Privacy Policy of the Online Store
RegCare

We have created this privacy policy for people visiting the website https://regcare.eu (hereinafter the "Website"), which is the RegCare online store (hereinafter the "Store").

The administrator of your personal data in connection with the use of the Store is: Chitomed P.S.A. with its registered office at: DĄBROWSKIEGO, 77/A, 60-529 Poznań, entered in the register of entrepreneurs of the National Court Register under KRS number: 0001152507, NIP: 7812083505, REGON: 540799054

In all matters related to the processing of personal data, you can contact us at the e-mail address: office@chitomed.com. It is also possible to contact us in writing at the address of the registered office provided above.

For your convenience, we have divided this document into two parts:

1. Cookies and other technologies
2. Other purposes of processing personal data of Store users

If you are short on time, click on the link for the part that interests you most. If you have a few more moments, we encourage you to read the entire text.

I. COOKIES AND OTHER TECHNOLOGIES

We use cookies and other similar mechanisms to learn how users use our Website and for marketing purposes, including to display advertisements to them elsewhere on the Internet.

# What are cookies?

A cookie is a small text file saved by a website on your computer, phone, or other device on which you browse the website. The cookie file contains data about your use of that website.

Some cookies are necessary for the functioning of our Store and cannot be disabled.
In other cases, upon your first visit to our Website, we ask you to consent to the installation of cookies. We do not use advertising or analytical cookies (or any cookies other than necessary ones) without your consent.

# What cookies do we use?

1. Necessary cookies
   • These cookies are used for the proper functioning of the website. You cannot disable them because after disabling them, our website will simply not work properly.
   • In this regard, we use a tool that stores your privacy settings. It shows your consent or lack thereof to run individual types of cookies on our website.
   • Other necessary cookies on our Website serve its proper functioning and management, including making changes to the website and running tracking tools to which you consent.
2. Functional cookies
   • Some cookies on our website serve to run additional tools on the Store's website, such as a chat, a module for adding product reviews and/or stars, the possibility of recommending a product to a friend, the ability to display products recently viewed in our Store, etc.
   • You can find a list of the functional tools we use on the Website, along with an explanation of what exactly they are used for, in the cookie consent management panel.
3. Plugins and links to social media
   • On our Website, we have placed links to our social media profiles: Instagram. If you visit our profile on a given service, the owner of that service will receive – just as in the case of users moving from any other website to another website – information that you came to these services from our Store.
   • Details regarding data processing by these social media platforms can be found on the pages of the providers of these services:
     • Facebook and Instagram - https://www.facebook.com/privacy/center/

# Legal issues regarding cookies

The legal basis for the Store to use necessary cookies (indicated above in the section "What cookies do we use?") is our legitimate interest, i.e., the right to run a Website supporting our business, and the need to maintain its security.
The legal basis for our use of other cookies is your consent.

In connection with our processing of your personal data through cookies, you have the rights at any time that we write about below.

Our use of cookies, in particular for advertising purposes, may involve so-called profiling. This means that we or the marketing companies whose services we use may create a user profile based on the collected information (e.g., e-mail address, order history, type of device, technology used, frequency of visits) and on this basis formulate future purchase forecasts. This allows us to make decisions on what content (including advertisements) to display on our and other websites.

# How long do cookies remain on the user's device?

It depends on whether they are "persistent" or "session" files. Session cookies, i.e., information necessary for browser functionality to work properly, expire at the end of the user's session, which means each time you close our Website. Persistent cookies, which make using the website easier (e.g., remembering the selected resolution, content layout, user preferences, recently viewed products), will be stored by the browser for a longer period and will remain there until their expiration date, unless you delete them yourself beforehand using the settings in the browser menu.

Third-party cookies (i.e., analytical, advertising, and social media cookies) are subject to their own privacy policies, to which we provide links in this policy.

II. Other purposes of processing personal data of Store users

# What data do we process and for what purposes?

In addition to the cookies described above, we process your following data for the following purposes related to the functioning of the Store:

Purpose of processing	Type of processed data	Legal basis of processing
Handling orders in the Store, handling customer accounts in the Store	Identification and contact data of the customer (e-mail address and other data necessary to fulfill the order). Details and history of order fulfillment.	Contract concluded with you as a customer of the Store - Art. 6(1)(b) of the GDPR
Contact with you, handling inquiries	Identification data and other information you provide to us in the contact form or in other correspondence. Correspondence history.	Our legitimate interest to ensure communication with individuals who send us inquiries / correspondence - Art. 6(1)(f) of the GDPR
Handling complaints and other after-sales service (e.g., in the event of withdrawal from the contract)	Identification and contact data of the customer. Details and history of order fulfillment. Correspondence history.	Our legitimate interest to handle complaints and implement the contract withdrawal procedure - Art. 6(1)(f) of the GDPR
Collecting reviews and comments about products	Content of the review / comment. Identification data of the person submitting / publishing the review / comment.	Your consent, expressed through the action of sending and/or publishing a review and/or comment - Art. 6(1)(a) of the GDPR
Archive	All data listed in this table, received from customers and users of the Store for various purposes	Our legitimate interest to secure data for the purpose of establishing, defending, or pursuing claims and for the purpose of demonstrating compliance with obligations resulting from the GDPR - Art. 6(1)(f) of the GDPR
Accounting, tax purposes	Identification and contact data of the customer. Invoice details.	Fulfillment of tax obligations resulting from legal regulations - Art. 6(1)(c) of the GDPR
Newsletter	E-mail address. Statistical data related to the sent messages, including open rate history.	Our legitimate interest resulting from the marketing consent granted by you - Art. 6(1)(f) of the GDPR
Analysis and statistics of sales in the Store	Statistics of sales in the store and user behavior (traffic) on the Website	Our legitimate interest to conduct business analyses in order to optimize our activity. Regarding traffic statistics on the Website – legitimate interest resulting from granting your consent to cookies - Art. 6(1)(f) of the GDPR
Marketing purposes	Data about the history of browsing the Store's content, purchase history, demographic characteristics (age, gender, etc.) and other traits characterizing target groups (customer segments)	Our legitimate interest to conduct marketing of own products and services, whereby marketing activities related to the use of cookies and/or marketing communication directed directly to you require your prior consent - Art. 6(1)(f) of the GDPR

Providing the above data by you is not mandatory, however, it is necessary to fulfill your order, issue an invoice to you, notify you of the order status, answer your inquiry or complaint, etc.

# How long do we process the data?

We process your data related to placing an order in the Store as long as it is necessary to perform the order, as well as according to accounting and tax regulations.

In addition, we will process data for the time necessary to achieve the goals listed in the table above (and therefore until our legal interest enabling us to process ceases, or until you object to the processing, or possibly until you withdraw your marketing consent – if you have granted us one). Further processing will be possible only in the event that such a legal obligation is imposed on us as the administrator (in particular tax purposes) and possibly for archival purposes to protect against potential claims (until the limitation period for such claims expires).

# To whom do we transfer your data?

In our activity, we use the services of other cooperating companies, which is why your data may be entrusted by us to: the company providing us with software to run the Store, the accounting company, the hosting provider of our Website, the hosting provider of our electronic mail, other companies whose marketing services and tools we use. Your data is also transferred to courier companies and possibly payment intermediaries to fulfill your order, whereby these companies are separate administrators of personal data.

For the purposes of the marketing activities described above in the "Cookies" section, we use services provided by entities based in the USA (Google, Facebook). In connection with the above, personal data may be transferred to third countries that are not members of the European Union. An appropriate level of protection for your data is ensured by the Data Privacy Framework program, which you can read more about here.

# Your rights in connection with data processing

We commit to respecting the confidentiality of your personal data and to guaranteeing you the possibility of exercising your rights. You can exercise your rights at no cost by sending us an e-mail or contacting us in another way.

Remember that in connection with the processing of your data, you have the right to:

• request from Us access to the data we hold regarding your person;
• rectify your data;
• delete your data if they are no longer needed for the purposes for which they were processed, or we do not possess another legal basis for their processing;
• withdraw consent to the processing of your personal data, if you have granted such;
• object to the processing of your data if we process them based on a legitimate interest;
• restrict data processing;
• lodge a complaint with the President of the Personal Data Protection Office if you believe that your data is processed by us unlawfully.

# Additional information for newsletter subscribers

If you have signed up for our newsletter, we will send you marketing information regarding our products and/or services, e.g., about new additions to our offer, promotions, or special offers.

You can unsubscribe at any time by clicking the link found in each newsletter or simply by writing us a message.

A modern e-mail marketing system allows analyzing the actions of recipients, i.e., it provides us with information on whether a given message has been opened by you. We analyze such information to better adapt the content of the newsletter and notifications to your interests and send you personalized messages (profiling). You can object to such processing of your data by us at any time. In the absence of subscriber activity for 1 year, we may stop sending them the newsletter. In this case, we will remove you from our subscriber list (with additional advance notice).

Your data is not used by us to make decisions based on automated data processing that could affect your legal situation or cause other similarly significant effects for you.

Further legal information about the rules for sending the newsletter can be found in the Newsletter Terms and Conditions (part of our Store Terms and Conditions).

APPENDIX NO. 1 TO THE PRIVACY POLICY OF THE STORE RegCare
- LIST OF ADVERTISING AND ANALYTICAL TOOLS USING COOKIES

1. ANALYTICAL COOKIES:
   1. Cookies of our Store's software provider
      • The software provider through which our Store functions - i.e., the owner of the shoper.pl platform - places cookies on our Website in order to collect aggregate information on how customers use online stores (subpages opened and time spent on them, products displayed, clicks on the Store's page, analytical information regarding purchases, e.g., conversion rates).
      • These data are used to create aggregate reports for e-store owners, containing general information (without personal data) among others about what products interest customers of a given store, in which period of the year there is increased traffic or sales in stores, etc. Thanks to this, sellers (including us) can improve their stores and optimize sales processes.
      • Full information on this subject can be found in the Cookies Policy for visitors of Shoper online stores.
2. ADVERTISING COOKIES
   1. E-mail marketing
      • For newsletter purposes, we use a tool provided to us by an external company.
      • The e-mail marketing system embeds cookies on our Website to display subscription forms and to measure the effectiveness of these forms (conversion rate).