Your privacy is important to us. This Privacy Policy explains how Faina Lifestyle Sp. z o.o. with its registered office at ul. Żurawia 45, 00-680 Warsaw (hereinafter referred to as "Faina" or
the "Controller"), as the personal data controller, processes the personal data of users of our website: https://pl.faina.shop/.

We process data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Personal Data Protection Act and the Act on the provision of electronic services.

For better understanding, we use the following
terms in this Privacy Policy:

•  Personal data – information that allows for the identification of a natural person,
e.g., name, email address, telephone number, IP address.

•  Data subject – the natural person whose data is being processed.

•  Data processing – operations on personal data, such as collection, storage, modification, disclosure, and deletion.

•  Data controller – the entity that decides on the purposes and means of data processing (in this case: Faina Lifestyle Sp. z o.o.).

•  Processor – the entity that processes personal data on behalf of the controller (e.g., courier companies, hosting providers).

•  Consent – a voluntary, specific, informed, and unambiguous declaration of will by the data subject.

The personal data controller is:

Faina Lifestyle Sp. z o.o.

ul. Żurawia 45, 00-680 Warsaw

Email: info@faina-lifestyle.pl

Telephone: +48 42 666 99 54

Website: https://pl.faina.shop

Contacting the Data Protection Officer

If you wish to exercise your rights relating to your personal data, you can also contact us via our designated data protection
officer:

Email: iod@faina-lifestyle.pl

Our website uses cookies for the following purposes:

• Necessary for the website to function (e.g., shopping cart, user sessions)
• Analytical (e.g., Google Analytics – with consent)
• Marketing (e.g., remarketing in advertising networks – with consent)

The legal basis for the use of cookies is the following provisions of the Act:

·       Article 6(1)(b) GDPR – when cookies are necessary for the performance of a contract (e.g., shopping cart management).

·       Article 6(1)(f) GDPR – legitimate interest
of the controller (e.g., website performance analysis).

·       Article 6(1)(a) GDPR – user consent (in
the case of analytical or marketing tools).

Users can change cookie settings themselves in their browser or using tools available on the website (cookie banner / CMP – Consent Management Platform). However, blocking cookies may limit the functionality of the website.

What data do we collect automatically when you use the website?

When you visit our website, the system automatically collects basic technical data, such as:

•  IP address

•  Browser type and version

•  Operating system

•  Time of visit and pages visited

•  Access source (e.g., search engine or external link)

This data is collected for technical, statistical, and security purposes (e.g., fraud detection). It is not used to identify the user.

The legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR).

To place an order, you can register a user account
or purchase as a guest. When registering, we process the following data:

•  Name and surname

•  Email address

•  Delivery and billing address

•  Telephone number

•  Order information

Providing this information is necessary to fulfill the sales contract (Article 6, paragraph 1, letter b of the GDPR).

Account data is retained until it is deleted, and order-related data is retained for the period required by law (e.g., tax or accounting regulations).

You can subscribe to our newsletter to receive
information about new products, promotions, and updates.

•  We require you to provide your email address and confirm your subscription via the double opt-in method (i.e., click the activation link).

•  The legal basis for data processing is your consent (Article 6, Section 1, Letter a, of the GDPR).

•  You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in the footer of the email or by contacting us.

 
Tracking Pixels in the Newsletter

We may place invisible tracking pixels in emails that let us know if and when the message has been opened and which links have been clicked.

This allows us to:

•  Measure campaign effectiveness

•  Tailor newsletter content to the interests of recipients

This is based on your consent to receive the newsletter. You can withdraw your consent at any time, which will result in your data being removed from the mailing list.

If you contact us via the contact form or email,
we process your data:

•  First name, last name (if provided)

•  Email address

•  Message content

We use this data solely to process your inquiry and conduct correspondence. The legal basis is:

•  Article 6(1)(b) of the GDPR – if the contact concerns the conclusion of a contract

•  Article 6(1)(f) of the GDPR – if you contact us regarding another matter

We store messages for the time necessary to respond and for up to 12 months after the end of the contact, unless a longer period is required by law.

We only retain personal data for as long as
necessary for the purposes for which it was collected, for example:

•  Order data – for the period required by tax regulations (usually 5 years)

•  Account data – until it is deleted

•  Newsletter data – until consent is withdrawn

•  Correspondence data – for a maximum of 12 months from the last contact

After these periods, the data is deleted or anonymized.

What Rights do you have?

Under the GDPR, you have the right to:

• Access to data – receiving a copy of the data and information on how it is processed.

• Rectification– correction of incorrect or outdated data.

• Deletion(“right to be forgotten”) if:

o  The data is no longer necessary for the purposes for which it was collected.

o  You withdraw your consent and there is no other basis for processing.

o  You will file an effective objection.

• Processing restrictions – e.g. if the data is incorrect or processed without a legal basis.

•  Transferring data – to another controller (in the case of data processed on the basis of consent or contract).

• Object to data processing based on legitimate interests – e.g. profiling or direct marketing.

• Withdrawal of consent – at any time, without affecting the lawfulness of processing carried out before withdrawal of consent.

You can also file a complaint with the President of the Personal Data Protection Office (uodo.gov.pl) if you believe that your data is being processed unlawfully.

To exercise your rights, please contact us.

We use Google Analytics to analyze how our
website is used. This service uses cookies and collects anonymous data, such
as:

•  IP address (abbreviated),

•  Device and browser type,

•  Pages visited,

•  Time spent on the website.

This data is processed based on our consent (Article 6, Section 1, Letter a, of the GDPR), expressed by the user upon their first visit to the website (cookie banner). You can withdraw your consent at any time by changing your cookie settings.

Details: https://policies.google.com/privacy

Our store uses Shopify Payments, which supports
payments with Visa, MasterCard, Klarna, Apple Pay, and Google Pay.

Payment data is transferred directly to the
payment provider (Shopify International Ltd., Ireland) and processed in
accordance with their privacy policy:

https://www.shopify.com/legal/privacy

Data processing takes place:

•   Pursuant to Article 6(1)(b) of the GDPR – for the purpose of payment processing,

•   and pursuant to Article 6(1)(f) of the GDPR – for the purpose of fraud prevention.

This data is not stored by Faina Lifestyle Sp. z o.o.

Depending on the purpose of processing, your
personal data may be processed on the basis of:

•  Article 6(1)(a) GDPR – user consent (e.g., newsletter, marketing cookies)

•  Article 6(1)(b) GDPR – contract performance (e.g., order processing)

•  Article 6(1)(c) GDPR – legal obligations (e.g., accounting, taxes)

•  Article 6(1)(f) GDPR – legitimate interests of the controller (e.g., security,
statistics, protection against abuse)

Our legitimate interests (Article 6, paragraph 1, letter f of the GDPR) include:

•  Operating an online store

•  Maintaining statistics and analytics

•  Pursuing and protecting against claims

•  Ensuring the security of the website and data

We always verify that your interests do not override our objectives.

Providing personal data:

•   Is voluntary, but necessary to complete an order or create a user account

•   May be required by law – for example, to issue an invoice or maintain accounting
records

•   Failure to provide data will prevent the order from being completed or contacted

We do not use automated decision-making, including profiling, that produces legal effects on you or significantly affects you in a similar way.

Data may be transferred outside the European Economic Area (e.g. within Google Analytics or Shopify), but only to entities that ensure an adequate level of protection in accordance with the GDPR – e.g. based on standard contractual clauses.

We reserve the right to update this Privacy Policy. Any changes will be posted on this website with an appropriate effective date.

Privacy Policy updated on: August 1, 2025