Last updated: November 28, 2024

Please read this Privacy Policy carefully.

This Privacy Policy describes how WHYTHERE ("Site" and any variation of the personal pronoun "we") collects, uses, and discloses personal information about you when you visit the Site, use our services from the Site, make a purchase from whythere.eu ("Site"), or otherwise interact with us in connection with the Site (collectively, the "Services").

For purposes of this Privacy Policy, the term "User" means a user of the Services, whether a customer, website visitor, or other individual whose information we collect as described in this Privacy Policy.

We may update this Privacy Policy to reflect, among other things, changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site and then update the "Last Updated" date of this Privacy Policy and take any other steps required by applicable law.

Collection and use of User's personal information

Personal information collected

The types of personal information we obtain about you depend on how you interact with the Site and use our Services. We use the term "personal information" to mean information that identifies, relates to, describes, or is reasonably likely to be associated with you.

Information collected directly from User

Information you provide directly to us through our Services may include:

• Contact information, including the User's name, address, telephone number and email address.
• Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Account information, including username, password, questions and other information used for the security of your account.
• Customer service information, including information you include in your communications with us, such as when sending a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You are not required to provide such information, but doing so may prevent you from using or accessing those features.

Usage Data (collected automatically)

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). We may use cookies, pixels, and similar technologies ("Cookies") for this purpose. Usage Data may include information about your use of and access to the Site and your account, including device information, browser information, network connection information, IP address information and other information relating to your interactions with the Services.

Information obtained from third parties

We may also obtain information about you from third parties, including vendors and service providers, who may collect information on our behalf, such as:

• Companies that operate the Site and Services, such as Shopify.
• Our payment processors, which collect payment information (for example, bank account, credit or debit card information, or billing address) to process your payments, fulfill your orders and provide you with the products or services you have requested, and to fulfill our obligations under our contract with you.
• When you visit the Site, open or click on emails we send you, or interact with the Services or our advertisements, certain information may be automatically collected by us or third parties we partner with using online tracking technologies, such as pixels, web beacons, software development kits, third-party libraries, and cookies.

Any information we obtain from third parties will be processed in accordance with this Privacy Policy. Please also see the section below titled "Third-Party Sites and Links".

Use of personal information

We may use your personal information for purposes including:

• Providing Products and Services (processing payments, fulfilling orders, sending notifications related to your account, purchases, returns, exchanges or other transactions, creating and maintaining accounts, fulfilling shipments and related services).
• Marketing and Advertising (sending marketing, advertising and promotional communications via email, text message or postal mail; displaying advertisements; tailoring the Services and advertising). If you are a resident of the European Economic Area (EEA), the legal basis may be our legitimate interest in selling our products pursuant to Article 6(1)(f) of the GDPR.
• Security and fraud prevention (detecting, investigating or taking action regarding possible fraudulent, illegal or malicious activity; ensuring the security of your account credentials). If you are a resident of the EEA, the legal basis may be our legitimate interest in ensuring the security of our website pursuant to Article 6(1)(f) of the GDPR.
• Communicating with you and improving our services (responding to requests, providing support, improving the Services). It is in our legitimate interest to respond to your needs and maintain a business relationship, in accordance with Article 6(1)(f) of the GDPR.

Cookie files

Our Site, like many other websites, uses cookies. You can find more information about the cookies used in connection with the operation of our store by Shopify at https://www.shopify.com/legal/cookies.

We use Cookies to provide and improve the Site and Services (including remembering your actions and preferences), perform analytics, and better understand your interactions with the Services. Most browsers automatically accept cookies by default, but you can set your browser to remove or reject cookies using your browser controls. Deleting or blocking cookies may negatively impact your user experience and may cause some Services to not function properly or to become unavailable. Blocking cookies may not fully prevent us from sharing information with third parties, such as our advertising partners.

Disclosure of personal information

In certain circumstances, we may disclose your personal information to third parties for the performance of a contract, for lawful purposes, and for other reasons subject to the provisions of this Privacy Policy.

These circumstances may include sharing your personal information:

• With suppliers or other third parties who provide services on our behalf (e.g., IT management services, payment processing, data analysis, customer service, cloud storage, fulfillment and shipping).
• With business and marketing partners for the purpose of providing services and displaying advertisements. These partners will use your information in accordance with their own privacy notices.
• When you direct us to disclose or otherwise consent to us disclosing certain information to third parties (e.g., for shipping products, social media widgets, or login integrations).
• With our affiliates/affiliates.
• In connection with a business event (e.g., merger or bankruptcy), in our legitimate interest in running a successful business.
• To comply with legal obligations (e.g., responding to subpoenas, search warrants and similar requests), enforce terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

Categories and recipient categories

We disclose the following categories of personal information and sensitive personal information for the purposes described above under “How We Collect and Use Your Personal Information” and “How We Disclose Your Personal Information”:

We do not use or disclose your sensitive personal information without your consent or for the purpose of inferring characteristics about you.

Third-Party Sites and Links

The Site may contain links to websites or other online platforms operated by third parties. If you use these links to visit websites that are not owned by our affiliates/partners, you should review the privacy and security policies and other applicable notices on those websites.

Security and retention of user information

Please note that no security measures are perfect or impenetrable and we cannot guarantee “perfect security.” Furthermore, any information you send us may not be secure during transmission. We recommend that you avoid using unsecure channels to transmit confidential or sensitive information.

The length of time we retain your personal information depends on various factors, including whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or otherwise enforce applicable agreements and policies.

Children's data

The Services are not intended for use by children, and we do not knowingly collect any personal information from children. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the details provided below to request deletion of that information.

As of the Effective Date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” (as those terms are defined under applicable law) personal information about anyone under the age of 16.

User Rights

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute and may only apply in certain circumstances, and where permitted by law, we may deny your request.

• Right to know/right to access your personal information (including how we use and share it).
• Right to delete your personal information.
• Right to rectification of inaccurate personal information.
• Right to portability of personal information (to receive a copy and request transmission to a third party in certain circumstances).
• Restriction of processing.
• Withdrawal of consent (where consent is required).
• Appeal (if we refuse your request, you may have the right to appeal our decision).
• Managing your communication preferences (you can opt out of promotional emails via the unsubscribe option; we may still send non-promotional messages related to your account or orders).

You may exercise any of these rights when set out on the Site or by contacting us using the contact details provided below. Before responding substantively to your request, we may be required to collect information from you to verify your identity. Subject to applicable law, you may designate an authorized representative to submit a request on your behalf; we may require appropriate authorization and verification.

Foreign users

Please note that we may transfer, store, and process your personal information outside of your country of residence. Your personal information is also processed by employees and third-party service providers and partners in those countries.

If we transfer your personal information outside of Europe, we will rely on recognised data transfer mechanisms, such as the European Commission's Standard Contractual Clauses or any equivalent document adopted by a competent authority in the United Kingdom, unless the data is transferred to a country that has been recognised as providing an adequate level of protection.

Complaints

If you have a complaint about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response, depending on where you live, you may have the right to appeal our decision or to lodge a complaint with your local data protection authority. A list of the relevant data protection supervisory authorities in the EEA can be found here.

Contact

For the purposes of applicable data protection law and unless expressly stated otherwise, we are the controller of your personal information.

If you have any questions about our privacy practices or this Privacy Policy, or to exercise any of your rights, please contact us by phone or email at ww@whythere.pl or write to us at Józefa Dietla 19/4, Kraków, 31-070, PL.