The Administrator of your personal data is IWONA MAŁGORZATA CHMIELEWSKA PROFIT LINE, ul. Dzikiej Róży 2, 05-140 Borowa Góra, NIP 9661124057, REGON 052129029.

You can contact the Administrator:

• in written form – correspondence address: Dzikiej Róży 2, 05-140 Borowa

• via e-mail correspondence − to the e-mail address: iwona.chmielewska@profit-line.pl

• by phone – at the number: +48 784 448 198

Your personal data, as a user (“User”) of the website https://profit-line.pl/ (“Website”), is processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), and in accordance with the Act on the provision of services by electronic means of 18 July 2002.

Is your data secure? The Administrator commits to undertaking all security and personal data protection measures required by applicable law, as well as collecting data with due diligence and adequately protecting it against access by unauthorised persons.

Purposes of Personal Data Processing The Administrator may process your personal data if it is necessary for you to use the Website. The legal basis for processing your personal data is to enable you to use the Website, including for filling out the Contact Form.

a) Provision of services by electronic means consisting of:

• concluding and executing product sales agreements ordered by the Website User, including product returns, exchanges, and handling complaints – the legal basis for processing is Article 6(1)(b) of the GDPR.

• creating and maintaining the User’s account on the Website – the legal basis for processing is Article 6(1)(b) of the GDPR.

b) Fulfilment of legal obligations, including maintaining records, accounting, and financial reporting – the legal basis for processing is Article 6(1)(c) of the GDPR.

c) Pursuing the Administrator’s legitimate interests (the legal basis for processing is Article 6(1)(f) of the GDPR), which include:

• conducting marketing activities, including the newsletter,

• communicating with you in connection with your message sent via the contact form,

• ensuring the proper functioning of the Website, including the contact form, registration form, and order form,

• archiving, statistics, and potential establishment, exercise, or defence of claims related to the provision of the electronic service contract.

Data Processing Period Your personal data will be processed for the period necessary to achieve the purposes for which the data is processed, i.e.:

• until the expiry of limitation periods for any claims related to the functioning of the Website, including those arising from contracts concluded through it;

• until a justified objection is raised, concerning data processed under the Administrator’s legitimate interest;

• until consent to send marketing information via email or telephone is withdrawn, or until an objection to data processing for marketing purposes is raised;

• until the expiration of the data retention obligation resulting from legal provisions, including the obligation to store accounting documents related to the concluded agreement.

Categories of Recipients Your data may be transferred to entities whose services the Administrator uses to fulfil its obligations and conduct its business. These categories of entities include: IT service providers, accounting service providers, marketing service providers. Furthermore, your data may be transferred to other entities authorized to access data to the extent and for the purpose specified by law. Your personal data will always be processed using appropriate personal data protection and security measures. The Administrator does not intend to transfer your personal data to countries outside the European Economic Area or to an international organization.

Automated Decision-Making/Profiling

Your Rights You have the right to:

• access your personal data and the right to request its rectification, erasure, or restriction of processing;

• data portability;

• withdraw consent to the processing of personal data – to the extent that the legal basis for processing your personal data is consent (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);

• object to the processing of your personal data – to the extent that the legal basis for processing your personal data is the Administrator’s legitimate interest;

• lodge a complaint with the supervisory authority dealing with personal data protection (the President of the Personal Data Protection Office), if you believe that data processing violates the GDPR.

To exercise your rights, please contact the Administrator.

Do you have to provide your personal data? The provision of personal data is voluntary but necessary to achieve the purposes indicated in the Privacy Policy.

Disclaimer The information contained in the articles is general in nature and does not constitute individual technical, design, or construction advice. The website Administrator is not responsible for decisions made based on this information.

COOKIES POLICY Cookies Cookies (hereinafter also referred to as: “cookies”) are small alphanumeric text files that are saved by the ICT system in your ICT system (on the computer, phone, or other device used to connect to the Website) while browsing the Website and allow identification in the event of reconnection to the Website from the device (e.g., computer, phone) on which they were saved.

• session files, which are automatically deleted after closing the web browser;

• persistent files, which are stored on the device for a specified period; the storage of these files is not dependent on closing the browser;

• first-party files, which are set by the Website;

• third-party files, set by other services, i.e., Google Analytics.

The Website uses both first-party and third-party cookies. The Administrator’s main purpose for using cookies is to manage the Website and improve the quality of the content it provides. Cookies are essential for the correct display and operation of the Website. The Administrator may also process data contained in cookies to conduct anonymous statistics and analyses showing how the Website is used, and the average duration of a visit to the Website. Cookies are not used to determine the identity of Website users. Cookies are used with your consent. The Administrator does not sell or share them with other companies. Your consent is expressed through the appropriate settings of the software, particularly the web browser, installed on the telecommunications device used by you to browse the content on the Website. Most browsers accept the saving of cookies by default. You can withdraw or change the scope of previously expressed consent to the use of cookies on the Website and delete them from your browser at any time. You can restrict or disable cookies in your browser at any time by setting it to block cookies or warn you before a cookie is saved on the device you are using. In such a case, however, you may not have access to some content on the Website, and in extreme cases, the correct display of the Website may be completely blocked. Using the Website involves sending requests to the server where the website is stored. Each request directed to the server is saved in the server logs. Logs include, among other things, your IP address, server date and time, and information about the web browser and operating system you are using. Logs are saved and stored on the server. The data saved in the server logs is not associated with specific individuals using the website and is not used by me for your identification. Server logs are only supplementary material used for website administration, and their content will not be disclosed to anyone except persons authorized to administer the server.