PRIVACY POLICY

§1. Definitions.

1. Administrator (We) – WeMoral sp. z o.o., ul. Grabińska 22F/2, 92-780 Łódź, Poland, entered into the Register of Entrepreneurs of the National Court Register by the District Court for Łódź - Śródmieście in Łódź, 20th Commercial Division of the National Court Register under the number: 0000940937, with the NIP number: 7282858021, with a share capital of 5,000, PLN 00, with an e-mail address: hello@wemoral.com , and telephone number: 574 139 632.

2. Personal data – all information about a natural person identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, online identifier and information collected via files cookies and other similar technology.

3. Policy – this WeMoral Privacy Policy.

4. SHOWING – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

5. Website – a website owned by the Administrator available at https://wemoral.com/.

6. User (You) - any natural person visiting the Website or using one or more services or functionalities described in the Policy.

7. T&C – website regulations https://wemoral.com/ and the provision of electronic services through it.

§2. Data processing in connection with the use of the Website.

In connection with your use of the Website, we collect your data to the extent necessary to provide individual services offered. The detailed rules and purposes of processing personal data collected when you use the Website are described below.

 

§3. Purposes and legal grounds for data processing on the Website.

USE OF THE SITE

1. We process personal data of all persons using the Website (including the IP address or other identifiers and information collected via cookies or other similar technologies, other data provided by Users) and who are not registered Users (the User is not considered a registered User, who used the free account service)[AR2]for the following purposes:

1) in order to provide electronic services in the scope of making content collected on the Website available to Users - then the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR);

2) for analytical and statistical purposes - then the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in conducting analyzes of Users' activity, as well as their preferences in order to improve the functionalities and services provided;

3) in order to possibly establish and pursue claims or defend against them - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in the protection of our rights;

4) for marketing purposes (ours and our partners), in particular related to the presentation of behavioral advertising - the principles of processing personal data for marketing purposes are described in the "MARKETING" section.

2. Your activity on the Website, including your personal data, is recorded in system logs. The information collected in the logs is processed primarily for purposes related to the provision of services. We also process them for technical and administrative purposes, to ensure the security of the IT system and to manage this system, as well as for analytical and statistical purposes - in this respect, the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR). ).

 

REGISTRATION

3. During registration, you will be asked to provide the data necessary to create and maintain an account. In order to facilitate the service, you can provide additional data, thus agreeing to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required in order to set up and operate an account, and failure to do so will prevent us from opening your account. Providing other data is voluntary.

4. Your personal data is processed:

1) in order to provide services related to account maintenance and service - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR), and in the scope of data provided optionally - the legal basis for processing is consent (Article 6(1)(b) of the GDPR) letter a of the GDPR);

2) for analytical and statistical purposes - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in conducting analyzes of Users' activity on the Website, as well as how to use the account, as well as their preferences in order to improve the functionalities used;

3) in order to possibly establish and pursue claims or defend against them - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in the protection of our rights;

4) for marketing purposes (ours and our partners) - the rules for processing personal data for marketing purposes are described in the "MARKETING" section.

 

USE OF PAID SERVICES

5. When placing an order, you will be asked to provide the data necessary to complete it. In order to facilitate the service, you can provide additional data, thus agreeing to their processing. Such data can be deleted at any time. Providing data marked as mandatory is required in order to set up and manage an order, and failure to do so will prevent us from fulfilling the order. Providing other data is voluntary

6. If you place an order with us, we will process your personal data for the following purposes:

1) in order to perform the order placed and subsequent orders - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR); in the scope of data provided optionally, the legal basis for processing is consent (Article 6(1)(a) of the GDPR);

2) in order to fulfill our statutory obligations, resulting in particular from tax and accounting regulations - the legal basis for processing is a legal obligation (Article 6(1)(c) of the GDPR);

3) for analytical and statistical purposes - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in conducting analyzes of your activity on the Website, as well as your shopping preferences in order to improve the functionalities used;

4) in order to possibly establish and pursue claims or defend against them - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in the protection of our rights.

 

CONTACT FORMS

7. As part of the Website, we provide the opportunity to contact us using electronic contact forms. Using the form requires providing your personal data necessary for us to be able to contact you and answer your question. In the form, you can also provide other data in order to facilitate contact with us or to handle the inquiry. Providing data marked as mandatory is required in order to accept and handle the inquiry, and failure to provide them will result in the fact that we will not be able to handle your inquiry. Providing other data is voluntary.

8. Personal data that you send us via the contact form is processed:

1) in order to identify you as the sender and to handle your inquiry sent via the provided form - the legal basis for processing is the necessity of processing to perform the contract for the provision of the service (Article 6(1)(b) of the GDPR);

2) for analytical and statistical purposes - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in keeping statistics of inquiries submitted by Users via the Website in order to improve its functionality.

 

NEWSLETTER

9. We provide the newsletter service on the terms set out in the Regulations, only if you provide us with your e-mail address for this purpose. Providing data is required in order to provide the newsletter service, and failure to provide them results in the inability to send it.

10. Personal data collected for the purposes of the newsletter are processed:

10.1. in order to provide the newsletter service - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR), as well as your consent (Article 6(1)(a) of the GDPR);

10.2. in the case of sending marketing content to you as part of the newsletter - the legal basis for processing, including profiling, is our legitimate interest (Article 6(1)(f) of the GDPR) in connection with the consent given to receive the newsletter;

10.3. for analytical and statistical purposes - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in conducting analyzes of your activity on the Website in order to improve the functionalities used;

10.4. in order to possibly determine and pursue claims or defend against them - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR).

§4. Marketing.

1. We process your personal data in order to carry out marketing activities, which may consist of:

1) displaying marketing content that is not tailored to your preferences (contextual advertising);

2) displaying marketing content corresponding to your interests (behavioral advertising);

3) sending e-mail notifications containing commercial information (newsletter service);

4) sending e-mail notifications about offers or promotions of own services or on behalf of third parties, which in some cases contain commercial information, in connection with an interrupted purchase process (abandoned cart);

5) conducting other types of activities related to direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).

2. In order to carry out marketing activities, in some cases we use profiling (if you agree to it). This means that thanks to automatic data processing, we assess selected factors regarding natural persons in order to analyze their behavior or create a forecast for the future.

3. The legal basis for the processing of personal data for marketing purposes is always your consent (Article 6(1)(a) of the GDPR), which you can withdraw at any time.

 

CONTEXTUAL ADVERTISING

4. We process your personal data for marketing purposes in connection with targeting you with contextual advertising, i.e. advertising that does not match your preferences. The processing of personal data then takes place in connection with the implementation of our legitimate interest (Article 6(1)(f) of the GDPR).

 

BEHAVIORAL ADVERTISING

5. We and our trusted partners process your personal data, including personal data collected via cookies and other similar technologies, for marketing purposes in connection with targeting you with behavioral advertising, i.e. advertising that is tailored to your preferences. The processing of personal data then also includes profiling. The use of personal data collected through this technology for marketing purposes, in particular in the field of promoting services and goods of third parties, requires your consent, which you can withdraw at any time.

 

DIRECT MARKETING

6. Your Personal Data may also be used by us so that we can direct marketing content to you through various channels, i.e. via e-mail, MMS / SMS or by phone. We take such actions only if you have consented to them, which you can withdraw at any time.

§6. Social media.

We process your personal data when you visit our social media profiles. These data are processed only in connection with maintaining the profile, including to inform you about our activity and to promote various types of events, services and products. The legal basis for the processing of personal data for this purpose is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in promoting our own brand.

§7. The period of personal data processing.

1. The period for which we process your data depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service or order execution, until you withdraw your consent or submit an effective objection to data processing (in cases where the legal basis for data processing is our legitimate interest).

2. The period of data processing may be extended if the processing is necessary to establish and pursue any claims or defend against them, and after that time only if and to the extent required by law.

3. After the end of the processing period, your data is irreversibly deleted or anonymized.

§8. your permissions.

Due to the fact that we process your personal data, you have the following rights:

1) the right to information about the processing of personal data – on this basis, at your request, we will provide you with information about data processing, including in particular about the purposes and legal grounds for processing, the scope of data held, entities to which they are disclosed, and the planned date of data deletion;

2) the right to obtain a copy of the data – on this basis, at your request, we will provide you with a copy of the processed data regarding the person making the request;

3) the right to rectification – at your request, we are obliged to remove any inconsistencies or errors in the processed personal data and supplement them if they are incomplete;

4) the right to delete data – on this basis, you can request the deletion of data whose processing is no longer necessary to achieve any of the purposes for which they were collected;

5) the right to limit processing - on this basis, at your request, we will stop performing operations on your personal data - with the exception of operations to which you have consented - and their storage, in accordance with the adopted retention rules or until the reasons for limiting data processing cease to exist;

6) the right to data portability - on this basis - to the extent that your data is processed in connection with the concluded contract or consent - we will provide you with the data provided by you in a format that allows them to be read by a computer. You can also request that we send this data to another entity - provided, however, that we have the appropriate technical capabilities to do so;

7) the right to object to data processing for marketing purposes – you can object to the processing of personal data for marketing purposes at any time, without the need to justify such an objection;

8) the right to object to other data processing purposes – you can object at any time to the processing of personal data that is based on our legitimate interest (e.g. for analytical or statistical purposes or for reasons related to the protection of property); an objection in this respect should contain a justification;

9) the right to withdraw consent – if the data is processed on the basis of your consent, you have the right to withdraw it at any time, which, however, does not affect the lawfulness of the processing carried out before the withdrawal of consent;

10) right to complain – if you believe that the way we process your personal data violates the provisions of the GDPR or other provisions regarding the protection of personal data, you can submit a complaint to the President of the Office for Personal Data Protection.

§9. data recipients.

1. Due to the fact that we want to provide you with the best possible services, we will disclose your personal data to our trusted partners, subcontractors and entities cooperating with us, including in particular suppliers responsible for servicing IT systems, entities such as banks and payment operators, providing accounting services, electronic payments, marketing agencies (in the field of marketing services) and our affiliates.

2. Your personal data will be made available to other entities for their own purposes, including marketing purposes, only if you agree to it.

§10. Data transfer outside the EEA.

The level of protection of personal data outside the European Economic Area (EEA) may differ from that provided by European law. For this reason, we will transfer your personal data outside the EEA only when necessary and with an adequate level of protection. You will be notified each time.

 

§11. Security of personal data.

1. Know that we take all steps to ensure that your personal data will be processed by us in a safe manner - ensuring, above all, that only authorized persons have access to your data and only to the extent that it is necessary due to the performed activities tasks by them.

2. We take all necessary steps to ensure that our subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process your personal data on our behalf.

§12. Contact details.

In all matters referred to in this Policy, in particular related to the processing of your personal data, you can contact us by:

1) e-mail: hello@wemoral.com

2) by post to the following address: Wemoral sp. Z o.o., ul. Grabińska 22F/2, 92-780 Łódź

§13. Policy Changes.

This Policy is reviewed on an ongoing basis and updated if necessary. The current version of the Policy has been adopted and is effective from 01.09.2023