PRIVACY POLICY
ONLINE STORE
WWW.MASSI.DK

Massi sp. z o.o. respects and complies with Users’ right to privacy. Below you will find information on how we collect, process, and use information about Users of the website www.massi.dk, as well as how we ensure the protection of Users’ personal data.

1. Definitions

The following terms used in this Privacy and Cookies Policy shall have the meanings defined below:

1. Administrator – Massi spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, address: Białuty 33B, 05-870 Białuty, Poland, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under KRS number 0000490541, REGON: 147041249, NIP: 1182095862, share capital PLN 150,000.00 fully paid up, e-mail address: info@massi.dk.
2. Personal Data – any information relating to an identified or identifiable natural person using the Store.
3. E-mail – electronic mail address.
4. Password – a sequence of alphanumeric characters used to identify the User when accessing the Account.
5. Account – a set of information stored in the Store’s IT system relating to a given User, accessed by providing Login and Password.
6. Login – the User’s e-mail address used during registration and Account usage.
7. Privacy and Cookies Policy – this document defining the purposes and principles of data collection by the Store, necessary for the provision of services by the Administrator, as well as storage and access to information on the User’s device via cookies used to provide electronic services.
8. Regulations – terms and conditions for the provision of electronic services, prepared pursuant to the Act of 18 July 2002 on the provision of electronic services (Journal of Laws 2019, item 123, as amended), available at: https://massi.dk/regulamin-sklepu
9. Store – an internet application system consisting of a set of static and dynamic documents containing files, including graphics, scripts, and other interconnected elements available under the domain massi.dk
10. Services – services provided electronically by the Administrator via the Store, as described in the Regulations.
11. User – a person using the Administrator’s Services via the Store, who is a natural person and is obliged to comply with the Regulations.

2. Personal Data

1. To register in the Store, the following personal data are required:
   • name and surname,
   • address,
   • phone number,
   • e-mail address.
2. The User may optionally provide additional data, including in particular:
   • VAT ID (NIP),
   • REGON.
3. All personal data are collected, stored, and processed in the Store. In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), providing personal data is voluntary.
4. The provided data is protected against access by unauthorized third parties and is used by the Administrator solely for contacting Users necessary for service execution.

3. Data Controller

1. The personal data of Users is administered by the Administrator conducting sales of goods via the Store.

4. Purpose of Personal Data Processing

1. Personal data is collected, stored, and used by the Administrator with the voluntary consent of Users, in accordance with the law and with appropriate security measures.
2. Providing personal data is voluntary but necessary to make purchases and use services requiring such data.
3. The Administrator processes personal data for the purpose of:
   • processing orders placed in the Store,
   • handling complaints,
   • establishing, pursuing, or defending claims,
   • marketing activities related to the newsletter service.
4. Personal data is processed only for the duration of the above-mentioned services.

5. Right of Access, Correction, and Deletion of Personal Data

1. The User has the right to:
   • withdraw consent to the processing of personal data,
   • access personal data,
   • rectify (correct) personal data,
   • delete personal data (“right to be forgotten”),
   • restrict processing of personal data,
   • transfer data to another data controller.
2. Any person who has consented to the processing of their personal data may submit a request in one of the following ways:
   • by sending an e-mail requesting withdrawal to the Administrator’s e-mail address, or
   • by sending a written request by registered mail to the Administrator’s address: Massi sp. z o.o., Białuty 33B, 05-870 Białuty, Poland.

6. Complaint to the Supervisory Authority

1. Any complaints regarding personal data processing may be submitted to the supervisory authority, which at the time of drafting this document is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Sharing of Personal Data

1. The Administrator does not transfer, sell, or lend collected personal data to third parties other than the Administrator and entities listed below.
2. Personal data may also be entrusted, under separate data processing agreements, to entities involved in providing services to the Administrator, including:
   • IT system providers or technology tool providers,
   • consulting, auditing, legal, tax, or accounting service providers,
   • other cooperating entities.
3. When entrusting data to the above entities, the Administrator requires confidentiality and security of information and at least the same level of data protection as applied by the Administrator.
4. The Administrator may transfer personal data outside the European Economic Area only where permitted by law.