Privacy Policy of 2ELEVEN Store
https://2eleven.pl
("Store")

Dear User,

We care about your privacy and want you to feel comfortable while using our services. Therefore, we present to you the most important information about the rules for processing your personal data and the cookies used by our Store. This information has been prepared in accordance with the General Data Protection Regulation (GDPR).

PERSONAL DATA CONTROLLER
TOMASZ JAKUB LEBIOCKI, a business owner operating under the name 2ELEVEN Tomasz Lebiocki, registered in the Central Register and Information on Economic Activity kept by the minister competent for the economy and maintaining the Central Register and Information on Economic Activity, Tax Identification Number (NIP): 5771920221, National Official Business Register (REGON) number: 241029209, located at ul. Żarecka 2, 42-350 Lgota-Nadwarcie.

If you wish to contact us regarding the processing of your personal data, please write to us at the email address: shop@2eleven.pl.

YOUR RIGHTS

You have the right to request:

access to your personal data, including obtaining a copy of your data (Art. 15 GDPR or, if applicable, Art. 13(1)(f) GDPR),
correction of your data (Art. 16 GDPR),
erasure of your data (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability to another controller (Art. 20 GDPR).

You also have the right to:

• object at any time to the processing of your data:
  for reasons related to your particular situation – to the processing of your personal data based on Art. 6(1)(f) GDPR (i.e., our legitimate interests pursued by us) (Art. 21(1) GDPR),
• if your personal data is processed for direct marketing purposes, to the extent that the processing is related to such direct marketing (Art. 21(2) GDPR).

Please contact us if you wish to exercise your rights. You can express your objection to the use of cookies by us (which you can read about below), especially through the appropriate browser settings.

If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

PERSONAL DATA AND PRIVACY
Below you will find detailed information about the processing of your data depending on the actions you take.

1. Placing an order in the Store
For what purpose? To fulfill your order
On what basis? Sales contract (Art. 6(1)(b) GDPR) - legal obligation related to accounting, obliging us to process your personal data (Art. 6(1)(c) GDPR)
How long? For the duration of the above-mentioned contract - until the expiry of the legal obligation related to accounting. Additionally, your data will be processed until the expiration of the period in which any claims can be pursued - by you or by us (more information on this subject can be found in the last table of this section)
What will happen if you do not provide the data? You will not be able to place an order.

2. Creating an account in the Store
For what purpose? To fulfill the contract for providing the service of managing an account in the Store
On what basis? Service contract (Art. 6(1)(b) GDPR)
How long? Until the account is deleted by you or at your request. Additionally, your data will be processed until the expiration of the period in which any claims can be pursued - by you or by us (more information on this subject can be found in the last table of this section)
What will happen if you do not provide the data? You will not be able to create an account and use its features, such as browsing order history or checking the order status.

3. Contacting Us (e.g., to ask a question)
For what purpose? Handling your inquiries or requests
On what basis? Contract or actions taken at your request aiming at its conclusion (Art. 6(1)(b) GDPR) - if your inquiry or request is related to a contract we are or could be a party to. Our legitimate interest, consisting of processing your data for communication purposes (Art. 6(1)(f) GDPR) - if your inquiry or request is not related to a contract.
How long? For the duration of the binding contract between us or - if the contract is not concluded - until the expiration of the period of claims settlement - see the last table of this section*.  Until the expiration of the period of claims settlement - see the last table of this section - or until we consider and accommodate your objection to the processing*.
Additionally, your data will be processed until the expiration of the period in which any claims can be pursued - by you or by us (more information on this subject can be found in the last table of this section).
What will happen if you do not provide the data? We will not be able to respond to your inquiry or request* depending on which applies in a given case and which occurs earlier.


4. Expressing your consent to receiving marketing content from us (e.g., information about special offers)
For what purpose? Sending marketing information, especially about special offers
On what basis? Your consent to our marketing activities (Art. 6(1)(a) GDPR)
How long? Until you withdraw your consent - please note that you can withdraw your consent at any time. The processing of data until the withdrawal of your consent remains lawful.
Additionally, your data will be processed until the expiration of the period in which any claims can be pursued - by you or by us (more information on this subject can be found in the last table of this section).
What will happen if you do not provide the data? You will not receive our marketing materials, including information about our special offers.

5. Newsletter Subscription
For what purpose? Sending newsletters
On what basis? The contract for providing the newsletter service (Art. 6(1)(b) GDPR)
How long? Until you unsubscribe from our newsletter.
Additionally, your data will be processed until the expiration of the period in which any claims can be pursued - by you or by us (more information on this subject can be found in the last table of this section).
What will happen if you do not provide the data? You will not have the opportunity to receive information about the Store and our services.

6. Taking action or refraining from action that may lead to the emergence of claims related to the Store or our services
For what purpose? Establishing, pursuing, or defending potential claims related to the concluded contract or provided services
On what basis? Our legitimate interest, consisting of processing personal data for the specified purpose above (Art. 6(1)(f) GDPR)
How long? Until the expiration of the limitation period for claims or until we consider and accommodate your objection to the processing*. What will happen if you do not provide the data? The lack of possibility to establish, pursue, or defend claims* depending on which applies in a given case and which occurs earlier.

DATA SECURITY

While processing your personal data, we implement organizational and technical measures in accordance with applicable legal regulations, including the use of encryption for connections through SSL/TLS certificates.

COOKIES
Our Store, like most websites, uses so-called "cookies." These files:

- are stored in the memory of your device (computer, phone, etc.);
- do not make any changes to your device settings.

In this Store, cookies are used for the following purposes:

- remembering your session
- statistical analysis
- marketing purposes

To learn how to manage cookies, including how to disable them in your browser, you can refer to the Help section of your browser. You can find information on this topic by pressing the F1 key in your browser. Additionally, you can find relevant instructions on the following subpages, depending on the browser you are using:

- Firefox
- Chrome
- Safari
- Internet Explorer / Microsoft Edge

Cookies will not be processed by us for more than 100 days from your last visit to the Store.

By using the appropriate options in your browser, you can:

- delete cookies
- block the use of cookies in the future.

In such cases, we will no longer process them.

EXTERNAL SERVICES / DATA RECIPIENTS

We use the services of external entities that support us in our business operations. We entrust them with processing your data, and these entities process the data solely based on our documented instructions.

Below is a list of recipients of your data:

Additionally:

relevant public authorities to the extent that we are obliged to provide them with data.