Privacy Policy

WWW.MAMAS-B2B.COM

---

§ 1. GENERAL PROVISIONS

1. The administrator of personal data collected via the website www.mamas-b2b.com is MAMAS COSMETICS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, registered in the Register of Entrepreneurs of the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register under KRS number 0000993813, share capital PLN 5,000.00, registered office and address for service: ul. Piastowska 25A, 30-065 Kraków, Poland, VAT ID (NIP): 9452226279, REGON: 382830234, e-mail: support@mamas-b2b.com, hereinafter referred to as the “Administrator” and the “Service Provider”.
2. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
3. Capitalized terms used in this Privacy Policy shall have the meaning assigned to them in the Terms & Conditions of the Service.

§ 2. TYPES OF PERSONAL DATA, PURPOSE AND SCOPE OF PROCESSING

1. Purpose and legal basis. The Administrator processes personal data in the following cases:
   1. creation and maintenance of an Account – Article 6(1)(b) GDPR,
   2. conclusion and performance of a Sales Agreement – Article 6(1)(b) GDPR,
   3. use of the Newsletter and opinion surveys – Article 6(1)(f) GDPR.
2. Types of data. The Service User may provide:
   1. for an Account: first and last name, company name, VAT number, e-mail address, phone number,
   2. for a Sales Agreement: first and last name, address, VAT number, e-mail address, phone number,
   3. for the Newsletter: first and last name, e-mail address.
3. Data retention period. Personal data are stored:
   1. for the duration of the agreement and thereafter for the statutory limitation period (generally 6 years, and 3 years for periodic claims and claims related to business activity),
   2. where processing is based on consent – until consent is withdrawn, and thereafter for the limitation period of potential claims.
4. During use of the Service, technical data may be collected, including IP address, browser type, operating system and access time.
5. With separate consent, data may be processed for marketing purposes in accordance with Article 6(1)(a) GDPR and electronic communications law.
6. Personal data may be processed to remind Users of unfinished Orders, which constitutes the Administrator’s legitimate interest (Article 6(1)(f) GDPR).
7. The Service may involve profiling for marketing purposes; such profiling does not produce legal effects or significantly affect the User.
8. The Administrator processes personal data lawfully, fairly and transparently, ensuring data minimization and storage limitation.

§ 3. DISCLOSURE OF PERSONAL DATA

1. Personal data may be disclosed to entities cooperating with the Administrator, in particular:
   • hosting providers,
   • software providers,
   • mailing system providers,
   • accounting offices,
   • delivery and logistics partners.
2. Such entities process data either as processors acting on the Administrator’s instructions or as independent controllers.
3. Personal data are generally processed within the European Economic Area (EEA).

§ 4. DATA SUBJECT RIGHTS

1. Data subjects have the right to access, rectify, erase, restrict processing, transfer data, object to processing and withdraw consent at any time.
2. These rights arise in particular from Articles 15–21 and Article 7(3) GDPR.
3. Requests regarding personal data should be submitted to: support@mamas-b2b.com.
4. The Administrator shall respond without undue delay and within the time limits set out in GDPR.
5. Data subjects have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) in Poland.

§ 5. COOKIES

1. The Service uses cookies.
2. Cookies are necessary for the proper functioning of the Service and for compiling statistics.
3. The Service uses session cookies and persistent cookies.
4. The Administrator uses its own cookies as well as third-party cookies (Google Analytics, Google Ads).
5. Users may manage cookies via browser settings and the cookie consent mechanism available on the Service.

§ 6. ADDITIONAL SERVICES AND SOCIAL MEDIA PLUGINS

1. The Service may use social media plugins (Facebook, Google).
2. Personal data may be transferred directly to the providers of these services.
3. Details regarding data processing are available in the providers’ privacy policies:
   • Facebook Privacy Policy
   • Google Privacy Policy
4. The Administrator uses Google Ads remarketing tools.

§ 7. FINAL PROVISIONS

1. The Administrator applies appropriate technical and organizational measures to ensure the protection of personal data.
2. Personal data transmitted electronically are protected against unauthorized access.
3. In matters not regulated by this Privacy Policy, GDPR and Polish law shall apply.
4. The Administrator reserves the right to update this Privacy Policy; information about changes will be published at least 7 days before they take effect.