www.leis-jewelry.com

Privacy and Cookies Policy

We process your Personal Data when you contact us, use the Website or the Electronic Services offered by us, or purchase our Products. 

We respect your privacy and strive in such cases to follow best practices in the area of processing your Personal Data – in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, also known as the General Data Protection Regulation (GDPR).

This Privacy and Cookies Policy explains who we are, how we process your Personal Data,  what cookies we use,  what your rights are in this regard and how you can contact us if you need to.

The Privacy and Cookies Policy has been created for information purposes only, which means that it does not give rise to any legal obligations either for you or for the Seller (it is not a contract). Consequently, we reserve the right to amend this Privacy and Cookies Policy from time to time. The current version of this Privacy and Cookies Policy will be available under the following link: https://leis-jewelry.com/en/content/2-privacy-and-cookies-policy.

This Privacy and Cookies Policy have been drawn up in Polish and have been translated into other languages. In the event of any discrepancies in the translation, the Polish version shall prevail.

Contents

I. Glossary – key terms.

II. Who is the controller of your personal data?

III. What Personal Data do we collect, what is the purpose, duration and legal basis of the processing?

1. WEBSITE VISITS
2. REGISTRATION ON THE WEBSITE (ACCOUNT)
3. CONCLUSION OF SALE AGREEMENTS
4. NEWSLETTER
5. CONTACT WITH US

VI. Who has access to your Personal Data?

V. Your rights related to the processing of your personal data.

VI. What are cookies and other similar technologies? How and for what purpose do we use them?

I. Glossary – key terms.

Personal Data – All information relating to you that we process. For example: name, surname, email address, telephone number, etc.

Processing – All activities performed on Personal Data. For example: collecting, storing, updating, deleting data.

All capitalised words/phrases used in this Privacy and Cookies Policy and not defined above should have the meaning defined in the Terms and Conditions, unless a different meaning is clear from the context in which they are used.

II. Who is the controller of your personal data?

The Controller of your personal data is LEIS Sp. z o.o. with its registered office in Pruszków (05-802), al. Jerozolimskie 476, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court of the City of Warsaw, 14th Commercial Division of the National Court Register under KRS number 0000918681, NIP [Tax Number]: 5342643689, share capital PLN 5 000,00, email address: contact@leis-jewelry.com.

III. What Personal Data do we collect, what is the purpose, duration and legal basis of the processing?

1. WEBSITE VISITS

When you visit the Website, we may use cookies and other related technology (see section VI of this Privacy and Cookies Policy for details), which allows us to maintain the proper functioning of the Website and to analyse information about your activity on the Website. We process this data to improve the quality of the services we offer and to improve the functioning of the Website. It may also be the case that cookies (or similar files) help us tailor the content available through the Website to your interests (profiling). We may use certain cookies for marketing purposes, both on the Website and on the websites of our business partners.

In general, the legal basis for the use of cookies and similar technologies is your consent.

However, the basis for processing data that has been collected using cookie technology is our legitimate interest or that of a so-called “third party” (Article 6(1)(f) of the GDPR – among other things, the need to ensure the highest quality of the content, and sometimes also the marketing of our or our partners' products and services, in which case the partners are not involved in the processing of your data. To the extent that also our partners may have direct access to this information – the legal basis for such processing is your freely given consent (Article 6(1)(a) of the GDPR).

We process your Personal Data on the basis of your consent until you withdraw it. Your Personal Data processed on the basis of our legitimate interest may be stored until you object to its processing, except where, despite your objection, we conclude that there are compelling legitimate grounds for the processing overriding your interests, rights and freedoms, or grounds for establishing, exercising or defending claims.

The above does not apply if the use of cookies and similar files is necessary for the correct operation of the Website (to provide you with an electronic service), where we rely on the law and, as applicable, the necessity of the processing for the performance of the Service Agreement (Article 6(1)(b) of the GDPR). Your Personal Data is then processed for the period necessary for these purposes.

Information about the recipients of your Personal Data, including the possible transfer of your Personal Data to third countries (outside the European Economic Area), is detailed in section IV below. 

The rights you have in relation to the processing of your Personal Data are detailed in section VI below.

2. REGISTRATION ON THE WEBSITE (ACCOUNT)

In order to create an Account on our Website you will be required to provide certain Personal Data, such as name, surname, email address. The provision of all information is voluntary, however, some data is necessary to enter into a Service Agreement and failure to provide such data may mean that it is not possible to enter into such agreement.

Your Personal Data that is not required may help us in improving our Website. We may also use it for statistical purposes.

The purpose and the legal basis of the processing is the conclusion and proper performance of a Service Agreement (Article 6(1)(b) of the GDPR) – for example, the creation of an Account for you and the storage of Order history in the Account.

Your data may also be processed for the purpose of marketing activities, such as presenting you with advertisements and offers (discounts), also tailored to your interests on the basis of profiling (legal basis for these activities: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller or a third party [the Controller's own marketing or that of its partners]).

We may also process your Personal Data to detect and prevent any threats to privacy, fraud or other bad faith activity and to establish, exercise and defend claims that may arise in the course of the relationship between you and the Controller. In this case, the legal basis for the processing is our legitimate interest (Article 6(1)(f) of the GDPR).

We will process your Personal Data for the duration of the Service Agreement (although for greater protection, it may be deleted two years after your last activity on the Website). This period may be extended as appropriate in connection with possible claims (within the limitation period prescribed by law, in particular the Civil Code) or legal proceedings – for the duration and settlement thereof. In any event, the longer retention period for Personal Data will apply.

Your Personal Data processed on the basis of our legitimate interest may be processed until you object to its processing, except where, despite your objection, we conclude that there are compelling legitimate grounds for the processing overriding your interests, rights and freedoms, or grounds for establishing, exercising or defending claims.

Information about the recipients of your Personal Data, including the possible transfer of your Personal Data to third countries (outside the European Economic Area), is detailed in section IV below.

The rights you have in relation to the processing of your Personal Data are detailed in section VI below.

3. CONCLUSION OF SALE AGREEMENTS

When you make a purchase on our Website, we process information related to placing the Order and performing the Sale Agreement . In order to conclude and perform a Sale agreement , we will require you to provide certain Personal Data, such as name, surname, email address, correspondence address, billing details. The provision of all information is voluntary, however, some data is necessary to enter into a Sale Agreement  and failure to provide such data may mean that it is not possible to enter into such agreement.

Your Personal Data that is not required may help us in improving our Website. We may also use it for statistical purposes.

The purpose and the legal basis of the processing is the conclusion and proper performance of the Sale Agreement  (Article 6(1)(b) of the GDPR) – for example, the delivery of the Products ordered by you.

Your data may also be processed for the purpose of marketing activities, such as presenting you with advertisements and offers (discounts), also tailored to your interests on the basis of profiling (legal basis for these activities: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller or a third party [the Controller's own marketing or that of its partners]).

We may also process some of your Personal Data in order to process and assert claims, and to fulfil legal obligations arising from applicable laws, for example, tax and accounting obligations – the legal basis for the processing is, respectively, our legitimate interest (Article 6(1)(f) of the GDPR) or the need to comply with a legal obligation (Article 6(1)(c) of the GDPR).

If you have entered into a Sale Agreement  with us, we will process your Personal Data for the period necessary for the performance of that Agreement and usually for a maximum of 7 years thereafter, as required in particular by tax laws.

The processing periods described above may be extended as appropriate in connection with possible claims, including legal proceedings – for the duration and settlement thereof, and if the law obliges us in certain cases to process a given type of data for a longer period. In any event, the longer retention period for Personal Data will apply.

Your Personal Data processed on the basis of our legitimate interest may be stored until you object to its processing, except where, despite your objection, we conclude that there are compelling legitimate grounds for the processing overriding your interests, rights and freedoms, or grounds for establishing, exercising or defending claims.

Information about the recipients of your Personal Data, including the possible transfer of your Personal Data to third countries (outside the European Economic Area), is detailed in section IV below.

The rights you have in relation to the processing of your Personal Data are detailed in section VI below.

4. NEWSLETTER

We may send you commercial information about us and our Products (or our partners) through the communication channel of your choice, but only with your prior consent, also tailored to your interests based on profiling. The legal basis for processing your Personal Data for this purpose is our or our partners' legitimate interest (Article 6(1)(f) of the GDPR) – our or a third party's marketing purposes.

Providing your Personal Data is voluntary, but necessary to subscribe to the Newsletter.

We may also process your Personal Data for the purpose of establishing, exercising or defending claims – the legal basis for the processing is respectively our legitimate interest (Article 6(1)(f) of the GDPR).

We may process your Personal Data for the period in which the Data is necessary for our marketing activities, unless you object to its processing; a longer period results from its retention in case of possible claims for the period of limitation prescribed by law, in particular the Civil Code, or the duration and settlement of legal proceedings. In any case, the longer period of storage of your Personal Data will apply.

Information about the recipients of your Personal Data, including the possible transfer of your Personal Data to third countries (outside the European Economic Area), is detailed in section IV below.

The rights you have in relation to the processing of your Personal Data are detailed in section VI below.

5. CONTACT WITH US

When you contact us, for example, via email, available forms, social media, etc., examples of your Personal Data that we may process include: your Personal Data that identifies you (e.g. email address, IP number, etc.), contact metadata (e.g. date of contact, duration of our conversation), and the content of our communications (e.g. content of emails). Your Personal Data is processed to answer your enquiry, to improve our communication, to enhance customer service and for marketing purposes. The purpose of the processing depends on the purpose of our communication, so sometimes your Personal Data will be used to enter into a relevant contract with you or, if a contract is already in place, to provide you with appropriate care within the framework of our relationship (e.g. processing your complaint).

In such cases, the legal basis for the processing depends on the context of the communication. If you contact us only to obtain general information, e.g. about the Website, we will process your Personal Data based on our legitimate interest (arising from the purposes mentioned above; Article 6(1)(f) of the GDPR). However, in the event that your enquiry leads to the conclusion of a Sale Agreement , the relevant legal basis for the processing will be Article 6(1)(b) of the GDPR – taking steps at the request of the data subject prior to entering into a contract. If a contract is already in place and you contact us about its performance, the basis for our actions is Article 6(1)(b) of the GDPR – necessity for the performance of a contract.

We may also process your Personal Data for the purpose of establishing, exercising or defending claims – the legal basis for the processing is respectively our legitimate interest (Article 6(1)(f) of the GDPR).

Providing your Personal Data is voluntary, but necessary to communicate with us effectively.

If your Personal Data has only been collected in connection with our current communications, we may process it, depending on the category of individual information, for a period ranging from a few days to several months (more specific enquiries and conversations that may be relevant to our contact in the future).

Your Personal Data processed on the basis of our legitimate interest may be stored until you object to its processing, except where, despite your objection, we conclude that there are compelling legitimate grounds for the processing overriding your interests, rights and freedoms, or grounds for establishing, exercising or defending claims.

The protection and use of Personal Data by social media sites that you might use when contacting us is described in their privacy policies. For example, information on the processing of Personal Data by Facebook can be found at: https://www.facebook.com/policy.php.

Information about the recipients of your Personal Data, including the possible transfer of your Personal Data to third countries (outside the European Economic Area), is detailed in section IV below.

The rights you have in relation to the processing of your Personal Data are detailed in section VI below.

IV. Who has access to your Personal Data?

Only entities that support us in operating the Website under appropriate agreements, such as entities that provide IT services or tools to enable our communications, marketing campaigns, our advisors, including legal counsel, entities that provide shipping, accounting and online payment services, will receive access to your Personal Data.

All these entities will have access only to the information necessary for their activities.

Some of those providing solutions to us may be established outside the European Economic Area (EEA). Whenever we transfer data outside the EEA, we apply the required security measures, including standard data-protection clauses adopted under a decision of the European Commission, with appropriate safeguards. You may contact us to receive a copy of the safeguards used by us concerning the personal data transfer to countries outside EEA.

V. Your rights related to the processing of your personal data

In order to ensure the efficient exercise of your rights, please send all requests to the email address set out in the glossary, write “GDPR Request” in the subject line and specify which right you wish to exercise in the body of the email. The instructions in the preceding sentence are only a recommendation and not a requirement. Making a request in another way will not lead to the loss of the rights listed below.

At any time you have the right to:

1. access your Personal Data (including, for example, to obtain information which Personal Data are processed or a copy thereof);
2. request rectification and restriction of processing (e.g. where the Personal Data is incorrect) or erasure of Personal Data (e.g. where it has been processed unlawfully);
3. portability of the Personal Data you have provided to the Controller and which is processed by automated means and the processing is based on consent or on contract, for example, to another controller;
4. withdraw any consent given to the Controller at any time, and the withdrawal of consent will not affect the processing carried out by the Controller lawfully prior to its withdrawal;
5. object to the processing of Personal Data carried out for the purpose of pursuing legitimate interests of the Controller or of a third party (where there are no other valid legitimate grounds for processing which override your interests). Where Personal Data is processed for direct marketing purposes, you will have the right to object at any time to the processing of your Personal Data for such marketing, including profiling, to the extent that the processing is related to such direct marketing, in which case the Personal Data must no longer be processed for such purposes.  
6. lodge a complaint to a supervisory authority; . Of course, if you wish to report comments on the way we operate, we encourage you to contact us first.

VI. What are cookies and other similar technologies? How and for what purpose do we use them?

Cookies are small data files that are placed on your device when you visit the Website and, for example, store information about your use of the Website. We use cookies and other technology to recognise you as a returning User, to improve the quality of our service and to collect statistical data, and for marketing purposes. We also process them to analyse the popularity and effectiveness of our offers.

The cookie technology (or similar functionality) we use collects information about each visitor to the Website. Please note that the information below applies to persons who use the Website, regardless of whether they have placed an Order or have an Account.

The information collected in cookies will not necessarily constitute Personal Data within the meaning of the GDPR. However, some information, depending on its content and use, may be linked to a specific person (attribution of certain behaviours to a specific person, e.g. by linking them to the data provided at the time of Account registration on the Website), and thus be considered Personal Data.

Of course you can change the way cookies are used, including blocking them completely or deleting them via your browser settings. However, you should remember that this type of action may prevent or significantly hinder the proper functioning of our Website, for example, by significantly slowing it down, so we recommend that you do not disable cookies in your browser.

We always provide you with information that explains precisely which cookies we use and for what purposes during your first visit to our Website.

We use two types of cookies on the Website: session cookies, which remain stored on your computer or mobile device until you log off from the Website or turn off your software (web browser), and permanent cookies, which remain on your device for the time specified in the parameters of the cookies or until they are manually deleted in your web browser.

Depending on the circumstances, we may use the following types of cookies, without limitation:

1. Technical – necessary for the proper functioning of the Website and the functionalities available within the Website; these cookies are not used to track visitors to the Website;
2. Analytical/performance – used to analyse your behaviour on the Website, for statistical and analytical purposes; they help us to achieve our legitimate aims of improving the way our site works; for example, by ensuring that Users can easily find what they are looking for;
3. Marketing – used to analyse your behaviour; they provide information that identifies you, including for marketing purposes within third party websites; we will use this information, taking into account your choices and preferences, to make our site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

List of cookies used on the Website:

We may work with other companies on their marketing (advertising) activities. For the purposes of this collaboration, your browser or other software installed on your device may also place cookies from entities conducting such marketing activities and those entities may become the controllers of your Personal Data (these are called “third party cookies”). Cookies sent by these entities are intended to ensure that you are presented with only those advertisements that match your individual interests and needs. We believe that displaying personalised advertising may be more attractive to you than advertising that is unrelated to your needs. This would not be possible without these files, as it is the companies working with us that provide advertising content for you.

We may use the following entities or services of entities that use cookies on the Website:

1. Google AdWords
2. Google Analytics - The service refers to Google LLC or an affiliate (these are entities that are members of the Google group of companies, among others, companies providing services to consumers in the European Union, i.e. Google Ireland Limited, Google Commerce Ltd, Google Payment Corp and Google Dialer Inc)
3. DoubleClick
4. Facebook, Inc., Facebook Ireland Limited or their affiliates (e.g. when using Facebook or Instagram website / application)
5. Opineo
6. Trustedshop

The aforementioned entities may become controllers of your Personal Data in connection with the use of their cookies on the Website. For more information on the cookies of these entities, please refer to their privacy policies.

Last update of this Privacy and Cookies Policy: 26 October 2021.