Privacy Policy of the Prismalumino.co.uk store

Thank you for your interest in our online store. Protecting your privacy is very important to us. In this privacy policy, you will find detailed information on how we handle your data. The data controller is: Drukarnia Piga.pl Sp. z o.o., ul. Mysłowicka 1, 43-100, Tychy, [email protected], NIP: 6462933172, REGON: 243492288.

1. ACCESS DATA AND HOSTING

You can access our website without providing any personal data. Every time a website is accessed, the server saves only so-called server logs, such as the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting internet service provider (access data), and logs the visit.

This data is analyzed solely to ensure the proper functioning of the site and to improve our offering. This serves to protect our legitimate interest in presenting our offering correctly. All access data is deleted within seven days after the end of your visit.

2. DATA COLLECTION AND PROCESSING TO FULFILL THE CONTRACT

We collect personal data when you voluntarily provide it to us when placing an order or contacting us (e.g., via contact form or email). Mandatory fields are marked as such because the data is necessary to fulfill the contract or respond to your inquiry. Without this data, you cannot place an order or contact us. The type of data collected is evident from the input forms. We use the data to fulfill the contract and respond to inquiries. Once the contract has been completed, the data will be restricted and deleted after the required retention periods, unless you consent to further use or we reserve the right to use it under legal regulations.

3. DATA TRANSFER

To fulfill the contract, we transfer your data to the delivery company if necessary for delivery. Depending on the selected payment service, we also transfer payment data to the payment institution involved. Some providers collect data independently if you create an account with them. Their privacy policies apply in such cases.

Some of our service providers are based outside the EU. Data is only transferred if necessary for contract performance.

3.1. DATA TRANSFER TO COURIERS

If you consent during or after the order, we will forward your email and phone number to the courier so they can contact you regarding delivery. You may revoke this consent anytime by contacting us or the courier. We will delete your data unless you allow continued use or legal exceptions apply.

4. EMAIL NEWSLETTER

Email advertising after subscribing

If you subscribe to our newsletter, we will use your data to send regular email updates based on your consent. You can unsubscribe at any time via the unsubscribe link or by contacting us. Your email will be deleted unless you consent to continued use. The newsletter is sent by a provider located within the EU or EEA.

5. Cookies and tracking technologies

In order to make our website more attractive, enable the use of specific functions, display relevant products and conduct statistical analyses, we use cookies and other tracking technologies on our pages.

What are cookies? Cookies are small text files that are automatically saved on your end device. Some of them are deleted after the end of the browser session (so-called session cookies), others remain on your device and allow us to recognize your browser the next time you visit the site (persistent cookies).

Legal basis and types of cookies

Essential cookies (technical): These are necessary for the correct and safe functioning of the website. Their use is based on our legitimate interest (Art. 6(1)(f) GDPR).
Analytical and marketing cookies: (including Google Analytics, Microsoft Clarity). We use them only after you have given your voluntary consent (Art. 6(1)(a) GDPR) via the cookie management panel upon entering the site.

Management of consent and settings You can withdraw your consent or change your preferences at any time in our cookie management panel (available in the footer of the page). You can also manage cookies through your browser settings (Google Chrome, Mozilla Firefox, Microsoft Edge, Apple Safari, Opera).

5.1 Google Analytics 4 (GA4)

On our website, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

Purpose and legal basis: This tool allows us to optimize our offer and improve the functionality of the website. The basis for data processing is your voluntary consent (Art. 6(1)(a) GDPR).
IP Anonymization: In Google Analytics 4, IP address anonymization is a default and automatic feature. Your IP address is shortened by Google within EEA member states before being transmitted further.
Data transfer: Information may be transmitted to Google servers in the USA. This transfer takes place based on the EU-U.S. Data Privacy Framework certificate, which ensures an adequate level of data protection recognized by the European Commission.
Blocking: In addition to the settings on our website, you can install the official browser add-on to opt-out: https://tools.google.com/dlpage/gaoptout.

5.2 Microsoft Clarity analytical tools

To better understand user interaction with our website, we use the Microsoft Clarity tool, provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA).

Purpose and scope of data: Microsoft Clarity creates heatmaps and anonymous session recordings (tracking cursor movements and scrolling). The tool is configured to automatically mask data entered in forms – we do not collect passwords or contact details.
Legal basis: Data is collected solely on the basis of your voluntary consent (Art. 6(1)(a) GDPR).
Data transfer: Information may be stored on servers in the USA. Microsoft bases this transfer on the EU-U.S. Data Privacy Framework certificate. Processing details can be found in the Microsoft Privacy Statement.
Retention period:

_clck file: 1 year (user ID).
_clsk file: 1 day (linking page views into a session).
Session recordings: standardly 30 days (selected samples up to 13 months).

5.3 Meta Pixel (Facebook Pixel)

Within our website, we use the "Meta Pixel" tool provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland).

Purpose: This tool allows us to measure the effectiveness of advertisements, optimize them, and create custom audiences (remarketing). Thanks to it, we can display advertisements tailored to your interests on Facebook and Instagram.
Operation: The Pixel establishes a direct connection with Meta servers during a visit to our website, which allows Meta to assign the visit to your user account on their services.
Data transfer: Data may be transmitted to the USA. Meta Platforms Inc. bases the transfer on the EU-U.S. Data Privacy Framework certificate. Detailed information on privacy protection can be found in the Meta Data Policy.

5.4 Hotjar analytical tool

To analyze user behavior and optimize our website, we use the Hotjar tool, provided by Hotjar Ltd (Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta).

Purpose and scope of data: Hotjar helps us better understand user needs (e.g., how much time they spend on specific pages, which links they click, what they like and dislike). The tool uses cookies and other technologies to collect data about user behavior and their devices (specifically the device's IP address – recorded and stored exclusively in anonymized form, screen size, device type, browser information, geographic location – country only).
Privacy protection: Hotjar stores this information on our behalf in a pseudonymized user profile. The tool is configured to automatically mask sensitive data entered in form fields, which means we do not record your personal data or passwords.
Legal basis: We use this tool solely based on your voluntary consent (Art. 6(1)(a) GDPR), expressed in the cookie management panel.
Data transfer: Data is stored on Hotjar servers in the European Union (Ireland/Germany). Hotjar Ltd ensures full compliance with GDPR and security standards.
Blocking: You can object to the creation of a user profile, Hotjar's storage of data about your use of our site, and Hotjar's use of cookies on other sites by using the official opt-out mechanism: https://www.hotjar.com/legal/compliance/opt-out/.

5.5 Google Ads advertising system

Within our website, we use the Google Ads system operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

Purpose: We use this tool to conduct advertising campaigns, including:

Remarketing: displaying advertisements for our products to you in the Google advertising network and on YouTube, tailored to your previous visits to our website.
Conversion tracking: analyzing whether clicking on an advertisement led to a specific action on the site (e.g., purchase or filling out a form), which allows us to optimize the advertising budget.

Operation: The system uses cookies to remember that you visited our site and to track your interactions with advertisements. This data is processed in an anonymized manner (we do not identify your identity directly through Google Ads).
Legal basis: We use these functions only after you have given your voluntary consent (Art. 6(1)(a) GDPR) via the cookie management panel.
Data transfer: Information about ad usage may be transmitted to Google servers in the USA. This transfer takes place based on the EU-U.S. Data Privacy Framework certificate.
Ad management: You can personalize the ads displayed or opt-out of personalization in your Google account settings: https://adssettings.google.com/.

6. CONTACT DETAILS AND YOUR RIGHTS

You have the right to access, correct, restrict, delete, or transfer your personal data. For inquiries or to exercise these rights, contact: Drukarnia Piga.pl Sp. z o.o., ul. Mysłowicka 1, 43-100, Tychy, [email protected]. You may also file a complaint with the supervisory authority.

7. RIGHT TO OBJECT

If we process your data to safeguard our legitimate interests, you may object for the future. For direct marketing, you may object at any time. If processing occurs for other reasons, objection must relate to your specific situation. We will then stop processing unless legitimate grounds override your interests or the data is needed for legal claims.

8. THIRD PARTIES ON OUR WEBSITE

Third-party providers may store cookies or similar technologies on your device and access them. Our trusted partners help tailor content, ads, and services, such as the Wirtualna Polska capital group.

9. PRODUCT REVIEWS

I) Reviews must relate to the purchased product.

II) Comments must relate to the specific content.

III) One review per product is allowed.

IV) Content must be lawful, ethical, and not infringe on others’ rights.

V) Reviews must not contain offensive language, hate speech, ads, links, or personal data.

VI) You are responsible for your content.

VII) All reviews are verified. Only verified users may review.

VIII) We may remove or edit non-compliant reviews and will inform you within 7 days.

IX) By posting a review, you grant us a license to use and publish it within the EU.

X) Reviews are shown from newest to oldest.

XI) Users may report content violations to [email protected].

XII) We may block content or accounts under moderation policies.

XIII) Moderation follows Article 14 DSA and legal requirements.

XIV) Users are notified by email if content is blocked.

XV) You may appeal any content or account suspension via email.