INFORMATION CLAUSE

INFORMATION CLAUSE
INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA
We hereby inform you that we process your personal data. Details are provided below.

1. Data Controller and Data Protection Officer
   The Data Controller of your personal data is Świadomi Mimochodem sp. z o.o. based in Warsaw, Zawiszy 12/78, 01-167, a company registered in the National Court Register under the number 0000871232, with its records held in the District Court for the Capital City of Warsaw, Economic Division, with a share capital of PLN 50,000.00. NIP: 5213913595; REGON: 387636790.
   You can contact the Administrator at: Tel: 793 512 109 or by email at sklep@alchemista.pl.
   The Administrator has appointed a Data Protection Officer (DPO) who can be contacted for any matters related to personal data processing. DPO contact details: Paweł Maliszewski, iod@perfectinfo.pl.
2. Purposes and Legal Bases for Processing
   Personal data will be processed for the following purposes:

1. Conclusion of a sales contract based on interest in the Company’s offer (basis: Article 6(1)(b) GDPR);
2. Exercise of the right of withdrawal from the contract based on Article 27 of the Consumer Rights Act (basis: Article 6(1)(c) GDPR);
3. Exercise of rights under warranty or guarantee based on the Civil Code (basis: Article 6(1)(c) GDPR);
4. Archival (evidence) purposes to secure information in case of a legal need to demonstrate facts, which is a legitimate interest of the Company (basis: Article 6(1)(f) GDPR);
5. Establishing, pursuing, or defending against claims, which is a legitimate interest of the Company (basis: Article 6(1)(f) GDPR);
6. Customer satisfaction surveys and quality of service assessments, which is a legitimate interest of the Company (basis: Article 6(1)(f) GDPR);
7. Sending marketing offers (newsletter), information on promotions, new items in the store, based on the consent provided for this purpose (basis: Article 6(1)(a) GDPR).

III. Data Recipients
Personal data may be shared with the following categories of recipients:

1. The Company’s subcontractors, i.e., entities that the Company uses in data processing: accounting, courier, transportation, legal, tax, IT service providers.
2. Other independent recipients: banks and leasing companies whose services enable the purchase of products on the Company’s website in installments or leasing.

1. Data Retention Period

1. Data collected for the purpose of concluding a sales contract will be processed until the expiry of the potential limitation period for claims from the contract (including claims under warranty and guarantee);
2. Data collected for marketing purposes will be processed until the data subject withdraws consent for their processing;
3. Data processed based on the legitimate interest of the Company will be processed until the data subject objects to their processing or until the Company considers them outdated.

1. Rights
   The data subject has the following rights:

1. The right to access their data and receive a copy of it;
2. The right to rectify (correct) their data;
3. The right to delete data – if they believe there is no legal basis for the Company to process their data, they can request the deletion of their data;
4. The right to restrict data processing – they can request that the Company restrict the processing of their data to storage only or to performing agreed-upon actions if they believe the data is incorrect or processed unlawfully, or they do not want it deleted because it is needed for the establishment, exercise, or defense of claims;
5. The right to object to data processing:
   • Marketing objection – they have the right to object to the processing of their data for direct marketing purposes. If they exercise this right, the Company will stop processing the data for this purpose.
   • Objection due to a specific situation – they also have the right to object to data processing based on the legitimate interest of the Company for purposes other than direct marketing. They should indicate their specific situation, which they believe justifies stopping the processing of their data for the purposes objected to. The Company will stop processing the data unless it can demonstrate that the processing is necessary for legitimate reasons that override the data subject’s rights, or that the data is needed for the establishment, exercise, or defense of claims.
6. The right to data portability: they have the right to receive personal data in a structured, commonly used, and machine-readable format and can request that the data be sent directly to another controller.
7. The right to lodge a complaint with the supervisory authority – if they believe the processing of their data is unlawful, they can file a complaint with the President of the Personal Data Protection Office or another relevant supervisory authority.
8. The right to withdraw consent for data processing – they have the right to withdraw consent for the processing of their personal data at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise the rights, the data subject can contact the Company by email at bilety@alchemista.pl or by phone at 793 512 109.

1. Voluntariness of Data Provision
   In every case listed in Section II, providing personal data is voluntary. Failure to provide the required data may result in:

1. Inability to conclude a contract with the Company;
2. Inability to send the Company’s newsletter;
3. Inability to achieve the purposes based on the legitimate interest of the Data Controller.

VII. Data Transfers to Third Countries and Profiling
Personal data will not be transferred to third countries or international organizations.
Personal data will not be subject to automated decision-making, including profiling.