GENERAL PROVISIONS
This Privacy Policy sets out the principles governing the processing of personal data by the Administrator within the Website. The Policy describes the legal basis, purposes, and scope of personal data processing, the rights of data subjects, and information on the use of cookies within the Website.

Definitions:
a. Administrator – the personal data administrator collecting data through the Website: Królowie Sedesów Sp. z o.o., with its registered office in Katowice at ul. Modrzewiowa 30B/18, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court Katowice-Wschód in Katowice, under KRS number: 0000658893, NIP: 9542773447, REGON: 366366105;
b. Policy – this Privacy Policy;
c. Website – the website operated by the Administrator at: https://krolowiesedesow.pl/;
d. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
e. User – any natural person visiting the Website and using one or more functionalities described in this Policy.
Providing personal data when using the Website is voluntary, yet necessary for concluding and performing the Agreement.

USING THE WEBSITE – PROCESSING OF PERSONAL DATA
When the User uses the Website, the Administrator collects data to the extent necessary to provide individual services, as well as information about the User’s activity within the Website. Below are detailed rules and purposes for processing personal data collected during the User’s use of the Website.

LEGAL BASIS AND PURPOSES OF DATA PROCESSING
The basis for personal data processing by the Administrator, regardless of the purpose or functionality used by the User, is the GDPR.
Website Usage:
Personal data of Website Users (including IP addresses, other identifiers, and information collected via cookies or similar technologies) are processed by the Administrator:
a. to provide electronic services in terms of making content collected on the Website available to Users – the legal basis is the legitimate interest pursued by the Administrator, including marketing of its own services (Article 6(1)(f) GDPR), or necessity to perform an agreement (Article 6(1)(b) GDPR);
b. for analytical and statistical purposes – the legal basis for processing is the legitimate interest pursued by the Administrator (Article 6(1)(f) GDPR), involving analyzing User activities and preferences to improve functionalities and services;
c. to establish, pursue, or defend claims – the legal basis for processing is the legitimate interest pursued by the Administrator (Article 6(1)(f) GDPR) involving protection of its rights.

Contact Form:
The Administrator provides electronic contact forms on the Website. Using the form requires providing personal data necessary for contacting the User (email address, name) and completing the message field. The User may also provide other data to facilitate contact or handle the request/message. Providing data marked as obligatory is required to handle the User’s message/inquiry; failing to provide them prevents responding. Providing other data is voluntary. Data are processed to:
a. identify the sender and handle their message/inquiry – necessary for performing the service agreement (Article 6(1)(b) GDPR);
b. for analytical and statistical purposes – the legal basis is the Administrator’s legitimate interest (Article 6(1)(f) GDPR), involving analyzing User activities and preferences for improving Website functionalities;
c. identify the sender and handle their message/inquiry through data not essential for contact or inquiry handling – based on User consent (Article 6(1)(a) GDPR).

„Join” Form:
The Administrator enables Users to join cooperating entities through activities on the Website. Joining requires completing the relevant electronic form under the „Join” tab. Acceptance of the application and resulting consequences require providing specified personal data (first name, last name, organization name, address, phone, email). Processing is based primarily on User consent, with detailed principles as described above in section 2 regarding the contact form.

RULES FOR PROCESSING PERSONAL DATA
The Administrator exercises particular care in protecting the interests of individuals whose data it processes, ensuring that collected data are:
a. processed lawfully;
b. collected for specified, lawful purposes and not further processed incompatibly with these purposes;
c. accurate and adequate for processing purposes;
d. stored in a form permitting identification of data subjects no longer than necessary;
e. processed securely, protecting against unauthorized or unlawful processing, accidental loss, destruction, or damage through technical and organizational measures.
The Administrator implements appropriate technical and organizational measures to ensure processing complies with GDPR.

RIGHTS OF DATA SUBJECTS
Data subjects whose data are processed by the Administrator based on consent have the right to withdraw consent at any time. Withdrawal does not affect the legality of processing before withdrawal.
Data subjects whose data are processed have the right to:
a. lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO);
b. object at any time to processing based on legitimate interests;
c. request access to their personal data;
d. rectify their personal data;
e. erase their personal data;
f. restrict processing;
g. object to processing;
h. data portability.
To exercise these rights, contact the Administrator at: ul. Modrzewiowa 30B/18, 40-170 Katowice, or via email: biuro@krolowiesedesow.pl.

DATA STORAGE PERIOD
Data processing duration depends on the service provided and processing purpose. Generally, User data are processed for the period of Website use or correspondence. The period may be extended if processing is necessary to establish, pursue, or defend claims or as required by law. After this period, data are irreversibly deleted or anonymized.

SCOPE OF DATA PROCESSING
The Administrator processes personal data adhering to data minimization, processing only data adequate and limited to achieving the specified purpose.
Maximum data scope: name, email, and optionally other voluntarily provided data in the contact form.

RECIPIENTS OF PERSONAL DATA
For proper Website functioning and performance of service agreements, the Administrator utilizes external service providers, particularly responsible for IT system support.
The Administrator cooperates only with processors offering sufficient guarantees of implementing appropriate technical and organizational measures compliant with GDPR. Data are transferred by the Administrator solely when necessary for the specific processing purpose and only to the extent required based on appropriate agreements.

PROFILING ON THE WEBSITE
While using the Website, the Administrator may conduct profiling using provided personal data. Profiling involves automated evaluation of services potentially interesting to the User based on their previous activities on the Website, displaying content accordingly. Profiling does not result in decisions producing legal effects or similarly significant impacts on the User.

COOKIES ON THE WEBSITE
Cookies are IT data, mainly text files, stored on Users’ end devices for Website use. Cookies typically contain the originating website name, storage time, and unique number.
The entity placing and accessing cookies on User end devices is Królowie Sedesów Sp. z o.o., ul. Modrzewiowa 30B/18, 40-170 Katowice.
Cookies are used to:
a. provide basic Website functionalities like logged-in User identification, maintaining login sessions, dynamic data storage (statistics, summaries);
b. customize Website content to individual preferences (e.g., language);
c. remember IP location and timezone;
d. create anonymous usage statistics;
e. remember ordered Services in the cart and related product recommendations;
f. personalize and publish relevant advertising content;
g. conduct marketing and targeted advertising through Google Analytics.

Most browsers accept cookies by default. Users may change cookie settings to limit or disable them, potentially affecting some Website functionalities.

RIGHT TO CHANGE POLICY
The Administrator reserves the right to amend this Privacy Policy at any time. Updates will be published on the Website, adhering to applicable legal regulations.

FINAL PROVISIONS
Contact with the Administrator is possible via:
– email: biuro@krolowiesedesow.pl;
– postal mail: ul. Modrzewiowa 30B/18, 40-170 Katowice;
– the contact form available on the Website under the „Contact” tab.