Legal Notice

# 1: Who is the administrator of personal data?

The administrator of your personal data is:

SIMBA Group sp. z o.o.
ul. Zimna 15
20-204 Lublin
NIP: 946-26-47-108

Wherever we use terms like "we", "our", etc., in the Privacy Policy, we mean the indicated entity.

Regarding social media profiles related to our website, in accordance with the jurisprudence of the Court of Justice of the European Union, we are a joint administrator of personal data together with the provider of the social networking site where the profile operates.

Details regarding the processing of personal data by individual social media providers we use can be found here:

• Facebook
• Instagram
• LinkedIn
• TikTok
• YouTube
• Pinterest

# 2: Who can you contact regarding personal data processing?

As part of the implementation of the personal data protection system in our organization, we have decided not to appoint a personal data protection officer because it is not mandatory in our situation.

In matters related to the protection of personal data and broadly understood privacy, you can contact us at the e-mail address biuro@simba.pl

Regarding social media, you can additionally contact the administrators of the social networking sites where we maintain our profiles directly.

# 3: For what purposes do we process personal data?

There is more than one purpose. Below is a list of them with a more detailed discussion:

# 4: What information do we have about you?

Depending on the purpose of processing, we may process the following categories of personal data:

• Identification data – name, surname, company name, Tax ID (NIP)
• Contact data – e-mail address, phone number, correspondence address
• Address data – delivery address, residential address
• Transactional data – order history, payment data
• Technical data – IP address, device identifiers, data from cookies
• Behavioral data – information about the way the website is used

# 5: What is "Anonymous Information"?

"Anonymous Information" is information that does not allow for your identification. These are aggregated, statistical data or data otherwise deprived of features that allow them to be linked to a specific person.

Anonymous Information can be created as a result of anonymization of personal data or can be collected as anonymous from the beginning (e.g., aggregated website visit statistics).

Anonymous Information does not constitute personal data within the meaning of the GDPR and can be used by us for any purposes.

# 6: Where do we get information about you from?

We obtain information about you from the following sources:

• Directly from you – when you fill out forms on our website, place an order, register an account, contact us
• Automatically – when you use our website (technical data, cookies)
• From third parties – e.g., from payment operators, courier companies

# 7: Is the data safe?

Yes, we make every effort to ensure your data is safe. We use appropriate technical and organizational measures to ensure the protection of processed personal data.

In particular:

• We use connection encryption (SSL/TLS)
• We regularly update the software
• We restrict access to personal data only to authorized persons
• We apply backup procedures
• We train personnel in the field of personal data protection

# 8: How long will we store personal data?

The storage period of personal data depends on the purpose of processing:

• User account – until the account is deleted
• Order fulfillment – for the period necessary to fulfill the order and handle potential complaints
• Legal and tax obligations – for the period required by law (usually 5 years)
• Newsletter – until consent is withdrawn
• Direct marketing – until an objection is filed
• Claims – until the limitation period for claims (usually 6 years)

# 9: Who are the recipients of personal data?

Your personal data may be transferred to the following categories of recipients:

• IT service providers – hosting, CRM systems, mailing systems
• Payment operators – for the purpose of processing payments
• Courier companies – for the purpose of delivering orders
• Accounting office – for the purpose of bookkeeping
• Law firms – in case of legal matters
• State authorities – when required by law

# 10: Do we transfer data to third countries or international organizations?

In connection with the use of certain external tools (e.g., Google Analytics, Facebook Pixel), your data may be transferred to third countries, in particular to the USA.

In such cases, data transfer takes place based on:

• European Commission decision stating an adequate level of protection
• Standard contractual clauses adopted by the European Commission
• Other appropriate safeguards provided for in the GDPR

# 11: Do we use profiling?

Yes, we may use profiling for marketing purposes. Profiling consists of automatic analysis of your behavior on the website in order to adapt marketing content to your interests.

Profiling does not cause any legal effects for you or otherwise significantly affect your situation.

You have the right to object to profiling at any time.

# 12: What are your rights?

In connection with the processing of your personal data, you have the following rights:

• Right of access to data – you can obtain information about the processing of your data and a copy of the data
• Right to rectification of data – you can request correcting incorrect or completing incomplete data
• Right to deletion of data – you can request data deletion in specific cases
• Right to restriction of processing – you can request restriction of data processing in specific cases
• Right to data portability – you can receive your data in a structured format
• Right to object – you can object to data processing for marketing purposes
• Right to withdraw consent – you can withdraw consent to data processing at any time
• Right to complain – you can file a complaint with the President of the Personal Data Protection Office

In order to exercise your rights, please contact us at biuro@simba.pl

# 13: Do we use cookies or other similar technologies?

Yes, our website uses cookies and other similar technologies.

Cookies are small text files saved on your device while using the website. They are used to:

• Ensure proper website operation
• Remember your preferences
• Conduct analysis and statistics
• Personalize content and advertisements

# 14: On what basis do we use cookies?

We use cookies based on the following legal grounds:

• Necessary cookies – based on the legitimate interest of the administrator (Art. 6 sec. 1 lit. f GDPR)
• Analytical and marketing cookies – based on your consent (Art. 6 sec. 1 lit. a GDPR)

# 15: Can you disable cookies?

Yes, you can manage cookies in several ways:

• Cookie banner – during the first visit to the site, you can choose which categories of cookies you accept
• Browser settings – you can configure your browser to block cookies
• Opt-out tools – some external tools offer the possibility to opt out of tracking

Remember that disabling certain cookies may affect the functionality of the site.

# 16: For what purposes do we use cookies?

We use cookies for the following purposes:

• Necessary – ensuring proper website operation, security, handling the shopping cart
• Functional – remembering user preferences
• Analytical – analysis of website traffic, optimization
• Marketing – personalization of advertisements, remarketing

# 17: What external tools are used by us?

On our website, we use the following external tools:

• Google Analytics – web analytics
• Google Ads – advertisements and remarketing
• Facebook Pixel – advertisements and remarketing
• Hotjar – user behavior analysis
• Payment systems – handling online payments

A detailed list of external tools can be found in the annex to this Privacy Policy.

# 18: Do we track your behavior within the site?

Yes, we may track your behavior on the website for analytical and marketing purposes. Tracking includes, among others:

• Visited pages
• Time spent on the site
• Clicks and interactions
• Products viewed and added to the cart

Tracking takes place using cookies and other similar technologies. You can manage tracking through cookie settings.

# 19: Do we direct targeted advertisements to you?

Yes, we may direct targeted advertisements to you based on your behavior on our website and within advertising networks (e.g., Google Ads, Facebook Ads).

Ad targeting allows us to display advertisements for products that may interest you, e.g., products you viewed on our website.

You can opt out of targeted advertisements through cookie settings or opt-out tools offered by advertising networks.

# 20: How can you manage your privacy?

You have several options for managing your privacy:

• Account settings – you can edit your data in the user account panel
• Cookie settings – you can manage cookie consents
• Newsletter opt-out – you can unsubscribe from the newsletter by clicking the link in the message
• Contact us – you can contact us to exercise your rights

# 21: Is there anything else you should know?

Our website may contain links to other websites. We are not responsible for the privacy practices applied by these sites.

We encourage you to familiarize yourself with the privacy policies of the sites you visit.

# 22: Can this Privacy Policy be changed?

Yes, this Privacy Policy may be subject to changes. We will inform about any significant changes through:

• A message on the website
• An e-mail message (if we have your e-mail address)

The current version of the Privacy Policy is always available on our website.

Last updated date: January 1, 2025.

Annex - List of external tools

Below is a list of external tools used on our website: