Free delivery!! from 10,29 €

Privacy Policy

I. General information

  1. This Privacy Policy is a set of rules aimed at informing you about all aspects of the process regarding the collection, processing, and securing of your personal data. The Policy is addressed to all Users of the Controller's Website and those using the Newsletter and Survey services.
  2. The IdoSell online shop service is provided to the Personal Data Controller by IAI S.A., al. Piastów 30, 71-064 Szczecin, NIP (Tax ID): PL5252767146, KRS: 0000891870, REGON: 381595506. General information related to the handling of information collected by entities that are clients of IAI S.A. and use the IdoSell system is available at https://www.iai-sa.com/pl/polityka-prywatnosci-i-bezpieczenstwa/.
  3. This Policy sets out the rules for the processing of personal data by the Personal Data Controller, which is:

    TIGRE sp. z o.o.,
    tel. +48 71 727 6024,
    info@aromantra.com,
    NIP 6121861477,
    REGON 367188870.
    Seller's registered office address:
    Tygrysia 6, 21-040 Świdnik, Poland
    (hereinafter: the "Controller")

    Contact with the Data Protection Officer, Ms Daria Bartnicka, is possible via traditional mail addressed to the Controller's registered office or via e-mail at: iod@odokancelaria.pl.
  4. This Policy may be amended and updated in the event of changes in practices related to the processing of personal data (taking into account, inter alia, current case law and guidelines of the President of the Personal Data Protection Office) or changes in generally applicable laws. The Controller will appropriately inform Users of changes to the Policy by placing relevant information on the Website. In the case of Users subscribing to the Newsletter service, this information will be sent directly to the User's provided e-mail address.
  5. Using the Controller's Website entails the necessity for the User to read the contents of this Privacy Policy and, in the case of subscribing to the Newsletter, to accept it.
  6. Providing personal data to the Controller is voluntary; however, in the case of processing data stored in strictly necessary cookies or communicating with the Controller via the contact form, providing data will be a necessary condition to achieve the indicated purposes and for the proper functioning of the Website.

II. Definitions

  1. Controller means the entity that decides how and for what purposes Personal Data are Processed. The Controller is responsible for the compliance of the processing with applicable data protection laws.
  2. Personal Data means any information relating to an identified or identifiable natural person.
  3. Process, Processing or Processed means any operation or set of operations which is performed on Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  4. Processor means a natural or legal person or other entity which Processes Personal Data on behalf of the Controller (other than an employee of the Controller).
  5. Website - https://www.aromantra.com/
  6. The Controller's Fanpages on social media:
  7. Electronic Services - services provided via the Website. The provision of Electronic Services to Users on the website takes place on the terms set out in this Policy.

III. Processing of Users' Personal Data

  1. The Controller may obtain Users' Personal Data in particular in the following cases:
    1. provision of Personal Data by Users (e.g. contact by e-mail, telephone, through or in any other way) based on Art. 6(1)(f) of the GDPR (legitimate interest of the Controller – responding to a message, inquiry) in connection with the necessity to handle a reported matter or process an inquiry,
    2. pursuing claims and taking actions in connection with the defence of the Controller's rights, conducting legal proceedings and, inter alia, enabling the use of the Website through cookies, preventing fraud when using the Website, in particular handling, maintaining, improving and providing all its features as well as creating summaries, analyses and statistics for the internal needs of the Controller, this includes in particular: reporting, marketing research, planning the development of the Website and Electronic Services, development work, creating statistical models based on Art. 6(1)(f) of the GDPR (the aforementioned legitimate interest of the Controller),
    3. obtaining Users' Personal Data published on social media (the Controller's Fanpage) (e.g. obtaining information from the User's private profile on social media, to the extent that such information is visible as public) based on Art. 6(1)(f) of the GDPR (legitimate interest of the Controller - promotion of own activity and services, running a social media profile (Fanpage), building and strengthening relations with customers, conducting analyses and statistics regarding the popularity and functioning of the profile as well as establishing, pursuing and defending against possible claims concerning the use of the profile, responding to contact),
    4. the User's consent to process the provided personal data in order to send the Newsletter, based on Art. 6(1)(a) of the GDPR (consent) sending commercial information – Newsletter, sharing marketing content via electronic communication, in accordance with Art. 398 of the Electronic Communications Law,
    5. obtaining or requesting Users to provide Users' Personal Data during Users' visits to the Controller's websites or the use of any functions or resources available on or through the Website - cookies precisely, including those of third parties. When Users visit the Website, Users' devices and browsers may automatically share certain information (such as device type, operating system, browser type, browser settings, IP address, language settings, dates and times of connecting to the Website and other technical information regarding communication), some of which may constitute Personal Data. During a visit to the Website, no Users' Personal Data will be stored by the Controller without a valid legal basis. Regarding cookies, the Controller - apart from strictly necessary cookies - will each time obtain the User's consent to install other cookies (including third-party cookies such as Google Analytics). Granting the aforementioned consent is optional and does not affect the possibility of using the Website. Processing takes place based on Art. 6(1)(a) of the GDPR (consent – regarding other cookies, excluding strictly necessary ones) and Art. 399 of the Electronic Communications Law (legal provision – regarding strictly necessary cookies).
    6. Account: based on Art. 6(1)(b) of the GDPR (conclusion of an agreement for the provision of electronic services).
    7. Survey: based on Art. 6(1)(b) of the GDPR (Survey: based on Art. 6(1)(b) of the GDPR (conclusion of an agreement for the provision of electronic services).
  2. Providing personal data is voluntary and is not a statutory requirement. In certain cases, however, it is not possible to use the full functionality of the Website or Electronic Services without providing personal data. Categories of Users' Personal Data Processed by the Controller may, in particular, include:
    1. Personal details: first name(s), surname(s),
    2. Contact details: company data, e-mail address, telephone number.
    3. Content of communications: all messages (inquiries, statements, views, and opinions) sent via the contact form or published on the Controller's website or their Fanpages by the User.
    4. IP number, cookies, and information on how our Website and Electronic Services are used.
    5. Image: in the case of publishing an opinion, leaving a comment, or clicking the "Like" button on the Controller's social network (Fanpage) (provided that the User's image is shared on the private account of this portal).
    6. Behavioural data (consent to Google Ads): Information about user activity on websites, clicks on advertisements, data on the time spent on the page and interactions with the content.
    7. and information collected via OpenAI Pixel, including product page view events, adding a product to the basket and making a purchase, ad click identifier, event identifiers, information on the source of entry to the page, and transaction data, such as order value and currency — to the extent that this information is transmitted by the implemented integration.
  3. The Controller uses fanpage profiles on social networks. Public data shared by social media Users can be used for:
    1. responding to private messages directed to us,
    2. conducting discussions within comments under individual posts,
    3. sharing our posts with people observing our Fanpage,
    4. marketing purposes, consisting in informing about our services and about ourselves using posts we place on our Fanpage, including sponsored posts, which are displayed to a wider audience of Users,
    5. statistical purposes, consisting in presenting data on the viewability of our posts, their reach, number of interactions; data presented to us by social network owners are statistical data, however, they are created based on the observation of behaviour on our Fanpage.
  4. Upon liking the Controller's post, leaving a comment, sending a private message, or subscribing to the channel, the Controller, together with:
    • Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland
    • Google Ireland Limited Google Building Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland,
    becomes a Joint Controller of your personal data shared on its Fanpage with respect to processing data for statistical and advertising purposes.
  5. In view of the above, we encourage you to read the privacy policies of:

IV. Sharing Personal Data with third parties

  1. The Controller may share Users' Personal Data with:
    1. persons authorised by the Controller to process data,
    2. entities to which data processing has been entrusted, e.g. technical service providers and entities providing advisory services,
    3. other controllers if required by law or in good faith that such action is necessary to comply with applicable laws, in particular in response to a request from a court or state authorities,
    4. the e-commerce platform provider (IdoSell/IAI S.A.), including with respect to technical intermediation in data transmission to Google tools (Google Analytics, Google Ads, Google Tag Manager) via the Google Tag Gateway feature,
    5. OpenAI — in connection with the Controller's use of the OpenAI Pixel tool to measure ad conversions in ChatGPT. Depending on the terms of service and tool configuration, data may be processed to measure, report, optimise and attribute conversions to advertising campaigns. Pursuant to the relevant OpenAI Conversion Terms, the Controller and OpenAI act in principle as independent data controllers, subject to the cases specified in the contractual documentation.
  2. If we engage a third party to Process Users' Personal Data, in accordance with the data processing agreement concluded with such an entity, the Processor will be obliged to:
    1. Process only the Personal Data indicated in prior written instructions of the Controller; and
    2. apply all measures to protect the confidentiality and security of Personal Data and ensure compliance with all other requirements of generally applicable law.
  3. Due to the use of Facebook, Instagram, TikTok and YouTube services, data may be transferred by these entities to third countries - the United States of America (USA) or China in connection with their internal sharing by these entities with: Meta Platforms Inc., Google LLC (USA) or Beijing ByteDance Technology Co Ltd. (China), over which the Controller has no influence.

V. Third-party services

  1. The website may contain features or links redirecting to websites and services provided by third parties that are not managed by us. The information you provide on these websites or services will be subject to their own privacy policies and data processing procedures.
  2. The Controller is not responsible for procedures related to processing by independent Controllers of websites and service providers.
  3. We encourage you to read the privacy and security policies of third parties before providing them with information.

VI. Data Protection

  1. The Controller informs that they have implemented appropriate technical and organisational measures to protect Personal Data, in particular including safeguards against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, and other unlawful and unauthorised forms of Processing, in accordance with applicable law.
  2. The Controller is not responsible for the actions or omissions of Users. Users are responsible for ensuring that all Personal Data is sent to the Controller in a secure manner.
  3. Personal data will not be subject to automated profiling, i.e., automated decision-making concerning the User, meaning decisions made by technical means without human involvement, producing legal effects concerning the profiled person or similarly significantly affecting the profiled person.

VII. Data Accuracy

  1. The Controller takes all reasonable steps to ensure that:
    1. Users' Personal Data Processed by the Controller are accurate and, where necessary, kept up to date;
    2. any Users' Personal Data Processed by the Controller that are inaccurate (having regard to the purposes for which they are Processed) are erased or rectified without undue delay.
  2. The Controller may, at any time, ask Users about the accuracy of the Processed Personal Data.

VIII. Data Minimisation

The Controller takes all reasonable steps to ensure that the scope of Users' Personal Data Processed is limited to the Personal Data adequately required for the purposes indicated in this Policy.

IX. International Data Transfer

Personal data may be shared and processed outside the European Economic Area (the European Economic Area comprises: the European Union as well as Iceland, Liechtenstein and Norway, collectively "EEA"). If personal data is transferred outside the EEA, the Controller requires appropriate safeguards. The Controller will fulfil its obligations under Chapter V of the GDPR to ensure the correctness of this type of processing, e.g., based on decisions of the European Commission on an adequate level of privacy protection, such as the EU-US Data Privacy Framework.

  1. In connection with the use of the OpenAI Pixel, data may be transferred to entities participating in the provision of OpenAI services, including outside the European Economic Area, if this results from the relevant terms of service and the organisation of processing. In the event of a data transfer outside the EEA, the Controller ensures the application of an appropriate mechanism compliant with Chapter V of the GDPR. Information regarding a specific transfer mechanism should be determined based on current OpenAI contractual and data protection documentation.

X. Personal Data retention period

  1. The criteria determining the duration of the period for which the Controller stores Users' Personal Data are as follows: The Controller stores copies of Users' Personal Data in a form that permits identification only for as long as is necessary to achieve the purposes indicated in this Policy, unless generally applicable laws require a longer storage period for Personal Data. In particular, the Controller may store Users' Personal Data for the entire period necessary to establish, exercise or defend claims (limitation of claims in accordance with Art. 118 of the Civil Code).
  2. Personal data is stored:
    1. for a period of 30 days from the moment of contact (telephone, e-mail from the Website); personal data may be processed for a longer period if, as a result of the sent inquiry, the User decides to use the Controller's services (Newsletter);
    2. in the case of using our services (conclusion of an agreement), for the period of contract performance and the period necessary to handle submitted complaints, until the resolution of possible disputes and settlement of the parties, taking into account the relevant limitation periods for claims;
    3. with regard to the Controller's internal administrative purposes as well as other data processing purposes where the legal basis is the legitimate interest of the Controller, personal data will be stored until the legitimate interests of the Controller forming the basis for data processing are fulfilled or an objection to such processing is submitted earlier, after the Controller conducts an appropriate analysis of the User's interest and the Controller's processing bases;
    4. in the case of data processed on our Fanpage, until an objection to its further processing is raised by clicking "unlike", withdrawing a like from a post, deleting a comment to a post, or cancelling a Subscription;
    5. in the case of using our Newsletter services, for the duration of the service provision or until the consent to receive commercial information by electronic means is withdrawn.
  3. Data related to conversion measurement via the OpenAI Pixel is stored for the period necessary to fulfil measurement purposes, in accordance with the tool configuration and applicable OpenAI terms. In the standard configuration, the OpenAI Pixel may store the **oppref cookie for up to 30 days and the **obref cookie for up to 365 days. These are browser identifier retention periods, not declared retention periods for all data on OpenAI's side. Actual periods may depend on the tool configuration, User consent, and browser limitations.

XI. Google Analytics

  1. The Controller uses the Google Analytics tool provided by Google LLC, whose infrastructure is located at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Controller indicates that Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA) has joined the EU-US Data Privacy Framework, i.e., it ensures an adequate level of security for the processing of personal data in accordance with the GDPR.
  2. As part of using the IdoSell online store system, Google measurement tags and scripts (Google Analytics, Google Ads, Google Tag Manager) may be shared via the Website domain using the Google Tag Gateway feature offered by the platform provider IdoSell (IAI S.A.). Measurement requests are then technically handled through the infrastructure of the Website and IdoSell, and subsequently transmitted to Google for the purposes described below. Designating resources as "first-party" refers exclusively to the technical method of their delivery and does not mean that data ceases to be transmitted to Google or that it becomes data processed solely by the Controller. Applying this mechanism does not alter the processing purposes or the legal bases indicated in this section, including the scope of required User consents and the operation of the Consent Mode.
  3. Google Analytics allows for:
    1. Website traffic tracking: information on the number of users, number of visits, traffic sources (e.g., ads, search engines, social media).
    2. User behaviour monitoring: analysis of which pages are most frequently visited, time spent on the page, bounce rate.
    3. User segmentation: demographic, geographic, and technological data (e.g., device type, browser).
    4. Goal and conversion tracking: analysis of how users complete specific actions, such as purchases, subscribing to a newsletter, or downloading materials.
  4. Google Analytics processes data that may include:
    1. IP addresses: used to identify the geographical location of users, which combined with other data may constitute personal data.
    2. Cookies: storing unique identifiers of users and sessions, enabling activity tracking, only upon the User granting appropriate consent.
    3. Technical data: e.g., browser type, operating system, screen resolution, internet service provider.
  5. The Controller uses the IP anonymisation feature, which disables the possibility of identifying Users (the last octet of the IP address is masked before data storage or processing).
  6. The Controller processes data using the indicated tool to provide analyses and reports on website traffic and the effectiveness of marketing activities based on the Controller's legitimate interest and the User's consent (acceptance of Google Analytics cookies). The Controller has concluded a relevant Data Processing Agreement with Google, regulating the issue of data security as required by law.
  7. The Controller uses the Consent Mode feature, which allows measuring traffic and conversions on the Website even when the User does not consent to the saving of cookies, while maintaining full compliance with GDPR requirements, where a tracking code is implemented allowing the collection of only basic, anonymised and aggregated data concerning visit time on the Website, referring page information, and enabling the measurement of conversions from advertising campaigns. If the User consents to specific types of data processing (Google Analytics cookies), the respective tags will operate fully. If consent is not granted, the tools will continue to function but in a restricted mode, collecting anonymous data without any possibility of identifying the User. The Consent Mode tool helps comply with the requirements arising from the GDPR and the ePrivacy directive, respecting Users' decisions regarding cookie consent.
  8. The retention period for collected data, subject to acceptance of Google Analytics cookies, is 14 months.
  9. We encourage you to read the Google Privacy Policy available at: https://policies.google.com/privacy?hl=en
  10. The User may configure the browser to block cookies related to Google Analytics. Google Analytics uses cookies such as _ga, _gid, and _gat.
  11. The User may also use a plugin to block Google Analytics. Google offers a browser add-on for opting out of Google Analytics, which can be downloaded from the official website: https://tools.google.com/dlpage/gaoptout. Once installed, the plugin prevents data from being sent to Google Analytics from all visited websites.

XII. Google Ads

  1. The Controller uses the Google Ads tool, an advertising tool provided by Google LLC, whose infrastructure is located at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Controller indicates that Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA) has joined the EU-US Data Privacy Framework, i.e., it ensures an adequate level of security for the processing of personal data in accordance with the GDPR.
  2. The Google Ads service allows the use of tracking technologies, such as cookies and remarketing tags, which enable the display of ads tailored to user interests.
  3. Google Ads may collect and process data regarding user interactions with our ads and website, including:
    1. IP addresses,
    2. device identifiers,
    3. web browser information,
    4. geolocation data, and
    5. browsing history.
    This data is processed to evaluate the effectiveness of advertising campaigns and optimise advertising content.
  4. Users can manage their advertising preferences via Google Ads settings (https://adssettings.google.com) and use the option to opt-out of personalised ads through the Network Advertising Initiative website: https://www.networkadvertising.org/choices/
  5. We encourage you to read the Google Privacy Policy available at: https://policies.google.com/privacy?hl=en

XIII. Facebook Pixel

  1. By using the tracking Pixel services provided by Facebook, the Controller becomes a joint controller of personal data along with the service provider, i.e., Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland. The scope of joint data processing/joint controllership includes:
    1. the collection of personal data, and
    2. its transmission to Facebook.
  2. The types of personal data in connection with the Controller's use of the Pixel product on its website, subject to joint controllership with Meta Ireland, include:
    1. information in HTTP headers, which contains information about the browser or application used (e.g., user agent, country/language setting),
    2. information regarding standard/optional events, e.g., "Page view" or "App install", further object properties, and buttons clicked by website visitors, depending on the configuration of the Business Tool,
    3. online identifiers, including IP addresses and, if provided, identifiers associated with Meta or device identifiers (e.g., advertising identifiers on mobile operating systems), and information on opting out/restricting ad tracking.
    Further data processing by Meta Ireland is not part of the joint data processing with the Audited entity.
  3. Third parties, including Meta, may use cookies, web beacons, and similar technologies to collect or receive information from the website and elsewhere on the internet, and use it to provide measurement services, target, and deliver advertisements. The User can opt out of the collection and use of their information for ad targeting; detailed information can be found at: https://en-gb.facebook.com/business/help/165516217407801?id=1913105122334058. Additionally, the User may use mechanisms allowing them to make a choice (e.g., by visiting links to pages like http://www.aboutads.info/choices and http://www.youronlinechoices.eu/).
  4. We encourage you to read the joint controllership rules set out by Meta, link to the page: https://www.facebook.com/legal/controller_addendum, the Terms of use of the Pixel product, link to the page: https://www.facebook.com/legal/terms/businesstools, and the mechanisms enabling Users to exercise choice regarding the scope.

XIV. OpenAI Pixel

  1. The Controller may also use the OpenAI Pixel tool provided by OpenAI to measure the conversion of ads displayed within the ChatGPT service, including events of product page views, adding products to the basket, and making a purchase. In this regard, the following may be processed: event information and visited page address, ad click identifier, online identifiers, technical browser data, and transaction value and currency — to the extent provided by the implemented integration. The tool may save the **oppref (up to 30 days) and **obref (up to 365 days) cookies. The OpenAI Pixel is launched only upon obtaining the User's consent (Art. 6(1)(a) GDPR); withdrawal of consent halts further measurement. With regard to this tool, the Controller and OpenAI operate as independent data controllers in principle, in accordance with the OpenAI Conversion Terms (https://openai.com/policies/conversion-terms/; technical documentation: https://developers.openai.com/ads/measurement-pixel). The User's rights in this respect are described in the section concerning data subjects' rights.

XV. Cookies

  1. When the User uses the Website, data concerning the user is automatically collected. This data may include:
    1. IP address,
    2. domain name,
    3. browser type,
    4. operating system type.
  2. This data may be collected by:
    1. cookies,
    2. the Google Analytics system,
    3. and may be recorded in server logs.
  3. A cookie is a small piece of textual information in the form of text files stored by the browser on the hard drive of your computer or on the memory card of your smartphone. During subsequent visits to the website, the information stored in the cookie file is sent back to the Website. This enables the Website to recognise you and tailor the content to your needs.
  4. In order to improve our Website, provide the most relevant content, and analyse how Users use our Website, we may use cookies.
  5. We may process data contained in cookies for the purposes of:
    1. personalising the Website: remembering User information so that the User does not have to re-enter this information on subsequent visits;
    2. delivering ads, content, and information tailored to the User;
    3. monitoring aggregated website usage metrics, such as the total number of visitors and pages viewed.
  6. We use the following types of files:
    1. session cookies, which are temporary files stored in the device of the person visiting the Website until they leave it;
    2. persistent cookies, which are stored in the end device of the person visiting the Website for the time specified in the file's parameters or until they are manually deleted;
  7. Cookies can be divided into the following categories:
    1. functional cookies are necessary for the proper functioning of the website and serve to remember, e.g., login sessions, language preferences, filling in forms, selected privacy options. You can block them in your browser, but then some parts of the site may not work properly;
    2. analytical cookies allow checking the number of visits and traffic sources in our store. They help us determine which pages are more and which are less popular, and understand how users navigate the site. This enables us to study statistics and improve the performance of our store. The information collected by these cookies is aggregated and is therefore not intended to establish your identity. If you do not allow their use, we will not know when you visited our website;
    3. advertising cookies allow tailoring the displayed advertising content to your interests, not only on our site but also beyond it. They may be installed by advertising partners via our website. Based on the information from these cookies and activity on other sites, your profile of interests is built. Advertising cookies do not directly store your personal data but identify your web browser and hardware. If you do not allow the use of these cookies, we will still be able to show you ads, but they will not be tailored to your preferences.
    4. Technologies used for advertising measurement may also include the OpenAI Pixel. Depending on the configuration, the tool may save identifiers in the **oppref and **obref cookies, used to attribute events in the store to interactions with ads in ChatGPT. These files are used exclusively within the scope permitted by applicable law and the User's consent settings.
  8. We use analytics and similar services that contain third-party cookies. When using the Website, third-party cookies may be used to enable the use of Website functionalities and integrated sites or to analyse the effectiveness of advertising campaigns and collect anonymous information on the use of the Website for statistical purposes.
  9. This Privacy Policy does not govern the rules for using third-party cookies. Each third party sets its own rules for using cookies in its privacy policy. We encourage you to read the details related to data processing within Google Analytics as outlined in the explanations prepared by Google: https://support.google.com/analytics/answer/6004245, Facebook Pixel: https://www.facebook.com/privacy/policy.
  10. The User may manage consents for selected cookies in any way using the dedicated tool located on the Website. At the same time, we inform you that the lack of consent, deletion, blocking, or restriction of the placement of cookies may cause difficulties or even prevent the use of the Website.

XVI. Newsletter

  1. Using the services of receiving marketing information (Newsletter) for direct marketing purposes is voluntary and possible only upon prior consent by the interested person.
  2. The Newsletter service is provided via the IdoSell system https://www.iai-sa.com/pl/polityka-prywatnosci-i-bezpieczenstwa/.
  3. Marketing information is sent via the following communication channels and in the following forms:
    1. via electronic mail in the form of sent e-mail messages,
    2. via telecommunications terminal equipment in the form of SMS text messages.
  4. Subscribing to the Newsletter takes place by filling out the form available on the Controller's Website (providing personal data such as first name, telephone number, and e-mail address) and accepting this Privacy Policy governing the rules of data processing and the rules of service provision.
  5. The service is provided free of charge for an indefinite period and may be irregular in nature.
  6. The Service Recipient may opt out of receiving the Newsletter at any time with immediate effect by informing the Service Provider by e-mail at: info@aromantra.com or by clicking the link provided in each e-mail message constituting the Newsletter. Resignation is tantamount to terminating the agreement on the provision of electronic services concerning the Newsletter.
  7. The Controller is not responsible for the User providing false data or the non-delivery of the Newsletter due to reasons beyond the Controller's control (e.g., technical problems on the side of the internet service provider).
  8. The Controller undertakes to provide the service in accordance with the Policy and applicable laws, protecting Users' personal data in accordance with the GDPR and the Personal Data Protection Act. The User undertakes to use the service in a manner compliant with the law and this Policy and not to provide content of an unlawful nature.

XVII. Account

  1. The Controller provides an Account service electronically. The service is provided in accordance with the law, in particular the Act of 18 July 2002 on providing services by electronic means and the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
  2. The Account service consists of creating an individual User account on the Website enabling the purchase of the Controller's products. The Terms and Conditions are available at the link https://www.aromantra.com/pol-terms.html

XVIII. Survey

  1. The Controller provides the Survey service. The aim of the survey is to provide the User with its results in the form of:
    1. zodiac sign,
    2. element,
    3. numerological number,
    4. chakra that requires attention,
    5. dedicated products.
  2. The Controller will make every effort to provide an answer to a question within no more than 24 hours.

XIX. Provision of electronic services

  1. It is prohibited for Users to provide content of an unlawful nature.
  2. The User is obliged to use the Controller's Website and the offered Services in a manner consistent with the law, good practices, using data corresponding to the factual state, and not otherwise acting contrary to the provisions of this Policy. The Controller is not responsible for the User providing false data or for the non-delivery of the service due to reasons beyond the Controller's control (e.g., technical problems on the internet service provider's side).
  3. The User is obliged to maintain confidentiality and not to disclose to third parties any information obtained in connection with the provision of Services by the Controller, including commercial, organisational, technological, and financial information.
  4. The technical requirements necessary to use the Services provided electronically are internet access, a device enabling its use, such as a computer, laptop, or other mobile device with a web browser, access to electronic mail and a configured e-mail account, any properly configured version of a web browser supporting cookies, among others (Internet Explorer, Opera, Mozilla Firefox, Safari, Google Chrome).
  5. Using the Services on the Internet, despite the Controller applying safeguards aimed at preventing or significantly impeding hacking into the system (hacker attacks), may entail the risk of unwanted infection of the IT system by malicious software. Therefore, the Controller additionally recommends using updated antivirus software and applying an appropriate system firewall by the User.
  6. The User has the right to file a complaint regarding the provision of services by electronic means. Complaints should be submitted in writing and directed to the Controller's registered office address or via e-mail (indicated in Section I). The complaint should contain the User's first name, surname, and e-mail address (e-mail notification), a description of the problem serving as the basis for the complaint, and the User's request related to the complaint. The Controller will process the complaint within 14 days of receiving it. The User will be informed about the outcome of the complaint handling process through the same communication channel.

XX. Users' rights regarding the processing of their personal data

  1. In connection with the processing of personal data, you have the following rights:
    1. the right of access to processed personal data – on this basis, upon the data subject's request, the Controller provides information on the processing of personal data concerning them, including primarily the purposes and legal bases of processing, the scope of the data held, entities to which personal data are disclosed, and the planned date of their deletion. As part of the right of access, the data subject may also request information on to whom their personal data is shared and whether it is subject to profiling and an automated decision-making process. The data subject also has the right to obtain a copy of their data.
    2. the right to rectification – on this basis, the Controller, at the request of the data subject, removes possible discrepancies or errors concerning the processed personal data, and supplements or updates them if they are incomplete or have changed;
    3. the right to erasure (right to be forgotten) – on this basis, upon the request of the data subject, the Controller deletes data whose processing is no longer necessary to achieve any of the purposes for which it was collected, consent to its processing was withdrawn, or an objection was raised, and this is not required to establish, pursue or defend the Controller's claims;
    4. the right to restriction of processing and data portability – on this basis, upon the data subject's request, the Controller ceases operations on this personal data to the extent corresponding to the law and also provides this personal data in a format allowing it to be read by a computer;
    5. the right to lodge a complaint – by exercising this right, a person who considers that their personal data is processed unlawfully may lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland);
    6. the right to object – the data subject may at any time object to the processing of personal data for the purposes for which it was collected and is processed. Objection to direct marketing - if personal data is processed for direct marketing purposes, the data subject has the right to object at any time to processing of their personal data for such marketing;
    7. the right to withdraw consent – if we process personal data on the basis of granted consent, the data subject may withdraw this consent at any time. Withdrawal of expressed consent does not render the processing of personal data up to that point unlawful; revocation of consent does not affect the lawfulness of prior processing, but will result in personal data no longer being used for these purposes from the moment of consent withdrawal.
  2. A request regarding the exercise of the rights described above may be submitted via traditional mail by writing to the Controller's registered office address or via the e-mail address indicated in Section I.
  3. The request should, as precisely as possible, indicate what the demand concerns, i.e., in particular the addressee of the request and which right from the ones described above the person submitting the request wishes to exercise. If the Controller is unable to determine the content of the demand or identify the person submitting the request based on the notification made, they will request additional information from the applicant.
pixel