It is addressed to the Users of the service and presents the principles of personal data processing, privacy protection mechanisms, and User rights arising from legal provisions, including Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§1 Data Controller

The controller of personal data of the service Users is Michał Sokołowski SampleStore.pl with its registered office at ul. Cisowa 3, 15-378 Śródlesie, NIP: 9662184771, REGON: 526885830, entered into the Central Register and Information on Economic Activity (CEIDG).
The Controller can be contacted via:

• E-mail address: admin@samplestore.global
• Phone: +48 507 890 356

§2 Purpose and basis of data processing

The Controller processes personal data for the purpose of:

1. Performance of service activities, such as account registration, order and transaction processing.
2. Direct marketing of own products and services.
3. Statistical analysis and optimization of the service’s performance.
4. Compliance with legal obligations (e.g., storing data for tax purposes).
5. Ensuring security and protection against fraud.

Data is processed on the basis of:

1. User consent (Art. 6(1)(a) GDPR), e.g., for marketing purposes.
2. Performance of a contract (Art. 6(1)(b) GDPR), e.g., order fulfillment.
3. Legal obligations (Art. 6(1)(c) GDPR).
4. Legitimate interest of the controller (Art. 6(1)(f) GDPR), e.g., improving service quality.

§3 Scope of collected personal data

While using the SampleStore.pl service, the following data may be collected:

1. During account registration:
   
   • First and last name
   • E-mail address
2. During order placement:
   
   • First and last name
   • Delivery address
   • Phone number
   • E-mail address
3. Technical data:
   
   • IP address
   • Browser and operating system information
   • Cookies

§4 Data retention period

Personal data will be stored:

1. For the time necessary to perform the contract, and thereafter for the period of limitation of claims in accordance with legal regulations.
2. In the case of processing based on consent – until it is withdrawn.
3. For tax purposes – for the period required by law.

§5 Data transfer to third parties

The Controller may transfer personal data to:

1. Entities processing data on behalf of the controller, such as:
   
   • Courier companies
   • Payment system operators
   • IT service providers
2. Entities authorized under legal regulations, e.g., tax offices.

The Controller guarantees that these entities process data in accordance with applicable regulations.

§6 User Rights

Users have the following rights:

1. Access to personal data.
2. Rectification of data.
3. Erasure of data (right to be forgotten).
4. Restriction of data processing.
5. Data portability.
6. Withdrawal of consent for data processing.
7. Objection to data processing based on the legitimate interest of the controller.
8. Lodging a complaint with the President of the Personal Data Protection Office (PUODO).

Contact regarding the exercise of rights: admin@samplestore.global

§7 Cookie Policy

1. Cookies are used for:
   
   1. Adapting the website content to User preferences.
   2. Optimizing the use of the service.
   3. Creating service usage statistics.
2. Two types of cookies are used in the service:
   
   1. Session cookies – stored temporarily until the browser is closed.
   2. Persistent cookies – stored for a specified period or until deleted by the User.
3. The User can manage cookies through their web browser settings.

§8 Google Analytics

1. SampleStore.pl uses Google Analytics, a web traffic analysis tool provided by Google Inc. (“Google”).
2. Google Analytics uses cookies to analyze how Users use the website.
3. Data collected by Google Analytics includes:
   
   1. Anonymous IP addresses (the IP address is shortened before being sent to Google to protect privacy).
   2. Information about the User’s device and browser.
   3. Time spent on the website and subpages.
4. Information obtained via Google Analytics is used for:
   
   1. Optimization of service content.
   2. Creating reports on User activity.
5. The Controller ensures that data processed by Google Analytics is anonymous and does not allow for User identification.
6. The User can disable Google Analytics by installing a browser plugin: https://tools.google.com/dlpage/gaoptout.

§9 Data protection measures

The Controller applies appropriate technical and organizational measures to protect personal data, including:

1. Encryption of data transmission (SSL).
2. Access authentication mechanisms.
3. Regular updates of IT systems.

§10 Changes to the Privacy Policy

The Controller reserves the right to make changes to the Privacy Policy. Users will be informed of any changes via the service website.

For any questions or concerns regarding this Privacy Policy, please contact us at e-mail address: admin@samplestore.global.