START — Privacy Policy: Header & Introduction

PRIVACY POLICY

Privacy Policy of the LART Store – for manicure artists!
lart-hop.com
(the “Store”)

Dear User,

This document outlines the rules for the processing of personal data by:

VK COSMETICS sp. z o.o.
Tax ID (NIP): 5532596119
Registered address: Rolnicza Street 38E, 34-300 Żywiec, Poland
IBAN: 50114020040000351224045516
Bank: BREXPLPWMBK
REGON: 540511946
KRS 0001146165

(hereinafter referred to as the "Administrator")

We care about your privacy and want you to feel comfortable while using our services.
Therefore, we present to you below the most important information on the principles for processing your personal data and the cookies used by our Store. This information has been prepared in accordance with GDPR, the General Data Protection Regulation.

We recommend that you read the Privacy Policy and the Cookie Policy carefully. By accessing or using the Store, the User accepts the terms described in this document.

The Store may contain links to websites, services, and online platforms that are not owned by the Administrator. We are not responsible for the privacy practices or data processing principles applied by those external entities. When visiting these websites/services/platforms, you should review their applicable privacy and cookie policies.

DEFINITIONS

Whenever the following terms are used in this document, they shall be understood as follows:

• Administrator – VK COSMETICS sp. z o.o.
  Tax ID (NIP): 5532596119,
  Registered at Rolnicza Street 38E, 34-300 Żywiec, Poland,
  IBAN: 50114020040000351224045516,
  Bank: BREXPLPWMBK
  lart-shop.com
  Email: rodo@lartnails.com
  Tel: +48 33 500 0222

• Personal Data – any information relating to an identified or identifiable natural person, by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, including IP address, location data, online identifier, and information collected through cookies or similar technologies;

• EEA (European Economic Area) – the area covering the EU member states and countries belonging to the European Free Trade Association, excluding Switzerland;

• Cookies – data files stored on the User’s end device while visiting the Store. Cookies are encrypted and cannot be accessed by unauthorized persons;

• Policy – this Privacy Policy and Cookie Policy document;

• GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data;

• Store – the online store available at: lart-shop.pl

• Data Protection Act – the Polish Act of 10 May 2018 on the protection of personal data;

• Act on Providing Services by Electronic Means – the Polish Act of 18 July 2002 on providing services by electronic means;

• User – any natural person with Internet access using the Store.

PERSONAL DATA PROTECTION

DATA CONTROLLER

The personal data controller is:

VK COSMETICS Spółka z ograniczoną odpowiedzialnością
Tax ID (NIP): 5532596119
Registered address: Rolnicza Street 38E, 34-300 Żywiec, Poland
IBAN: 50114020040000351224045516
Bank: BREXPLPWMBK
REGON: 540511946, KRS 0001146165

If you wish to contact us in relation to how we process your personal data, please write to:
zamowienia@lartnails.com

GENERAL RULES

The processing of Users’ personal data while using the Store is carried out in accordance with applicable laws, including in particular:

• GDPR,

• the Polish Data Protection Act, and

• the Act on Providing Services by Electronic Means.

The Administrator is committed to safeguarding all personal data entrusted by Users and implements appropriate technical and organizational measures. In particular, we ensure:

• SSL certificate encryption for secure connections;

• Ongoing confidentiality, integrity, availability, and resilience of processing systems and services;

• The ability to restore the availability of personal data and access to it promptly in the event of a physical or technical incident.

The safeguards we use are designed to protect your data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, access, or use.

We regularly assess the effectiveness of our technical and organizational measures to ensure the security of processing.

For any matters related to personal data processing within the Store, including exercising your rights, you can contact us:

• by email: rodo@lartnails.com

• by phone: +48 33 500 0222

• by mail: Rolnicza Street 38E, 34-300 Żywiec, Poland

YOUR RIGHTS

You have the right to request:

• Confirmation whether the Administrator is processing your personal data, access to your data, and a copy of your data (Art. 15 GDPR);

• Correction of your data (Art. 16 GDPR);

• Deletion of your data (Art. 17 GDPR);

• Restriction of processing (Art. 18 GDPR);

• Data portability to another controller (Art. 20 GDPR).

You also have the right to:

• Object at any time to the processing of your personal data:

  • for reasons related to your particular situation, when processing is based on Art. 6(1)(f) GDPR (our legitimate interests), including profiling (Art. 21(1) GDPR);

  • for direct marketing purposes, including profiling to the extent that the processing is related to such direct marketing (Art. 21(2) GDPR).

If the processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the legality of processing prior to withdrawal.

Want to exercise your rights? Contact us using the details provided above.

Objections regarding cookies can be submitted through your browser settings.

If you believe your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office in Poland.

Detailed rules regarding your rights and our data processing practices are always available in this Privacy Policy and are presented to you at the moment of data collection.

PERSONAL DATA & PRIVACY

While using the Store, the Administrator collects Users’ personal data as necessary to deliver services and for functionality and marketing purposes. This includes data collected via cookies.

Your data is processed particularly for:

a) Ensuring proper Store functionality, enhanced features, and marketing activities (cookie data such as IP address, browser type/version, navigation behavior in the Store);

b) Operating our social media pages such as Facebook, Instagram, and YouTube.

Data Transfers Outside the EEA

The Administrator does not intend to transfer personal data outside the European Economic Area (EEA). However, some services (e.g., Google Analytics, Facebook plugins) are provided by companies based outside the EEA, which may result in data transfer to third countries.

To ensure an adequate level of protection, we apply:

• Binding corporate rules approved by supervisory authorities,

• International certification standards,

• Standard contractual clauses issued by the European Commission (Art. 46 GDPR),

• The EU-U.S. Data Privacy Framework for certified entities (e.g., Google LLC, Meta Platforms Ireland Limited).

Risk notice: Data transfers outside the EU may carry risks of uncontrolled processing or data loss.

JOINT DATA CONTROLLERS

In accordance with Article 26 GDPR, the following companies act as joint controllers with VK COSMETICS Sp. z o.o. for statistical and advertising purposes related to social media:

• Meta Platforms Ireland Limited
  4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
  (Facebook, Instagram)

• Google Ireland Limited
  Gordon House, Barrow Street, Dublin 4, Ireland
  (YouTube)

The joint controllership applies in the context of VK COSMETICS operating its official pages on Facebook, Instagram, and YouTube. This includes aggregated analysis of user activity statistics on these pages.

Each joint controller is responsible for:

• Establishing the legal basis for data processing for statistical purposes;

• Ensuring the rights of data subjects are respected;

• Reporting any data breaches to authorities and affected users;

• Implementing proper security measures for data protection.

VK COSMETICS is specifically responsible for:

• Having a legal basis for processing user data for its own purposes;

• Fulfilling transparency obligations related to its processing activities.

You can view details of our arrangement with Meta Platforms Ireland here:
https://www.facebook.com/legal/terms/page_controller_addendum

Meta’s privacy policy:
https://www.facebook.com/privacy/explanation

Controller terms with Google:
https://business.safety.google/controllerterms/

Google privacy policy:
https://policies.google.com/privacy

SOCIAL MEDIA PLUGINS

The Store uses plugins that link to Facebook, Instagram, and YouTube.
Your personal data will only be transferred to these platforms if you actively click on a plugin button (e.g., the Facebook icon).

After clicking, you are redirected to the relevant platform, where your data is then processed by Meta or Google. From that point, VK COSMETICS has no control over the type or scope of data collected.

Note:

• You don’t need to be logged in or have an account on those platforms for data to be transferred.

• If you are logged in, the data may be directly linked to your social media profile.

EXTERNAL LINKS

The Store may also contain links to other websites or platforms (besides Facebook, Instagram, and YouTube).
VK COSMETICS is not responsible for the privacy practices of those third-party sites.
Please review the relevant privacy and cookie policies when visiting them.

DATA RECIPIENTS

1. Your personal data may be shared with external entities with which VK COSMETICS has signed data processing agreements or regular cooperation agreements.

2. Main data recipients include:

   • dhosting.pl Sp. z o.o., Al. Jerozolimskie 98, 00-807 Warsaw – technical/IT and hosting support;

   • edrone Sp. z o.o., Lekarska 1, 31-203 Kraków – email marketing system;

   • Meta Platforms Ireland Limited – platform hosting the Store’s Facebook and Instagram pages;

   • Google Ireland Ltd. – analytics tools provider (e.g., YouTube, Google Analytics).

PURPOSES & LEGAL BASES FOR DATA PROCESSING

1. Placing an Order in the Store

• Purpose: Fulfilling your order

• Legal basis:

  • Performance of a contract (Art. 6(1)(b) GDPR)

  • Legal obligation (accounting/tax) (Art. 6(1)(c) GDPR)

• Storage: Until the contract is fulfilled and legal obligations expire

• Consequence of not providing data: Order placement will not be possible

2. Creating an Account in the Store

• Purpose: Providing account services (e.g., order history, status updates)

• Legal basis:

  • Contract for digital service (Art. 6(1)(b) GDPR)

  • Your consent (Art. 6(1)(a) GDPR)

• Storage: Until the account is deleted or consent is withdrawn

• Consequence: No access to account functionalities

3. Contacting Us (e.g., to ask a question)

• Purpose: Handling your inquiry

• Legal basis (depending on context):

  • Pre-contractual steps (Art. 6(1)(b) GDPR)

  • Legitimate interest in communication (Art. 6(1)(f) GDPR)

  • Your consent (Art. 6(1)(a) GDPR)

• Storage: Until your inquiry is resolved and claims expire

• Consequence: No response to your message

4. Browser Settings or Consent for Marketing Purposes

• Purpose: Direct marketing via personalized ads

• Legal basis:

  • Your consent (Art. 6(1)(a) GDPR)

  • Legitimate interest (Art. 6(1)(f) GDPR)

• Storage: Until cookies expire or consent is withdrawn

• Consequence: No personalized product/service suggestions

5. Browser Settings or Consent for Analytics

• Purpose: Analyzing how you use the website to improve functionality

• Legal basis:

  • Your consent (Art. 6(1)(a) GDPR)

  • Legitimate interest (Art. 6(1)(f) GDPR)

• Storage: Until cookies are deleted or consent is withdrawn

• Consequence: Website improvements may not reflect your usage behavior

6. Consent to Receive Marketing Content

• Purpose:

  • Sending marketing content (e.g., special offers)

  • Analyzing the effectiveness of such messages

• Legal basis:

  • Your consent (Art. 6(1)(a) GDPR)

  • Legitimate interest (Art. 6(1)(f) GDPR)

• Storage: Until you withdraw your consent or object to processing

• Consequence: No marketing content will be sent

7. Subscribing to the Newsletter

• Purpose:

  • Sending newsletters

  • Analyzing performance for improvements

• Legal basis:

  • Newsletter agreement (Art. 6(1)(b) GDPR)

  • Your consent (Art. 6(1)(a) GDPR)

• Storage: Until unsubscribed or consent is withdrawn

• Consequence: You won’t receive Store updates or service info

8. Actions Related to Legal Claims

• Purpose: Establishing, exercising, or defending legal claims

• Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

• Storage: Until the claims are time-barred

• Consequence: Inability to pursue or defend legal rights

DATA PUBLICATION

If you choose to post a comment, its content and your displayed name will be visible to other Store users.
Your email address will not be shown unless you choose to disclose it.

PROFILING

We may carry out profiling with your consent.
This involves evaluating your interests (e.g., products/services viewed) to show you relevant content.

No automated decisions are made that would have legal effects or similarly significant impact.

ANALYTICS

We analyze how you interact with the Store to improve its design and functionality.
This includes behavior such as time spent on a page or clicks.
We use Google Analytics for this purpose. For details on managing cookies, visit:
https://policies.google.com/technologies/cookies
https://tools.google.com/dlpage/gaoptout

DATA SECURITY

When processing your personal data, we apply organizational and technical measures in compliance with applicable legal provisions, including connection encryption using an SSL/TLS certificate.

COOKIE POLICY

A. DEFINITION, ORIGIN, AND ACCESS TO COOKIES

While using the Store, information about Users is automatically collected in the form of cookies. Cookies are IT data (typically small text files) saved and stored on the User’s end device (e.g., computer or mobile device) during use of the Store.

The entity placing cookies on the User's device and accessing them is the Administrator (these are so-called Administrator cookies). When the Administrator uses third-party tools (e.g., plugins), those services may also collect cookie data independently (these are third-party cookies).

Cookies are encrypted, so unauthorized individuals do not have access to them. Typically, cookies gather general data about the User’s location, how the Store is accessed, and the duration of cookie storage.

Storing or accessing cookies does not change the configuration of the User’s device or installed software. Properly configured cookies are safe and can only be read by the server that created them. Cookies do not damage the system, files, or performance of the device. Identification is anonymous and only concerns usage data.

B. TYPES AND PURPOSES OF COOKIES USED BY THE ADMINISTRATOR

The Administrator uses the following types of cookies:

• Necessary cookies – essential for the correct display of the Store (do not require consent),

• Functional cookies – remember User preferences (require consent),

• Statistical cookies – collect statistical data about Users and their activity (require consent),

• Advertising cookies – allow for advertising campaigns (require consent).

Purposes of using cookies:

• Ensuring the security and reliability of the Store,

• Adjusting content to User preferences,

• Creating statistics to improve the website’s structure and interface,

• Displaying and adjusting advertising content,

• Gathering demographic statistics (e.g., IP address region data).

Cookies may be:

• Persistent – remain on the User’s device after closing the browser,

• Session – deleted after the browser is closed.

C. MANAGING AND DELETING COOKIES

Use of cookie data by the Administrator is subject to the User’s consent (via browser settings or cookie banner preferences).

Browsers usually allow cookie storage by default. Users can change these settings at any time, e.g., to block automatic cookies or receive notifications. Deleting cookies constitutes withdrawal of consent.

Disabling necessary cookies may impair or prevent use of website functions. The cookie banner allows Users to choose: accept all cookies, only necessary ones, or also analytical/performance cookies.

Cookies may also be used by tool providers. For more details, check their privacy and cookie policies.

Cookies may be used by ad networks (e.g., Google) to display personalized ads based on your Store activity.

To manage Google ad preferences:
Google Ad Preferences

Instructions for managing cookies in different browsers:

• Chrome: https://support.google.com/chrome/answer/95647

• Firefox: http://support.mozilla.org/pl/kb/usuwanie-ciasteczek

• Safari: http://support.apple.com/kb/HT1677?viewlocale=pl_PL

• Edge: https://support.microsoft.com/pl-pl/topic/wy%C5%9Bwietlanie-plik%C3%B3w-cookie-w-przegl%C4%85darce-microsoft-edge-a7d95376-f2cd-8e4a-25dc-1de753474879

FINAL PROVISIONS

This Privacy and Cookie Policy shall take effect on May 7, 2024.

Users have continuous access to this document at:
lart-shop.com/privacy policy 

For matters not regulated by this Policy, the provisions of the Polish Civil Code, relevant national laws, and EU law, particularly the GDPR, shall apply.