§1 General Information
At MyMaluna, we take your privacy seriously and are committed to protecting your personal information. This Privacy Policy is designed to inform you about how we collect, use, and safeguard the data you provide when interacting with our online store, whether you are a visitor, customer, or partner.
This policy is for informational purposes only and does not create any contractual obligations for you. Any capitalized terms, such as "Online Store" or "Customer," should be understood according to the definitions provided in our Online Store Terms and Conditions.
In the event of any inconsistencies between this Privacy Policy and the consents you have provided for the processing of your personal data, your consents or applicable legal regulations will take precedence.
§2 Data Controller
The entity responsible for the processing of your personal data is ZOYA GROUP SP. Z O.O., located at Szafarnia 11/F8, 80-755 Gdansk, Poland (KRS 0000876118, REGON 387816925, VAT PL583-341-62-99, BDO 000510768). Hereafter referred to as the "Data Controller."
For any matters related to data protection, you are encouraged to contact us via the provided address or email: info@mymaluna.com.
You may also request information about the personal data we hold about you and the purposes for which it is processed. We keep all correspondence for statistical purposes and to improve our customer service, particularly in relation to GDPR and complaint resolutions. The information collected will not be used for any purpose other than fulfilling your requests and will not be shared with third parties for marketing purposes.
If you contact us for specific actions (e.g., making a complaint or returning a product), we may ask you to provide additional personal data to verify your identity and process your request. Providing such data is voluntary but may be necessary to complete the requested action or provide you with the information you need.
If you have consented to the use of cookies, our trusted partners may also be considered data controllers for data collected through your online activity.
§3 Data Collection and Purpose of Processing
We process personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Personal data refers to information about an identified or identifiable individual, such as your name, email address, location data, and more.
We ensure that any data collected is kept confidential, secure, and processed only when necessary. Our processing is lawful, fair, and transparent, collecting only the data necessary for legitimate purposes. We protect your data with appropriate technical and organizational measures to prevent unauthorized access, accidental loss, or destruction.
Your personal data may be collected in the following ways:
- When you make a purchase in our Online Store.
- When you register for a Customer Account.
- When you voluntarily subscribe to our newsletter.
- When you submit a complaint, request, or inquiry.
- When you voluntarily provide information via email or a contact form.
- Through cookies, pixels, or similar internet technologies.
The purpose and scope of data processing depend on your consent or legal requirements, which may be further clarified by your actions in our Online Store or other communication channels.
Providing personal data is voluntary but necessary to use certain Online Store functionalities, such as placing an order or registering a Customer Account. Failure to provide the required data may prevent you from fully utilizing our services.
Your personal data is processed for the following purposes:
- Statistics: Based on Article 6(1)(f) of the GDPR.
- Marketing of our products and services: Without the use of electronic communication, based on Article 6(1)(f) of the GDPR.
- Marketing with electronic communication: Based on Article 6(1)(f) and Article 6(1)(a) of the GDPR, with additional consent required under the Telecommunications Law and the Act on Providing Services by Electronic Means.
- Handling requests via contact forms, email, or other inquiries: Based on Article 6(1)(a) and Article 6(1)(c) of the GDPR.
- Managing Customer Accounts and fulfilling orders: Based on Article 6(1)(a) and Article 6(1)(b) of the GDPR.
- Archiving sales documents: Based on Article 6(1)(c) of the GDPR.
§4 Categories of Personal Data
The Data Controller may process the following categories of personal data:
- Data provided during order placement, including your email address, phone number, name, and address.
- Data provided during Customer Account registration, including your email address, name, company name, tax identification number (NIP), contact number, and address.
- Data provided for newsletter subscription, through contact forms, emails, or when submitting complaints or requests, such as your name, email address, phone number, address, and bank account number.
- Data related to participation in contests or promotional activities, including your name, email address, phone number, and address.
- Other data obtained through your online activity, including cookies and similar technologies.
§5 Data Recipients
Your personal data may be shared with our partners and subcontractors, i.e., entities we rely on for data processing and service provision. To the best of our knowledge, all these entities guarantee the implementation of appropriate data protection measures as required by law.
We may share your data with:
- Government authorities or other entities authorized by law, as required to fulfill our legal obligations.
- Partners involved in limited data processing activities, such as those who assist in the technical operation of the Online Store, shipping orders, processing electronic or card payments, or supporting our marketing efforts.
In marketing activities, we may use third-party services that apply cookies, pixels, or similar technologies on our Online Store. The details of these entities are provided in §8 of this Privacy Policy.
Our suppliers are primarily based in Poland or other European Economic Area (EEA) countries. For services like Google Analytics, data might be processed outside the EEA. However, we ensure that your IP addresses are anonymized, and other data sent to Google cannot be used to identify you personally.
§6 Data Retention
We will retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy or as required by legal and regulatory obligations. After this period, your data will be securely deleted.
Data retention periods include:
- Sales-related data: Retained for 8 years.
- Marketing data: Retained until consent is withdrawn or until objections are raised, depending on the legal basis.
- Data from contact forms or emails: Retained for 3 years to maintain accountability.
- Cookies and similar technologies: Retained until you delete them using your browser or device settings.
In all cases, personal data may be retained longer if required by law or for the purposes of defending against or pursuing legal claims.
§7 Your Rights and Access to Personal Data
Under GDPR, you have the right to obtain information from the Data Controller about whether your personal data is being processed.
If your data is being processed, you have the right to:
- Access your personal data.
- Receive information about the purposes of processing, categories of data processed, recipients of your data, planned data retention periods, your rights under GDPR, and the source of your data.
- Receive a copy of your personal data.
Additionally, you can request the correction (Article 16 GDPR) or deletion (Article 17 GDPR) of your personal data, object to its processing (Article 21 GDPR), or request the transfer of your data to another organization (Article 20 GDPR).
Regarding the right to be forgotten, we will update or delete your data unless there is a legal obligation to retain it for business or compliance reasons. In certain cases, you may request the restriction of data processing (Article 18 GDPR). You can also contact us if you have any concerns about how your data is collected, stored, or used.
We strive to address all requests promptly, typically within 30 days of receipt. If the request is complex, we may extend this period and inform you accordingly.
If you remain unsatisfied with our response, you have the right to file a complaint with your local data protection authority. In Poland, this is the President of the Office for Personal Data Protection.
§8 Automated Data Processing and Cookies Policy
Our Online Store, like most websites, uses cookies to improve user experience. This Cookies Policy applies to both Online Store customers and visitors browsing the store.
Cookies are small text files stored on your device, enabling us to recognize your device and remember your preferences. They are essential for the proper functioning of our website and help us provide a personalized experience.
The Cookies Policy is an integral part of this Privacy Policy and applies to all users of our Online Store.
If you have any questions or need further information about our Privacy Policy, please do not hesitate to contact us at info@mymaluna.com.
MaLuna - clothing wholesale eu, wholesale apparel europe, wholesale brand clothing europe, online wholesale clothing europe, brand clothes wholesale europe, b2b wholesale clothing europe, clothing manufacturer eu, european made clothing.
