Online Store Privacy Policy
MEDIMALL.PL

We have created this privacy policy for visitors to the website https://medimall.pl (hereinafter "Website"), i.e. the MEDIMALL.PL online store (hereinafter "Store").

The administrator of your personal data in connection with the use of the Store is: Piotr Hoffman, conducting business under the name PIOTR HOFFMAN, partner in the civil law partnership HAMED, with its registered office at: ul. Migdałowa 31, 02-796 Warsaw, NIP: 9-512-077-559 Andrzej Hoffman, conducting business activity under the name ANDRZEJ HOFFMAN, partner in the civil partnership HAMED, with its registered office at: ul. Migdałowa 31, 02-796 Warsaw, NIP: 5-210-411-203 Magdalena Hoffman, conducting business activity under the name MAGDALENA HOFFMAN, partner in the civil partnership HAMED, with its registered office at: ul. Migdałowa 31, 02-796 Warsaw, NIP: 1-132-637-172, jointly operating as part of a civil law partnership under the name Hamed S.C. with its registered office at: Migdałowa 31, 02-796 Warsaw, NIP: 9-512-494-949 REGON 384-980-417

In all matters related to the processing of personal data, you can contact us by e-mail: sklep@medimall.pl. You can also contact us in writing at the registered office address provided above.

1. Cookies and other technologies
2. Other purposes of processing the personal data of Store users

1. COOKIES AND OTHER TECHNOLOGIES

We use cookies and other similar mechanisms to understand how users use our Website and for marketing purposes, including displaying advertisements elsewhere on the Internet.

What are cookies?

A cookie is a small text file that a website saves on your computer, phone, or other device on which you are browsing the website. A cookie contains data about your use of this website.

Some cookies are necessary for the operation of our Store and cannot be disabled.
In other cases, when you first visit our Website, we ask you to consent to the installation of cookies. We do not use advertising or analytical cookies (or any non-essential cookies) without your consent.

What cookies do we use?

1. Strictly necessary cookies
   • These cookies are used for the website to function properly. You cannot disable them, because our website simply will not function properly after you disable them.
   • In this regard, we use a tool that stores your privacy settings. It shows your consent or not to accept specific types of cookies on our website.
   • Other necessary cookies on our website are used for its proper functioning and management, including: to make changes to the website and to run tracking tools to which you consent.
2. Statistical analysis of our Website
   • We use analytical data collection tools to help us understand how users use our Website. The data we receive from these tools does not provide us with information about a specific person known by name, but it does allow us to record various aspects of a user's use of the Website. We may aggregate and analyze this data statistically, and then use it to make decisions about changes to our Store and/or our advertising and marketing communications.
   • A list of analytical tools we use on the Website, along with an explanation of: (1) who provides the tool, (2) what it is used for, (3) what data is collected within a given tool, can be found in Appendix No. 1 to this policy, and briefly in the cookie consent management panel.
3. Functional Cookies
   • Some cookies on our website are used to enable additional tools on the Store website, such as chat, a module for adding product reviews and/or stars, the ability to recommend a product to a friend, the ability to display recently viewed products in our Store, etc.
   • A list of the functional tools we use on the Website, along with an explanation of their specific purposes, can be found in the cookie consent management panel.
4. Videos
   • Some videos on the Website are embedded using plugins from YouTube [a service owned by Google]. When you play such a video on our Website, Google receives information about it from your browser, even if you do not have a Google/YouTube profile or are not currently logged in. If you have previously logged in to the aforementioned service, this service provider will be able to directly assign the video playback to your profile.
   • If you want to prevent Google from collecting information about your activity on our Website, you can:
     • do not play the video (we will treat your consent to play the video as consent for other videos on our Website – until you revoke it, i.e., change your cookie preferences),
     • do not consent to cookies from this service on our Website,
     • or you can log out of this service.
   • More information about data processing by YouTube can be found at https://www.youtube.com/account_privacy.

Legal Issues Regarding Cookies

The legal basis for the Store's use of necessary cookies (indicated above in the "What Cookies Do We Use?" section) is our legitimate interest, i.e., the right to operate a Website that supports our business, and the need to maintain its security.
The legal basis for our use of other cookies is your consent.

In connection with our processing of your personal data using cookies, you have the rights described in this section at any time in the Your rights in connection with data processing section.

Our use of cookies, particularly for advertising purposes, may involve profiling. This means that we or the marketing companies whose services we use may create a user profile based on collected information (e.g., email address, order history, device type, technology used, frequency of visits) and, based on this, formulate future purchase forecasts. This allows us to decide what content (including advertisements) to display on our and other websites.

How long do cookies remain on the user's device?

It depends on whether they are "persistent" or "session" cookies. Session cookies, which are information necessary for browser functionalities to function properly, expire at the end of the user session, i.e., each time you close our Website. Persistent cookies that make using the website easier (e.g., remembering the selected resolution, content layout, user preferences, recently viewed products) will be stored in your browser for longer and will remain there until their expiry date, unless you delete them earlier using your browser's settings.

Third-party cookies (i.e., analytical, advertising, and social media cookies) are subject to their own privacy policies, to which we provide links in this policy.

2. Other purposes of processing the personal data of Store users

What data do we process and for what purposes?

In addition to the cookies described above, we process your data for the following purposes related to the operation of the Store:

Providing the above data is not mandatory, but it is necessary to fulfill your order, issue an invoice, notify you of the order status, respond to your inquiry or complaint, etc.

How long do we process your data?

We process your data related to placing an order in the Store for as long as necessary to fulfill the order, and in accordance with accounting and tax regulations.

In addition, we will process your data for the time necessary to achieve the purposes listed in the table above (i.e., until our legal interest in processing ceases, or until you object to the processing, or until you withdraw your marketing consent – if you have granted it to us). Further processing will only be possible if we, as the controller, are legally obligated to do so (in particular, for tax purposes), and possibly for archival purposes to protect ourselves against potential claims (until such claims expire).

Who do we transfer your data to?

In our business, we use the services of other cooperating companies, so your data may be entrusted to: the company providing us with the software for running the Store, the accounting firm, the hosting provider of our Website, the hosting provider of our email, and other companies whose services and marketing tools we use. Your data is also transferred to courier companies and payment intermediaries to fulfill your order, but these companies are separate controllers of personal data.

For the marketing activities described above in the "Cookies" section, we use services provided by entities based in the USA (Google, Facebook). Therefore, personal data may be transferred to third countries that are not members of the European Union. An adequate level of protection for your data is ensured by the Data Privacy Framework, which you can read more about at https://www.dataprivacyframework.gov/s/.

Your rights in connection with data processing

We are committed to respecting the confidentiality of your personal data and to guaranteeing you the ability to exercise your rights. You can exercise your rights free of charge by sending us an email or contacting us in any other way.

Remember that in connection with the processing of your data, you have the right to:

• request access to the data we hold about you;
• rectify your data;
• delete your data if it is no longer necessary for the purposes for which it was processed or we have no other legal basis for processing it;
• withdraw your consent to the processing of your personal data, if you have given such consent;
• object to processing of your data if we process it based on a legitimate interest;
• restrict data processing;
• lodging a complaint with the President of the Personal Data Protection Office if you believe that your data is being processed unlawfully.

ANNEX 1 TO THE PRIVACY POLICY OF THE MEDIMALL.PL
STORE - LIST OF ADVERTISING AND ANALYTICAL TOOLS USING COOKIES

1. ANALYTICAL COOKIES:
   1. We use Google Analytics
      • The information Google Analytics collects about users includes: how many times a user visits the website; which subpages they visit; the date of the first and last visit; the duration of the visit; the page from which the user came (the source); the browser the user uses; the link that was clicked; the location in the world from which the user is accessing the website; anonymized (shortened) IP address, etc.
      • Google assigns its own identifier (so-called Google ID) to individual users and stores data obtained from cookies from various websites on its servers. We – as the owner of the Website – may receive reports (statistics) from Google solely related to the traffic on our Website. These reports, of course, only cover people who have consented to Google Analytics recording their visits to our website.
      • Further detailed information about how Google Analytics works can be found at https://policies.google.com/technologies/partner-sites and https://support.google.com/analytics/answer/6004245/bezpiecze%C5%84stwo-danych.
      • You can also permanently prevent Google Analytics from collecting information from your browser by installing a special plug-in available at https://tools.google.com/dlpage/gaoptout.
   2. Cookies of our Store's software provider
      • The software provider that powers our Store – i.e., the owner of the shoper.pl platform – places cookies on our Website to collect aggregate information about how customers use online stores (subpages opened and how long they spend on them, products displayed, clicks on the Store website, analytical information about purchases, e.g., conversion rates).
      • This data is used to create aggregate reports for e-store owners, containing general (without personal data) information, including: about what products a given store's customers are interested in, what time of year there is increased traffic or sales in stores, etc. This allows sellers (including us) to improve their stores and optimize sales processes.
      • You can read full information on this topic in Cookie Policy for Shoper Store Visitors.