The controller of Users’ personal data is LIGHTU Sp. z o.o., ul. Dojazdowa 3A, 05-270 Marki, Poland, NIP (Tax ID): 1251796563, REGON: 543044936, KRS: 0001201307.

The Controller can be contacted in all matters concerning the processing of personal data at [email protected].

Users’ personal data are processed for the purpose of:

• fulfilling orders placed in the Store (Art. 6(1)(b) GDPR),
• issuing and storing accounting documents (Art. 6(1)(c) GDPR),
• handling complaints and returns (Art. 6(1)(b) and (c) GDPR),
• direct marketing — including sending the newsletter — on the basis of separately given consent (Art. 6(1)(a) GDPR),
• compiling statistics and analyzing website traffic (Art. 6(1)(f) GDPR).

The Controller processes the data provided by the User in the order or account registration form: first and last name, address, e-mail address, telephone number and — in the case of business Customers — company name and Tax ID (NIP).

Providing the data is voluntary; however, failure to provide it makes it impossible to place and fulfil an order.

Personal data may be shared with entities providing services necessary to perform the contract — courier companies, payment operators, accounting service providers and store software providers — only to the extent necessary.

The Controller does not sell personal data to third parties, nor does it transfer them to countries outside the European Economic Area without a legal basis.

Data processed in connection with the fulfilment of orders are stored for the period required by law, including tax and accounting regulations (usually 5 years from the end of the financial year).

Data processed on the basis of consent are stored until the consent is withdrawn.

The User has the right to:

• access their data and receive a copy of it,
• have the data rectified, erased or the processing restricted,
• data portability,
• object to the processing,
• withdraw consent at any time (without affecting prior processing),
• lodge a complaint with the President of the Personal Data Protection Office (UODO).

The Store uses cookies to ensure the website works properly, to adapt its appearance to the User’s preferences and to compile anonymous statistics.

The User may change the cookie settings in their web browser at any time — disabling them, however, may limit the functionality of the Store.

The Controller applies technical and organizational measures to protect the processed personal data against loss, unauthorized access and modification, including encryption of data transmission using the SSL protocol.

The Controller reserves the right to amend this Policy in the event of changes in the law or in the scope of the services provided. The current version of the Policy is available at originsoflight.com/polityka-prywatnosci.