Privacy policy

Hello!

If you have found yourself here, it is a reliable sign that you value your privacy. We understand this very well, which is why we are giving you a document in which you can find in one place the rules for processing personal data and using cookies and other tracking technologies in connection with the functioning of the https://carbonposter.com/ website.

Formal information at the beginning - the administrator of the website is NEWAY Group limited liability company, ul. Fryderyka Chopina 16, 18-300 Zambrów, which registration files are kept by the District Court in Białystok, XII Economic Department, NIP: 7231638746, KRS: 0000863085, share capital 22000,00 zł.

This privacy policy has been structured in a question and answer format. The choice of this form was dictated by the care for clarity and legibility of the information presented to you. Below you will find a table of contents of this policy corresponding to questions to which we respond in turn.

# 1: Who is the controller of your personal information?

# 2: Who can you contact regarding the processing of your personal data?

# 3: What information do we have about you?

# 4: How do we have your personal information?

# 5: Is your data safe?

# 6: For what purposes do we process your personal data?

# 7: How long will we keep your personal information?

# 8: Who are the recipients of your personal information?

# 9: Do we transfer your data to third countries or international organizations?

# 10: Do we use profiling? Do we make automated decisions based on your personal information?

# 11: What rights do you have regarding the processing of your personal data?

# 12: Do we use cookies and what are they?

# 13: On what basis do we use cookies?

# 14: Can you disable cookies?

# 15: For what purposes do we use our own cookies?

# 16: What third-party cookies are used?

# 17: Do we track your behavior within our store?

# 18: Are we targeting you with targeted ads?

# 19: How can you manage your privacy?

# 20: What are server logs?

# 21: Is there anything else you should know?

# 22: Is this privacy policy subject to change?

If you have any concerns about our privacy policy, you can contact us at any time by sending an email to odo@carbonposter.com.

# 1: Who is the controller of your personal information?

The administrator of your personal data is NEWAY Group limited liability company, ul. Fryderyka Chopina 16, 18-300 Zambrów, whose registration files are held by the District Court in Białystok, XII Economic Department, NIP: 7231638746, KRS: 0000863085, share capital 22000.00 zł.

# 2: Who can you contact regarding the processing of your personal data?

As part of the implementation of data protection in our organization, we have decided not to appoint a data protection officer because it is not mandatory in our situation. You can contact us on matters relating to data protection and privacy more broadly by emailing odo@carbonposter.com.

# 3: What information do we have about you?

Depending on the purpose, we may process the following information about you:

• name,

• residential address,

• business address,

• NIP number,

• email address,

• phone number,

• information about orders placed,

• data contained in correspondence sent to us,

• bank account number,

• IP address,

• the products you viewed in the store,

• details of orders placed,

• details about abandoned shopping carts.

We have described the scope of the data processing precisely for each processing purpose. Information in this regard can be found later in this policy.

# 4: How do we have your personal information?

In most cases, you give them to us yourself. This happens when:

• you register a user account,

• you place an order,

• you send a complaint or cancel the contract,

• you sign up for the newsletter,

• you contact us.

# 5: Is your data safe?

We care about the security of your personal data. We have analyzed the risks involved in particular processes of processing your data, and then we implement appropriate security and personal data protection measures. We monitor the condition of our technical infrastructure on an ongoing basis, we train our staff, and we look at the procedures applied, and add the necessary improvements. If you have any questions about your personal data, we are at your disposal at odo@carbonposter.com.

# 6: For what purposes do we process your personal data?

These purposes are more than one. Below is a list of them, followed by a more detailed discussion. We have also assigned to each purpose the corresponding legal basis for processing.

• Registration and maintenance of a user account - Article 6(1)(b) of the RODO,

• Order processing - Article 6(1)(b) of the RODO,

• Handling of complaints or withdrawal from the contract - Article 6(1)(f) of the RODO,

• Sending newsletters - Article 6(1)(a) of the RODO,

• Recovery of abandoned shopping carts - Article 6(1)(f) of the RODO,

• Correspondence handling - Article 6(1)(f) of the RODO,

• Fulfillment of tax and accounting obligations - Article 6(1)(c) of the RODO,

• creation of an archive for the possible need to defend, establish or assert claims, as well as for the identification of a returning customer - Article 6(1)(f) RODO.

User account - details

When creating a user account, you must provide the data necessary to create the account: name, last name, e-mail address, and password. Providing the data is voluntary, but necessary to create an account.

When editing your account details, you can provide further data, in particular data that may be used to place orders, such as your name, address or place of business, VAT number, telephone number.

If you create an account through integration with a social media account, we will access certain data collected within the social media account (name, email address, profile picture) based on your prior authorization.

You can modify the information about you that you provided to us in connection with the registration of your user account at any time. However, in situations where you have created an account using an integration with a social networking site account, the data retrieved from that social networking site cannot be modified.

The data provided by you in connection with the creation of an account is processed in order to provide you with an electronic service consisting in providing you with the possibility of using a user account. This service is provided on the basis of an agreement concluded in accordance with the principles described in the regulations, which means that in this regard the legal basis for the processing of your personal data is Article 6(1)(b) of the RODO.

We will retain your information for the life of your account. You may at any time decide to delete your account, but this will not remove from our database information about your orders placed using your account. Order data is kept in our archives for the duration of the store's operation due to ensuring that we can identify a returning customer, reconstruct their purchase history, discounts granted, etc., which is our legitimate interest referred to in Article 6(1)(f) of the RODO. If the statute of limitations for civil claims, criminal prosecution under criminal law or punishment under administrative law would expire after the cessation of operations, the data will be deleted after this period has expired.

Orders - details

When placing an order in the store, you must provide the data necessary to complete the order. Depending on the details of your order, the directory of data may be different. For example, if you are ordering physical products, we need to know the address where the order will be delivered to you. If you are requesting a VAT invoice for a company, we need to know your VAT ID number and business address. Providing data is voluntary, but necessary to place an order.

Every order is stored in our database, which means that your personal data assigned to the order is also accompanied by order-related information such as the products ordered, the payment method selected, the delivery method selected, and the payment deadline.

The data collected in connection with the order are processed to perform the contract concluded by placing the order (art. 6 sec. 1 letter b RODO), to issue an invoice (art. 6 sec. 1 letter c RODO in connection with the regulations governing the issue of invoices), to include the invoice in the accounting documentation and to fulfill other tax and accounting obligations (art. 6(1)(c) RODO in conjunction with the provisions governing tax and accounting obligations) and for archival purposes for the possible need to defend, establish or assert claims, as well as for the identification of a returning customer, which is our legitimate interest (Article 6(1)(f) RODO).

We would like to bring your attention to the fact that we have adopted a model of storing your data connected with placed orders for the entire period of operation of our store. We assume that this works to your advantage since you can retrieve your order history at any time, and additionally benefit from discounts if we provide such for our regular customers. However, if you do not want your order data to be stored for such a long time, you can object to its storage for the described purpose at any time. However, we would like to inform you that we see an overriding interest in storing your order data until the expiry of the limitation period for claims under the contract concluded with us.

We will process your order data for the time necessary to process your order and thereafter until the expiration of the limitation period for claims under the concluded contract. Also, after the expiration of this period, the data may still be processed by us for archival purposes for the possible need to defend, establish or assert claims, as well as to identify a returning customer. Please also note that we are required to keep accounting records, which may contain your personal data, for the period required by law. If the statute of limitations for civil claims, criminal prosecution under criminal law, or punishment under administrative law would expire after the termination of the business, the data will be deleted after the expiration of this period.

Complaints and withdrawals - details

If you make a complaint or withdraw from the contract, you provide personal data contained in the complaint or statement of withdrawal from the contract, which includes name and surname, address of residence, telephone number, e-mail address, bank account number. Providing the data is voluntary, but necessary to make a complaint or withdraw from the contract.

The data provided to us in connection with the filing of a complaint or withdrawal from the contract are used for the purpose of the complaint procedure or the withdrawal procedure, and then for archiving purposes, which is our legitimate interest (Article 6(1)(f) RODO).

Data will be processed for the time necessary to carry out the complaint procedure or withdrawal procedure. Complaint documents and statements of withdrawal will be stored until the end of business and for 5 years from the end of the year in which the termination of business took place.

Newsletter - details

By subscribing to the newsletter, you provide us with your name and e-mail address. Providing data is voluntary, but necessary to subscribe to the newsletter.

Also, our system used to handle the newsletter, records the IP number that you used when signing up for the newsletter, determines your approximate location, the email client you use for email, and tracks your actions taken in connection with messages sent to you. As such, we also have information about which messages you opened, within which messages you clicked on links, etc.

The data provided to us by you in connection with your subscription to the newsletter are used to send you the newsletter, and the legal basis for their processing is your consent (Art. 6 (1) letter a RODO) given when signing up for the newsletter. About the processing of information that does not originate from you, but has been collected automatically by our mailing system, we rely in this respect on our legitimate interest (Article 6 (1) (f) RODO) in analyzing the behavior of newsletter subscribers to optimize mailing activities.

You may unsubscribe from the newsletter at any time by clicking on the dedicated link included in each message sent as part of the newsletter or simply by contacting us. Despite opting out of the newsletter, your data will continue to be stored in our database to identify the returning subscriber and for the possible defense of claims relating to the sending of the newsletter to you, in particular, to demonstrate the fact that you have given your consent to receive the newsletter and when you withdrew it, which is our legitimate interest referred to in Article 6(1)(f) of the RODO. If the period of limitation for civil claims, criminal prosecution under criminal law, or punishment under administrative law would expire after the cessation of business, the data will be deleted after this period has expired.

You can modify the information you provided to receive the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by simply contacting us.

Recovering abandoned shopping carts - details

If you start the ordering process but do not complete it, this fact will be noted by our system and you will receive a notification to your e-mail address that your order can be finalized.

For this purpose, we process your personal data collected by us in connection with the initiation of your order. We base the processing in this case on our legitimate interests (Article 6(1)(f) RODO). You can object to the processing of your data for abandoned cart recovery by clicking on the link available within the abandoned cart recovery message.

Mail handling - details

When contacting us, you naturally provide us with your personal data contained in the correspondence, in particular your e-mail address and name. Providing the data is voluntary, but necessary to make contact.

Your data is processed in this case to contact you, and the basis for processing is Article 6(1)(f) RODO, i.e. our legitimate interest. The legal basis for processing after contact has ended is also our legitimate aim of archiving correspondence to ensure that we can prove certain facts in the future (Article 6(1)(f) RODO). 7

The content of your correspondence may be archived and we are unable to determine when it will be deleted. You have the right to request the history of any correspondence you have had with us (if it is archived), as well as to request its deletion, unless archiving it is justified by our overriding interests, such as defending against potential claims from you.

Tax and accounting obligations - details

If we issue an invoice to you, it forms part of your accounting records, which will be kept for the period of time required by law. Your personal data is then processed to fulfill our tax and accounting obligations (Article 6(1)(c) of the RODO in conjunction with the provisions governing tax and accounting obligations).

Archive - details

As part of the description of the individual purposes for the processing of personal data above, we have indicated time limits for the storage of personal data. These time limits are often related to our archiving of certain data to ensure that we can prove certain facts in the future, reconstruct the course of our cooperation with you, the correspondence exchanged, or defend, establish or assert claims. In doing so, we rely on our legitimate interest as referred to in Article 6(1)(f) of the RODO.

# 7: How long will we keep your personal information?

Data retention periods are indicated separately for each processing purpose. You will find this information within the details dedicated to each separate processing purpose.

# 8: Who are the recipients of your personal information?

We venture to say that modern business cannot do without services provided by third parties. We also use such services. Some of these services involve the processing of your personal data. The following processors are involved in the processing of your personal data:

• The hosting provider that stores the data on the server,

• The mailing system provider where your data is stored if you are a newsletter subscriber,

• The provider of the invoicing system where your data is stored for invoicing purposes,

• The accounting office that processes your data shown on invoices,

• courier companies that process your data to the extent necessary to deliver your order to you,

• a maintenance provider who gains access to the data if the technical work being carried out involves areas that hold personal data,

• other subcontractors who gain access to the data if the scope of their activities requires such access.

Personal information may be transferred to law firms if there is a need for legal assistance requiring access to personal information.

Your personal data may also be forwarded to the tax authorities to the extent necessary for the performance of their tax and accounting duties. This applies in particular to all declarations, reports, statements, and other accounting documents containing your personal data.

Also, if necessary, your personal data may be made available to entities, authorities, or institutions authorized to access the data under the law, such as police services, security, courts, prosecutors.

Furthermore, we use tools that collect a variety of information about you in connection with your use of our store. This includes, in particular, the following information:

• information about the operating system and web browser you are using,

• REVIEWED POST,

• time spent on the site,

• transitions between different subpages,

• clicks on individual links,

• The source from which you go to our site,

• The age range you are in,

• Your gender,

• Your approximate location is limited to localities.

• Your interests as determined by your online activities.

This information itself is not, in our opinion, of a personal nature. Because this information is collected by third-party tools that we use, the information is also processed by the tool providers following their terms of use and privacy policies. Generally, this information is used to provide, improve and manage our services, to develop new services, to measure the effectiveness of advertising, to protect against fraud and abuse, and to personalize the content and advertising displayed on individual services, websites, and applications. We have tried to describe the details in this area later in this policy as part of the explanation of each tool.

# 9: Do we transfer your data to third countries or international organizations?

No, we do not transfer your data to third countries or international organizations.

# 10: Do we use profiling? Do we make automated decisions based on your personal information?

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you. Yes, we do use tools that may take certain actions depending on the information collected through the tracking mechanisms, but we believe that these actions do not have a material impact on you because they do not differentiate between you as a customer, affect the terms of any contract you may enter into with us, etc.

Using certain tools, we may, for example, target you with personalized advertising based on your previous activities on our site or suggest products that may be of interest to you. This is called behavioral advertising. We encourage you to learn more about behavioral advertising, particularly about privacy issues. Detailed information, including the ability to manage your settings for behavioral advertising, can be found here: http://www.youronlinechoices.com.

We emphasize that within the tools we use, we do not have access to information that would allow us to identify you. The information we refer to here is, in particular:

• information about the operating system and web browser you are using,

• reviewed post

• time spent on the site,

• transitions between different subpages,

• the source from which you go to our site,

• the age range you are in,

• Your gender,

• Your approximate location limited to localities,

• Your interests as determined by your online activities.

We do not match the information indicated above with your personal information that is in our databases. This information is anonymous and does not allow us to identify you personally. This information is stored on the servers of the providers of the various tools, and these servers may be located almost anywhere in the world.

# 11: What rights do you have regarding the processing of your personal data?

The RODO grants you the following potential rights about the processing of your personal data:

• The right to access your data and receive a copy of it,

• The right to rectify (amend) your data,

• The right to erasure (if you believe there is no basis for us to process your data, you can request that we erase it),

• The right to restrict processing (you can request that we restrict processing to only storing the data or carrying out activities agreed with you if in your opinion we have incorrect data or are processing it unfairly),

• The right to object to processing (you have the right to object to processing based on legitimate interest; you should indicate the particular situation that you think justifies us stopping the processing covered by the objection; we will stop processing your data for these purposes unless we can demonstrate that the grounds for our processing override your rights or that your data is necessary for us to establish, assert or defend our claims),

• the right to data portability (you have the right to receive from us in a structured, commonly used, machine-readable format the personal data you have provided to us under the contract or your consent; you can have this data sent directly to another entity),

• The right to withdraw consent to the processing of personal data, if you have previously given such consent,

• The right to complain to the supervisory authority (if you find that we process your data unlawfully, you may lodge a complaint to the President of the Office for Personal Data Protection or other competent supervisory authority).

The rules related to the use of the rights indicated above are described in detail in Articles 16 - 21 of the RODO. We encourage you to familiarize yourself with these provisions. On our part, we consider it necessary to explain to you that the rights indicated above are not absolute and you will not be entitled to them about all activities of the processing of your personal data.

We emphasize that one of the rights indicated above is always available to you - if you believe that we have violated data protection regulations while processing your personal data, you have the possibility to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

You can also always ask us to provide you with information on what data we hold about you and for what purposes we process it. Simply send an e-mail to odo@carbonposter.com. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address given above if you have any questions relating to the processing of your personal data.

# 12: Do we use cookies and what are they?

Our store, like almost all other websites, uses cookies.

Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone), which can be read by our ICT system (our own cookies) or by third-party ICT systems (third party cookies). Cookies can record and store certain information to which ICT systems can then gain access for specific purposes.

Some of the cookies we use are deleted when the browser session ends, i.e. when you close your browser (so-called session cookies). Other cookies are stored on your terminal device and enable us to recognize your browser the next time you visit the website (persistent cookies).

If you want to learn more about cookies as such, you can read, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie.

# 13: On what basis do we use cookies?

We use cookies based on your consent, except when cookies are necessary to properly provide you with an electronic service.

As far as your consent to cookies is concerned, we assume that you give your consent through the settings of your Internet browser or the additional software supporting the management of cookies. We assume that you agree to all cookies used by us that are not blocked by your browser or the additional software you use.

Please note that disabling or restricting cookies may prevent you from using some of the functions available in our store and cause difficulties in using our store as well as many other websites that use cookies. For example, if you block social media plug-in cookies, the buttons, widgets and social features implemented in our store may not be available to you.

# 14: Can you disable cookies?

Yes, you can manage your cookie settings within your web browser. You can block all or selected cookies. You can also block cookies from specific sites. You can also delete previously saved cookies and other sites and plug-in data at any time.

Web browsers also offer the option to use incognito mode. You can use this mode if you do not want information about pages you visit and files you download to be stored in your browsing and download history. Cookies created in incognito mode are deleted when you close all incognito mode windows.

Browser plug-ins to control cookies are also available, such as Ghostery (https://www.ghostery.com). Cookie control may also be provided by additional software, in particular anti-virus packages, etc.

Also, there are tools available on the Internet that allow you to control certain types of cookies, in particular, to collectively manage your behavioral advertising settings (e.g., www.youronlinechoices.com/, www.networkadvertising.org/choices).

# 15: For what purposes do we use our own cookies?

Own cookies are used to ensure the proper functioning of particular mechanisms of the store, such as maintaining the session after logging into the account, remembering the last viewed products and products added to the cart.

Custom cookies are also used to support the abandoned cart recovery mechanism.

# 16: What third party cookies are used?

The following third-party cookies operate within our store:

• Google Analytics,

• Yandex Metrics

• Google Tag Manager,

• Google AdWords,

• Google AdSense,

• Facebook Custom Audiences,

• social media tool cookies,

• PrivyApp,

• TikTok,

• YouTube.

Details of individual third-party cookies are described below.

Google Analytics - details

We use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this regard based on our legitimate interest to create statistics and analyze them to optimize our websites.

To use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses cookies from Google LLC concerning the Google Analytics service. You can block the Google Analytics tracking code at any time by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout.

Google Analytics automatically collects information about your use of our website. The information collected in this way is usually transmitted to and stored on Google servers, which may be located around the world.

Due to the IP anonymization, we have activated, your IP address is shortened before being passed on. Only in exceptional cases is the full IP address transmitted to Google's servers and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data as a rule.

We would like to emphasize that we do not collect any data within Google Analytics that would allow us to identify you personally. Therefore, the data collected within Google Analytics does not have the nature of personal data for us. The information we have access to within Google Analytics is, in particular:

• information about the operating system and web browser you are using,

• subpages that you view within our store,

• time spent in our store and on its subpages,

• transitions between different subpages,

• The source from which you go to our store.

Also, we use the following Advertising Features within Google Analytics:

• demographic and interest reports,

• remarketing,

• ad reporting functions, user-ID.

We also do not collect personal information as part of the Advertising Features. The information we have access to is, in particular:

• The age range you are in,

• Your gender,

• Your approximate location limited to localities,

• Your interests as determined by your online activities.

Google Analytics and Google Analytics 360 services have been certified to the independent security standard ISO 27001. ISO 27001 is one of the most widely recognized standards in the world and certifies that the systems supporting Google Analytics and Google Analytics 360 meet the relevant requirements.

If you are interested in more details related to Google's use of data from sites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites.

Yandex Metrica - details

As part of our website, we use Yandex Metrica functions, whose provider is YANDEX LLC, 16 Lva Tolstogo St., Moscow 119021, Russia represented in the EEA by Yandex Oy, Moreenikatu 6, 04600 Mantsala, Finland. We do this based on our legitimate interest in producing statistics and analyzing them to optimize our websites

Yandex Metrica automatically collects information about your use of our site. Yandex Metrica registers every visitor to our site and makes it possible to play a video recording of his or her movement around our site, as well as to generate so-called heat maps. The information collected in this way is mostly transmitted to Yandex Metrica's servers, which may be located around the world, and stored there.

To use Yandex Metrica, we have implemented a special Yandex Metrica tracking code in the code of our website. The tracking code uses cookies. You can block the Yandex Metrica tracking code at any time by installing the Yandex.Metrica Blocker browser add-on available at this link: https://yandex.com/support/metrica/general/opt-out.html

We emphasize that within Yandex Metrica we do not collect any data that would allow you to be identified. As such, the data collected within Yandex Metrica does not have the nature of personal data for us. The information we have access to within Yandex Metrica is, in particular:

• information about the operating system and web browser you are using,

• time spent in our store and on its subpages,

• Your approximate location,

• The source from which you go to our store,

• pages viewed in our store,

• information about your traffic in our store.

If you are interested in the details related to Yandex Metrica's use of data from websites and applications, we encourage you to read this information: https://yandex.com/legal/metrica_agreement/.

Google Tag Manager - details

We use the Google Tag Manager provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to manage tags, which are small pieces of code that enable us to control users' traffic and behavior, collect information about the effectiveness of ads and take action to improve our store. Google Tag Manager does not collect any personally identifiable information about you, however, this tool triggers other tags that may, in turn, collect data.

Google AdWords - details

We use remarketing functions available within the Google AdWords system operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We perform activities in this regard based on our legitimate interest in marketing our own products or services.

When you visit our website, a Google remarketing cookie is automatically stored on your device, which collects information about your activity in our store. Thanks to the information collected in this way, we can show you advertisements within the Google network depending on your behavior in our store. For example, if you view a product, this information will be recorded by a remarketing cookie so that we can target advertising to you for that product, or any other product we deem appropriate. This advertising will be shown to you within the Google network when you are using the internet, browsing other websites, etc.

We would like to point out that we do not collect any data to identify you when using Google Ads. The possible aggregation of data in such a way that they become personal data may be carried out on Google's part, but in this respect, we are no longer responsible, as Google carries out these activities based on the contract concluded with you as a user of Google services.

We, using Google AdWords, are only able to define the audience groups that we would like our ads to reach. On this basis, Google decides when and how to present you with our ads.

Further processing of the information only takes place if you have consented to Google linking your browsing history to your account and using the information from your Google account to personalize the ads that are displayed on the websites. In this situation, Google will use your data to create and define target group lists for remarketing purposes on different devices. For this purpose, Google will temporarily combine the information collected with other data it has in its possession to create the targeted groups.

If you do not want to receive personalized ads, you can manage your ad settings directly from the Google website: https://adssettings.google.com/.

Google AdSense - details

We display advertisements on our websites within the Google AdSense network operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We do this based on our legitimate interest in monetizing the content we publish.

Our website, in connection with the display of ads on it within the AdSense network, contains ad tags that tell your browser to send a request for advertising content from Google's servers. Along with the advertising content, the server also sends a cookie. Cookies are used to display advertisements based on your previous visits to our site or other websites. AdSense also uses cookies to improve the quality of advertisements. Common uses include targeting ads based on topics of interest to you, improving campaign performance reports, and skipping ads you have already seen.

We would like to emphasize that we, through the use of Google AdSense, do not collect any data that would allow your identification. The possible collation of data in such a way that it becomes personal data may be carried out on Google's part, but in this respect, we are no longer responsible, since Google carries out these activities based on the contract concluded with you as a user of Google services.

If you do not want to receive personalized ads, you can manage your ad settings directly from the Google website: https://adssettings.google.com/.

Facebook Custom Audiences - details

As part of the Facebook Ads system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, we use the Custom Audience feature to target specific user groups with targeted advertising messages. We do this based on our legitimate interest in marketing our own products or services.

To provide you with advertising that is personalized to your behavior in our store, we have implemented the Facebook Pixel on our website, which automatically collects information about your use of our website. The information collected in this way is usually transmitted to Facebook servers, which may be located anywhere in the world, especially in the United States of America (USA).

The information collected within Facebook Pixel is anonymous, i.e. it does not allow us to identify you. Depending on your activity on our pages, you may be targeted to a specific audience, but we do not identify individual members of these groups in any way.

However, we would like to inform you that Facebook may combine the information collected with other information about you collected as part of your use of Facebook and use it for its own purposes, including marketing. Such activities of Facebook are no longer under our control, and you can find information about them directly in Facebook's privacy policy: https://www.facebook.com/privacy/explanation. You can also manage your privacy settings from your Facebook account. You will find useful information in this regard here: https://www.facebook.com/ads/settings.

Facebook Connect and community tools - details

Our website uses plugins, buttons, and other social media tools collectively referred to as "plugins", provided by social media sites such as Facebook, Instagram, LinkedIn, Twitter, or others.

Facebook Connect cookies are loaded regardless of whether you click on any Facebook-related buttons embedded in our website. About other social networks, the use of cookies can only be activated when you click on the button associated with the respective social network.

When you view our website that contains a plug-in for a particular social network, your browser sends information to the administrator of that social network about your visit. Because the plug-in is a piece of the social network embedded in our website, your browser sends a request to download the content of the social network to our website.

The plugins collect certain information about you, such as your user ID, the site you visited, the date and time, and other browser information.

Social network administrators use some of this information to personalize your viewing experience on our site. For example, when you visit a page with a "Like" button, the social network administrator needs information about who you are to show you which of your friends also like our page.

The information collected by the plugins may also be used by social network administrators for their own purposes, such as improving their own products, creating user profiles, analyzing and optimizing their own activities, and targeting advertisements. We have no real influence on how the information collected by the plugins is subsequently used by the social network administrators. You can find details in this regard in the regulations and privacy policies of the individual social networks.

Social media plug-ins collect and transmit information to the administrators of these social media sites even if you browse our site without being logged in to your social media account. However, your browser then sends a more limited set of information.

If you have logged in to one of the social media sites, the site administrator will be able to directly associate your visit to our site with your profile on that social media site.

If you do not want the social networks to attribute the data collected during your visit to our website directly to your profile on that website, you must log out of that website before visiting our website. You can also completely prevent plug-ins from being loaded on the website by using the appropriate extensions for your browser, such as blocking scripts.

Also, the use of certain plugins may involve the publication of certain information within your social profiles. For example, information about clicks on the "Like" button may be available on your Facebook timeline. Of course, if you share any content on your social media using plugins embedded on our site, that sharing will naturally be visible in your profile.

About the details related to the processing of the information collected by the plugins by the social network administrators, in particular the purpose and scope of data collection and their further processing and use by the administrators, as well as the possibility to contact you and your rights in this regard and the possibility to make settings to ensure the protection of your privacy, everything can be found in the privacy policies of the respective service providers:

• Facebook - https://www.facebook.com/privacy/explanation,

• Twitter - https://twitter.com/en/privacy,

• LinkedIN - https://www.linkedin.com/legal/privacy-policy,

• Instagram - https://www.facebook.com/help/instagram/155833707900388,

• Pinterest - https://policy.pinterest.com/pl/privacy-policy.

PrivyApp - details

As part of our store, we use the PrivyApp tool provided by Privy, Inc.

201 South St, 2nd Floor, Boston, MA 02111.

To ensure that all features work properly, PrivyApp uses cookies within our website. Cookies enable PrivyApp to display pop-ups and other features provided by PrivyApp.

PrivyApp also provides us with insight into the statistics of how many people have interacted with the displayed notification. We use this information to better analyze traffic within our store. However, we want to point out that the information collected by the PrivyApp system is not personal information to us and does not allow us to identify you. We rely on our legitimate interest to do so.

If you would like to learn more about PrivyApp's use of cookies, we encourage you to read the resources provided here: https://www.privy.com/privacy-policy

TikTok - details

Materials from the TikTok service are embedded in our store. The TikTok systems, which are provided by TikTok Inc., Attn: TikTok Legal Department 10100 Venice Blvd, Suite 401, Culver City, CA 90232, USA, use cookies within the scope of their operation.

Cookies are used to correctly display material directly from the TikTok platform. The data collected in cookies does not allow us to identify you personally, so it is not personal information.

If you are interested in details about cookies and privacy policy, please read the information available here:

https://www.tiktok.com/legal/privacy-policy?lang=en

YouTube - details

We embed YouTube widgets on our sites, allowing you to play YouTube videos directly from our sites. YouTube is operated by Google LLC.

Videos are embedded on the site in privacy mode. Based on the information provided by YouTube, this means that no cookies are stored on your device, nor does Google collect any information about you until you play the video.

When you play a video, YouTube saves cookies on your device and receives information that you have played the video from the specific website, even if you do not have a Google Account or are not currently logged in. If you are logged in to your Google account, this service provider will be able to directly associate your visit to our website with your account. The purpose and scope of data collection and their further processing and use by Google, as well as the possibility of contacting you and your rights in this respect and the possibility of making settings to protect your privacy are described in the Google privacy policy.

If you do not want Google to attribute the data collected during video playback directly to your profile, you must log out of your account before playing the video. You can also completely prevent plugins from loading on the site by using the appropriate extensions for your browser, such as script blocking.

Google uses the information collected by the cookie about the YouTube videos embedded on our websites to ensure the correct and safe functioning of the widget, to analyze and optimize the YouTube services, as well as for personalization and advertising purposes.

Please note that by playing videos available on YouTube, you are using services provided electronically by Google LLC. Google LLC is a separate, independent entity providing electronic services to you. For details on YouTube terms of use, including privacy protection, you can look for documents provided directly by YouTube:

• regulations: https://www.youtube.com/t/terms,

• privacy policy: https://policies.google.com/privacy.

# 17: Do we track your behavior within our store?

Yes, we use Google Analytics, Google AdWords, and Facebook Custom Audiences tools that involve collecting information about your activities in our store. These tools are described in detail under the question about third-party cookies, so we will not repeat that information here either.

# 18: Are we targeting you with targeted ads?

Yes, we use Facebook Ads and Google Ads where we can target ads to specific groups defined based on various criteria such as age, gender, interests, occupation, job, activities previously undertaken within our store. These tools are described in detail under the question on third-party cookies, so we will not repeat that information here either.

# 19: How can you manage your privacy?

The answer to this question is found in many places in this privacy policy when describing specific tools, behavioral advertising, cookie consent, etc. However, we have once again compiled this information in one place for your convenience. Below you will find a list of options for managing your privacy.

• the cookie settings within your web browser,

• browser plug-ins supporting cookies management e.g. Ghostery,

• additional cookie management software,

• incognito mode in your web browser,

• behavioral advertising settings, e.g. youronlinechoices.com,

• Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout,

• Google Ads Settings: https://adssettings.google.com/,

• Facebook Ads Settings: https://www.facebook.com/ads/settings.

# 20: What are server logs?

Using the store involves sending requests to the server, on which the store is stored. Each query sent to the server is recorded in the server logs.

The logs include, among other things, your IP address, the date and time of the server, information about your web browser, and the operating system you are using. The logs are saved and stored on the server.

The data stored in server logs are not associated with specific individuals using the site and are not used by us to identify you.

Server logs constitute only auxiliary material used for the administration of the website, and their content is not disclosed to anyone except persons authorized to administer the server.

# 21: Is there anything else you should know?

As you can see, the topics of personal data processing, the use of cookies, and privacy management, in general, are quite complex. We have made every effort to ensure that this document provides you with the most far-reaching knowledge on matters important to you. If anything is unclear to you, you want to know more, or you just want to talk about your privacy, please email us at odo@carbonposter.com.

# 22: Is this privacy policy subject to change?

Yes, we may modify this privacy policy, particularly due to changes in technology and changes in the law. If you are a registered user, you will receive a message about any change to the privacy policy. Also, all archived versions of the privacy policy are linked below.