PRIVITY POLICY

§1 General

1. This Privacy Policy lays down rules for the processing and protection of personal data of customers using the online store available at https://holisti.co.uk (hereinafter: "Shop").

2. The data controller shall be:
   HOLSTI LTD based in HU3 1TS HULL, UNITED KINGDOM (UK), 113 BEVERLY ROAD Email: kontakt@holisti.co.uk (hereinafter: ‘Administrator’).

3. Personal data of Clients shall be processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

---

§2 Scope of data processed

1. The Administrator may process the following personal data of the Clients:

   • name,

   • e-mail address,

   • telephone number,

   • delivery address,

   • the address to the invoice,

   • payment data,

   • activity data in the Shop (e.g. purchase history, system logs).

2. The provision of personal data is voluntary but necessary for the performance of the order.

---

§3 Objectives and grounds for data processing

The controller processes the personal data of the Clients for the following purposes:

1. Implementation of the sales agreement – Art. 6(1)(b) GDPR (e.g. order execution, delivery of goods, payment service).

2. Complaints and returns support – Art. 6(1)(c) GDPR.

3. Direct marketing of own products – Art. 6(1)(f) GDPR (founded interest of the Administrator).

4. Newsletter and marketing communication – Art. 6(1)(a) GDPR (client agreement).

5. Analyticals and statistics – Art. 6(1)(f) GDPR (e.g. Google Analytics, Pixel Facebook).

---

§4 Data sharing

1. Personal data of Clients may be made available to entities cooperating with the Administrator in order handling, i.e.:

   • courier companies: InPost / DPD / Royal Mail

   • payment operators

   • providers of IT, hosting and mailing systems.

2. Personal data will not be transferred to third countries unless this results from the use of tools such as Google or Meta (USA).

---

§5 Storage period

1. Personal data of Clients will be stored for the period necessary for the implementation of the sales and after-sales contract.

2. In case of processing of data on the basis of consent (e.g. newsletter) – until it is withdrawn.

3. Data processed for accounting and tax purposes – for the period required by law (usually 5 years).

---

§6 Customer rights

Each customer has the right to:

1. access to their data,

2. correction of data,

3. deletion of data ("right to be forgotten"),

4. processing restrictions,

5. data transmission,

6. object to the processing of data,

7. withdrawal of consent at any time,

8. lodge a complaint with the President of the Office for Personal Data Protection (UODO).

---

§7 Cookies

1. The store uses cookies to ensure the proper functioning of the website and to maintain statistics and marketing activities.

2. Cookies may be used for:

   • remembering user preferences,

   • creating anonymous visitor statistics (Google Analytics),

   • remarketing activities (e.g. Google Ads, Facebook Ads).

3. The customer can manage cookies through the settings of his browser.

---

§8 Security measures

1. The administrator shall apply technical and organisational measures ensuring the protection of personal data, including connection encryption (SSL), access control and server security.

2. Personal data is processed only by persons authorised by the Administrator.

---

§9 Final provisions

1. Privacy policy is available free of charge on the Store website.

2. The administrator reserves the right to amend it in the event of a change of laws or the introduction of new services.

3. The provisions of Polish law and GDPR apply to unregulated matters.