ENGLISH

I. General Information

This document outlines the privacy rules of the online store www.sklep.invena.pl (hereinafter referred to as the "Online Store"). The administrator of the Online Store is Invena S.A. with its registered office in Koszalin, ul. Władysława Grabskiego 3, 75-209 Koszalin, registered in the National Court Register by the District Court of Koszalin - IX Economic Department of the National Court Register, under the number 0000041835, Tax Identification Number (NIP): 6692205878, National Business Registry Number (REGON): 330896883, share capital: PLN 16,781,720.00.

II. Personal Data Protection

1. The administrator of personal data is Invena S.A. with its registered office in Koszalin, ul. Grabskiego 3, 75-209, email: marek.piontkowski@invena.pl.
2. The administrator collects information voluntarily provided by customers of the Online Store. Additionally, the administrator may record information about connection parameters such as IP addresses for technical purposes related to server administration and for collecting general statistical demographic information (e.g., about the region from which the connection is made), as well as for security purposes.
3. Personal data collected by the administrator are processed in accordance with the provisions of the Act of 10 May 2018 on the protection of personal data (consolidated text: Journal of Laws of 2016, item 922, as amended) and the Act of 18 July 2002 on the provision of electronic services (consolidated text: Journal of Laws of 2017, item 1219, as amended), solely on the basis of authorization to process data and solely for the purpose of fulfilling orders placed by customers, archiving, or services provided electronically by the administrator, as well as for other purposes specified in the Terms and Conditions.
4. The administrator takes special care to protect the privacy and information provided by customers of the Online Store. The administrator carefully selects and implements appropriate technical measures, including programming and organizational measures, to ensure the protection of processed data. This includes securing data against unauthorized access, disclosure, loss, destruction, unauthorized modification, as well as processing in violation of applicable laws.
5. For matters related to personal data and their processing, please contact the Data Protection Officer at email: it@invena.pl.
6. Due to the voluntary nature of providing personal data by customers, they have the right to access their personal data, correct, change, transfer, and request the administrator to delete previously provided personal data from the data sets maintained by the administrator, with the following exception. The administrator may refuse to delete data if the customer's previous behavior in the Online Store has violated the provisions of this document or the Terms and Conditions or applicable legal regulations, and the retention of data is necessary to clarify these circumstances and establish the customer's liability.
7. In the event of changes to customer data, who has registered in the Online Store, the customer can modify them after logging into the Online Store.
8. If the customer subscribes to the newsletter, the administrator will send messages containing information about products and services available in the Online Store, as well as information about organized contests and promotions, to the email address provided by the customer.
9. The customer can request removal from the newsletter database at any time by sending a request to the email address: sklep@invena.pl. The customer can also unsubscribe from the newsletter database by clicking the unsubscribe button located in the footer of the newsletter email sent by us.
10. If the customer wishes to participate in the Google Consumer Reviews program, the customer agrees to the processing of personal data in this program. The customer has the right to withdraw their data at any time by sending a request to the email address: sklep@invena.pl.
11. Without prejudice to other administrative or legal remedies, any person whose data is processed has the right to lodge a complaint with the supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged infringement, if the person considers that the processing of personal data concerning them violates this regulation.
12. The supervisory authority to which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy under Article 78.
13. The administrator may entrust the processing of personal data of customers to third parties providing certain services, in particular, the execution of orders, payment processing, customer satisfaction surveys in the Online Store, namely:

a) DHL Parcel Polska sp. z o.o., with its registered office in Warsaw (02-823), ul. Osmańska 2, entered into the National Court Register kept by the District Court for the capital city of Warsaw, XIII Economic Department of the National Court Register under the number 0000631916, NIP: 951-24-17-713, share capital: PLN 21,479,000.00, provides, on behalf of non-consumer customers, national services consisting of accepting, moving, and delivering parcels - postal items within the meaning of the Postal Law of 23 November 2012 and goods within the meaning of the Transport Law of 15 November 1984.

b) Schenker sp. z o.o., with its registered office in Warsaw (02-092), ul. Żwirki i Wigury 18, entered into the National Court Register kept by the District Court for the capital city of Warsaw, XIV Economic Department of the National Court Register under the number 0000040104, NIP: 527-01-03-824, share capital: PLN 186,294,430.00, provides, on behalf of non-consumer customers, national services consisting of accepting, moving, and delivering parcels - postal items within the meaning of the Postal Law of 23 November 2012 and goods within the meaning of the Transport Law of 15 November 1984.

c) Blue Media S.A. with its registered office in Sopot, ul. Haffnera 6, postal code 81-717, entered into the register of entrepreneurs of the National Court Register by the District Court of Gdańsk-Północ, VIII Economic Department, under the number KRS 0000320590, NIP: 585-13-51-185, REGON: 191781561, fully paid-up share capital of PLN 2,000,000, a subject providing payment services within the meaning of the Act of 19 August 2011 on Payment Services (Journal of Laws of 2011, item 199, as amended). The transfer concerns data necessary to execute payments, in particular: first name and last name, email address, phone number.

d) GetResponse Sp. z o.o. with its registered office in Gdańsk, ul. Arkońska 6/A3, 80-387 Gdańsk, entered into the National Court Register kept by the District Court of Gdańsk-Północ, VII Economic Department of the National Court Register under the number KRS 0000187388, share capital: PLN 5,558,787.00, NIP: 9581468984, if the customer has chosen to subscribe to the newsletter provided by Online Store.