Privacy policy

I. GENERAL INFORMATION

  1. This document sets out the privacy rules of the Online Shop https://luukids.com (hereinafter referred to as the "Online Shop") and is intended to inform you about the way in which the Online Shop uses your personal data, in respect with all the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR").
  2. The Administrator of personal data collected by the Online Shop in the meaning of GDPR is DAMMY PLANET LIMITED LIABILITY COMPANY with its registered office in Białystok (address: Fabryczna Street 8/U6/U7, 15-483 Białystok mailing address: Graniczna Street 77C, 05-420 Józefów); entered in the Register of Entrepreneurs of the National Court Register under the number KRS 0000932639; registration court in which the company's documentation is stored: District Court in Białystok, XII Commercial Department of the National Court Register; with share capital of 5 000 zł; Tax Identification Number: 5423441435, REGON 52046102300000, BDO: 000637915, email address: hello@luukids.com and phone number: +48 784 691 129
II. PERSONAL DATA - TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION
  1. The Administrator processes the personal data of the Customers of the Online Shop in the case of:
    1. the registration of an Account in the Online Shop, in order to create and manage an individual Customer Account on the basis of Article 6(1)(b) of the GDPR,
    2. placing an order in the Online Shop, for the purpose of concluding a sales contract on the basis of Article 6(1)(b) of the GDPR,
    3. use of the Contact Form service in the Online Shop on the basis of Article 6(1)(b) of the GDPR,
    4. subscribing to the Newsletter in order to send commercial information by electronic means (in this case, personal data will be processed upon separate consent, expressed on the basis of Article 6(1)(a) GDPR
  2. Type of personal data processed:
    1. In the case of registering an Account in the Online Shop and placing an order in the Online Shop, the Customer shall specify:
      • Name and surname,
      • Address/Delivery address,
      • Email address,
      • Phone numer,
      • Others,
      • When registering an Account with the Online Shop, the Customer will receive a one-time access code at the provided email address
    2. When subscribing to the Newsletter and when using the Contact Form service in the Online Shop, the Customer shall provide:
      1. Name,
      2. Email address.
  3. In the case of Entrepreneurs, the above data is extended by the Entrepreneur's company and Tax Identification Number.
  4. The provision of personal data by the Customer is entirely voluntary, with the proviso that failure to provide the data specified in the Online Shop registration form or the Online Shop order form will prevent the Customer from properly registering and setting up a Customer Account and placing an order.
  5. When using the Online Shop's website, additional information may be collected, in particular the IP address assigned to the Customer's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
  6. Navigation data may also be collected from Customers, including information about links and references they choose to click on or other actions taken by the Online Shop, on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of the legitimate interest of facilitating the use of electronically provided services and the functionality of those services.
  7. For the purpose of establishing, investigating and enforcing claims, certain personal data of the Customer may be processed, such as name, surname, data on the use of services if the claims arise from the way the Customer uses the services, other data necessary to prove the existence of the claim, including the extent of the damage suffered on the basis of Article 6(1)(f) RODO, i.e. on the basis of the legitimate interest of establishing, investigating and enforcing claims and defending against claims in judicial, administrative and enforcement proceedings.
III. PERIOD OF RETENTION OF PERSONAL DATA
  1. Where the basis for data processing is the performance of a contract, the Customer's Personal Data shall be stored by the Administrator for as long as it is necessary for the performance of the contract, and thereafter for a period corresponding to the expiry of the archiving obligation under the law, including the obligation to store accounting documents or the statute of limitations for any claims the Administrator may raise and which may be raised against it. Unless a specific provision of law provides otherwise, the period of limitation shall be six years, and for claims for periodic performance and claims related to the conduct of business activity shall be three years.
  2. Where the basis for data processing is consent, the Customer's Personal Data shall be stored by the Administrator for the period necessary for the use of the service in the performance of which the Customer's Personal Data has been made available, until such time as the consent is withdrawn, and after the consent is withdrawn for a period of time corresponding to the expiry of the archiving obligation under the law, including the obligation to store accounting documents or the statute of limitations for claims which the Administrator may assert and which may be asserted against it. Unless specifically provided otherwise, the period of limitation is six years, and for claims for periodic benefits and claims related to the conduct of business activity is three years.
IV. RECIPIENTS OF THE CUSTOMER’S PERSONAL DATA

Entities that process the orders on behalf of DAMMY PLANET and handle the orders, including, but not limited to: shipping service providers, accounting service providers, suppliers of goods, providers of IT solutions, payment processing companies, banks, companies providing marketing services, storage service providers, telecommunications service providers, law firms and authorized state authorities may be recipients of the Customer’s personal data.

V. CUSTOMER’S RIGHTS
  1. The Customer has the right to:
    1. withdraw consent at any time if personal data is processed on the basis of consent (without affecting the lawfulness of processing which was carried out based on consent before its withdrawal),
    2. object to the processing of personal data in the cases specified in Article 21 of the GDPR,
    3. to inspect the personal data stored by the Administrator concerning the Customer,
    4. request the rectification of personal data if they consider that the personal data stored by the Administrator is outdated, incomplete or untrue,
    5. request for limitation of processing of personal data,
    6. request the removal of personal data.
  2. The Customer may exercise the rights referred to in the paragraph above by making an adequate declaration of intent to the Administrator:
    1. by post to the above address of the Administrator,
    2. by email: hello@luukids.com
  3. The Customer shall also have the right to lodge a complaint with the national data protection authority.
VI. VIOLATION OF PERSONAL DATA PROTECTION

In the event of a violation of personal data protection, the Administrator shall, without undue delay, no later than 72 hours after the discovery of the violation - report it to the supervisory authority (President of the Office for Personal Data Protection), unless the violation is unlikely to result in a risk of violation of the rights or freedoms of individuals. The Administrator shall attach an explanation of the reasons for the delay to the notification submitted to the supervisory authority after 72 hours. If a personal data breach is likely to result in a high risk of violation of the rights or freedoms of natural persons, the Administrator shall notify the data subject of such breach without undue delay.

The Administrator reserves the right to amend this privacy policy.
This version of the privacy policy is effective from 24.04.2024.