedures for regular verification and updating of information processing systems, as well as active monitoring of critical system points, we strive to minimize this risk as much as possible.

1. WHAT ARE YOUR RIGHTS IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA?

13.1. Due to the fact that we process your Personal Data, you have the following rights:

13.1.1 right to information about the processing of Personal Data – on this basis, the Controller provides you with information about the processing of your Personal Data, including primarily information about the purposes and legal grounds for processing, the scope of data held, the entities to which it is disclosed, and the planned data deletion date;

13.1.2 right to obtain a copy of data – on this basis, the Controller provides you with a copy of your Personal Data that it processes;

13.1.3 right to rectification – the Controller is obliged to remove any potential discrepancies or errors in the Personal Data it processes and complete them if they are incomplete;

13.1.4 right to erasure of data – on this basis, you may request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which it was collected;

13.1.5 right to restrict processing – upon receipt of such a request, the Controller ceases to perform operations with your Personal Data – except for operations to which you have given consent and storing data in accordance with accepted storage rules – until the reasons for restricting data processing cease to exist (e.g., a decision is issued by a supervisory authority granting permission for further data processing);

13.1.6 right to data portability – on this basis – to the extent that data is processed by automated means in connection with a concluded contract or provided consent – the Controller provides the data you have provided in a format that allows for computer readability. It is also possible to request that this data be sent to another entity, provided, however, that technical capabilities exist on the part of both the Controller and yourself;

13.1.7 right to object to data processing for marketing purposes – you may object at any time to the processing of your Personal Data for marketing purposes, without the need to justify such an objection;

13.1.8 right to object to other purposes of data processing – you may object at any time – for reasons related to your particular situation – to the processing of your Personal Data carried out on the basis of the Controller's legitimate interest (e.g., for analytical or statistical purposes or for reasons related to the protection of property rights); objections in this scope must contain a justification;

13.1.9 right to withdraw consent – if data is processed based on your consent, you have the right to withdraw it at any time, which, however, does not affect the legality of the processing carried out before the withdrawal of consent;

13.1.10 right to lodge a complaint – if you believe that the processing of Personal Data violates the provisions of the GDPR or other personal data protection regulations, you may lodge a complaint with the authority supervising personal data processing in your place of residence, workplace, or the place where the alleged violation occurred.

SUBMITTING A REQUEST REGARDING THE EXERCISE OF RIGHTS

13.2 You can exercise some of the above rights yourself. If you have an account in the Store, you always have access to your Personal Data and can also correct and update it.

13.3 You may submit a request regarding all of the above-mentioned rights by writing to our Data Protection Officer at the email address: sunandsea.brand@gmail.com.

13.4 We will try to fulfill your request as quickly as possible and answer your questions regarding the processing of your data. You will receive a response within 30 days from the moment we receive your request. If it turns out that due to the complexity of the request or the number of requests we have received, we cannot provide you with information about the actions taken within this timeframe, we will inform you about the extension of the deadline.

13.5 If we have doubts about whether it is you who is submitting the request, we may ask you a few additional questions to verify your identity. Providing such data is not mandatory; however, failing to provide it will result in a refusal to fulfill the request. We may also need additional information to determine the exact content of your request.

13.6 The request may be submitted in person or through a representative (e.g., a family member). For data security reasons, we advise you to use a power of attorney certified by a notary or an authorized legal advisor or attorney, which will speed up the verification of the request's authenticity.

13.7 In the event that a request was sent to us electronically, we will provide a response in the same form, unless the applicant asks for the response in another form. In other cases, we will provide a written response. In the event that the deadline for fulfilling the request makes it impossible to provide a written response, and the scope of the applicant's data we process allows for electronic communication, we will provide a response electronically.

13.8 We keep information about the received request and the person who submitted the request for the purpose of demonstrating compliance and establishing, exercising, or defending against legal claims of data subjects. The register of requests is kept in a manner that ensures the integrity and confidentiality of the data contained therein.

1. CHANGES TO THE PRIVACY POLICY

14.1 The Policy is constantly reviewed and updated as necessary.

Last update: 18.07.2025