The website https://www.mamymleko.pl/ (hereinafter referred to as the “Website”) does not automatically collect any information, except for information contained in cookies.

Cookies are IT data, in particular text files, which are stored on the User’s end device and are intended for use with the Website. Cookies usually contain the name of the website from which they originate, the storage period on the end device, and a unique number.

The entity placing cookies on the User’s end device and gaining access to them is the Website Administrator.

Cookies are used for the following purposes:

• a) adapting the content of the Website to the User’s preferences and optimizing the use of the Website; in particular, these files make it possible to recognize the User’s device and properly display the website according to the User’s individual needs;
• b) creating statistics that help understand how Users use the Website, enabling improvements to its structure and content.

The Website uses two basic types of cookies: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the User’s end device until the User leaves the website or closes the software (web browser). Persistent cookies remain stored on the User’s end device for the period specified in the cookie parameters or until deleted by the User.

The Website uses the following types of cookies:

• a) “essential” cookies enabling the use of services available within the Website, e.g., authentication cookies used for services requiring authentication;
• b) cookies used to ensure security, e.g., those used to detect authentication abuse;
• c) “performance” cookies enabling the collection of information about how the Website is used;
• d) “functional” cookies enabling the Website to remember User-selected settings, such as the User’s region.

In many cases, web browsing software (web browsers) allows cookies to be stored on the User’s end device by default. Website Users may change cookie settings at any time. These settings may be modified in particular to block automatic cookie handling or to notify the User each time cookies are placed on their device. Detailed information about the possibilities and methods of handling cookies is available in the browser settings.

The Website Administrator informs Users that restrictions on the use of cookies may affect some functionalities available on the Website.

This Privacy Policy is informational in nature, which means it does not create obligations for Website Users.

Use of the Website is voluntary. Likewise, providing personal data by the User is voluntary.

I. Scope and Acceptance of the Provisions

The controller of the personal data of Users who are natural persons, within the meaning of the Act of 10 May 2018 on Personal Data Protection and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), is Aleksandra Diaczuk-Górska (hereinafter referred to as the “Controller”).

The User data collection has been entered into the register of data collections processed by the Controller. The register is available for inspection at the Controller’s premises.

The Controller exercises particular care to protect the interests of data subjects and, in particular, ensures that the collected data are:

• a) processed lawfully;
• b) collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes;
• c) factually accurate and adequate in relation to the purposes for which they are processed;
• d) stored in a form permitting identification of data subjects for no longer than necessary to achieve the processing purposes;
• e) processed in a manner ensuring appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, by means of appropriate technical and organizational measures.

Taking into account the nature, scope, context, and purposes of processing, as well as the risk of infringement of the rights and freedoms of natural persons, the Controller implements appropriate technical and organizational measures to ensure processing complies with the GDPR and to demonstrate such compliance. These measures are reviewed and updated where necessary. The Controller applies technical measures preventing unauthorized persons from obtaining or modifying personal data transmitted electronically.

Any words, expressions, or acronyms used in this Privacy Policy and beginning with a capital letter (e.g., Website, Service Provider, User) shall be understood according to the definitions contained in the Website Terms and Conditions.

The purpose of this Privacy Policy is to define the actions undertaken by the Controller with regard to personal data collected through the Website and related services and tools used by Users to perform activities such as completing a contact form on the Website or contacting the Service Provider by telephone or email in order to receive an offer for paid breastfeeding consultations or a possible paid rental of a breast pump or other accessories. All such activities are subject to applicable data protection laws. This Privacy Policy is governed by Polish law and applicable European Union law, including GDPR.

By using the Website or related services and tools, the User confirms that they have read and understood this Privacy Policy and the Website Terms and Conditions and consents to the use of their personal data in accordance with them.

The User acknowledges that by clicking links available on the Website (e.g., links to Facebook or Instagram), they may be redirected to external services operated by third parties outside the Website environment, where data collection occurs beyond the Controller’s direct control. The privacy policies of those external entities apply to data collected by them.

II. Collection, Acquisition, and Storage of Data

User Data: Users completing the contact form provide their first name (and optionally surname) and email address. Providing a telephone number is optional. The Controller may store personal and contact information voluntarily provided by the User.

User Service: The Controller may collect personal data of Users contacting the Controller when necessary to fulfill the User’s request and communicate with them. The Controller may also collect information regarding communication with Users, such as requests for support/consultations and User feedback.

Data Collected by the Website: The Controller may automatically collect and record data transmitted by Users’ browsers or devices, such as IP address, software and hardware parameters, pages viewed, mobile device identifiers, and other information relating to devices and system usage.

Supplementing Collected Data: The Controller may supplement information held about Users with data lawfully obtained from third parties.

III. IP Address, Cookies, and Mobile Device Identifiers

The Controller may collect data through technologies such as cookies, tracking pixels, and locally shared objects. Cookies are small text files stored locally on a User’s computer, mobile phone, or other device. Pixels are small images embedded in website code that enable another server to measure page views and are often used together with cookies.

Through cookies, the website server can store information about User preferences and settings, which are restored during subsequent visits. Cookies are used, among other things, to ensure user-friendly operation of the Website. The Controller collects both persistent and session cookies.

The Controller may allow third parties, such as advertising or analytics providers, to collect information using these technologies directly on the Website. Such data are governed by the privacy policies of those third parties.

IV. Use of Collected Data

The Controller may use collected and stored data for:

• a) providing User support, including solving technical issues and making functions available;
• b) tailoring offers and User experiences within the Website or third-party services;
• c) monitoring activity of all Users and managing Website traffic;
• d) contacting Users regarding services and customer support via available communication channels, especially email and telephone;
• e) conducting research and analyses to improve services;
• f) enforcing compliance with the Website Terms and Conditions, including combating fraud and abuse.

The Controller stores collected data only to the extent necessary to achieve the purposes specified above.

V. Data Disclosure

The Controller does not disclose Users’ personal data to third parties without the Users’ consent, unless:

• a) the Controller uses support from external entities in providing services, in which case such entities are not authorized to independently use personal data processed on behalf of the Website;
• b) the Controller may disclose data to public authorities assisting in combating fraud and abuse, conducting investigations of potential legal violations, or enforcing the Website Terms and Conditions as required by law.

The Controller undertakes not to rent or sell Users’ personal data.

The Controller may share anonymized data with service providers, trusted partners, or research agencies to improve services, evaluate their attractiveness to Users, or participate in scientific research providing broad social benefits.

VI. User Control Methods and User Rights

The User warrants that any data provided or published by them are accurate.

Cookies: Most desktop and mobile browsers (e.g., Safari, Firefox, Microsoft Edge, Chrome, Opera) allow Users to limit or block cookies. However, disabling cookies may reduce website functionality.

The User has the following rights:

• a) the right of access, rectification, restriction, erasure, and data portability;
• b) the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• c) the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO);
• d) the right to object at any time, on grounds relating to their particular situation, to processing based on the Controller’s legitimate interests;
• e) the right to object to processing for direct marketing purposes, including profiling related to direct marketing.

To exercise these rights, the User may contact the Controller in writing, by email, or via the contact form available on the Website.

VII. Security

All data collected by the Controller are protected using reasonable technical and organizational measures and security procedures to safeguard them against unauthorized access or unauthorized use.

VIII. Amendments

If necessary, the Controller may amend this Privacy Policy. In such a case, Article X of the Website Terms and Conditions shall apply accordingly.

IX. Contact Details

Questions regarding this Privacy Policy should be directed to the following email address: ola@mamymleko.pl