Privacy policy

§ 1. Controller

1. We, Lucky Star Polska sp. z o.o., with its registered office in Łódź, are the controller of your personal data. In the remainder of this Privacy Policy, we refer to ourselves in the first person or as the “Controller”.

2. Our registration files are kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register. We are entered in the register of entrepreneurs of the National Court Register under number 0000147799. Our tax identification number is 7291015090. Our share capital amounts to PLN 666,000. Our files contain the most important information about us, such as financial statements and our company agreement.

3. You can contact us:

• by post: ul. Pogonowskiego 56/58, 90-619 Łódź, Poland,
• by email: [email protected],
• by telephone: +48 666 33 44 80.

§ 2. Terms used in the Privacy Policy

1. If you notice any of the following capitalised terms in the remainder of this Privacy Policy, they should be understood in accordance with the definitions below:

• “Website” means the website available at oponywdt.pl,
• “Policy” means this document, namely the Privacy Policy you are reading,
• “GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC. You can find the text of the GDPR here,
• “Social media” means the Facebook and Instagram social networking services on which we have a profile.

§ 3. Your rights concerning personal data

1. We process your personal data; therefore:

• you have the right to access your personal data,
• you may rectify it,
• you may request the erasure of your personal data where permitted by the GDPR,
• you have the right to restrict processing to the extent specified in the GDPR.

2. In Parts II–IV of the Policy, you will find information about additional rights. In some situations, you will have additional options.

3. Do you want to exercise your rights or find out more about them? Contact us. You will find our contact details in § 1(3) of the Policy.

§ 4. Right to object

1. After providing us with your personal data, or if we collect it ourselves, you may exercise your right to object. You have this right in two situations where we process your personal data:

• for direct marketing purposes — you do not need to justify such an objection,
• on the basis of our other legitimate interests — such an objection requires justification based on your particular situation. Tell us why we should not process your data.

2. Do you want to exercise your right to object? Contact us. You will find our contact details in § 1(3) of the Policy.

§ 5. Complaint to the President of the Personal Data Protection Office

If you believe that we process your personal data unlawfully, you may lodge a complaint with the supervisory authority. In Poland, this is the President of the Personal Data Protection Office, whose website is available at: https://uodo.gov.pl/.

§ 6. Personal data security and threats

1. We apply technical measures required by the current personal data protection laws to prevent unauthorised persons from obtaining and modifying personal data transmitted electronically through our Website.

2. Please note that particular threats associated with using services such as ours include:

• malicious software (malware),
• spyware,
• obtaining information by impersonating trustworthy entities (phishing),
• hackers’ activities aimed at breaking into IT systems.

3. We take measures to protect the Website and the data processed through it against these threats. Remember to follow security rules yourself as well. For example, install and regularly update antivirus software, and do not click links or open attachments from messages whose origin you are not sure of.

§ 7. Questions about the Policy

If you have questions about the Policy, please let us know.
You will find our contact details in § 1(3) of the Policy.

§ 8

Contacting us by email, post, telephone number, Skype, Gadu-Gadu, WhatsApp or the contact form

If you use these ways of contacting us, please note the following:

1. For what purpose and on what legal basis do we process your personal data?

Example 1:

• Purpose of processing: replying to your message, communicating with you and resolving the matter you present, for example when you send us a question about how to perform a particular action on the Website.
• Legal basis: our legitimate interest under Article 6(1)(f) GDPR, consisting of resolving the matter you present and replying to your message.

Example 2:

• Purpose of processing: taking steps at your request to conclude a contract with you, for example when you contact us to purchase a particular product on the Website and ask us by email or telephone to prepare an individual offer.
• Legal basis: taking steps at your request before entering into a contract with you, pursuant to Article 6(1)(b) GDPR.

2. How long will we process your data?
For the time needed to resolve the matter you present and, depending on its type, also for the time needed to demonstrate that we resolved it, i.e. for the limitation period for claims.

3. What rights do you have?
We described them in §§ 3 and 4 of the Policy.

4. Do you have to provide your data?
It is voluntary. Without your contact details, we may be unable to resolve the matter you present. Without your personal data, we will not be able to prepare an offer for you if you contacted us for that purpose.

5. To whom will we disclose your data?

• Postal operators and couriers.
• Entities hosting (storing) the Website or personal data for us.
• Entities providing technical services for the Website.
• Providers of communication tools: Skype, WhatsApp and GaduGadu.

6. Will we transfer your personal data outside the European Economic Area?
Yes, but only if you communicate with us through Skype or WhatsApp. Your personal data will then be transferred to the United States on the basis of the European Commission’s decision of 10 July 2023, issued under an EU Regulation, finding an adequate level of personal data protection under the EU-US Data Privacy Framework. You may obtain a copy of the personal data we transfer outside the EEA at any time. Contact us for this purpose.

7. Will automated decisions, including profiling, be made on the basis of your data?
No.

§ 9

Use of our social media profiles

If you subscribe to the newsletter, please note the following:

1. For what purpose and on what legal basis do we process your personal data?

• Example 1 — Purpose: replying to private messages you send to us using the tools available on social media, such as private messages. Legal basis: our legitimate interest under Article 6(1)(f) GDPR in resolving the matter you present and replying to your message.
• Example 2 — Purpose: discussing with you in comments below individual posts. If you comment on our post or tag us in a discussion, we will most likely reply. We will then see your account name and profile picture. Legal basis: our legitimate interest under Article 6(1)(f) GDPR in discussing with users who comment on our social media posts or tag us in discussions.
• Example 3 — Purpose: statistics presented to us by social media providers, including post views, reach, interactions and demographic data of our followers. Legal basis: our legitimate interest under Article 6(1)(f) GDPR in gaining knowledge about users who follow our profiles and interact with our posts, allowing us to optimise communication methods and posting times.
• Example 3 — Purpose: marketing, consisting of informing about our services and ourselves through posts, including sponsored posts shown to a wider group of social media users; this may include ads for products you viewed on the Website. Legal basis: our legitimate interest under Article 6(1)(f) GDPR in marketing the Website and promoting available products.

2. How long will we process your data?
For the time needed to carry out the activities described above, including replying to messages, discussions on social media and the marketing and statistical purposes above, but no longer than until you object.

3. What rights do you have?
We described them in §§ 3 and 4 of the Policy.

4. Do you have to provide your data?
It is voluntary. However, due to social media rules, we will see your name or pseudonym and photo if you write to us or comment on our post.

5. To whom will we disclose your data?
Meta Platforms Ireland Limited.

6. Will we transfer your personal data outside the EEA?
Your data will be transferred to the United States on the basis of the European Commission’s decision of 10 July 2023 finding an adequate level of protection under the EU-US Data Privacy Framework. You may obtain a copy of transferred data at any time by contacting us.

7. Will automated decisions, including profiling, be made on the basis of your data?
No.

§ 10

Visiting the Website

Visiting the Website involves our processing of information contained in cookies in accordance with the rules described below.

§ 11

What cookies are and why we use them

1. We use cookies on the Website, i.e. small text information stored on your terminal device (e.g. computer, tablet or smartphone). Cookies may be read by the Website. To learn more about cookies, see Wikipedia at this link.

2. We store cookies on your computer, phone or tablet and then access the information contained in them for the following purposes:

• ensuring the proper operation of the Website, including maintaining your session,
• marketing — matching content to your previous activity on the Website, including presenting products that may interest you or encouraging you to continue incomplete purchases,
• marketing — displaying ads for Website products on other websites, including social media, matched to products you viewed; for this purpose we use Meta Pixel, which may display ads for products you viewed on Facebook or Instagram,
• statistics — analysing how you use the Website, changing the presentation and layout of its content, optimising its operation and assessing the effectiveness of our marketing activities by verifying whether they increase Website traffic.

3. In the cases described above, your personal data may be processed:

• on the basis of our legitimate interest under Article 6(1)(f) GDPR; our use of cookies and similar technologies itself is based on consent referred to in Article 399(2) of the Electronic Communications Law,
• our legitimate interest is marketing products you viewed on the Website, matching ads to your activity and collecting statistics to optimise the Website and verify whether marketing increases traffic,
• your rights are described in §§ 3 and 4 of the Policy,
• you may contact us and object to processing for marketing purposes at any time; you do not need to justify this objection,
• we will disclose data to advertising network operators, including social networks, and providers of marketing and statistical tools,
• we will retain it for the duration of the marketing activities or until you object to further marketing processing,
• marketing and statistical data may be transferred to the United States under the European Commission’s decision of 10 July 2023 finding adequate protection under the EU-US Data Privacy Framework; contact us to obtain a copy,
• providing the data is voluntary; failing to provide it, for example by using blocking software, has no negative consequences, but you will not see ads for our products tailored to your Website activity.

4. In the cases described in § 14(2) below, cookies are used pursuant to Article 399(3) of the Electronic Communications Law.

§ 12

Types of cookies

There are several types of cookies on the Website:

• session cookies, which remain in your browser’s memory until it is closed,
• persistent cookies, which remain in your browser’s memory until you delete them,
• third-party cookies, originating from providers of analytics tools on our Website and/or owners of social media platforms.

§ 13

How to delete cookies

1. You may delete cookies after we save them. You may use the relevant browser functions, software designed for this purpose or tools available within your operating system.

2. Information on deleting cookies in the most popular browsers is available at:

• Firefox: support.mozilla.org,
• Opera: help.opera.com,
• Edge: support.microsoft.com,
• Chrome: support.google.com,
• Safari: support.apple.com.

§ 14

How to block cookies

1. You can configure your browser to prevent cookies from being stored on your computer, phone or tablet. You can also use appropriate browser extensions or software for this purpose.

2. Information on blocking cookies in the most popular browsers is available at: Firefox: support.mozilla.org; Opera: help.opera.com; Edge: support.microsoft.com; Chrome: support.google.com; Safari: support.apple.com.

§ 15

Effect of changing browser settings on use of the Website

Changing your browser configuration so that it prevents or limits cookies may restrict Website functionality. Deleting cookies while the service is provided may have similar effects. This means some services will not be available without cookies; for example, you may be unable to log in to the Website or make purchases.

§ 16

Third-party cookies

1. Cookies stored on your computer, phone or tablet may come from other service providers. You can delete them yourself; see § 15 of the Policy. They are stored on your device for varying periods, depending on the cookie.

2. We use:

• Meta Pixel provided by Meta Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, for marketing consisting of displaying ads on Facebook and Instagram for products you viewed on the Website and measuring their results.
• Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for Website traffic analytics. It provides statistics on how you and other users use the Website, allowing us to optimise content layout and verify whether marketing increases traffic. You can block Google Analytics by installing the browser add-on available at tools.google.com (available for Chrome, Firefox, Safari and Edge).