1. Seller or FIRANTO – MB Firanto, a private legal entity registered in the Register of Legal Entities of the State Enterprise "Registrų centras" of the Republic of Lithuania, legal entity code: 305414905, registered office address: 89 Žeimenos Street, Kaunas, Lithuania.

2. Shop – FIRANTO online store: www.firanto.pl

3. Customer or Buyer – any person purchasing goods in the Store. A natural person may be a Buyer only after reaching the age of 18 or – if they are a minor who has reached the age of 14 – with the consent of their parents or legal guardians.

4. Account – the result of the Buyer's registration in the Store, under which an account is created, storing their personal data and order history.

5. Cookie – a small file sent to the device of each person visiting the Store. This term includes not only cookies, but also the use of similar tools.

6. Password – a unique combination of letters and numbers created during registration in the Store. It is used for the first time you log in to your Account and for each subsequent login.

7. Browser – a program designed to display web pages (websites) on a mobile device.

8. Personal data – any information about a natural person whose identity has been established or can be established.

9. Personal Data Administrator – MB Firanto, 305414905, 89 Žeimenos Street, Kaunas, Lithuania.

10. Privacy Policy – this document, which defines the main principles of processing Personal Data when using the Store.

11. IP address – a unique number assigned to each computer connected to the Internet, known as an Internet Protocol (IP) address. Because these numbers are typically assigned by country blocks, an IP address can often be used to identify the country where a computer is connected to the internet.

12. Terms and Conditions – approved applicable Terms and Conditions for the purchase of goods in the Firanto online store.

13. Direct marketing – activities consisting in offering goods or services to persons by post, telephone or other direct means and/or collecting their opinions on the goods or services offered.

14. This Privacy Policy sets out the basic rules for the processing of Personal Data when the Buyer uses the Store.

15. By using the website and the FIRANTO Store, the Client confirms that they have read the Privacy Policy and the rules for the processing of Personal Data specified in the Privacy Policy. If the Client does not agree with the Privacy Policy, they have the right not to use the Store. You can read the Privacy Policy at any time. The Client will be informed about any future changes and/or additions to the Privacy Policy on an ongoing basis by publishing a new version of the Privacy Policy in the Store, where it will be possible to read and familiarize themselves with it. By logging in to the Store using services provided by third parties, the Client confirms that they have read the Privacy Policy and agrees to the processing of Personal Data in accordance with the procedure specified in the Privacy Policy. Firanto has the right to collect and obtain information, which may include Customer's Personal Information, from these other sources and add it to the Client's Account, and to use such information, including Customer's Personal Information, in accordance with the procedures and terms and conditions set forth in this Privacy Policy.

16. Please note that if the Store contains links to the websites of other persons, companies or organizations, Firanto is not responsible for the content of these websites and/or the privacy practices they use. Therefore, before providing information about yourself or your Personal Data, you should read the terms and conditions, privacy policy and other documents of the website in question.

17. A person wishing to register an Account in the Store is obliged to provide an e-mail address and create a Password. An account is created when the registration process is completed. As part of the Account, the Client provides his/her Personal Data, in particular his/her name, surname and e-mail address, and is responsible for their correctness and up-to-dateness. After completing the registration, the Client receives a user ID.

The Client has the right at any time:

17.1. correct and supplement the Personal Data stored in the Account, being responsible for their correctness and up-to-dateness;

17.2. submit a request for the deletion of the Account by contacting the Seller by e-mail at the following e-mail address: info@firanto.pl.

18. The Administrator processes (after the Client has provided the data) the following Personal Data:

• name, surname;
• address of residence;
• Email address
• mobile phone number;
• IP address, time and date of connection to the firanto.pl website;
• Facebook profile picture, first name, last name, nickname (in case of connecting using a Facebook account).

19. For the purposes of direct marketing, other Personal Data may also be processed: data confirming the right to participate in promotional campaigns, documents confirming the fulfilment of the conditions of promotional campaigns (games, quizzes, competitions), to the extent related to participation in promotional campaigns or the right to participate in a game.

20. If the Client does not consent to the processing of Personal Data referred to in point 18 of the Terms and Conditions for direct marketing purposes, during registration the box "I agree to receive messages and offers electronically".

The Client may withdraw consent to the processing of Personal Data for direct marketing purposes at any time. To do so, they may log in to their Store Account and opt out of receiving marketing messages or send an appropriate statement to the following e-mail address: info@firanto.pl.

21. Personal data is processed for the following purposes:

• enabling the use of the Store and the services provided;
• conclusion and performance of the sales agreement;
• delivery of purchased goods on the basis of data provided by the Client;
• issuing and sending accounting documents, including invoices;
• management of receivables and payment processing;
• to correspond with the Client and provide notifications related to the execution of orders or the provision of services;
• conducting direct marketing activities – only on the basis of the Client's prior consent;
• sending information by post, e-mail or other means of communication regarding the Seller's activities and the products and services offered, if the Client has consented to this. Consent to receive marketing information may be withdrawn at any time by changing your Account settings, using the unsubscribe link included in the message or contacting the Seller via email.

22.1. Privacy Policy and after providing written commitments from our partners to comply with personal data protection laws, including the General Data Protection Regulation (GDPR) and the laws of the Republic of Poland;

22.2. law enforcement authorities in accordance with the procedure established in the generally applicable provisions of the law of the Republic of Poland;

22.3. if it is necessary for the prevention, detection or investigation of criminal offences;

22.4. if the Client has consented to the provision of Personal Data.

23. The Seller does not transfer Personal Data to third countries, i.e. countries not part of the European Economic Area (EEA).

24. The Client has the following rights in the field of processing Personal Data:

• the right to obtain information from the Seller as to whether the Client's Personal Data is being processed, and if so – the right to access such data and information concerning, in particular: the purposes of the processing, the categories of Personal Data, the recipients or categories of recipients to whom the Personal Data have been or will be disclosed, as well as – if possible – the planned period of storage of the Personal Data or the criteria for determining this period. The request may be submitted in writing, including by post, e-mail or in person at the Seller's registered office;
• the right to request the rectification of incorrect or incomplete Personal Data;
• the right to request the erasure of Personal Data ("right to be forgotten"), if at least one of the conditions set out in Article 17 of the GDPR applies, in particular when the Personal Data are no longer necessary for the purposes for which they were collected or otherwise processed, the consent to their processing has been withdrawn and there is no other legal basis for the processing, an effective objection to the processing has been filed, Personal data have been processed unlawfully or the obligation to delete them results from the provisions of law;
• the right to request the restriction of the processing of Personal Data in the cases specified in Article 18 of the GDPR, in particular when the accuracy of the Personal Data is disputed, the processing is unlawful, but the Client objects to their deletion, the Seller no longer needs the Personal Data for the purposes of processing, but they are necessary for the Client to establish, pursue or defend claims, or an objection to the processing has been filed – until a decision is made, whether the Seller's legitimate grounds take precedence over the grounds for objection;
• the right to withdraw consent to the processing of Personal Data at any time if the processing is carried out solely on the basis of consent. The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal;
• the right to transfer Personal Data, if the processing is based on consent or a contract and by automated means, where technically feasible;
• the right to lodge a complaint with the competent supervisory authority for the protection of personal data, if the Client considers that the processing of Personal Data violates the provisions of law.

25. In order to exercise the rights under the provisions on the protection of Personal Data, the Client may submit a request, request or complaint in one of the following forms:

• by e-mail to the following e-mail address: info@firanto.pl;
• by post to the address: 89 Žeimenos Street, Kaunas, Republic of Lithuania;
• in person at the Seller's registered office at 89 Žeimenos Street, Kaunas, Republic of Lithuania.

26. The Seller responds to requests, requests and complaints in accordance with the rules and within the deadlines specified in the applicable law. The response shall be provided without undue delay, but no later than within 30 (thirty) days from the date of receipt of the application. In justified cases, this period may be extended by another 30 (thirty) days, of which the Client will be informed before the expiry of the original deadline together with the reasons for the extension.

27. Personal data processed in connection with online sales, in particular: name and surname, e-mail address, telephone number, delivery address, payment data for goods or services (e.g. bank account number, payment method) and purchase history (purchased goods, prices and other information related to orders), are stored for the period required by applicable law.

28. Personal data processed for direct marketing purposes, in particular name and surname and e-mail address, are stored for a period of 6 (six) months from the date of the Client's last active interaction with the Store, including in particular logging in to the Store, registering an Account or other active activities undertaken in the Store, unless the Client withdraws their consent to their processing beforehand.

29. The Seller uses appropriate organizational and technical measures to ensure the protection of Personal Data against unauthorized access, alteration, disclosure, loss or destruction, as well as against the risk of identity theft or fraud. The level of security is adapted to the requirements resulting from the applicable laws of the Republic of Lithuania and the law of the European Union.

30. Personal data are protected against loss, unauthorized use and modification by applying appropriate security measures, including standard electronic security measures and other technical and organizational measures.

31. In order to ensure the proper functioning of the Store and to enable the use of all its functionalities, cookies may be stored on the user's device.

The information collected with the use of cookies may be used, in particular, to recognize the user as a person who has previously used the Store, to remember the contents of the Buyer's cart and to keep statistics on traffic and the manner of using the Store.

The User may check the information saved by the Seller or cooperating entities, and may also delete the stored cookies or change their storage settings via the settings of the web browser.

Using the Store with browser settings that allow saving cookies means accepting the rules of their use specified in this Privacy Policy. The User may change the browser settings at any time and withdraw the consent to the storage of cookies, however, this may limit the availability of some functionalities of the Store.

32. The following cookies are used in the Store, depending on their function and purpose of use:

33. The Shop may use third-party cookies, i.e. cookies that are not directly managed by the Seller, in particular provided by entities such as [Facebook, Google Analytics, Hotjar]. These files may be used to obtain statistical information on the use of the Store and to conduct advertising activities, including advertising based on the analysis of user behavior.

34. The Seller also uses technical cookies that are necessary for the proper functioning of the Store, including displaying its content, ensuring the availability of functionality, handling the cart and fulfilling orders. Due to their essential nature, technical cookies may be used without the need to obtain a separate consent of the user, in accordance with the applicable law.

35. This Privacy Policy enters into force on the day of its publication in the Store. The Seller shall inform about any changes to the Privacy Policy in accordance with the rules set out in point 15 of this Privacy Policy.

36. Disputes arising from non-performance or improper performance of the contract will first be resolved amicably, in accordance with the applicable regulations on the protection of consumer rights. The Client may use out-of-court methods of dispute resolution, in particular by turning to the competent authorities or entities authorized to conduct proceedings in this regard.

The Client may also use the European Online Dispute Resolution (ODR) platform, available at the address indicated by the European Commission.