Privacy and Cookie Policy of
VYNN GROUP Sp. z o.o.

his Privacy Policy sets out the rules for collecting, storing, processing, and using personal data obtained from you by VYNN GROUP Spółka z ograniczoną odpowiedzialnością, with its registered office in Wilcza Góra, 05-506, ul. Żwirowa 18, entered into the Register of Entrepreneurs kept by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under KRS number: 0000583693, NIP: 1231305415, REGON: 362887681, share capital: PLN 100,000.00 (hereinafter referred to as the Controller). The Controller makes every effort to respect your privacy and protect the personal information provided, taking all necessary steps to ensure compliance with regulations governing the collection, management, storage, and use of personal data, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (commonly referred to as "GDPR").

This document also sets out the principles for the use of cookies.

1. Purpose and Legal Basis for Processing Your Personal Data

Your data is processed in order to conclude and perform the agreement to which you are a party or to take steps prior to concluding such an agreement, including the sale of services, based on Article 6(1)(b), 6(1)(c), and 6(1)(f) GDPR. Processing is necessary for purposes arising from the legitimate interests of the Controller, in particular, performance of the contract, maintaining necessary documentation, legal defense, statistical purposes, and archiving, pursuant to Article 6(1)(f) GDPR. Providing your data for these purposes is a condition for concluding the agreement. Refusal to provide the data necessary for concluding or performing the agreement, or required by law, will make it impossible to enter into the agreement.

Additionally, if you give your consent under Article 6(1)(a) GDPR, your data may be processed for marketing purposes. Providing data for marketing is entirely optional and refusal to provide such data does not affect the conclusion or performance of the agreement. Consent may be withdrawn at any time without affecting the legality of processing based on consent before its withdrawal.

Furthermore, the Controller processes data based on Article 6(1)(f) GDPR to provide technical support, compile statistics on product popularity and trends, and monitor site traffic to ensure security and usability.

2. How Can You Exercise Your Rights?

You have the right to:

1. access your data,
2. rectify inaccurate or incomplete data,
3. request deletion of personal data when:
   • the data is no longer necessary for the purposes it was collected or otherwise processed,
   • you object to the processing,
   • you withdraw consent and there is no other legal basis for processing,
   • the data is processed unlawfully or must be deleted to comply with a legal obligation, d. request restriction of processing when:
   • you contest the accuracy of the data,
   • the processing is unlawful and you oppose deletion, requesting restriction instead,
   • the Controller no longer needs the data, but you need it for legal claims,
   • you object to the processing pending the verification of whether the legitimate grounds of the Controller override yours,
4. data portability to another controller or to yourself,
5. withdraw your consent at any time (if given),
6. lodge a complaint with the President of the Personal Data Protection Office (UODO) regarding violations of data protection regulations.

3. Data Disclosure

The data you provide will not be shared with third parties, except:

1. entities involved in fulfilling the contract, payment services, electronic services,
2. contractors providing direct customer support and IT services,
3. public authorities or entities performing public tasks,
4. other parties, as per your consent.

4. Data Storage and Processing

The Controller makes every effort to secure your data against unauthorized access and to comply with all legal data protection requirements, particularly under GDPR. No automated decision-making or profiling is carried out. The Controller does not intend to transfer personal data to third countries or international organizations.

Personal data will be stored:

• until 14 days after consent withdrawal,
• as long as necessary to perform the agreement, and subsequently for the duration required by law (including the Tax Ordinance, Social Security Act, Labour Code, Pension Act), and
• for the period necessary to assert or defend claims (as per Civil Code Article 118). For marketing consent, data is stored while the consent is valid, and for 14 days after withdrawal.

5. Questions and Concerns

Any questions or concerns regarding this Privacy Policy can be sent to: bok@victoriavynn.com

6. Website

The Controller operates the Website at: https://www.sklep.victoriavynn.com

7.1. What Data is Collected Automatically?

The Website does not automatically collect any data, except for data stored in cookies during your visit.

Cookies are small text files sent by the Website and stored on your device, containing information related to your use of the Website. Cookies may be temporary (session) or persistent. Session cookies are deleted when the browser is closed, while persistent cookies remain and may store login information to facilitate access.

Cookies may also include a unique identifier for your device but do not identify you personally. By using the Website, you consent to the use of cookies and similar technologies as described in this Cookie Policy.

If you do not agree, please adjust your browser settings or refrain from using the Website.

7.2. Cookies

Our website, available at https://victoriavynn.com (the "Site"), is owned and operated by VYNN GROUP Sp. z o.o. and uses cookies — small text files stored on your device (e.g., computer, tablet, smartphone), readable by the Site.

We are permitted to store cookies on your device if they are strictly necessary for the operation of this Site (Article 399(3) of the Electronic Communications Law). For all other types of cookies, your consent is required.

This Site uses different types of cookies. Some are placed by third-party services appearing on our pages.

By using the Site, you agree to the use of cookies as described in this Policy. You can change your cookie settings in your browser or delete cookies altogether. Note that disabling cookies may hinder Site usability.

We use first-party cookies to ensure proper functionality and facilitate Site use, e.g., identifying users, remembering activity, and collecting statistics.

Your browser settings regarding cookies constitute consent under the law. If you do not consent, adjust your settings accordingly. You may delete cookies manually at any time. More information is available in your browser's Help section. Common browsers that support cookies include Internet Explorer, Mozilla Firefox, Google Chrome, and Opera.

The Controller guarantees that cookies do not alter your device configuration or software.

Types of cookies used on the Site:

1. Necessary – Always active
   Essential for core functionalities. These cookies do not store personal data.
2. Functional
   Enable functions like social sharing, feedback collection, and third-party tools.
3. Analytics
   Help understand how users interact with the Site (visits, bounce rate, traffic sources, etc.).
4. Performance
   Analyze performance indicators to enhance user experience.
5. Advertising
   Deliver personalized ads based on user activity and measure ad campaign effectiveness.

Cookies are used for:

1. tailoring Website content to user preferences and optimizing usage — allowing the Site to recognize your device and display content appropriately,
2. generating statistics to understand user behavior and improve content structure.

Most browsers allow cookies by default. You may change your settings to block or alert when cookies are used.

Details on cookie settings are available in your browser’s help menu. Limiting cookie use may affect some Site functionalities.

7.3. External Websites

The Website may contain links to third-party sites. These operate independently and are not monitored by the Controller. We recommend reviewing their privacy policies. The Controller is not responsible for how these sites handle your data.

7.4. Questions and Concerns

For questions regarding data protection or this Privacy Policy, contact: bok@victoriavynn.com. This policy is regularly reviewed and updated as needed. We reserve the right to change it by publishing the new version on our website.