I. General Provisions Privacy Policy defines how personal data of Users necessary for the provision of electronic services through the website https//:kaemia.com are collected, processed, and stored. The Service collects only personal data necessary for the provision and development of the services offered therein. Personal data collected through the Service are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR) and the Personal Data Protection Act of May 10, 2018.

II. Data Controller The Data Controller for personal data collected through the Service is Kaemia Sp.z o.o., 00-867 Warsaw, ALEJA JANA PAWŁA II, No. 27, KRS: 0000986093, NIP: 5273014357, REGON: 522786210, VATUE: PL5273014357, EORI: PL527301435700000,  BDO:  000612840 email address: kaemia.kontakt@gmail.com.

III. Purpose of Collecting Personal Data Personal data is used for:

• registration of an account and verification of the User's identity,
• enabling login to the Service,
• execution of contracts for services and e-services,
• communication with the User (live chat, contact form, etc.),
• sending newsletters (after the User's consent to receive them),
• managing the comment system,
• providing social services,
• promoting the Administrator's offer,
• marketing, remarketing, affiliation,
• personalizing the Service for Users,
• analytical and statistical activities,
• debt collection,
• determining and pursuing claims or defense against them. Providing data is voluntary but necessary to conclude a contract or use other functionalities of the Service.

IV. Types of Processed Personal Data The Administrator may process User personal data: name and surname, date of birth, address, email address, phone number, and tax identification number (NIP).

V. Data Processing Period User personal data will be processed for the period:

• when the basis for data processing is the performance of a contract – until the expiration of claims after its performance,
• when the basis for data processing is consent – until its withdrawal, and after withdrawing consent until the expiration of claims. In both cases, the limitation period is 6 years, and for claims related to periodic services and business activity – 3 years (unless a specific provision states otherwise).

VI. Sharing of Personal Data User personal data may be transferred to entities related to the Administrator, its subcontractors, and entities cooperating with the Administrator, e.g., companies handling e-payments or courier/postal services. User personal data will not be transferred outside the European Economic Area (EEA).

VII. User Rights The User of the Service has the right to access their personal data, correct, delete, limit processing, transfer, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal). A request regarding the User's rights must be sent to the email address kaemia.kontakt@gmail.com. The Administrator fulfills or refuses to fulfill the request immediately, but no later than one month from its receipt. The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if they believe that the processing violates their rights and freedoms (GDPR).

VIII. Cookies The Service collects information through cookies – session, persistent, and external entities. Collecting cookies supports the correct provision of services in the Service and serves statistical purposes. The User can determine the scope of access to cookies on their device in the browser settings.

IX. Automated Decision Making and Profiling User data may not be processed in an automated manner that would lead to any decisions concerning them. User data may be profiled to tailor content and personalize the offer after their consent.

X. Final Provisions The Administrator has the right to introduce changes to the Privacy Policy, with the User's rights not being limited. Information about introduced changes will appear in the form of a notification available on the Service. Matters not regulated in this Privacy Policy are subject to the provisions of the GDPR and Polish law.