1.1 This Privacy Policy sets out the principles of personal data processing and the use of cookies in connection with the use of the online store operating at lociforge.com (the “Online Store”).
1.2 The Privacy Policy is for informational purposes only and does not impose any obligations on Users or Customers of the Online Store.
1.3 The Controller of personal data collected via the Online Store is:
Grzegorz Kaczyńskiconducting business activity under the name Grzegorz Kaczyński Loci Knives and Toolsregistered in the Central Register and Information on Economic Activity (CEIDG), PolandAddress: ul. Grabowa 14/15, 43-178 Ornontowice, PolandVAT ID (NIP): 6351864812REGON: 524438995Email: lociknivesandtools@gmail.comPhone: +48 513 441 094
hereinafter referred to as the “Controller”.
The Controller is also the Seller and Service Provider of the Online Store.
1.4 Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1.5 Use of the Online Store is voluntary. Providing personal data is voluntary, however:
failure to provide data necessary for contract conclusion prevents placing and processing an order;
the Controller may be required by law (e.g. tax or accounting regulations) to process certain data.
1.6 The Controller ensures that personal data are:
processed lawfully, fairly and transparently;
collected for specified, explicit and legitimate purposes;
adequate and limited to what is necessary;
accurate and kept up to date where necessary;
stored no longer than necessary;
processed securely using appropriate technical and organisational measures.
2.1 The Controller is responsible for ensuring compliance with data protection laws and may be contacted regarding any matters related to personal data protection at the email or postal address indicated above.
3.1 The Controller processes personal data on the basis of:
Article 6(1)(a) GDPR – consent;
Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures;
Article 6(1)(c) GDPR – legal obligations;
Article 6(1)(f) GDPR – legitimate interests pursued by the Controller.
3.2 Each processing activity is based on at least one of the legal bases indicated above.
| Purpose |
Legal Basis |
Retention Period |
|---|---|---|
| Order processing and performance of sales contract |
Art. 6(1)(b) GDPR |
Duration necessary to perform and settle the contract |
| Customer account and electronic services |
Art. 6(1)(b) GDPR |
Duration of account existence |
| Tax and accounting compliance |
Art. 6(1)(c) GDPR |
As required by applicable law |
| Customer support and communication |
Art. 6(1)(b), (f) GDPR |
Duration of correspondence and limitation periods |
| Direct marketing |
Art. 6(1)(f) GDPR |
Until objection or end of legitimate interest |
| Marketing based on consent |
Art. 6(1)(a) GDPR |
Until consent is withdrawn |
| Analytics and statistics |
Art. 6(1)(f) GDPR |
Until legitimate interest ceases |
| Establishment, exercise or defence of claims |
Art. 6(1)(f) GDPR |
Until expiry of limitation periods |
5.1 Personal data may be disclosed to external entities only to the extent necessary for the operation of the Online Store and order fulfilment.
5.2 Recipients may include:
courier and logistics companies;
payment service providers;
credit or leasing institutions (if applicable);
IT service and hosting providers;
accounting, legal and advisory service providers;
review and feedback system providers;
marketing and analytics providers, including Google Ireland Ltd. and Meta Platforms Ireland Ltd.
5.3 All such entities process personal data on the basis of appropriate data processing agreements and in compliance with GDPR requirements.
6.1 The Controller may use profiling for marketing purposes, including the presentation of personalised offers and content.
6.2 Profiling may be based on automated analysis of activity within the Online Store, such as:
viewed products;
purchase history;
shopping cart activity.
6.3 Profiling does not produce legal effects concerning the data subject or similarly significantly affect them within the meaning of Article 22 GDPR.
6.4 The data subject has the right to object to profiling at any time.
Each data subject has the following rights under GDPR:
right of access to personal data;
right to rectification;
right to erasure (“right to be forgotten”);
right to restriction of processing;
right to data portability;
right to object to processing;
right to withdraw consent at any time;
right to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office – UODO);
right to object to processing based on legitimate interests, including profiling;
right to object to direct marketing at any time.
Requests may be submitted via email or postal address indicated in Section 1.
8.1 The Online Store uses cookies and similar technologies to ensure proper functioning of the website and to improve user experience.
8.2 Cookies may be:
essential (necessary for website operation);
functional (user preferences);
analytical (traffic analysis);
marketing and social media (advertising and remarketing).
8.3 Cookies are used for:
maintaining user sessions;
enabling shopping cart functionality;
saving order form data;
website optimisation and personalisation;
statistical analysis of website traffic;
marketing and remarketing activities.
8.4 The Online Store may use:
Google Analytics (Google Ireland Limited);
Facebook Pixel (Meta Platforms Ireland Limited).
8.5 Users may manage cookie settings via their web browser. Restricting cookies may affect website functionality.
9.1 The Online Store may contain links to external websites. The Controller is not responsible for their privacy practices. Users are encouraged to review the privacy policies of those websites independently.
9.2 The Controller reserves the right to amend this Privacy Policy where necessary to ensure compliance with applicable law or changes in data processing practices.