Privacy policy

1. General

  1. This Privacy Policy sets out the rules for the processing of personal data of users of the website and online store available at www.milaau.com.
  2. The Privacy Policy explains what personal data is collected, for what purposes it is processed, to whom it may be transferred, how long it is stored and what rights the data subjects have.
  3. Personal data are processed in accordance with applicable law, in particular Regulation (EU) of the European Parliament and of the Council 2016/679, hereinafter referred to as GDPR.
  4. Using the www.milaau.com website may involve the processing of personal data, in particular when placing an order, e-mail contact, using forms, subscribing to the newsletter or using cookies and similar technologies.

2. Data controller

  1. The controller of personal data is:

MILAAU – Miron Kaftański
Łebień 52/A
84-351 Łebień
Poland
NIP: 8411668287
REGON: 367321300
e-mail: hello@milaau.com

  1. In matters related to the protection of personal data, you can contact: hello@milaau.com.
  2. The controller has not appointed a personal data protection officer.

3. When we collect personal data

Personal data may be collected in particular when:

  1. you place an order in the store MILAAU,
  2. you contact us by e-mail or via the contact form,
  3. you subscribe to the newsletter or other marketing communication,
  4. you are using the website,
  5. you accept or configure cookies,
  6. you are submitting a complaint, inquiry or other notification,
  7. you contact us regarding an individual order,
  8. you are using available online payment methods.

4. What data can we process

Depending on the situation, we may process the following categories of data:

  1. name and surname,
  2. email address,
  3. phone number,
  4. delivery address,
  5. billing address,
  6. company data, including NIP if the order is placed for a company,
  7. order information,
  8. payment information, excluding full payment card details, which MILAAU does not store,
  9. correspondence content,
  10. data provided in the contact form,
  11. data regarding complaints or after-sales service,
  12. IP address,
  13. cookie IDs,
  14. information about the device, browser, approximate location, language, source of entry to the website and method of using the website,
  15. marketing and analytical data, if you have given appropriate consent.

5. Purposes and legal basis for data processing

5.1. Order fulfillment

We process personal data in order to accept, handle and fulfill the order, including product preparation, contact regarding the order, payment processing, delivery and sales documents.

Legal basis: art. 6 section 1 letter b GDPR - performance of the contract or taking action before its conclusion.

5.2. Payment processing

Data necessary to process payments are processed to enable payment for the order.

Payments may be handled by external payment operators, in particular Shopify Payments and other methods available in the store, such as card payments, BLIK, Apple Pay, Google Pay, traditional transfer or other payment methods activated in the store.

Legal basis: art. 6 section 1 letter b GDPR - performance of the contract.

5.3. Order delivery

We process personal data in order to prepare and send the shipment, contact us regarding delivery and transport.

Data may be transferred to courier companies, pallet carriers, transport companies or other entities participating in the delivery.

Legal basis: art. 6 section 1 letter b GDPR - performance of the contract.

5.4. Contact and handling inquiries

If you contact us by e-mail, via the contact form or in another way, we process the data provided in the message in order to respond, conduct correspondence and handle the inquiry.

Legal basis: art. 6 section 1 letter f GDPR - the Controller's legitimate interest, consisting in communicating with persons interested in MILAAU products or services.

If the contact concerns an order or activities before concluding a contract, the basis may also be Art. 6 section 1 letter b GDPR.

5.5. Individual orders and quotes

If you contact us regarding an individual order, quote, personalization or a custom-made project, we process the data necessary to prepare a response, proposal, quote or agree on the details of the order.

Legal basis: art. 6 section 1 letter b GDPR - activities before concluding a contract, or art. 6 section 1 letter f GDPR - legitimate interest of the Controller.

5.6. Complaints and after-sales service

We process personal data in order to handle complaints, reports regarding delivery, damage, non-compliance of the product with the contract or other post-sale matters.

Legal basis: art. 6 section 1 letter c GDPR - legal obligations of the Controller, and art. 6 section 1 letter f GDPR - legitimate interest in defending or pursuing claims.

5.7. Accounting and tax obligations

We process data contained in sales documents, invoices, bills and accounting documentation in order to fulfill tax and accounting obligations.

Legal basis: art. 6 section 1 letter c GDPR - legal obligation imposed on the Controller.

5.8. Newsletter and marketing communication

If you subscribe to the newsletter or agree to receive marketing information, we process your e-mail address and possibly the name or other data provided during registration in order to send information about products, collections, new products, brand content or offers MILAAU.

Legal basis: art. 6 section 1 letter and GDPR - consent.

You can withdraw your consent at any time by clicking the opt-out link in the email or by contacting us at hello@milaau.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

5.9. Own marketing and remarketing

If you consent to cookies or similar technologies, we may use website usage data for marketing purposes, including building audiences, conducting remarketing and measuring the effectiveness of advertising campaigns.

We can use in particular the tools Google, Meta and Pinterest.

Legal basis: art. 6 section 1 letter a GDPR - consent, to the extent that consent is required to use cookies, pixels or similar technologies.

In some cases, Art. 6 section 1 letter f GDPR - the Controller's legitimate interest in conducting own marketing, provided that it does not violate the rights and freedoms of the data subject.

5.10. Analytics and website development

We may process data regarding the use of the website in order to conduct statistics, analyze traffic, improve the functionality of the website and better tailor content to users.

To the extent that consent is not required, the basis is Art. 6 section 1 letter f GDPR - legitimate interest of the Controller.

If analytics require the use of cookies or similar technologies, processing is based on the user's consent.

5.11. Site security and abuse prevention

Technical data such as IP address, browser, device or system log information may be processed for the purpose of ensuring website security, detecting abuse, preventing fraud and protecting information technology systems.

Legal basis: art. 6 section 1 letter f GDPR - legitimate interest of the Controller.

5.12. Pursuing and defending claims

The data may be processed for the purpose of pursuing claims, defending against claims, demonstrating the course of transactions, handling disputes or proceedings.

Legal basis: art. 6 section 1 letter f GDPR - legitimate interest of the Controller.

6. Shopify as store platform

  1. The MILAAU store runs on the Shopify platform.
  2. Shopify provides the technical infrastructure of the store, handling the shopping cart, checkout, some payments, order processing, security and other e-commerce functions.
  3. In connection with the use of the store, personal data may be processed by Shopify International Limited and other entities from the Shopify group, in accordance with the principles of Shopify service provision and data protection regulations.
  4. Shopify may process personal data as a data processor on behalf of MILAAU, and in selected cases also as an independent controller, if this results from the documents and functions of Shopify.
  5. Shopify may process data in countries outside the European Economic Area, using appropriate legal mechanisms for data protection, such as adequacy decisions or Standard Contractual Clauses.

7. Data recipients

Personal data may be transferred to the following categories of recipients:

  1. e-commerce platform providers, in particular Shopify,
  2. payment operators,
  3. banks and financial institutions,
  4. courier companies, pallet carriers and transport companies,
  5. providers of hosting, IT services and security tools,
  6. email and communication tool provider,
  7. provider of mailing or newsletter tools, if such a service is launched,
  8. providers of analytical and advertising tools, in particular Google, Meta and Pinterest, if you give your consent,
  9. accounting office or entities providing accounting services,
  10. legal, tax or debt collection advisors,
  11. public authorities, if the obligation to transfer data results from legal provisions.

8. Transfer of data outside the European Economic Area

  1. In connection with the use of tools such as Shopify, Google, Meta, Pinterest or other technological service providers, personal data may be transferred outside the European Economic Area.
  2. In such a case, data is transferred using appropriate security measures provided for by the GDPR, in particular:
    • adequacy decisions of the European Commission,
    • Standard Contractual Clauses,
    • data processing entrustment agreements,
    • other mechanisms compliant with data protection regulations.
  3. The User may obtain more information about the security measures used by contacting the Controller at hello@milaau.com.

9. Data retention period

We store personal data for the period necessary to achieve the purposes for which they were collected, in particular:

  1. data related to the order - for the duration of the order, after-sales service and for the period of limitation of possible claims,
  2. accounting and tax data - for the period required by law,
  3. data related to correspondence - for the time needed to handle the case, and then for the period of securing any claims,
  4. data related to complaints - for the duration of complaint handling and for the period of securing claims,
  5. data processed on the basis of consent - until its withdrawal, unless there is another legal basis for further processing,
  6. marketing data - until consent is withdrawn or effective objection is raised,
  7. technical, analytical data and cookies - for the time resulting from the settings of a given tool or until the user deletes cookies / withdraws consent.

10. Rights of data subjects

The data subject has rights under the GDPR, in particular:

  1. right to access data,
  2. right to rectify data,
  3. right to delete data,
  4. right to restrict processing,
  5. data portability right,
  6. right to object to data processing,
  7. the right to withdraw consent at any time if processing is based on consent,
  8. the right to lodge a complaint with the President of the Personal Data Protection Office.

To exercise your rights, you can contact the Controller at hello@milaau.com.

11. Is providing data mandatory

  1. Providing personal data is voluntary, but in certain cases necessary to use the services of MILAAU.
  2. Providing the data needed to complete the order is necessary to conclude and perform the contract. Failure to provide this data makes it impossible to complete the order.
  3. Providing data for the newsletter is voluntary. Failure to provide data makes it impossible to subscribe to the newsletter.
  4. Providing data in the contact form or e-mail is voluntary, but may be necessary to respond.

12. Automated decision making and profiling

  1. Personal data is not used by MILAAU to make decisions for you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.
  2. Analytical and advertising tools may include profiling in the sense of matching advertising content, analyzing interests or creating groups of advertising recipients, if the user has given appropriate consent.
  3. Marketing profiling does not automatically result in making decisions that have legal consequences for the user.

13. Cookies and similar technologies

  1. The MILAAU website uses cookies and similar technologies such as pixels, tags or online identifiers.
  2. Cookies may be used for:
    • to ensure proper operation of the website and shopping cart,
    • to remember user preferences,
    • page security handler,
    • conducting statistics and analytics,
    • conducting marketing and remarketing activities,
    • measuring advertising effectiveness.
  3. The following cookie categories may be used within the website:
    • necessary - needed for the operation of the website and store,
    • functional - facilitating the use of the website,
    • analytical - helping to analyze the use of the website,
    • marketing - used for advertising and remarketing.
  4. Necessary cookies may be used without the user's consent if they are necessary for the operation of the website or the provision of a service.
  5. Analytical and marketing cookies are used based on the user's consent, if such consent is required by applicable regulations.
  6. The user can manage cookie consents using the cookie banner or privacy settings available on the website, if such functionality is activated.
  7. The user can also change cookie settings in his web browser. Restricting cookies may affect the operation of some website functions.
  8. If the website uses the Google, Meta or Pinterest tools, these entities may process information from cookies or similar technologies in accordance with their privacy policies.

14. Analytical and advertising tools

  1. The website may use analytical and advertising tools, in particular:
    • Google Analytics,
    • Google Ads,
    • Google Tag Manager,
    • Meta Pixel / Meta Ads,
    • Pinterest Tag / Pinterest Ads.
  2. These tools may collect data about website use, traffic sources, visited subpages, store events, clicks, purchases or other interactions.
  3. This data can be used for:
    • page performance analysis,
    • measurement conversion,
    • conducting remarketing,
    • optimization of advertising campaigns,
    • creating ad audience groups.
  4. Analytics and advertising tools run according to user consent settings if consent is required.
  5. The user may limit the use of data for analytical or advertising purposes through cookie settings, browser settings or privacy settings with the providers of individual services.

15. Data security

  1. The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, change or disclosure.
  2. The website uses an SSL/TLS encrypted connection.
  3. Access to personal data is available only to persons and entities for whom it is necessary to achieve specific processing purposes.
  4. The Controller uses the services of proven technological and organizational suppliers necessary to run an online store.

16. Children's data

The MILAAU store is not directed to children. The Controller does not knowingly collect children's personal data for marketing purposes.

17. Privacy Policy Changes

  1. The Privacy Policy may be updated in the event of changes in legal regulations, store functionality, technological tools, payment methods, service providers or data processing methods.
  2. The current version of the Privacy Policy is always available on the website www.milaau.com.
  3. The effective date of the current version of the Privacy Policy is located at the beginning of the document.

18. Contact

In matters relating to the Privacy Policy or the processing of personal data, you can contact the Controller:

MILAAU – Miron Kaftański
Łebień 52/A
84-351 Łebień
Poland
e-mail: hello@milaau.com