1.1.
This privacy policy of the Lacer Online Store is informational, meaning it does not create any obligations for the Users or Customers of the Online Store. The policy outlines the principles of personal data processing by the Administrator within the Online Store, including the bases, purposes, and duration of personal data processing, as well as the rights of individuals whose data is processed. Additionally, it provides information on the use of cookies and analytical tools in the Online Store.

1.2.
The administrator of personal data collected via the Online Store is Lacer International, based in Warsaw; registered under the name, Lacer International, number NIP: 9223071941; REGON 521509737, email address: customercare@lacerofficial.com , hereinafter referred to as the "Administrator," who is also the Service Provider of the Online Store and the Seller.

1.3.
Personal data in the Online Store is processed by the Administrator in accordance with applicable law, particularly the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as "GDPR" or the "GDPR Regulation."

1.4.
Using the Online Store, including making purchases, is voluntary. Similarly, providing personal data by the User or Customer using the Online Store is voluntary, with two exceptions: (1) entering into agreements with the Administrator – failure to provide personal data necessary for concluding and executing a Sales Agreement or an agreement for the provision of Electronic Services with the Administrator, as indicated on the Online Store's website and in the Online Store Regulations and this privacy policy, will result in the inability to conclude such an agreement. Providing personal data is a contractual requirement, and if the person wishes to enter into an agreement with the Administrator, they are obligated to provide the required data. The scope of data required to conclude an agreement is always indicated in advance on the Online Store's website and in the Online Store Regulations; (2) statutory obligations of the Administrator – providing personal data is a statutory requirement resulting from universally applicable legal regulations imposing an obligation on the Administrator to process personal data (e.g., data processing for tax or accounting purposes), and failure to provide it will prevent the Administrator from fulfilling these obligations.

The Administrator takes special care to protect the interests of individuals whose personal data is processed by ensuring that the data collected is:
- processed lawfully;
- collected for specified, legitimate purposes and not processed further in a manner incompatible with those purposes;
- accurate and adequate in relation to the purposes for which they are processed;
- stored in a form that permits identification of the data subjects for no longer than is necessary to achieve the purpose of processing
-processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical or organizational measures.

1.5.
Considering the nature, scope, context, and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the Administrator implements appropriate technical and organizational measures to ensure that processing is carried out in accordance with this regulation and to be able to demonstrate compliance. These measures are reviewed and updated as necessary. The Administrator employs technical measures to prevent unauthorized persons from obtaining and modifying personal data transmitted electronically.

1.6.
All words, expressions, and acronyms appearing in this privacy policy and beginning with a capital letter (e.g., Administrator, Online Store, Electronic Service) should be understood according to their definitions contained in the Online Store Regulations available on the Online Store's website.

2.1. The Administrator is authorized to process personal data when at least one of the following conditions is met: (1) the individual has given consent for their personal data to be processed for one or more specific purposes; (2) processing is necessary for the performance of a contract to which the individual is a party or to take steps at the request of the individual before entering into a contract; (3) processing is necessary for compliance with a legal obligation to which the Administrator is subject; or (4) processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual, especially if the individual is a child.

2.2. The Administrator's processing of personal data always requires at least one of the grounds mentioned in section 2.1 of this privacy policy. The specific grounds for processing personal data of Service Users and Clients of the Online Store by the Administrator are indicated in the following section of the privacy policy concerning the particular purpose of personal data processing by the Administrator.

3.1. The purpose, basis, and duration, as well as the recipients of personal data processed by the Administrator, are determined by actions taken by the respective Service Recipient or Customer in the Online Store or by the Administrator. For example, if a Customer chooses to make purchases in the Online Store and opts for personal pickup of the purchased Product instead of courier delivery, their personal data will be processed to fulfill the concluded Sales Agreement, but will not be shared with the carrier handling shipments on behalf of the Administrator.

3.2. The Administrator may process personal data within the Online Store for the following purposes, on the bases, and for the periods specified in the table below:
- to complete and fulfill your order for our products on the Online Store, in partners' stores, or via telephone;
- to register you for ‘My Account’ and provide the services available to registered users;
- to provide information, services, or support and to manage your customer service requests and related after-sales services;
-to contact you occasionally with updates about products or services;
- to send other communications relevant to the service we provide;
- to manage our customer care with you and carry out related administrative tasks;
-to offer personalized, targeted, or location-based content, services, and advertising from us and third parties;
- to promote our services, or those of our suppliers or partners, including via email and social media platforms (subject to the appropriate marketing permissions);
- to detect, investigate, and prevent activities that we believe may be illegal, unlawful, or harmful and to enforce our Privacy Policy and/or other legal terms on the Online Store;
- to conduct surveys and research, including market research, statistical research on site traffic, sales, and other commercial data to help us improve our services and tailor the Online Store;
- to enable the call recording feature and troubleshoot the service.

4.1. For the proper functioning of the Online Store, including the execution of concluded Sales Agreements, the Administrator utilizes services from external entities (such as software providers, couriers, or payment service providers). The Administrator exclusively engages such processing entities that provide sufficient guarantees of implementing appropriate technical and organizational measures to ensure compliance with GDPR requirements and protect the rights of data subjects.

4.2. Personal data may be transferred by the Administrator to third parties, ensuring that such transfers are made offering an adequate level of protection as per GDPR requirements. For third parties, transfers are conducted based on standard data protection clauses. The Administrator ensures that data subjects have the right to obtain a copy of their data. Personal data is transferred by the Administrator only when necessary and to the extent required to achieve the specific processing purposes in accordance with this privacy policy.

4.3. Data transmission by the Administrator does not occur in all cases or to all categories of recipients specified in the privacy policy. The Administrator transfers data only when necessary for the fulfillment of specific purposes of personal data processing and only to the extent necessary for its execution. For example, if a Customer opts for personal pickup, their data will not be transferred to a carrier cooperating with the Administrator.

4.4. Personal data of Service Recipients and Customers of the Online Store may be transferred to the following recipients or categories of recipients:
-ccouriers / delivery companies / entities handling online store and/or shipping processes – for Customers opting for postal or courier delivery in the Online Store, the Administrator provides collected personal data to the selected courier and if shipping is from an external partner, to the entity handling warehouse and/or shipping processes, to the extent necessary for the delivery of the purchased Product to the Customer.
- entities handling electronic payments or credit card payments – for Customers using electronic payment methods or credit card payments in the Online Store, the Administrator provides collected personal data to the selected entity handling these payments in the Online Store on behalf of the Administrator, to the extent necessary to process payments made by the Customer.

5.1. According to GDPR regulations, the Administrator is obligated to inform about automated decision-making, including profiling as defined in Article 22(1) and (4) of the GDPR, and – at least in these cases – provide essential information about the decision-making criteria, as well as the significance and anticipated consequences of such processing for the data subject. With this in mind, the Administrator provides information in this section of the privacy policy regarding potential profiling.

5.2. The Administrator may utilize profiling in the Online Store for direct marketing purposes, but decisions based on it by the Administrator do not concern the conclusion or refusal of Sales Agreements or the ability to use Electronic Services in the Online Store. The outcome of profiling in the Online Store may include, for example, granting a discount to an individual, sending them a discount code, reminding them of unfinished purchases, proposing a Product that may match their interests or preferences, or offering better terms compared to the standard Online Store offering. Despite profiling, the individual freely decides whether to use the discount received in this manner or better terms and make a purchase in the Online Store.

5.3. Profiling in the Online Store involves automatic analysis or prediction of an individual's behavior on the Online Store's website, such as adding a specific Product to the cart, browsing a specific Product page in the Online Store, or analyzing the individual's past purchase history in the Online Store. A prerequisite for such profiling is the Administrator having the individual's personal data to subsequently send them, for example, a discount code.

5.4. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way.

6.1. Right of access, rectification, restriction, erasure, or portability – the individual whose data is processed has the right to request from the Administrator access to their personal data, rectification, erasure ("right to be forgotten"), or restriction of processing, and has the right to object to processing, as well as the right to data portability. Detailed conditions for exercising these rights are specified in Articles 15-21 of the GDPR.

6.2. Right to withdraw consent at any time – the individual whose data is processed by the Administrator based on consent (under Article 6(1)(a) or Article 9(2)(a) of the GDPR) has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6.3. Right to lodge a complaint with a supervisory authority – the individual whose data is processed by the Administrator has the right to lodge a complaint with a supervisory authority in the manner and within the framework defined in the provisions of the GDPR and Polish law, especially the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.

6.4. Right to object – the individual whose data is processed has the right at any time to object, on grounds relating to their particular situation, to the processing of their personal data based on Article 6(1)(e) (public interest or official authority) or (f) (legitimate interests pursued by the Administrator), including profiling based on those provisions. In such cases, the Administrator shall not process the personal data unless demonstrating compelling legitimate grounds for the processing, overriding the interests, rights, and freedoms of the individual, or for the establishment, exercise, or defense of legal claims.

6.5. Right to object to direct marketing – if personal data is processed for direct marketing purposes, the individual whose data is processed has the right at any time to object to the processing of their personal data for such marketing, including profiling related to such direct marketing.

6.6. To exercise the rights described in this section of the privacy policy, you may contact the Administrator by sending a relevant message in writing or by email to the Administrator's address provided at the beginning of the privacy policy, or by using the contact form available on the Online Store's website.

7.1. Cookies are small text files sent by a server and stored on the device of the person visiting the Online Store's website (e.g., on a computer's hard drive, laptop, or smartphone memory card, depending on the device used by the visitor). Detailed information about cookies and their history can be found here.

7.2. The Administrator may process data contained in cookies when visitors use the Online Store for the following purposes:
- identifying Service Recipients as logged in to the Online Store and showing that they are logged in;
- remembering Products added to the cart to place an Order;
- remembering data from completed Order Forms, surveys, or login details to the Online Store;
- customizing the content of the Online Store to the individual preferences of the Service Recipient (e.g., regarding colors, font size, page layout) and optimizing the use of the Online Store;
- conducting anonymous statistics that show how the Online Store is used;
- remarketing, i.e., studying the characteristics of the behavior of visitors to the Online Store by anonymously analyzing their actions (e.g., repeated visits to specific pages, keywords, etc.) to create their profile and provide them with advertisements tailored to their anticipated interests, even when they visit other websites in Google's and Facebook's advertising networks.

7.3. By default, most web browsers available on the market accept the storage of cookies. However, everyone can set the conditions for using cookies through their web browser settings. This means that it is possible to partially limit (e.g., temporarily) or completely disable the ability to save cookies – in the latter case, however, it may affect some functionalities of the Online Store (for example, it may become impossible to go through the Order path via the Order Form due to not remembering Products in the cart at various steps of placing the Order).

7.4. Web browser settings regarding cookies are important for expressing consent to the use of cookies by our Online Store – in accordance with the regulations, such consent can also be expressed through web browser settings. If such consent is not given, it is necessary to appropriately change the web browser settings regarding cookies.

7.5. Detailed information on changing cookie settings and deleting cookies independently in the most popular web browsers is available in the web browser's help section and on the following pages (just click the relevant link):
Chrome
Firefox
Internet Explorer
Opera
Safari
Microsoft Edge

7.6. The Administrator may use Google Analytics and Universal Analytics services provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the Online Store. These services help the Administrator analyze traffic in the Online Store. The collected data is processed as part of the aforementioned services in an anonymized manner (these are so-called operational data that prevent the identification of a person) to generate statistics helpful in administering the Online Store. These data are aggregated and anonymous, i.e., they do not contain features identifying visitors to the Online Store. By using these services in the Online Store, the Administrator collects such data as the sources and medium of acquisition of visitors to the Online Store, and how they behave on the website, information about devices and browsers from which they visit the site, IP and domain, geographical data, as well as demographic data (age, gender) and interests.

7.7. It is possible to easily block the sharing of Google Analytics information about one's activity on the Online Store's website by installing a browser add-on provided by Google Inc. available here: Google Analytics Opt-out Browser Add-on.

8.1. The Online Store may include links to other websites. The Administrator encourages users to review the privacy policies of these other sites once they navigate to them. This privacy policy applies solely to the Administrator's Online Store.