Policy Privacy

1. The controller of personal data (as defined in Article 4(7) of the GDPR) is Paulina Rogal (“PrimeCaviar”) – hereinafter referred to as the Controller.

2. For any questions or requests regarding personal data, please contact us via email: primecaviar.studio@gmail.com.

3. The Controller processes Clients’ personal data in accordance with the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 ("GDPR").

4. This privacy policy applies when you use PrimeCaviar services – register an account, purchase PrimeCaviar products, contact us, or subscribe to the newsletter to receive email messages from us. Personal data processed by the Controller is obtained directly from Clients in connection with the use of the Store's services.

5. PrimeCaviar uses personal data to provide Store services, manage user accounts in the Online Store, process orders, handle returns and complaints,

process data for accounting and tax purposes, and send the requested newsletter. The legal basis for processing this data is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR), and in certain cases, specific legal provisions that allow the Controller to process data to comply with legal obligations – such as accounting and tax regulations (Article 6(1)(c) GDPR).

6. PrimeCaviar sends marketing communications in the form of a newsletter to the email address provided by the Client only if the Client has given consent. The legal basis for processing is the Client’s consent (Article 6(1)(a) GDPR). Client can withdraw their consent and unsubscribe from the newsletter at any time by:

clicking the unsubscribe link included in every marketing email sent by PrimeCaviar,

sending an email to PrimeCaviar,

changing their account settings.

Withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal.

7. PrimeCaviar uses personal data to communicate with Clients via email or social media in order to provide services more efficiently, share updates, and offer support or clarifications. The legal basis for processing is the legitimate interest of PrimeCaviar (Article 6(1)(f) GDPR).

8. PrimeCaviar requires Clients to provide the personal data necessary to perform a contract – to provide services or fulfill orders. If such data is not provided, PrimeCaviar may be unable to provide services or fulfill orders. If required by law, PrimeCaviar may also request additional mandatory data.

9. PrimeCaviar entrusts personal data to service providers that perform specific tasks and functions on behalf of PrimeCaviar. PrimeCaviar shares data with service providers for purposes such as:

courier and delivery services,

accounting and legal services,

website maintenance and support,

direct marketing via email,

managing online channels and social media,

payment processing for Store orders,

data storage services.

PrimeCaviar provides only the data necessary for proper execution of services on behalf of PrimeCaviar. When transferring data, PrimeCaviar ensures that service providers process the data securely and do not use it for purposes other than providing services to PrimeCaviar. PrimeCaviar does not share personal data with entities other

than the service providers mentioned above, unless required to do so by law or official authorities, or where necessary to establish, exercise, or defend the rights of PrimeCaviar.

10. PrimeCaviar does not transfer personal data outside the European Union.

11. PrimeCaviar processes Clients’ personal data only for the period necessary to properly perform contracts with Clients – including the provision of services,

order processing, handling complaints, and enforcing claims – and for the duration required by applicable legal obligations, within the necessary scope. For marketing purposes, data is stored for the duration of the contract or until the Client objects to such processing.

12. PrimeCaviar ensures the implementation of appropriate technical and organizational safeguards to ensure an adequate level of security for the processed personal data.

13. Personal data collected by PrimeCaviar is not subject to profiling.

14. Clients have the right to:

rectify personal data if it is outdated, incomplete, or incorrect,

access their personal data, including requesting information or copies of the data,

object to the processing of their personal data,

restrict the processing of their data,

delete their personal data,

transfer their data to themselves or a third party indicated by them,

lodge a complaint with the data protection authority. Website: https://www.uodo.gov.pl.