Privacy Policy

Latest version is of May 25, 2022

Introduction

This Privacy Policy (hereinafter referred to as the “Policy”) sets forth the general rules of collection, processing, distribution, use and storage of Website user’s Personal data including any dispute concerning privacy under current General Data Protection Regulation (GDPR), and in accordance with the data protection regulations in Poland applicable to the KALNURAJS SP. Z O.O. (hereinafter the “KALNURAJS SP. Z O.O.”, “Company”, “Us”, “We”).
It is understood and presumed that by the fact of use of the Website and its services or by clicking “I Accept Terms and Conditions and Privacy Policy” button the User gives Consent, that he/she/it has fully read, understood and accepted this Policy. If any User does not agree with this Policy in general or any part of it, such User should withhold from using the Website and its services.
By continuing to use our Website, you acknowledge that you have had the chance to review and consider this Privacy Policy, and you acknowledge that you agree to it. This means that you also consent to the use of your information and the method of disclosure as described in this Privacy Policy. If you do not understand the Privacy Policy or do not agree to it, then you agree to immediately cease your use of our Website.

Definitions

The following definitions and rules of interpretation apply in this Privacy Policy:
For the purposes of this Regulation:
“Personal data” means any information, that we obtain from you in connection with your use of the Website, relating to an identified or identifiable natural person (”data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
“Restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future;
“Parties” to this Privacy Policy are the following data controller: KALNURAJS SP. Z O.O. ("Data Controller") and you, as the user of this Website. Hereinafter, the parties will individually be referred to as "Party" and collectively as "Parties."
“Data Controller” is the publisher, owner, and operator of the Website and is the Party responsible for the collection of information described herein. Data Controller shall be referred to either by Data Controller's name or "Data Controller," as listed above. If Data Controller or Data Controller's property shall be referred to through first-person pronouns, it shall be through the use of the following: us, we, our, ours, etc.
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
“Effective Date” means the date this Privacy Policy comes into force and effect.
“Services” mean any services that we make available for sale on the Website.
“Cookie” is a text file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed. Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
Should you agree to this Privacy Policy and continue your use of the Website, you will be referred to herein as either "you", "the user", "your", "yours", etc.

Data protection officer and contact

The data controller of this Website is KALNURAJS SP. Z O.O. located at: Nicholas Copernicus 30/11 A. 00-336 Warsaw, Poland.
Contact details: support@letsaddshine.com.
The Data Controller and operator of the Website are one and the same.
The Data Protection Officer is Raitis Kalnins.
Contact details:
support@letsaddshine.com.
Nicholas Copernicus 30/11 A. 00-336 Warsaw, Poland.

In line with GDPR, we manage personal data with lawful, transparent processing, granting users rights to access, rectify, restrict, and delete data as needed. Consent is collected for data use, with clear processing purposes.

Modifications and Revisions

This Privacy Policy may be modified, changed, supplemented, updated at any time with prior written notice from Company. Your continued use of the Website and its services after any amendments or alterations of this Privacy Policy without notification of Company shall constitute your consent hereto and acceptance hereof of an updated version of this Privacy Policy. At any case, the date of the most recent amendments and alterations will be indicated at the top of this web page. If the User does not agree to such revised terms of the Privacy Policy or Terms of Use he/she must stop using this Website and may withdraw from his/her obligations under this Privacy Policy.

The Personal Data We Receive from You

Depending on how you use our Website, you will be subject to different types of Personal Data collected and different manners of collection.

During the process of your registration, we may collect some of the following Personal Data from you through your voluntary disclosure:

• information you provide to us when ordering our services through this Website, or information which is generated in the course of the use of those services;
• information contained in or relating to any communication that you send to us or send through this Website (including correspondence with us, communication content and metadata associated with the communication);
• if you have agreed to cookies, data such as your Website preferences or language settings. We can also use this information in an aggregate manner to understand how our visitors navigate this Website so we can make it better;
• any other personal data that you choose to send to us;
• any technical data from various third parties and public sources (including from analytical providers, advertising networks, search information providers).

Related Entities: We may share your Personal Data, including Personal Data that identifies you personally, with any of our parent companies, subsidiary companies, affiliates or other trusted related entities.
However, we only share your Personal Data with a trusted related entity if that entity agrees to our privacy standards as set out in this Privacy Policy and to treat your Personal Data in the same manner that we do.

Third Parties

We may engage third-party service providers ("Third-Party Service Providers"), from time to time or all the time, to help us with our Website, and to help serve you.
We may use Third-Party Service Providers to assist with information storage (such as cloud storage).
We may provide some of your Personal Data to Third-Party Service Providers in order to help us track usage data, such as referral websites, dates and times of page requests, etc. We use this information to understand patterns of usage of, and to improve, the Website.
We may use Third-Party Service Providers to host the Website. In this instance, the Third-Party Service Provider will have access to your Personal Data.
We only share your Personal Data with a Third-Party Service Provider if that provider agrees to our privacy standards as set out in this Privacy Policy.
Notwithstanding the other provisions of this Privacy Policy, we may provide your Personal Data to a third party or to third parties in order to protect the rights, property or safety, of us, our customers or third parties, or as otherwise required by law.
We will not knowingly share your Personal Data with any third parties other than in accordance with this Privacy Policy.
If your Personal Data might be provided to a third party in a manner that is other than as explained in this Privacy Policy, you will be notified. You will also have the opportunity to request that we not share that information.
In general, you may request that we do not share your Personal Data with third parties. Please contact us via email, if so. Please be advised that you may lose access to certain services that we rely on third-party providers for.

Storage of personal data

We use secure physical and digital systems to store your Personal Data when appropriate. We ensure that your Personal Data is protected against unauthorized access, disclosure, or destruction.
Please note, however, that no system involving the transmission of information via the internet, or the electronic storage of data, is completely secure. However, we take the protection and storage of your Personal Data very seriously. We take all reasonable steps to protect your Personal Data.
Personal Data is stored throughout your relationship with us. We delete your Personal Data upon request for cancellation of your account or other general request for the deletion of data.
We will store your information for as long as we have to by law. If there is no legal requirement for us to retain the data, we will only store it for as long as we need to.
In the event of a breach of your Personal Data, you will be notified in a reasonable time frame, but in no event later than two weeks, and we will follow all applicable laws regarding such breach.
Primarily we use your Personal Data to help us provide a better experience for you on our Website and to provide you the services and/or information you may have requested, such as use of our Website.
Information that does not identify you personally, but that may assist in providing us broad overviews of our customer base, will be used for market research or marketing efforts. Such information may include, but is not limited to, interests based on your cookies.
Personal Data that may be considering identifying may be used for the following:
a) Improving your personal user experience
b) Communicating with you about your user account with us
c) Fulfilling your purchases
d) Providing customer service to you
e) Advising you about updates to the Website or related Items.

Payment card details are not stored on our systems. Payment data is transmitted directly to secure third-party processors, ensuring confidentiality.

Disclosure of Information

We may disclose any information we collect about you, whether you are a current or former customer, including non-public personal information and any other information we collect, to KALNURAJS SP. Z O.O. affiliated companies and to non-affiliated third parties, which include non-financial companies, such as service providers and fraud verification services.
Such cases may include, but are not limited to:
a) To satisfy any local or state laws or regulations;
b) To respond to requests, such discovery, criminal, civil, or administrative process, subpoenas, court orders, or writs from law enforcement or other governmental or legal bodies;
c) To bring legal action against a user who has violated the law or violated the Terms and Conditions of our Website;
d) As may be necessary for the operation of our Website;
e) To generally cooperate with any lawful investigation about our users;
f) If we suspect any fraudulent activity on our Website or if we have noticed any activity which may violate our terms or other applicable rules.

Refusal to receive information from the Company

From time to time, we may send you informational or marketing communications related to our Website such as announcements or other information. If you wish to opt-out of such communications, you may contact the following email: support@letsaddshine.com. You may also click the opt-out link which will be provided at the bottom of any and all such communications.
Please be advised that even though you may opt-out of such communications, you may still receive information from us that is specifically about your use of our Website or about your account with us.
By providing any Personal Data to us, or by using our Website in any manner, you have created a commercial relationship with us. As such, you agree that any email sent from us or third-party affiliates, even unsolicited email, shall specifically not be considered SPAM, as that term is legally defined.

Accessing, Modifying and Deleting your Information

If you wish to modify or delete any information we may have about you, or you wish to simply access any information we have about you, you may do so by sending us the request to support@letsaddshine.com .
EU Representative (in accordance with the EU GDPR):
Due to our business being located within the EU we do not require to appoint a representative.

Complaints

If you have any issue or complaint, please contact the above mentioned DATA PROTECTION OFFICER for all enquiries.
We will treat your complaint in confidence and acknowledge receipt of a complaint within 24 hours and we will send you a full reply within 5 working days of receipt.
If a complaint is very complex, it may occasionally be necessary to extend the time limit. We will keep you informed of progress, the reasons for the delay, and the new deadline.
If your complaint is not resolved to your satisfaction within 24 hours, or through the conclusion of the informal complaints process, you can contact our DATA PROTECTION OFFICER with details in writing regarding your wish to make a formal complaint.
If you are not happy with how we handle any complaint, you are able to raise a complaint at any time with your country’s national data protection authority. If you live in the UK, this would be the Information Commissioner’s Office.

California privacy rights

Under California’s “Shine the Light” law, California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year.
To obtain this information, please send an email message to support@letsaddshine.com with “Request for California Privacy Information” on the subject line and in the body of your message. We will provide the requested information to you at your email address in response. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing will be included in our response.
Under the California Consumer Privacy Act (“CCPA”), California residents have the right to know what personal information about them is collected, request deletion of their personal data, opt-out of the sale of their personal data, and not be discriminated against if they choose to exercise any of these rights. We do not sell any of the data we collect about you. If you’d like to exercise any of the other rights afforded to you, contact us at support@letsaddshine.com.

Risk acceptance

By continuing to our Website in any manner, use the Product, you manifest your continuing asset to this Privacy Policy. You further acknowledge, agree and accept that no transmission of information or data via the internet is not always completely secure, no matter what steps are taken. You acknowledge, agree and accept that we do not guarantee or warrant the security of any information that you provide to us, and that you transmit such information at your own risk.

Rights of the data subject

You have many rights in relation to your Personal Data. Specifically, your rights are as follows:
- the right to be informed about the processing of your Personal Data;
- the right to have access to your Personal Data;
- the right to update and/or correct your Personal Data;
- the right to portability of your Personal Data;
- the right to oppose or limit the processing of your Personal Data;
- the right to request that we stop processing and delete your Personal Data;
- the right to block any Personal Data processing in violation of any applicable law;
- the right to launch a complaint to the applicable data protection authority.
Such rights can all be exercised by contacting us at the relevant contact information listed in this Privacy Policy.

Children‘s privacy

The Website and any products or Services available on Website are not intended to solicit information of any kind from persons under 18 years of age or any other age of legal majority existing in the jurisdiction of the User.

Security

Company use relevant electronic and procedural safeguards to protect the privacy of the information the User provides to Company from loss, misuse, disclosure, alteration and destruction. Please note that transmission of data or information (including communications by e-mail) over the Internet or other publicly accessible networks is not one hundred percent secure. Please note that Company are not liable for the security of any data Users are transmitting over the Internet, or third party content.

Sensitive data is secured through robust encryption during transmission, safeguarding information against unauthorized access or misuse.

Contact information

If you wish to contact us and ask additional questions about this Privacy Policy or the way we collect information from you, or if you would like to launch a complaint about anything related to this Privacy Policy, you may contact us at the following email address: support@letsaddshine.com.