- GENERAL INFORMATION
This Privacy Policy explains how ANNA KARA ("Seller", "we", "us" or "our") collects, uses, stores and protects personal data in connection with the website available at shop.annakara.com ("Website"), the online store ("Store"), customer accounts, newsletter services and other services provided electronically.
We are committed to protecting your privacy and processing personal data in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
This Privacy Policy should be read together with our Terms & Conditions, Website Terms, Account Terms, Newsletter Terms and Cookie Policy.
- DATA CONTROLLER
The controller of your personal data is:
ANNA KARA
- Marszałka Józefa Piłsudskiego 8/1
31-109 Kraków
Poland
VAT ID: PL6762129712
REGON: 120504093
E-mail: shop@annakara.com
For all questions concerning personal data and privacy matters, you may contact us at:
- YOUR RIGHTS
Subject to applicable law, you have the right to:
- access your personal data;
- obtain a copy of your personal data;
- rectify inaccurate personal data;
- erase personal data ("right to be forgotten");
- restrict processing;
- object to processing;
- data portability;
- withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the competent supervisory authority responsible for data protection in your country of residence or with the Polish supervisory authority.
To exercise your rights, please contact:
- PERSONAL DATA PROCESSING
4.1 Orders
Purpose
- processing and fulfilling Orders;
- delivery of Products;
- payment processing;
- customer support;
- returns and complaints;
- legal compliance.
Legal Basis
- performance of a contract (Article 6(1)(b) GDPR);
- compliance with legal obligations (Article 6(1)(c) GDPR);
- legitimate interests (Article 6(1)(f) GDPR).
Retention Period
For the duration of the contractual relationship and thereafter for periods required by accounting, tax, consumer protection, product safety and limitation laws.
Consequences of Failure to Provide Data
Failure to provide necessary data may prevent us from processing your Order.
4.2 Customer Accounts
Purpose
- creating and maintaining Accounts;
- providing Account functionality;
- managing order history;
- managing saved information.
Legal Basis
Performance of a contract (Article 6(1)(b) GDPR).
Retention Period
For the duration of the Account and thereafter for the period necessary to establish, exercise or defend legal claims.
Consequences of Failure to Provide Data
You may be unable to create or use an Account.
4.3 Contacting Us
Purpose
- responding to enquiries;
- customer support;
- handling requests and communications.
Legal Basis
- performance of a contract or steps prior to entering into a contract (Article 6(1)(b) GDPR);
- legitimate interests in managing communications (Article 6(1)(f) GDPR).
Retention Period
Until the matter has been resolved and thereafter for the period necessary to establish, exercise or defend legal claims.
4.4 Marketing Communications
Purpose
- sending marketing information;
- informing Users about products, promotions and collections;
- measuring effectiveness of marketing campaigns.
Legal Basis
- consent (Article 6(1)(a) GDPR);
- legitimate interests relating to marketing analytics (Article 6(1)(f) GDPR).
Retention Period
Until consent is withdrawn or a valid objection is submitted.
4.5 Newsletter
Purpose
- providing newsletter services;
- sending newsletter communications;
- measuring newsletter effectiveness.
Legal Basis
- performance of the Newsletter service agreement (Article 6(1)(b) GDPR);
- legitimate interests in analysing newsletter performance (Article 6(1)(f) GDPR).
Retention Period
Until unsubscribing from the Newsletter and thereafter for the period necessary to establish, exercise or defend legal claims.
4.6 Website Functionality
Purpose
- enabling access to Website features;
- maintaining Website functionality;
- improving Website performance.
Legal Basis
Performance of a contract (Article 6(1)(b) GDPR) and legitimate interests (Article 6(1)(f) GDPR).
4.7 Claims and Legal Defence
Purpose
- establishing claims;
- exercising legal rights;
- defending against claims.
Legal Basis
Legitimate interests (Article 6(1)(f) GDPR).
Retention Period
Until expiry of applicable limitation periods.
4.8 Product Safety (GPSR)
Purpose
- product safety monitoring;
- handling product safety reports;
- corrective actions;
- product recalls;
- compliance with Regulation (EU) 2023/988 on General Product Safety.
Legal Basis
- legal obligations (Article 6(1)(c) GDPR);
- legitimate interests in ensuring product safety (Article 6(1)(f) GDPR).
Retention Period
For the period necessary to comply with applicable product safety laws.
- PROFILING
Where permitted by law and subject to your consent where required, we may analyse information regarding your interactions with the Website, marketing communications and Products in order to provide more relevant content and marketing messages.
Profiling carried out by us does not produce legal effects concerning you or similarly significantly affect you.
- ANALYTICS
We may analyse how Users interact with the Website, including:
- pages visited;
- time spent on pages;
- navigation paths;
- interactions with Website features.
This information helps us improve the Website, optimise functionality and enhance the user experience.
Where applicable, analytics activities are carried out based on your consent or our legitimate interests.
- DATA SECURITY
We implement appropriate organisational and technical measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
Such measures include, where appropriate:
- SSL/TLS encryption;
- access controls;
- data minimisation;
- staff confidentiality obligations;
- secure hosting solutions.
- COOKIES AND SIMILAR TECHNOLOGIES
The Website uses cookies and similar technologies.
Cookies may be used for:
- maintaining Website functionality;
- remembering preferences;
- analytics;
- security;
- marketing activities where permitted.
Detailed information regarding cookies, including cookie management options, is available in the Cookie Policy.
- CATEGORIES OF DATA RECIPIENTS
We may share personal data with the following categories of recipients where necessary:
- hosting providers;
- IT and technical support providers;
- payment service providers;
- logistics and delivery providers;
- accounting and legal advisors;
- marketing service providers;
- newsletter service providers;
- analytics providers;
- customer support providers;
- competent public authorities where required by law.
Recipients process personal data only where legally permitted and subject to appropriate contractual or legal safeguards.
- INTERNATIONAL DATA TRANSFERS
Where necessary, personal data may be transferred outside the European Economic Area (EEA).
Such transfers are protected through appropriate safeguards recognised under GDPR, including:
- adequacy decisions adopted by the European Commission;
- Standard Contractual Clauses (SCCs);
- the EU-U.S. Data Privacy Framework;
- other lawful transfer mechanisms recognised under GDPR.
Further information regarding safeguards may be obtained by contacting us.
- RETENTION PERIODS
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including:
- performance of contracts;
- legal compliance;
- product safety obligations;
- accounting obligations;
- dispute resolution;
- establishment, exercise or defence of legal claims.
The exact retention period depends on the nature of the data and the purpose of processing.
- CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
- changes in law;
- technological developments;
- business operations;
- changes to our services.
The current version of the Privacy Policy will always be available on the Website.
- CONTACT DETAILS
For all privacy-related enquiries, requests or complaints, please contact:
ANNA KARA
E-mail: shop@annakara.com
Address:
ul. Marszałka Józefa Piłsudskiego 8/1
31-109 Kraków
Poland
We will make reasonable efforts to respond without undue delay and in accordance with applicable law.