Privacy and Cookies Policy

1. Personal Data Controller

The controller of personal data is EKRAM Karolina Bańcerowska,
ul. Małopolska 4 A, 26-600 Radom, Poland,
VAT ID: 9482322071,
e-mail: ekram@ekram.pl,
phone: +48 608 460 935.

2. Scope of the Policy

This Privacy Policy defines the principles of processing personal data of users of the online store esklepmedyczny.com.pl, in particular Customers, persons contacting the Seller, and newsletter subscribers.

3. Purposes and Legal Bases for Data Processing

Personal data are processed for the following purposes:

• conclusion and performance of the sales agreement and order processing – Article 6(1)(b) GDPR,
• fulfillment of legal obligations imposed on the Controller (e.g. tax and accounting obligations) – Article 6(1)(c) GDPR,
• handling inquiries addressed to the Controller – Article 6(1)(f) GDPR (legitimate interest of the Controller),
• marketing of the Controller’s own products or services towards existing Customers – Article 6(1)(f) GDPR,
• running a newsletter and electronic marketing communication – Article 6(1)(a) GDPR (consent).

4. Types of Processed Data

The Controller processes personal data voluntarily provided by users, in particular:

• first and last name,
• e-mail address,
• phone number,
• correspondence address and delivery address,
• invoice data (company name, VAT ID, address),
• data contained in correspondence sent to the Controller.

5. Obligation or Voluntary Provision of Data

Providing personal data is:

• necessary to conclude a sales agreement – with regard to data required for order fulfillment,
• voluntary – in the case of the newsletter, contact form, and marketing activities.

Failure to provide data necessary for order fulfillment will make it impossible to complete the order.

6. Source of Data

Personal data come directly from the persons concerned and, to the extent necessary for contract performance, from payment operators and courier companies.

7. Data Recipients

Personal data may be transferred to entities cooperating with the Controller, solely to the extent necessary to achieve the purposes of processing, in particular:

• IT service and hosting providers,
• payment operators,
• accounting companies and accounting offices,
• courier, postal, and return/logistics system operators,
• public authorities – in cases provided for by law.

8. Transfer of Data Outside the EU/EEA

Personal data may be transferred outside the European Economic Area only in connection with the use of tools such as Google or Meta (Facebook), while applying appropriate legal safeguards, in particular standard contractual clauses.

9. Data Retention Period

Personal data are stored:

• for the duration of the agreement and after its completion – until the limitation period for claims expires,
• in accordance with obligations arising from legal provisions (e.g. tax regulations),
• in the case of data processed on the basis of consent – until such consent is withdrawn.

10. Rights of Data Subjects

Each person has the right to:

• access their data,
• rectify their data,
• erase their data (right to be forgotten),
• restrict processing,
• data portability,
• object to the processing of data,
• withdraw consent at any time.

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office.

11. Profiling

The Controller does not apply automated decision-making or profiling within the meaning of the GDPR.

12. Cookies and Similar Technologies

The Store uses cookies:

• necessary – essential for the proper functioning of the store,
• analytical – used to analyze traffic statistics (e.g. Google Analytics),
• marketing – used for marketing purposes (e.g. Meta/Facebook – if active).

Analytical and marketing cookies are used only after obtaining the user’s consent, expressed via the cookies banner. Consent may be withdrawn or modified at any time.

13. Google Customer Reviews

After making a purchase in the online store esklepmedyczny.com.pl, the Customer may be asked to consent to participation in the Google Customer Reviews survey.

If consent is given, data such as the e-mail address and order information may be transferred to Google LLC in order to send a one-time survey regarding the opinion about the completed purchase.

Participation in the survey is completely voluntary, and the legal basis for processing the data is the user’s consent – Article 6(1)(a) GDPR.

Detailed information regarding data processing by Google is available in Google’s Privacy Policy: https://policies.google.com/privacy.

14. Final Provisions

This Privacy Policy is effective from the date of publication on the store’s website. The Controller reserves the right to update it in the event of changes in legal regulations or data processing methods.

This Privacy Policy constitutes an integral part of the Terms and Conditions of the store esklepmedyczny.com.pl.