1. General provisions
2. Privacy and use of cookies on
   the website www.stilehandles.com (hereafter: „Policy”) was created and
   adopted by Robert Kwiecień, a business operator running the ENGER company
   Robert Kwiecień, 32-200 Miechów, ul. Zagrody 25, NIP: 6591047490, Regon
   351189474
3. The terms used in the policy
   mean:

• Service: on-line shop www.stilehandles.com
• User: entity using the Service;
• Owner: Robert Kwiecień, ul. Zagrody 25,
  32-200, running a business as the ENGER company Robert Kwiecień,
  registered in the Central Register and Information on Business Activity,
  NIP: 6591047490, Regon: 351189474, electronic address office@stilehandles.com
• Cookies: text files sent by the Website
  and saved on the User’s end device, which the User uses while browsing the
  website. The files contain the information necessary for the proper
  functioning of the service. Cookies usually include the domain name of the
  Internet service from which they originate, the length of time they are
  stored on the end device, and the number.

3. The policy aims in particular
   at:

• providing Users with information on the
  use of Cookies in the Service, as required by law, including the
  Telecommunications Law;
• ensuring the protection of users’ privacy
  to the standards and requirements of applicable laws.

4. The owner shall limit the
   collection and use of information relating to users to the minimum necessary
   for the provision of services to them.
5. To gain full access through
   the Service to the content and services offered by the Owner, it is advisable
   to accept the rules resulting from the Policy. Acceptance can be made by using
   the software settings installed on the device that is used or by configuring
   the service.
6. The following legal
   provisions, among others, apply:

• Telecommunications Law Act of 16 July
  2004  (J L  2019.2460 i.e., as amended);
• Act of 18 July 2002 on the provision of
  electronic services (J L. 2020.344 i.e. as amended);
• Regulation (EU) 2016/679 of the European
  Parliament and of the Council of 27 April 2016 on the protection of
  individuals about the processing of personal data and the free movement of
  such data and repealing Directive 95/46/EC (General Data Protection
  Regulation) (OJ L 119, 4.5.2016) together with the Polish legislation on
  personal data protection (hereinafter: ‘Regulation’);
• Law of 10 May 2018 on the protection of
  personal data (OJ 2019, it 1781).

2. Protection of privacy and
   personal data
3. Data concerning the Users are
   processed by the Owner following the law. The personal data of the Users
   obtained by the owner shall be processed based on the consent given by the User
   or of any other reason for the processing of the data following the rules, in
   particular the Regulation.
4. The owner shall exercise
   special care to protect the interests of the data subject and in particular,
   shall ensure that the data are:

• processed lawfully, fairly and
  transparently for the Clients and other data subjects;
• collected for specific, explicit and
  legitimate purposes and not further processed in a way incompatible with
  those purposes;
• adequate, appropriate and limited to what
  is necessary for the purposes for which they are processed;
• correct and updated as necessary;
• kept in a form which permits
  identification of the data subject for no longer than is necessary for the
  purposes for which the data are processed;
• processed in such a way as to ensure
  adequate security of personal data, including protection against unauthorised
  or unlawful processing and accidental loss, destruction or damage, by
  appropriate technical or organisational measures,

3. The owner shall take
   appropriate technical and organisational measures to ensure the protection of
   personal data processed, appropriate to the nature, scope, context and purpose
   of the processing, and the risk of infringement of the rights or freedoms of
   individuals.
4. The Owner strives to
   systematically modernise the IT, technical and organisational measures for the
   protection of such data, in particular, the Owner shall ensure that the IT
   protection measures are updated to protect against viruses, unauthorised access
   and other threats resulting from the operation of the IT system and
   telecommunications networks.
5. Apart from other cases
   arising from legal regulations, the Owner may process the following personal
   data of the Customer necessary to establish, shape the content, amend or
   terminate the contract:

1) Customer’s name and
forenames;

2) the permanent address of
residence;

3) address for
correspondence, if different from the address of residence;

4) Customer e-mail addresses;

5) telephone number;

6. The owner may process, with
   the consent of the Customer and for advertising, market and customer behaviour
   and preferences research, the results of such research to improve the quality
   of the services, other data relating to Customer which is not necessary for the
   provision of the Service by electronic means.
7. Each User who has made his or
   her data available to the Owner in any way shall be granted access to the data
   and exercise other rights by the data subjects following the applicable legal
   provisions, including those persons:

• the right to withdraw consent on the
  processing of personal data;
• the right to information concerning their
  data;
• the right to control the processing of
  data, including their completion, updating, rectification and erasure;
• the right to object to or to restrict
  processing;

5) the right to complain to
the supervisory authority and to use other legal means to protect their rights.

8. The owner may process
   personal data in an automated manner, including through profiling, under the
   terms of the Regulation. In this case, the owner’s actions are intended to
   serve as marketing purposes or to customize messages sent to users (including
   matching the information to the User’s needs or expectations). The User has the
   right to object to such processing of data, which may be expressed by sending a
   message to the address of the owner.
9. A person who has access to
   personal data shall process it only under the authority of the owner or under
   the agreement to entrust the processing of personal data and only at the
   request of the owner.
10. In connection with the
    activity of the Service, the Owner uses the services of other entities,
    including to execute the agreement with the User. Users’ data may be
    transferred to:

1) hosting company,

2) Service software
suppliers,

3) internet service
providers,

4) companies providing
courier or postal services,

5) providers of electronic
payment platforms,

5) providers of invoicing
software

6) entities providing
accounting services;

7) marketing or advertising
service providers.

3. Cookies
4. Cookies identify the User,
   which allows adjusting the content of the website it uses to his/her needs.
   Storing Users’ preferences enables proper adjustment of the content, including
   ads, to the needs of the User. The owner uses Cookies to ensure an appropriate
   standard of service convenience, and the data collected is used only internally
   to optimize operations.
5. Cookies are used to:

• adapt the content of the service to
  preferences and to improve the quality of service.
• optimize the use of the service, in
  particular by identifying the end-user device,
• the production of statistics,
• maintain user’s session
• provide the User with advertising content.

3. The owner processes
   statistical information about the use of the service, including session
   information, IP number, time spent on individual pages and sub-pages, use of
   individual service functionality, device information, and web browser
   information. Such data shall be processed following Article 6(1)(f) of the
   Regulation in the legitimate interest of the controller to facilitate the use
   of the service, to improve the quality and functionality of the services
   provided, and the processing of such data shall be without prejudice to the
   rights and freedoms of users. Information about users is not used for any
   additional purposes.
4. This data shall be processed
   as part of the owner’s current activities, but not more than 60 days after
   receipt of the information. After this time, the Owner may further process
   general statistical data, which will be deprived of any information concerning
   individual Users.
5. Please note that in some
   cases, the software installed by the User on the terminal device, used for
   browsing websites (e.g. a web browser) introduces a default storage of Cookies
   in the User’s terminal device. Users can change the Cookies settings at any
   time. These settings can be changed, among other things, to block automatic
   settings of Cookies or to inform on their placement in the end-users device.
   Detailed information about the possibilities and ways of handling cookies are
   available in the software settings (browser).
6. The user may at any time
   disable or restore the option of collecting cookies by changing the settings of
   his device and web browser in the use of cookies or other similar technologies.
7. Changing the settings is an
   objection that may cause inconvenience in using the Website in the future.
   Disabling the option of accepting Cookies allows the User to view the website
   content except when it is required to log in to access it.
8. Leaving the settings
   unchanged means that the data will be placed in the User’s final device (using
   the Website will cause automatic placement of cookies in the User’s final
   device).
9. Cookies are stored on users’
   devices for a maximum of 12 months.
10. The stored data placed in the
    User’s end device do not cause any configuration changes in the User’s end
    device or the software installed in that device.
11. The information on Cookies
    also applies to other similar technologies used in the Service.

4. Complaints
5. Claims can be submitted to
   the owner in electronic form at office@stilehandles.com
6. There is a possibility of
   using out-of-court ways of handling complaints and pursuing claims in legal
   relations with Consumers, including:

1)
Electronic dispute resolution via ODR (online dispute resolution), available at
https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=PL

2) the possibility of
arbitration proceedings before a common court or other authorities.

3. The owner undertakes to deal
   with the complaint within 14 days.
4. If the complaint is
   acknowledged, the Owner will take appropriate action.
5. To process the complaint, the
   owner shall process the data of the users submitting the complaint, in
   particular the e-mail address, name, content of the complaint, circumstances of
   the complaint, information obtained during the complaint handling process,
   including an explanation of the incident that caused the complaint. In the
   course of processing the complaint, the Owner may process some other
   information, including information about the User’s use of the Services,
   cookies or other similar technologies, information about devices. These data
   are processed following Article 6 (1) (b) of the Regulation to deal with the
   complaint and are processed for the time necessary to deal with the complaint
   and after the complaint procedure has been completed for archiving purposes following
   the Accounting Act, in the event of defence against possible claims against the
   service provider.
6. Where an investigation is
   initiated for possible breach of the provisions of the Regulations, Policy or
   law, rules of social coexistence or good manners, the Owner may process the
   User’s data until the end of the pending proceedings and until the expiry of
   the limitation period for claims, which usually amounts to 3 years, but in
   special cases provided for by law it may be longer. The data will then be
   processed, including those made available following Article 6(1)(f) of the
   Regulation, i.e. in the controller’s legitimate interest in pursuing its claims
   against the User. The legitimate interest of the controller will then take
   precedence over the rights and freedoms of the user.

5. Final provisions
6. The policy was adopted by
   order of the Owner and enters into force on 10.04.2020.
7. Any deviation from the Policy
   must be made in writing under pain of nullity.
8. The law applicable to the
   Policy is the law of the Republic of Poland.
9. In matters not covered by the
   Policy, the relevant legal provisions shall apply.