Wittchen S.A., Palmiry, ul. Gdańska 60, 05-152 Czosnów, e-mail: esklep@wittchen.com (hereinafter referred to as the Company) is the controller of the personal data. The Company will process the personal data for the purpose of fulfilling any placed orders, based on Article 6(1)(b) and (f), for the purpose of handling a registered account, based on Article 6(1)(b) and (f), when consent is given, for marketing purposes, based on Article 6(1)(a), as well as for the purpose of performing a contract and for the purposes of legitimate interests, understood as identifying customers and examining any complaints, based on Article 6(1)(b) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). The personal data may be disclosed to the Company’s employees or partners, and to parties assisting the Company as part of the commissioned services and according to the concluded data processing agreements, and to entities authorised under the law. The personal data will be processed for the above-mentioned purpose until the period of limitation for possible claims has expired following the deletion of an account, and in the case of marketing measures, until the consent to the continued processing is withdrawn. The data in a bill or an invoice for the purchases made will be stored until the expiry of the tax liability and until the period of limitation for possible claims has expired or until the end of the warranty period. Every individual has a right to access, rectify, erase, restrict processing, object to processing as well as a right to data portability and to withdraw the consent at any time, and such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal. The data subject has a right to lodge a complaint with the President of the Office for the Protection of Personal Data (Urząd Ochrony Danych Osobowych) if he/she believes that the processing of his/her personal data violates the provisions of GDPR. The personal data is provided on a voluntary basis.