Privacy Policy

1. This Privacy Policy sets out the rules for processing personal data obtained through the online store www.lampsempire.com (hereinafter referred to as the "Online Store").
2. The owner of the Store and at the same time the data controller is Imperium-Design Sp. z o.o., based in Częstochowa (42-217), at ul. Śląska 22, unit 16, (NIP): PL5732866486, registered in the Register of Entrepreneurs maintained by the District Court in Częstochowa, 17th Commercial Division of the National Court Register under the number KRS 5732866486, hereinafter referred to as Imperium-Design.
3. Personal data collected by Imperium-Design through the Online Store is processed in accordance with the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.
4. Imperium-Design takes special care to respect the privacy of customers visiting the Online Store.

§ 1 Type of processed data, purposes, and legal basis

1. Imperium-Design collects information regarding natural persons performing legal actions not directly related to their activities, natural persons conducting business or professional activities in their own name, and natural persons representing legal persons or organizational units not being legal persons, to which the law grants legal capacity, hereinafter collectively referred to as Customers.
2. Customers' personal data is collected in the event of:
   • a) registration of an account in the Online Store, for the purpose of creating an individual account and managing that account. Legal basis: necessity to perform the Account service contract (Article 6(1)(b) GDPR);
   • b) placing an order in the Online Store, for the purpose of executing the sales contract. Legal basis: necessity to perform the sales contract (Article 6(1)(b) GDPR).
3. When registering an account in the Online Store, the Customer provides:
   • a) email address.
4. During registration of an account in the Online Store, the Customer independently sets an individual password to access their account. The Customer can change the password at a later time, according to the rules described in §5.
5. When placing an order in the Online Store, the Customer provides the following data:
   • a) email address;
   • b) address details:
     • a. postal code and city;
     • b. country (state);
     • c. street with house/apartment number.
   • c) first and last name;
   • d) phone number.
6. In the case of Entrepreneurs, the above scope of data is additionally expanded to include:
   • a) the Entrepreneur's company name;
   • b) tax identification number (NIP).
7. During the use of the Online Store's website, additional information may be collected, in particular: the IP address assigned to the Customer's computer or the external IP address of the Internet service provider, domain name, browser type, access time, operating system type.
8. Navigational data may also be collected from Customers, including information about links and references they choose to click or other actions taken in the Online Store. Legal basis - legitimate interest (Article 6(1)(f) GDPR), consisting of facilitating the use of services provided electronically and improving the functionality of these services.
9. In order to establish, investigate, and enforce claims, some personal data provided by the Customer while using the functionality in the Online Store may be processed, such as: first name, last name, data regarding the use of services, if the claims result from the way the Customer uses the services, other data necessary to prove the existence of a claim, including the extent of the damage suffered. Legal basis - legitimate interest (Article 6(1)(f) GDPR), consisting of establishing, investigating, and enforcing claims and defending against claims in proceedings before courts and other state authorities.
10. The provision of personal data to Imperium-Design is voluntary, in connection with the concluded sales contracts or the provision of services through the Online Store's website, however, with the reservation that failure to provide specific data in the registration forms during the Registration process will prevent Registration and creation of a Customer Account, while in the case of placing an order without registering a Customer Account, it will prevent the submission and execution of the Customer's order.

§ 2 To whom the data is disclosed or entrusted and how long is it stored?

1. The Customer's personal data is transferred to service providers that Imperium-Design uses when running the Online Store. Depending on the contractual agreements and circumstances, the service providers to whom the personal data is transferred are either subject to the instructions of Imperium-Design regarding the purposes and methods of processing this data (processing entities), or independently determine the purposes and methods of their processing (administrators).
   • Processing entities. Imperium-Design uses providers who process personal data solely on the instructions of Imperium-Design. These include, among others, providers of hosting services, accounting services, marketing systems, traffic analysis systems in the Online Store, and campaign effectiveness analysis systems;
   • Administrators. Imperium-Design uses providers who do not act solely on instructions and independently determine the purposes and methods of using the Customers' personal data. They provide electronic payment and banking services.
2. Location. Service providers are located in Poland and other countries of the European Economic Area (EEA).
3. The Customers' personal data is stored:
   • a) In case the basis for processing personal data is consent, the Customer's personal data is processed by Imperium-Design as long as the consent is not revoked, and after the revocation of consent for a period of time corresponding to the limitation period for claims that may be raised by Imperium-Design and those that may be raised against it. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to conducting business activities - three years.
   • b) In case the basis for processing data is the performance of a contract, the Customer's personal data is processed by Imperium-Design as long as it is necessary for the performance of the contract, and after that time for a period corresponding to the limitation period for claims. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to conducting business activities - three years.
4. In the case of making a purchase in the Online Store, personal data may be transferred to a courier company for the delivery of the ordered goods.
5. If the Customer chooses payment via PayPal system, their personal data is transferred to the extent necessary for the payment execution to PayPal (Europe) S.à r.l. et Cie, S.C.A.
6. Navigational data may be used to provide Customers with better service, statistical data analysis, and customization of the Online Store to Customer preferences, as well as administration of the Online Store.
7. In case of a request, Imperium-Design discloses personal data to authorized state authorities, in particular organizational units of the Prosecutor's Office, Police, President of the Personal Data Protection Office, President of the Office of Competition and Consumer Protection or President of the Office of Electronic Communications.

§ 3 Cookie Mechanism, IP Address

Manage cookies

1. The Online Store uses small files called cookies. They are saved by Imperium-Design on the end device of the person visiting the Online Store if the web browser allows it. A cookie file usually contains the domain name from which it originates, its "expiration time" and an individual, randomly selected number identifying the file. The information collected using this type of file helps to adjust the products offered by Imperium-Design to the individual preferences and actual needs of people visiting the Online Store. It also allows for the development of general statistics on visits to the presented products in the Online Store.
2. Imperium-Design uses two types of cookie files:
   • a) Session cookies: after the end of a browser session or turning off the computer, the saved information is removed from the device's memory. The session cookie mechanism does not allow for the collection of any personal data or any confidential information from the customers' computers.
   • b) Persistent cookies: they are stored in the client's end device memory and remain there until they are deleted or expired. The persistent cookie mechanism does not allow for the collection of any personal data or any confidential information from the customers' computers.
3. Imperium-Design uses its own cookies for:
   • a) authenticating the customer in the Online Store and ensuring the customer's session in the Online Store (after logging in), thanks to which the customer does not have to re-enter their login and password on each subpage of the Online Store;
   • b) analysis and research, as well as audience measurement, in particular, to create anonymous statistics that help understand how customers use the Online Store Website, which allows for improving its structure and content.
4. Imperium-Design uses external cookies for:
   • a) promoting the Online Store using the social networking site facebook.com (external cookie administrator: Facebook Inc based in the USA or Facebook Ireland based in Ireland);
   • b) presenting on the information pages of the Store a map indicating the location of the Imperium-Design office, using the internet service maps.google.com (external cookie administrator: Google Inc based in the USA);
   • c) presenting multimedia content on the website of the Store, which is downloaded from an external internet service www.youtube.com (external cookie administrator: Google Inc based in the USA);
   • d) collecting general and anonymous statistical data through the analytical/marketing tools of Google Analytics, Google Ads (external cookie administrator: Google LLC based in the USA);
   • The cookie mechanism is safe for the customers' computers of the Online Store. In particular, it is not possible for viruses or other unwanted software or malware to enter the customers' computers through this path. However, in their browsers, customers have the option to limit or disable access to cookie files on their computers. If you use this option, using the Online Store will still be possible, except for functions that, by their nature, require cookie files.
   • Below we present how to change the settings of popular web browsers in the scope of using cookie files:
     • a) Chrome and Chrome Mobile browser;
     • b) Facebook in-app Browser;
     • c) Internet Explorer browser;
     • d) Microsoft EDGE browser;
     • e) Mozilla Firefox browser;
     • f) Opera browser;
     • g) Safari and Safari Mobile browser;
     • h) Samsung Browser.
   • Imperium-Design may collect the IP addresses of customers. An IP address is a number assigned to a computer of a person visiting the Online Store by the Internet service provider. The IP number allows access to the Internet. In most cases, it is assigned to a computer dynamically, i.e., it changes with each connection to the Internet. The IP address is used by Imperium-Design for diagnosing technical problems with the server, creating statistical analyses (e.g., determining from which regions the most visits are recorded), as useful information for administering and improving the Online Store, and for security purposes and potential identification of server load, unwanted automatic programs for browsing the Online Store content.
     The Online Store contains links and references to other websites. Imperium-Design is not responsible for the privacy protection policies in force on these websites.

§ 4 Rights of the data subjects

1. Right to withdraw consent - legal basis: Article 7(3) GDPR.
   • a) The Customer has the right to withdraw any consent given to Imperium-Design.
   • b) Withdrawal of consent takes effect from the moment the consent is withdrawn.
   • c) Withdrawing consent does not affect the processing carried out by Imperium-Design in accordance with the law before the withdrawal.
   • d) Withdrawing consent does not entail any negative consequences for the Customer but may prevent further use of services or functionalities that, according to the law, Imperium-Design may provide only with consent.
2. Right to object to data processing - legal basis: Article 21 GDPR.
   • a) The Customer has the right to object at any time, for reasons related to their particular situation, to the processing of their personal data, including profiling, if Imperium-Design processes their data based on a legitimate interest, e.g., marketing of products and services of Imperium-Design, maintaining statistics on the usage of individual functionalities of the Online Store, and facilitating the use of the Online Store, as well as satisfaction surveys.
   • b) Opting out of receiving marketing communications regarding products or services via email will be considered as the Customer's objection to the processing of their personal data, including profiling for these purposes.
   • c) If the Customer's objection proves justified, and Imperium-Design has no other legal basis for processing personal data, the Customer's personal data will be deleted for which the Customer has raised an objection.
3. Right to erasure of data ("right to be forgotten") - legal basis: Article 17 GDPR.
   • a) The Customer has the right to request the deletion of all or some of their personal data.
   • b) The Customer has the right to request the deletion of personal data if:
     • a. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
     • b. the specific consent has been withdrawn, to the extent that the personal data were processed based on their consent;
     • c. they have objected to the use of their data for marketing purposes;
     • d. the personal data are being processed unlawfully;
     • e. the personal data must be deleted in order to comply with a legal obligation provided for in Union law or the law of a Member State to which Imperium-Design is subject;
     • f. the personal data have been collected in relation to the offer of information society services.
   • c) Despite the request to delete personal data due to the objection or withdrawal of consent, Imperium-Design may retain certain personal data to the extent that processing is necessary to establish, pursue or defend claims, as well as to comply with a legal obligation requiring processing under Union law or the law of a Member State to which Imperium-Design is subject. This particularly applies to personal data including: name, surname, email address, which are retained for the purposes of handling complaints and claims related to the use of Imperium-Design services, or additionally the residence address/correspondence address, order number, which are retained for the purposes of handling complaints and claims related to concluded sales contracts or service provision.
4. Right to restriction of processing - legal basis: Article 18 GDPR.
   • a) The Customer has the right to request the restriction of the processing of their personal data. Submitting a request, until it is considered, will prevent the use of certain features or services that involve processing the data covered by the request. Imperium-Design will also not send any messages, including marketing messages.
   • b) The Customer has the right to request the restriction of personal data usage in the following cases:
     • a. when they question the accuracy of their personal data - in this case, Imperium-Design limits their usage for the time needed to verify the accuracy of the data, but no longer than 7 days;
     • b. when the data processing is unlawful, and the Customer requests restriction of their data usage instead of data deletion;
     • c. when personal data is no longer necessary for the purposes for which they were collected or used, but they are still required by the Customer to establish, pursue or defend claims;
     • d. when the Customer has objected to the use of their data - in this case, the restriction occurs for the time needed to consider whether - due to a particular situation - the protection of the interests, rights, and freedoms of the Customer outweighs the interests pursued by the Administrator, processing the Customer's personal data.
5. Right of access to data - legal basis: Article 15 GDPR.
   • a) The Customer has the right to obtain confirmation from the Administrator whether their personal data is being processed, and if so, the Customer has the right to:
     • a. access their personal data;
     • b. obtain information about processing purposes, categories of processed personal data, recipients or categories of recipients of this data, the planned data storage period or criteria for determining this period (when determining the planned data processing period is not possible), the rights granted to the Customer under GDPR, and the right to lodge a complaint with the supervisory authority, the source of this data, automated decision-making, including profiling, and safeguards applied in connection with the transfer of this data outside the European Union;
     • c. obtain a copy of their personal data.
6. Right to rectification of data - legal basis: Article 16 GDPR.
   • a) The Customer has the right to request the Administrator to rectify their personal data immediately if it is incorrect. Considering the processing purposes, the Customer has the right to request the completion of incomplete personal data, including by providing an additional statement, by sending a request to the email address specified in §6 Privacy Policy.
7. Right to data portability - legal basis: Article 20 GDPR.
   • a) The Customer has the right to receive their personal data provided to the Administrator and then send it to another chosen personal data administrator. The Customer also has the right to request that personal data be sent by the Administrator directly to another administrator, if technically feasible. In this case, the Administrator will send the Customer's personal data in a csv file format, which is a commonly used format, suitable for machine-readable and allows the transfer of received data to another personal data administrator.
8. When the Customer exercises their rights resulting from the above, Imperium-Design fulfills the request or refuses to fulfill it immediately, but no later than within a month after its receipt. However, if - due to the complex nature of the request or the number of requests - Imperium-Design is unable to fulfill the request within a month, it will fulfill it within the next two months, informing the Customer in advance within a month from receiving the request - about the intended extension of the deadline and its reasons.
9. The Customer may submit complaints, inquiries, and requests to the Administrator concerning the processing of their personal data and the exercise of their rights.
10. The Customer has the right to request Imperium-Design to provide a copy of the standard contractual clauses by sending an inquiry in the manner indicated in §6 Privacy Policy.
11. The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office in the event of a violation of their rights to personal data protection or other rights granted under the GDPR.

§ 5 Security management - password

1. Imperium-Design ensures secure and encrypted connections for Customers during the transmission of personal data and while logging into the Customer's Account on the Website. Imperium-Design uses an SSL certificate issued by one of the leading global companies in the field of security and encryption of data transmitted over the Internet.
2. If a Customer with an account in the Online Store loses their access password in any way, the Online Store allows for a new password to be generated. Imperium-Design does not send password reminders. The password is stored in an encrypted form, making it impossible to read. To generate a new password, provide your email address in the form available under the "Forgot password" link, given with the login form for the account in the Online Store. The Customer will receive an email containing a redirection to a dedicated form provided on the Online Store's Website, where the Customer will have the opportunity to set a new password.
3. Imperium-Design never sends any correspondence, including electronic correspondence, requesting login details, particularly the access password for the Customer's account.

§ 6 Changes to the Privacy Policy

1. The Privacy Policy may change, of which Imperium-Design will inform Customers 7 days in advance.
2. For questions related to the Privacy Policy, please send an email to: sklep@imperiumlamp.pl
3. Last modification date: 31.03.2023.