The basis and purpose of personal data processing processes your personal data in compliance with the provisions of the Regulation (EU) 2016/679 of the European Parliament, of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”).

The data controller is Tylko S.A., with headquarters in Warsaw at Czerska 8/10, 00-732 Warszawa, Poland (hereinafter also referred to as "Controller"). The Controller can be contacted via [email protected]. You can contact the Controller on all matters relating to the processing of personal data and the use of data processing rights.

Your personal data is processed to successfully accept and fulfil your order. We may need to share your personal data with third parties to do this, such as storage and delivery companies, banks and online payment providers. Where possible, we'll provide you with information on the processing of your personal data received from a third party. In some instances, we may also be required to share your personal data with public authorities upon their substantiated, specific request.

In every other case, we will never share your personal data with anyone.

We use strict technical and organisational measures to secure all personal data that is processed by from loss, destruction or unauthorised access by third parties. We cannot, however, take responsibility for any unauthorized access to your personal data caused by security breaches that might happen in relation to your device, browser or your own negligence.

As with every website, our server automatically collects the following information and temporarily saves it in server log files that are transmitted by your browser, unless you have deactivated this function:

- IP address of the computer transmitting the request
- Client’s file request, the http response code, the volume of data transmitted
- The website from which you access our website (referrer URL)
- Date and time of the server request
- Type, version and language of your browser
- Operating system on the computer transmitting the request

Our server log files are not evaluated based on personal use. We cannot allocate this data to specific persons at any time. Also, we do not merge this data with data from other sources.