Privacy Policy of the PuffLab.Pro https://pufflab.pro (“Store”)

Dear User!

We care about your privacy and want you to feel comfortable while using our services. Below, we present the most important information regarding the processing of your personal data and the use of cookies by our Store. These details have been prepared in accordance with the GDPR (General Data Protection Regulation).

DATA CONTROLLER

Administrator: Pufflab.pro based in Poland.

The User’s personal data may also be processed by another entity authorized by the Administrator, in accordance with Article 28 of the GDPR (only for certain services offered by the Store, for purposes and entities specified in the Privacy Policy).

PERSONAL DATA AND PRIVACY

If you intend to create a User Account and use our services, you will be asked to provide us with your personal data. Your data is processed for the purposes listed below, related to the Store’s operations and the provision of its services (“Services”).

Processing purpose:

Depending on your choices, this may include:

• Providing services offered in the Store
• Fulfilling your orders
• Direct marketing of offered services (excluding newsletters)
• Sending newsletters

Legal basis for processing:

• A sales contract or actions taken at your request to conclude it (Article 6(1)(b) GDPR)
• Legal obligations imposed on us, e.g., related to accounting (Article 6(1)(c) GDPR)
• Your consent given in the Store (Article 6(1)(a) GDPR)
• A service contract or actions taken at your request to conclude it (Article 6(1)(b) GDPR)
• Our legitimate interest in processing data to establish, assert, or defend potential claims (Article 6(1)(f) GDPR)
• Our legitimate interest in conducting direct marketing (Article 6(1)(f) GDPR)
• Our legitimate interest in processing data for analytical and statistical purposes (Article 6(1)(f) GDPR)
• Our legitimate interest in conducting customer satisfaction surveys (Article 6(1)(f) GDPR)

Providing data:

Voluntary, but in some cases necessary for concluding a contract or using the Store’s services.

Consequences of not providing data:

• Inability to register in the Store
• Inability to use the Store’s services
• Inability to make purchases in the Store
• Inability to receive information about promotions or special offers (newsletter)

Withdrawal of consent:

Data processing remains lawful until you withdraw your consent.

DATA RETENTION PERIOD

We will process your data only for the period in which we have a legal basis to do so, i.e., until:

• We are no longer legally required to process your data
• The possibility of establishing, asserting, or defending claims related to the contract ceases
• You withdraw your consent if it was the basis for processing
• Your objection to data processing is accepted – in cases where the processing was based on the legitimate interest of the administrator or for direct marketing purposes
• Whichever applies in your case and occurs last.

DATA SECURITY

When processing your personal data, we apply organizational and technical measures in compliance with applicable legal regulations, including encrypting connections with an SSL certificate.

The Administrator also informs you that the following tracking technologies are used to monitor actions taken by the user/customer within the Store’s website:

• Edrone tracking codes – for website statistics analysis and marketing purposes exclusively for email, SMS, and social media campaigns launched or designated by the Administrator using the edrone system.

YOUR RIGHTS

You have the right to request:

• Access to your personal data
• Data rectification
• Data deletion
• Restriction of processing
• Data transfer to another administrator
• Objection to processing

COOKIES

Our Store, like most websites, uses cookies. These files:

• Are stored on your device (computer, phone, etc.)
• Enable you to use all Store functions
• Do not alter your device settings

By adjusting your browser settings, you can delete cookies or block their use.