We understand that the privacy and security of your personal information is extremely important and we are committed to maintaining the trust of our website visitors and our customers by ensuring the security of your personal information and respecting your right to privacy.

We will always treat your information fairly and lawfully and are committed to being transparent about the information we collect and how we use it.

We do not rent or exchange information about you with other organizations or companies.

DATA CONTROLLER

The administrator within the meaning of the General Data Protection Regulation is the owner of ZEN Fitness Wear, Aleksandra Buchholz.
You can contact the administrator via email: hello@zen-fitnesswear.com

I. TYPES OF PERSONAL INFORMATION WE COLLECT

1. We may collect the following information about you:
   • Your name
   • Your age or date of birth
   • Your gender
   • Your contact details (mailing, billing and delivery addresses, telephone numbers and email address)
   • details of your purchases and orders
   • information about any services we provide to you
   • Your browsing activities on our websites
   • your account login details, including usernames and passwords
   • when you buy or order products and services, your bank account or payment card details
   • Your Communication and Marketing Preferences
   • Your interests, preferences, opinions and survey responses
   • Your location
   • Your IP address
   • Your correspondence and communication with us
   • publicly available personal data, including any data you make available through public platforms and social media.
2. Our website is not intended for children and we do not knowingly collect data from children.
3. The types of information listed above are not exhaustive, and in some cases we may need to collect additional information for the purposes set out in this policy or to provide specific products and services. We may collect some of the above personal information directly from you, for example when you create an account on our websites or send emails to our customer service team. Other personal information is collected indirectly, for example information about browsing or purchases. We may also collect personal information from third parties who have your consent to provide us with your information or from publicly available sources.

II. PURPOSES AND BASIS OF DATA PROCESSING

1. NEWSLETTER.
The data obtained will be processed for the purpose of distributing information about the Administrator's products and promotional campaigns, i.e. for marketing purposes, which constitutes the implementation of the legitimate interest of the Administrator, in accordance with the premise indicated in art. 6 sec. 1 letter f) of the GDPR. Providing data is voluntary, but necessary to subscribe to the newsletter. Data may also be processed to a limited extent for analytical and statistical purposes pursuant to art. 6 sec. 1 letter f) of the GDPR.

2. CONTACT FORM.
Personal data obtained through the contact form will be used to process the submitted query and any further contact, in accordance with the consent granted, based on the premise indicated in art. 6 sec. 1 letter a) of the GDPR. The personal data in question may also be used in the legitimate interest of the Administrator, which should be considered the marketing of own products and services, based on the premise indicated in art. 6 sec. 1 letter f) of the GDPR. The consent granted may be withdrawn at any time, which does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. Providing data is voluntary, but necessary to implement/answer the submitted application/question.

3. CHAT, EMAIL.
Personal data obtained during conversations conducted in electronic form (e-mail, chat, etc.) will be used to implement the sent inquiry/notification and any further contact, which constitutes a legally justified interest of the administrator, in accordance with the premise indicated in art. 6 sec. 1 letter f) of the GDPR. Providing data is voluntary, but necessary to respond to the sent message.

4. ONLINE STORE.
Personal data provided to the Administrator during the registration of a shopping account in the online store will be processed for the purposes of communication, maintaining the customer account, club member account (in the case of account registration) and fulfilling the order placed in the online store owned by the Administrator, based on art. 6 sec. 1 letter b) of the GDPR, as well as to fulfill legal and fiscal obligations in connection with the orders fulfilled, based on art. 6 sec. 1 letter c) of the GDPR. The personal data obtained may also be used for the legitimate interest of the Administrator, which should be considered the marketing of own products and services, based on the premise indicated in art. 6 sec. 1 letter f) of the GDPR. Providing data is voluntary, but necessary to make purchases and register in the e-store. The data may also be stored to a limited extent for statistical and archival purposes.

5. COMPETITIONS, GIVEAWAYS
Personal data obtained in connection with competitions organized by the Administrator are processed in order to enable participation in this competition, based on the consent granted, in accordance with art. 6 sec. 1 letter a) of the GDPR. The consent granted may be withdrawn at any time, which will not affect the lawfulness of the processing carried out before the withdrawal of consent. In addition, the personal data of the competition winners will be processed for the purposes of fulfilling tax obligations, in accordance with art. 6 sec. 1 letter c) of the GDPR. Providing data is voluntary, although necessary to participate in the competition. The data obtained may also be used for the legitimate interest of the Administrator, i.e. for marketing purposes, concerning the Administrator's products and services, based on the premise indicated in art. 6 sec. 1 letter f) of the GDPR. Data may also be processed to a limited extent for statistical and archival purposes.

III. DATA STORAGE PERIOD

The period for which personal data is stored may vary depending on the type of personal data collected and the purpose of their processing.

1. NEWSLETTER.
The data will be stored until the consent to their processing is withdrawn and the newsletter is unsubscribed, extended by the time of fulfilling the request submitted in the above scope, max. up to 30 days. In the case of data processed for marketing purposes, the data for this purpose is processed until the data subject objects to their further processing. In the case of data processed solely for statistical and archival purposes, the storage period is 7 years.

2. CONTACT FORM.
The data will be processed until the inquiry is answered, the contact is completed, up to 6 months after the matter to which the contact pertained has been resolved. In the case of data processed for marketing purposes, the data for this purpose is processed until the data subject objects to their further processing.

3. CHAT, EMAIL.
The data will be processed until a response is provided to the submitted inquiry, and after the end of contact for a maximum of 6 months.

4. ONLINE STORE.
Personal data will be processed until the order to delete the customer's account is submitted, extended by the time of fulfillment of the request submitted in the above scope, which is up to 30 days. Further, data may be stored to a limited extent until the limitation period for any claims that may arise from historically made purchases. In the case of data processed for marketing purposes, the data is processed until the objection to their further processing is filed by the data subject. In the case of data processed solely for statistical and archival purposes, the storage period is 7 years.

5. COMPETITIONS, GIVEAWAYS.
Personal data will be processed until the end of a given competition, up to 30 days after the announcement of its results. The data of the winners are stored for the period specified in tax regulations. In the case of data processed for marketing purposes, processing is possible until the data subject files an objection to their further processing.

IV. RIGHTS OF PERSONS WHOSE DATA IS PROCESSED

Anyone whose data is processed has the right to:

• the right to access your data and receive a copy thereof;
• the right to rectify (correct) your data if it is incorrect or outdated, as well as the right to delete it if the data is not processed for the purpose of fulfilling an obligation arising from legal provisions or in the exercise of public authority;
• the right to restrict or object to data processing;
• the right to lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).

V. PROFILING.

In order to market the Administrator's own products and services with the intention of preparing a personalized commercial offer, the Administrator uses profiling. Data subject to profiling include, among others, gender, name, postal code and date of birth, which are used to select the commercial information sent about products tailored to your needs. Providing the above-mentioned personal data and giving consent to personalize commercial information is voluntary, but providing them is necessary if you want to receive commercial information about products from us, because we only send personalized commercial information.

VI. DATA RECIPIENTS.

The Data Controller discloses the personal data of users only to entities processing personal data under concluded data processing agreements for the purpose of providing services to the Data Controller, e.g. hosting and maintenance of the Website, IT services, marketing and PR services.

VII. PRESIDENT OF THE PERSONAL DATA PROTECTION OFFICE

The data subject has the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office with its registered office in Warsaw, ul. Stawki 2, who can be contacted in the following way:

• by post: ul. Stawki 2, 00-193 Warsaw;
• via the electronic mailbox available at: https://www.uodo.gov.pl/pl/p/kontakt;