Data Controller

The data controller is FASHION GROUP POLAND MADEJSKI General Partnership with its registered office at Dr. Jerzego Lutza 26, 05-092 Dąbrowa, VAT ID: 5242913942, e-mail: info@italiamoda.pl, operating the online store at www.italiamoda.pl.

Scope and Purpose of Data Processing

1. The controller processes personal data for the following purposes:
   • registration and management of a Customer Account,
   • order fulfillment, payments, and shipping,
   • issuing accounting documents (invoices, corrections),
   • handling complaints, returns, and correspondence,
   • carrying out tax and accounting settlements,
   • sending commercial information and newsletters (with consent),
   • analytical, statistical, and website security purposes.
2. Providing data is voluntary but necessary for the fulfillment of the above purposes (e.g., to process an order).

Legal Basis for Processing

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) of 27 April 2016 and applicable national law.

• Art. 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract,
• Art. 6(1)(c) GDPR – compliance with a legal obligation (e.g., issuing invoices),
• Art. 6(1)(f) GDPR – legitimate interests of the controller (e.g., securing claims, statistical analysis, own marketing),
• Art. 6(1)(a) GDPR – consent of the data subject (e.g., newsletter, cookies).

Data Retention Period

1. Data is retained for the period necessary to achieve the purposes for which it was collected:
   • transaction data – for 6 years (in accordance with accounting and tax regulations),
   • marketing data – until consent is withdrawn,
   • customer account data – until the account is deleted.

Recipients and Data Transfers

1. Data may be transferred to:
   • delivery providers (e.g., InPost, Apaczka, DPD, DHL),
   • payment operators (e.g., Przelewy24, PayPro S.A.),
   • accounting offices, legal firms, IT and hosting companies,
   • public authorities as required by law.
2. Data is not transferred outside the European Economic Area (EEA) except where cooperating entities (e.g., Google LLC, Meta Platforms) ensure adequate protection in accordance with European Commission decisions.

Rights of Data Subjects

The data subject has the right to:

• access, rectify, or erase their data ("right to be forgotten"),
• restrict processing and data portability,
• object to processing (including profiling),
• withdraw consent at any time (without affecting the lawfulness of prior processing),
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Cookies and Tracking Technologies

1. The website uses cookies to:
   • customize website content to user preferences,
   • maintain user sessions after logging in,
   • generate anonymous visit statistics,
   • enable advertising and remarketing services (Google, Meta).
2. Cookies do not contain personal data but allow browser identification.
3. Users can manage cookies through browser settings – block or delete them manually.

Cookie Banner and Consent

Upon the first visit to the website, a banner appears informing about the use of cookies. Users may consent to all cookies or adjust their preferences. Lack of consent may limit store functionality.

Consent is given pursuant to Article 173(1) of the Telecommunications Law and may be withdrawn at any time.

Data Security

1. The controller applies technical and organizational measures to ensure data protection, including:
   • SSL/TLS data encryption,
   • regular data backups,
   • access to data only by authorized persons,
   • server protection systems and firewalls.

Privacy Policy Changes

The controller reserves the right to modify this Privacy Policy in the event of changes in law, technology, or store operation. The updated version will be published on the website with the date of the update.

©️ FASHION GROUP POLAND MADEJSKI Sp.j. – italiaModa.pl