Privacy Policy of the KOTTO Online Store

1. General Information

The administrator of your personal data is

F.H. "ZLATA TRADE" Igor Vasylenko, with its registered office at: ul. Marii Curie-Skłodowskiej 3, lok. 27, 20-029 Lublin, Poland, NIP: 9462718883

Email: support@kotto.com.pl

Phone: +48 734 900 399 (hereinafter: "Administrator").

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Legal Basis for Processing

We process your data based on:

1. Art. 6(1)(b) GDPR: Performance of a sales contract or actions taken at your request before concluding a contract (e.g., placing an order).
2. Art. 6(1)(c) GDPR: Compliance with legal obligations, such as tax and accounting regulations.
3. Art. 6(1)(f) GDPR: Legitimate interests, including defending against legal claims and conducting direct marketing.
4. Art. 6(1)(a) GDPR: Your explicit consent (e.g., for newsletter subscription).

3. Data Collection and Usage

We collect data when you:

• Place an order: Name, address, phone number, email, and payment details.
• Create an account: To facilitate future shopping.
• Contact us: Using the contact form or email.
• Subscribe to the newsletter: Your email address for marketing purposes.

4. Access Data and Hosting

When you visit our site, the server automatically saves logs (IP address, date/time, browser type). This is purely for technical stability and security. Log data is typically deleted within 7 days. Hosting is provided by an external partner within the EU/EEA.

5. Data Transfer to Third Parties

To ensure the delivery of your orders and the operation of the store, we may share your data with:

• Courier and Postal services: For shipping your products.
• Payment Providers: (e.g., PayU, PayPal, Stripe) to process your payments securely.
• Accounting and IT services: To maintain business records and site functionality.

6. Cookies and Analytics

Our website uses cookies to:

• Ensure the site functions correctly.
• Analyze traffic via Google Analytics (data is anonymized).
• Customize content to your preferences. You can manage or disable cookies at any time in your browser settings.

7. Social Media (Facebook & Instagram)

Our website integrates plugins and tools from Meta Platforms Ireland Ltd. (Facebook, Instagram).

• Pixels: We use the Facebook Pixel to measure the effectiveness of our ads and show you relevant products on social media.
• Interaction: When you interact with our social media profiles, Meta processes your data according to their own privacy policies.
• Joint Responsibility: The Administrator and Meta act as joint controllers for processing statistical data from our fan pages.

8. Data Retention Period

• Contract Data: Stored for the duration of the contract and the period required by tax law (5 years).
• Claims: Stored until the statute of limitations for legal claims expires.
• Marketing/Newsletter: Stored until you withdraw your consent or object to processing.

9. Your Rights

Under the GDPR, you have the following rights:

1. Access to your data and receiving a copy.
2. Rectification (correction) of incorrect data.
3. Erasure ("Right to be forgotten") if there is no legal basis for processing.
4. Restriction of processing.
5. Data Portability to another controller.
6. Objection to processing based on legitimate interest or for direct marketing.
7. Complaint: You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

10. Contact Us

For any requests regarding your personal data, please contact us at:

Email: support@kotto.com.pl

Address: ul. Marii Curie-Skłodowskiej 3, lok. 27, 20-029 Lublin