Privacy Policy

§1.

In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR), and other generally applicable data protection laws, we commit to ensuring the security and confidentiality of the personal data obtained. All employees of the service have been adequately trained in data processing and protection.

§2.

Each User of the service has the option to choose whether and to what extent they want to use our services and share information about themselves. Each User of the service has the right to delete their data or refrain from using our service.

§3.

The controller of the personal data of the service Users is FOCUS POLAND LIMITED LIABILITY COMPANY located at Główna 76, 95-041 Gałków Duży, Łódzkie.

§4.

When processing the personal data of Users, we adhere to the principles of:

Lawfulness, fairness, and transparency: We process personal data in accordance with the law. We fully inform individuals (Users) about all matters related to their data.
   Data minimization and adequacy: We process only the data that is necessary to achieve the specific purpose.
   Data accuracy: We strive to ensure that the data we process is up-to-date and accurate.
   Purpose limitation and secure storage: We collect personal data only for a specific and legally justified purpose. We store data in a way that allows identification of the person concerned and process it only as long as necessary to achieve the purpose for which it was collected (unless legal obligations require further processing).
   Data integrity and confidentiality: We implement technical and organizational solutions to ensure the security of processed personal data.
   Accountability: We can demonstrate that we comply with legal regulations when processing personal data.

§5.

In our service, we collect the following personal data from Users:

   First and last name – during order placement, necessary for placing orders and contact.
   Home address or company address – for shipping the ordered goods.
   Phone number – used for contact regarding order fulfillment.
   Email address – used for sending order confirmations and potential contact.
   Addresses – information resulting from general Internet connection principles such as IP address (and other information contained in system logs).
   Cookies – the service uses cookies technology to tailor the service to individual needs and enable order placement.

Providing the above data is necessary in the following cases:

   Making a purchase in the Store requires providing data to identify the Buyer.
   Registration in the Customer database is voluntary; the data is stored in the database to facilitate and simplify shopping in the Store.
   Users can consent to have the mentioned data remembered and reused during subsequent visits to our website. The consent provided by the User can be withdrawn at any time by contacting the Administrator (sklep@wetlab.store). Owners of other websites will not have access to this data. If a    User does not agree to the personalization of the service, they should disable cookies in their web browser options.

§6.

The legal bases for processing personal data for specific purposes and the duration of their processing are as follows:

Purpose: execution of the agreement between Chroma Sp. z o.o. and the User of the service - Legal basis: Article 6(1)(b) of the GDPR - necessity to perform the agreement to which the User is a party.
Purpose: marketing of the administrator's products and services (including automated data analysis and profiling for marketing purposes), statistical measurements – Legal basis: Article 6(1)(a) - the data subject's (User's) consent.
Purpose: processing data for technical reasons to ensure the continuity and functionality of the service – Legal basis: Article 6(1)(f) - the legitimate interest of the administrator.
Personal data of the service User, within our services, will be processed only if we have one of the legal bases permitted by the GDPR for their processing and only for the purpose adapted to that basis, as described above.

Data will be processed for the duration of the legal basis for processing:

In case of consent, until its withdrawal, restriction, or other actions limiting that consent.
In case of necessity for performing the agreement – for the duration of its performance and the period necessary to pursue claims, as well as due to legal obligations, e.g., tax.
When the basis for processing data is the legitimate interest of the administrator – until the existence of that legitimate interest.

§7.

If the User has given consent, the email address provided by them will be used for marketing purposes of the administrator's products – Chroma Limited Liability Company, ul. Przemysłowa 5, 68-200 Żary, as well as for statistical purposes. The consent provided by the User can be withdrawn at any time.

If consent has been given to receive the newsletter, it can be revoked on the wetlab.store/unsubscribe page. If consent was given during the creation of the User account on the service, it can be revoked by clicking the button located here.

§8.

We do not share the obtained personal data of Users with third parties, except for entities cooperating with the service, such as payment system operators and courier, shipping companies that process payments for purchased goods and deliver purchased goods to Buyers, and hosting companies. In such cases, the amount of data transferred to the cooperating companies is limited to the minimum required.

All companies cooperating with the service that gain access to the personal data provided by Users are obligated to protect it in accordance with applicable legal regulations and to train their employees in data processing and protection.

The personal data of Users we possess may be made available to the relevant public authorities if required by applicable law.

We do not store sensitive data such as credit card numbers or bank account access data.

§9.

The personal data we have obtained from Users is not transferred outside the European Economic Area, and we do not plan such actions in the future.

§10.

Users have the following rights in relation to the processing of their personal data:

Right to access their data, including obtaining a copy of the data.
Right to request rectification of data.
Right to deletion of data (in specific situations).
Right to lodge a complaint with the supervisory authority responsible for data protection.
Right to restrict data processing.
Right to object (in specific situations).
If data is processed based on consent, Users also have the right to withdraw consent to the extent that the data is processed on that basis. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Methods of withdrawing consent are indicated in § 5 and § 7 above.

If the User's data is processed based on consent or as part of a provided service (the data is necessary for the provision of the service), they can exercise the right to data portability, i.e., to receive their personal data from the administrator in a structured, commonly used, machine-readable format. The data can be transferred to another data controller.

To exercise the above rights, contact the administrator (details in § 3 above).