SECURITY AND POLICY

General Terms

Basic concepts used in the Policy

1. The operator has the right:

   • receive from the User reliable information containing personal data;
   • In case of revocation of the User's consent to the processing of personal data, the Operator shall be entitled to continue the processing of personal data without the consent of the personal data subject, on grounds not contradicting the Legislation;
   • Independently determine the composition and list of measures necessary and sufficient to ensure fulfilment of the obligations stipulated by the Legislation.

2. The operator is obliged:

   • provide the User, at his/her request, with information relating to the processing of his/her personal data;
   • organise processing of personal data in the manner prescribed by the Legislation;
   • respond to requests and enquiries of the Users and their legal representatives in accordance with the requirements of the Legislation;
   • inform the Authorized Body for the protection of the rights of the subjects of personal data, upon request of such body, the necessary information within 30 days from the date of receipt of such request;
   • publish or otherwise provide unrestricted access to this Policy;
   • take legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution of personal data, as well as other unlawful acts in relation to personal data;
   • to stop transfer (distribution, provision, access) of personal data, to stop processing and to destroy personal data in manner and cases provided by the Legislation;
   • perform other duties provided by the Legislation.

3. Users have the right:

   • receive information concerning the processing of his personal data, except as provided by the Legislation. The Operator shall provide information to the User in an accessible form and such information shall not contain personal data related to other Users, except as required by the Legislation;
   • independently change, including delete personal data in the personal profile on the operator's website (https://ledworklamp.eu/en/account);
   • demand the Operator to specify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or unnecessary for the stated purpose of processing, as well as to take statutory measures to protect his rights;
   • to withdraw their consent to the processing of personal data;
   • to complain to the authorized body for the protection of the rights of subjects of personal data or in court against unlawful acts or omissions of the Operator in the processing of his personal data;
   • exercise other rights provided by the Legislation.

4. The user is obliged to:

   • provide the Operator with reliable data about himself;
   • to inform the Operator about clarification (update, change) of his personal data (if the User changes the data in the personal cabinet, the Operator automatically receives a notice of the change).

   The persons who gave the Operator unreliable personal data or data about another user without his consent bear responsibility in accordance with the Legislation.

5. Information processed

   • The operator may process the following personal data of the User
     • surname, first name;
     • email address;
     • telephone numbers;
     • address for the delivery of ordered goods;
     • the time zone in which the User is located.
   • Each time the Operator's website is accessed by your device browser, the following information is sent to the website server and temporarily stored in log files:
     • date and time of access;
     • the name of the page visited;
     • IP address of the requesting device;
     • Referrer URL (the original URL from which the User came to the Operator's website);
     • volume of transferred data;
     • download time;
     • information about the product and version of the browser used;
     • the preferred language of the website specified in the browser settings.

     A direct identification of the User on the basis of the information is not possible and will not be undertaken by the Operator.
     Data records, are stored in log files until they are automatically deleted after 30 days.

   • The Operator also uses cookies to make the website more user-friendly.
   • The Operator does not process special categories of personal data relating to race, nationality, political opinions, religious or philosophical beliefs or intimate life.

6. Principles of personal data processing

   • Processing of personal data shall be carried out on a lawful and fair basis.
   • Processing of personal data is limited to achieving specific, predetermined and legitimate objectives.
   • Only personal data that is suitable for the purposes for which it is processed may be processed.
   • The content and scope of personal data processed shall comply with the stated processing purposes.
   • The processing of personal data shall ensure the accuracy of personal data, its adequacy and, where necessary, its relevance in relation to the purposes of personal data processing.

7. The purpose of processing of personal data of the User:

   • informing the User by sending emails;
   • conclusion, fulfilment and termination of civil law contracts;
   • providing the User with access to the services, information and/or materials contained on the Operator's website.

   The Operator also has the right to send the User, with his consent, notifications about new products and services, special offers and different events.
   The User can always refuse to receive information messages in the Personal profile.

8. The legal basis for the processing of personal data by the Operator is:

   • the statutory (constituent) documents of the Operator;
   • Legislation;
   • Users' consent to the processing of their personal data.

   The operator processes the personal data of the User only in case of their completion by the User himself through the special forms located on the website of the Operator or sent to the Operator by e-mail.
   By filling in the relevant forms or sending his personal data to the Operator, the User expresses his consent to this Policy.
   The User makes the decision to provide his personal data himself and gives his consent freely, of his own free will and in his own interest.
   The Operator processes anonymised data about the User if this is permitted in the User's browser settings (cookie saving is enabled).
   

9. Terms of personal data processing:

   • the processing of personal data is subject to the User's consent to the processing of their personal data;
   • the processing of personal data is necessary in order to achieve the operator's goals;
   • processing of personal data is necessary for execution of the agreement, to which the User is a party;
   • the processing of personal data is necessary for exercising the rights and legitimate interests of the operator, provided that in doing so the rights and freedoms of the User are not violated.

   The operator ensures the safety of personal data and takes all possible measures to exclude access to personal data by unauthorised persons.
   The personal data of the User never, under no circumstances are transmitted to third parties, except the cases connected with execution of the Legislation or if the User gives the consent to the Operator for the data transfer to the third party for execution of obligations on the civil-law contract.
   The user may withdraw their consent to the processing of personal data at any time by sending a notification via email to the Operator's email address privacy@ledworklamp.eu, marked "Withdrawal of consent to the processing of personal data".
   All information collected by third party services, including payment systems, communication means and other service providers, is stored and processed by these persons (Operators) in accordance with their User Agreement and Privacy Policy.
   It is the responsibility of the user to acquaint himself with the documents mentioned above.
   The Operator is not responsible for the actions of third parties, including the service providers mentioned in this clause.
   The prohibitions established by the User regarding the transfer, processing or conditions of processing of personal data shall not apply in cases of processing of personal data in state, public and other public interests as defined by Legislation.
   

10. Cross-border transfer of personal data

    Before transborder transfer of personal data, the Operator shall ensure that the foreign country, to the territory of which personal data transfer is intended, provides reliable protection of personal data subjects' rights.
    Any cross-border transfer of personal data to foreign countries that do not meet the aforementioned requirements may take place only if the User gives their written consent to the cross-border transfer of their personal data, and/or executes a contract to which the User is a party.

Final provisions