Privacy Policy

General Information

This Privacy Policy describes the rules for processing information about you, including personal data and cookies (“cookies”), by Villa Verde Candle Company Sp. z o.o. located at: Szkotnik 9, 33-240 Żabno, Poland (hereinafter referred to as “Administrator”).

Administrator’s contact email address: info-cc@villa-verde.eu

The Administrator processes your personal data in compliance with applicable legal regulations, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR).

Scope of Personal Data Processing

The Administrator processes personal data for the following purposes:

1. Handling inquiries: Data entered into the contact form are processed to respond to your inquiries.

2. Order fulfillment: Data are processed to execute the contract concluded with you, including order fulfillment.

3. Direct marketing: With user consent, data may be used to send newsletters and marketing offers.

4. Presentation of offers: Data may be used to personalize offer content on the website.

5. Statistical analysis: Data collected through analytical tools such as Google Analytics are used to analyze website traffic in an anonymous manner.

Legal Basis for Processing

1. Consent (Article 6(1)(a) GDPR): Data processing for marketing purposes is carried out only with the user’s prior consent.

2. Performance of a contract (Article 6(1)(b) GDPR): Data processing is necessary for order fulfillment or service provision.

3. Legal obligation (Article 6(1)(c) GDPR): Data may be processed to fulfill legal obligations (e.g., accounting).

4. Legitimate interest (Article 6(1)(f) GDPR): Data are processed to protect the Administrator’s rights (e.g., claims management).

Data Recipients

The Administrator may share your personal data with the following entities:

1. Courier companies – for order delivery.

2. Entities supporting the Administrator in IT services and website maintenance (e.g., hosting providers).

3. Analytical and marketing tools, such as Google Analytics, for anonymous user data.

4. Entities authorized to receive data under legal regulations (e.g., government agencies).

Data Retention Period

1. Data related to order fulfillment will be stored for the period required by law, particularly accounting regulations.

2. Marketing data will be processed for the duration of the consent, no longer than 3 years.

3. Data processed based on legitimate interest will be stored until an effective objection is lodged.

Your Rights

You have the right to:

1. Access your personal data.

2. Rectify (correct) your data.

3. Delete your data (“right to be forgotten”).

4. Restrict the processing of your data.

5. Transfer your data to another administrator.

6. Object to data processing for marketing purposes or based on legitimate interest.

7. Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8. File a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

Cookies

1. The website uses cookies for the following purposes:

   • Maintaining user sessions after login.

   • Statistical analysis of website traffic.

   • Personalizing marketing content.

2. Users can manage cookies via browser settings. Detailed information can be found in the documentation of the browser used.

3. Disabling cookies may affect the functionality of the website.

Automated Decision-Making

Automated decision-making, including profiling, may occur within the website for the purpose of service provision and direct marketing. Profiling is based on analyzing your activity on the website to tailor content to your needs. Decisions made this way do not produce legal effects or significantly affect you.

Data Security

1. Data are protected using SSL certificates, ensuring encrypted transmission.

2. Only authorized personnel committed to confidentiality have access to the data.

3. The Administrator periodically updates its systems and passwords to secure data.

Hosting

The website is hosted on servers provided by OVH, which ensures GDPR compliance in data processing.

If you have questions about this Privacy Policy, please contact us at: info-cc@villa-verde.eu.