Welcome to www.tamo.design. TAMO Marcin Laskowski has treated the protection of personal data as one of its priorities since the beginning of its activity. Due to the large number of customers who trusted us and decided to make a purchase online, via the website https://tamo.design/, as well as due to the constantly growing number of inquiries, we feel particularly responsible for the security of personal data processed by us. Our goal is to provide current and proper information on matters related to the processing of your personal data.
The confidentiality policy presented here is intended to present the methods we use to collect, use and share data that you may provide when using the Store's website. Please read the entire content of this document before using the services of our Store and providing any data. Respecting the rights of each of our clients, respecting Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR) and the relevant national law on the protection of personal data, we undertake to maintain the security and confidentiality of the personal data obtained when using the website and making purchases as part of the Store, and we ensure that for this purpose it takes all necessary actions. We never transfer your data, we do not sell it or exchange it for marketing purposes with other entities. Data provided to third parties is used only to provide you with our services.

DATA ADMINISTRATOR
The administrator of the Customers' personal data provided in connection with the use of the services offered by the Store [hereinafter referred to as "Personal Data] is Marcin Laskowski running a business under the name TAMO Marcin Laskowski (business address: ul. Węglowa 22C/130 81-338 Gdynia, entered into Register of Business Activity kept by the Mayor of Gdynia under the number 3920, NIP 584 254 08 63, REGON 220366854; e-mail address: hello@tamo.design

PERSONAL DATA WE COLLECT
1. Contact details contained in the forms that are necessary for the proper use of the service or the performance of the contract: Name and surname - when placing a one-off order and when registering for the Customer's account, he will be asked to provide his name and surname in order to be able to send the order, register to account on our website and for possible contact of the Store with the Customer, Address of residence and, if necessary, delivery address: this is information necessary to process and send the ordered goods, Telephone number: The Customer is notified by text message about sending the goods or, if necessary, the Store may contact the Customer on in order to confirm the order or in the event of unexpected circumstances, e.g. lack of goods in the warehouse, while offering the Customer a favorable solution to the situation, E-mail address: via e-mail, the Store sends an order confirmation and may contact the Customer in connection with the execution of the order. The e-mail address is also used to set up an account on the Store's website. In addition, if the customer wants to receive the newsletter, commercial information will be sent to this address. The Administrator may also use the Customer's e-mail address to send a survey examining Users' satisfaction with the Store's services.
2. Personal data used to manage purchases made online at https://tamo.design/, i.e. contact details such as name, address, e-mail address and telephone number, payment information and payment history, account number banking information, credit information, order information.
3. Personal data related to maintaining the Customer's account at https://tamo.design/, i.e.: contact details, such as name and surname, address, telephone number, account settings, additionally in the case of purchases, purchase history, delivery information payment history. The store will also process the following personal data related to cookies: click history, navigation and browsing history.
4. Personal data used for customer service, i.e. contact details, such as name and surname, address, e-mail address and telephone number, payment data and history, credit information, order information, delivery information, account number, entire correspondence on a given topic, recordings of conversations.
5. Personal data related to direct marketing, i.e.: contact details, such as name and surname, address, e-mail address, telephone number and postal code, what products and offers were clicked by the Customer, order history, website navigation and clicked items.

PURPOSE OF COLLECTION AND THE BASIS FOR PROCESSING OF USERS' PERSONAL DATA

ONLINE SHOPPING AND CUSTOMER SERVICE
1. Browsing the content of the Store's website does not require the Customers to provide personal data. When making a purchase in our Store without registering and logging into the account on the basis of a one-time order, the data provided for the purpose of its implementation are automatically deleted. There are only sales documents stored for the purposes of e.g. fiscal or needs related to securing or pursuing possible legal claims to which the Administrator or the Customer are entitled. More information on this subject can be found in the chapter: "Period for which personal data will be stored". Registration in the customer database is voluntary, and customer data is stored to facilitate future purchases in our store.
2. The administrator will use personal data to manage purchases made online at www.tamo.design in order to process customer orders and returns and send notifications about the status of delivery or in case of any problems with the delivery of products. The Administrator will use the Customer's personal data to manage payments and to process complaints and warranty requests regarding products.
3. The Administrator will use the Customer's personal data to process his questions, complaints, warranty claims regarding products and technical questions submitted by e-mail, chat, phone and social media. The administrator can also contact the customer if there are any problems with his order.
4. The Administrator will process the Customer's personal data in the field of online shopping on the basis of Article 6 para. 1 lit. b) GDPR, while in the field of customer service pursuant to Article 6 para. 1 lit. f) GDPR, i.e. the legitimate interest of the Administrator.

MARKETING
1. The Administrator may send to the Customers, including to the e-mail addresses provided by them, commercial and marketing information about the products and services provided by the Store, including in the form of Internet broadcasts (webcast), mailings, newsletters, provided that the Customer agrees to it.
2. The Administrator may send to Customers, including to the e-mail addresses provided by them, commercial and marketing information about products and services provided by third parties cooperating with TAMO Marcin Laskowski, including in the form of mailings, newsletters, provided that The customer agrees to this.
3. The Administrator will process personal data when the Customer takes part in a competition organized by him. Personal data will be used to enable the Administrator to contact the participants on matters related to the competition, before and after the event, in order to determine the identity of the participants and verify their age, to contact the winners and to deliver the prize and determine the method of delivery.
4. The Administrator will process the Customer's personal data in the above scope on the basis of § 6 para. 1 lit. a) GDPR, i.e. based on the Customer's consent.

CONTACT WITH THE CUSTOMER
If you have purchased goods, you may receive messages from us regarding the status of your order and occasional advertising and promotional messages related to the offer of the https://tamo.design/ store, if you have previously consented to receive this type of information. We may also contact you by phone if we have important information about your order and it is necessary for its implementation.

SUBSCRIBE TO THE NEWSLETTER/MAILING

With your consent, we will also process data to provide additional services such as newsletter/mailing (newsletter with promotions). You can get more information about promotional offers after subscribing to the newsletter.
If you have subscribed to our newsletter or otherwise agreed to receive it, you will receive our newsletter/mailing by e-mail (advertising and promotional messages regarding the https://tamo.design/ offer and companies cooperating with us) .

Newsletter subscription
Our newsletter will be sent to you only after your explicit consent to receive it. When sending the newsletter, we use a two-stage verification of the address owner, which consists in the fact that in addition to your explicit consent to activate the newsletter service, we also require confirmation of the subscription by clicking on the link sent to the e-mail address provided by you in the form.
The data provided by you (e-mail address) will be provided by the Administrator properly secured. By subscribing to the newsletter, you consent to the use of data to the extent necessary to perform the newsletter/mailing service.

Unsubscribing from the newsletter (withdrawal of consent)
You can unsubscribe from the newsletter at any time by withdrawing your consent. To unsubscribe from the newsletter, you can click on the "unsubscribe" link in the footer of each newsletter or send an e-mail with a request to unsubscribe to hello@tamo.design
The above fact will be recorded in the register of consents kept by us, after which your data will be removed from the Administrator's mailing database.

ACCOUNT IN TAMO.DESIGN STORE
1. The administrator will use personal data to set up and maintain a customer account and to provide personalized services on the website https://tamo.design/
2. The Administrator will process the Customer's personal data in the above scope on the basis of § 6 para. 1 lit. a) GDPR, i.e. based on the Customer's consent.

DEVELOPMENT, MODERNIZATION AND VIEWING THE CONTENT OF THE STORE'S WEBSITE
1. The administrator may process personal data in order to improve services, as well as to adapt the advertisements, materials or recommendations displayed on the Store's website to the preferences and interests of customers. For this purpose, the Administrator may combine personal data provided by Customers in connection with the use of a given service with other personal data concerning this Customer processed by the Administrator. The Administrator will not analyze the Customer's data at the individual level - all data used for these purposes will be anonymised. The administrator will carry out analyzes that will allow changing services to make them more user-friendly - by modifying the user interface, which will simplify the flow of information; highlighting the services that are most often used by customers in digital communication channels; improving IT systems to increase the security of users and other visitors to the website. Analytics are also used to develop and continuously improve goods supply logistics by creating purchasing, inventory and delivery forecasts, and forecasting resources from a sustainability perspective by streamlining the purchasing and delivery planning process, and improving the assortment.
2. The Store may obtain other information resulting from the general rules of connections made on the Internet, such as IP address, number and source of visits to the Store's website, time of visit. Browsing content, number and type of subpages opened, links used, or computer IP number, which may be used by the Store for technical and statistical purposes. The Administrator does not combine the above information with Customers' personal data and does not use them to identify Customers, unless it is necessary for the proper provision of services by the Store. The Administrator uses the information referred to above only for the purposes of market research and internet traffic on its website, for statistical purposes, in particular to improve the quality of services provided by the Store. The Administrator will process the Customer's personal data in the above scope on the basis of art. 1 lit. F) GDPR, i.e. the legitimate interest of the Administrator.
LEGAL OBLIGATIONS
1. The Administrator will use the Customer's personal data to comply with the provisions of the law or courts and comply with other provisions of the authorities. In addition, it will use the Customer's personal data to collect and confirm financial data in order to comply with accounting principles.
2. The Administrator will process the Customer's personal data in the above scope pursuant to art. 6 sec. 1 lit. b) and letter c) GDPR, i.e. in order to perform the contract and fulfill the legal obligations incumbent on the Administrator.
3. Prevention of crime and use of data in an unlawful manner.
4. The Administrator will use the Customer's personal data to prevent losses, detect and prevent the use of online services in a manner inconsistent with the rules and regulations, be able to check such cases and prevent losses and fraud by analyzing the behavior of Online Store customers.
5. The administrator will process personal data on the basis of Article 6 para. 1 lit. f) GDPR, i.e. in order to prevent the use of our services in an inappropriate way and on the basis of a legitimate interest. Personal data processed on the basis of the consent expressed by the User in the cases referred to above. The User's consent to the processing of personal data is made by selecting the appropriate place in the form during the registration procedure or other procedure aimed at enabling the use of the Store's services. Each customer has the opportunity to choose whether and to what extent he wants to use our services and share information about himself. Please note that failure to provide certain data in certain cases may make it impossible to use the services we offer. The user may at any time withdraw consent to the collection and processing of personal data provided by him.

DATA STORAGE PERIOD
1. Personal data will be processed in order to conclude or perform the contract and fulfill the Administrator's legal obligation, i.e. pursuant to art. 6 sec. 1 lit. B) and letter C) GDPR will be stored for the duration of the contract, and after its expiry for the period necessary to:
• After-sales customer service (e.g. complaint)
• Securing or pursuing possible legal claims due to the Administrator or the Customer (max. 6 years from the end of the contract)
• Compliance with the Administrator's legal obligation (e.g. tax regulations)
• Statistical and archiving
1. Personal data processed on the basis of a legitimate legal interest, i.e. on the basis of Article 6 para. 1 lit. f) GDPR will be processed until the data subject objects, unless the Administrator is able to find a legal justification for this process, which will invalidate the Customer's interest or rights, or due to legal claims.
2. Personal data processed on the basis of a separate consent will be stored until its withdrawal.
3. For the purpose of accountability, i.e. to prove compliance with the provisions on the processing of personal data, the Administrator will store data for the period in which the Administrator is obliged to keep the data or documents containing them to document the fulfillment of legal requirements and enable control of their fulfillment by public authorities.

USER RIGHTS RELATED TO COLLECTION AND PROCESSING OF PERSONAL DATA
1. Right of access to data. The customer has the right to request information about which personal data are processed by the Administrator, i.e. the right to obtain confirmation whether the Administrator processes data and information regarding such processing.
2. Right to Portability. The customer has the right to receive a copy of his data in a structured, commonly used and readable format. This copy may be sent to the Customer or to another entity. This applies only to personal data that has been provided to the Administrator.
3. The right to correct data. The customer has the right to request the correction of his personal data if they are incorrect, as well as to complete incomplete data.
4. The right to delete data. The customer has the right to request the deletion of data processed by the Administrator at any time, except for the following situations:
• Unfinished proceedings with the Customer Service Department or an unrealized order that has not yet been shipped or has only been partially shipped.
• no payment for the order, regardless of the payment method,
• in the event of any purchases by the Customer, personal data will be retained for accounting and bookkeeping purposes

• in order to secure or pursue any legal claims due to the Administrator or the Customer (maximum 6 years from the date of termination of the contract).
1. Right to object to direct marketing. The customer has the right to refuse to receive direct marketing materials, including the preparation of an analysis of the customer's profile, which is prepared in order to produce such materials. The customer may opt out of receiving direct marketing materials as follows:
2. following the instructions contained in each e-mail in the case of mailings or newsletters
3. by contacting the Administrator or the Personal Data Inspector at the business address: TAMO Marcin Laskowski, ul. Węglowa 22C/130 81-338 Gdynia with the note: "Personal data protection" or directly to the e-mail address hello@tamo.design
4. The right to object to data processing based on the Administrator's legitimate interest: The customer has the right to object to the processing of his data based on the Administrator's legitimate interest. The Administrator will stop processing the Customer's personal data, unless he is able to find a legal justification for this process, which will invalidate the Customer's interest or rights, or due to legal claims. The method of raising an objection is described in point 5 b above.
5. Right to Restrict. The Customer has the right to request the Administrator to limit the processing of his personal data under the following conditions: in the event that the Customer objects to the processing of data on the basis of the Administrator's legitimate interest, then the Administrator will limit any processing of such data after verifying whether there is such a legitimate interest:
• if the Customer reports the incorrectness of personal data, then the Administrator will limit any data processing until their correctness is verified,
• where the processing is unlawful, the Customer may object to the deletion of personal data and instead request the restriction of the use of his personal data,
• when the administrator does not need the Customer's personal data, but they are required to submit or dismiss a claim.
1. Right to lodge a complaint. The customer has the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another European Union Member State competent for the place of habitual residence or work of the data subject or for the place of the alleged violation of the GDPR. The Polish supervisory authority is the Inspector General for Personal Data Protection (address: Inspector General for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw).
2. The right to withdraw consent at any time, however, withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
3. The right to obtain human intervention on the part of the Administrator, to express one's own position and to question a decision based on automated data processing.
4. The rights listed above, with the exception of the right described in point 8, can be exercised by contacting the Administrator or the Personal Data Inspector in writing to the address of the Administrator's business: TAMO Marcin Laskowski, ul. Węglowa 22C/130 81-338 Gdynia, with the note: "Personal data protection" or directly to the e-mail address hello@tamo.design

TRANSFER AND SHARING OF PERSONAL DATA
Using some of the Store's services may involve sharing the Customer's personal data with other entities. If, as a result of the above, personal data is transferred to another entity, the processing of personal data will be subject to the privacy policy applied by such entity. The store may share the collected data with the following entities:
• payment operators in order to make electronic payments,
• courier companies, including in order to carry out the shipment,
• producers of products offered by the Store in order to implement customer complaints,
• entities providing system support to operate the website and the sales system, e.g. Shopify International Ltd. Attn: Data Protection Officer c/o Intertrust Ireland 2nd Floor 1-2 Victoria Buildings Haddington Road Dublin 4, D04 XN32 Ireland
• entities providing technological solutions for mailing service.
• entities supporting the promotion of offers, cooperate as part of marketing campaigns.
In addition, the information provided by the Customer may be made available to competent public authorities, if required by applicable law. Credit institutions, for the proper provision of installment sales, with the help of which the Store conducts a credit assessment / uses a scoring procedure.

TECHNICAL MEASURES AND CUSTOMER OBLIGATIONS
The store makes every possible effort to secure the personal data of customers and protect them from the actions of third parties. We use all necessary security measures for servers, connections and website to protect customer data,
in particular SSL encryption. All connections related to the execution of electronic payments by customers,
if this option is selected, they will be made via a secure encrypted connection. Please be advised that the actions taken by the Store may prove insufficient if the Customers do not follow the safety rules themselves. In particular, each customer should keep the login and password to his account on the Store's website confidential and not disclose them to third parties. Please be advised that the Store will not ask customers to provide them, except for providing them when logging in to the account. In order to prevent the use of the Customer's account by unauthorized persons, please log out after finishing using the website.
The collected personal data is stored by the Administrator in the European Economic Area ("EEA"), but they can also be sent to a country outside this area and processed there. Each operation of transferring personal data is performed in accordance with applicable law. If data is transferred outside the EEA, the Administrator uses standard contractual clauses and the Privacy Shield as security measures in relation to countries for which the European Commission has not found an adequate level of data protection

USE OF COOKIES
TAMO Marcin Laskowski uses cookies to:
1. Configuration of the Store's website,
2. Adapting the content of the Store's website to the preferences and rights of Customers and optimizing the use of the website, recognizing the device of each Customer of the Store and its location and properly displaying the website, tailored to its individual needs, remembering the settings selected by Customers and personalizing the interface of each Customer, e.g. in terms of the selected language or region from which the Customer comes, remembering the history of visited subpages of the Store in order to recommend content, font size, website appearance, etc.,
3. Customer authentication in connection with the use of the Store's services and ensuring the Customer's session on the Store's website, including: maintaining the Customer's session (after logging in), thanks to which the Customer does not have to re-enter the login and password on each subpage of the Store; correct configuration of selected functions on the Store's website, enabling, in particular, verification of the authenticity of the browser session, optimization and increasing the efficiency of services provided by the Store,
4. Implementation of processes necessary for the full functionality of the Store's websites, including: adapting the content of the Store's website to the preferences of customers and optimizing the use of the Store's website.
In particular, these files allow to recognize the basic parameters of the Customer's devices and properly display the website, tailored to the individual needs of a given Customer; correct configuration of selected functions of the Store's website, enabling in particular the adjustment of the information provided to a given Customer, taking into account his location. The administrator will use Cookies for Analyzes and research as well as audience audit:
• creating anonymous statistics that help to understand how customers use the Store's website, which allows improving its structure and content;
• creating anonymous statistics that allow the classification of the Store's customers and adapting the website to the anticipated preferences of customers,
1. The Administrator will use Cookies to provide advertising services: advertisements of own services and products presented via the Website; adjusting the advertisements of third-party services and products presented through the Website.
2. The administrator will use cookies to ensure the security and reliability of the website and its data and content. Own cookies may be placed on the end device of the Store's Customers, and then used by advertisers, research companies and multimedia application providers cooperating with the Administrator.
Please be advised that we also use the data collected via cookies to present personalized advertisements on external websites and transfer them to external partners who, on our behalf, carry out marketing activities using various platforms and tools. They use cookies, web beacons, unique computer IDs and similar technologies to collect or receive information from our website and elsewhere on the internet and use them to target personalized marketing messages. Information on the method and scope of data use by these platforms and tools is available on their websites, in the privacy policies they create. We share your personal data with third parties only to manage purchases made by you online. They are only received by: companies that process your address; communication agencies that send order confirmations; warehouses and courier companies that deliver orders; companies that process payments; banks that check your identity and creditworthiness when you buy in installments; debt collection companies. Companies providing tools supporting the sales process within the online store (marketing automation), e.g. recommendation frames, chat functionality, newsletter.

Remember that we process cookies only with your consent. You can withdraw or re-consent to the use of cookies at any time. To do this, all you need to do is make changes to your browser settings. Below are links to the relevant instructions for the most popular browsers.

CUSTOMER RIGHTS, STORAGE AND ACCESS THROUGH COOKIES
Each Customer may independently and at any time change the settings for Cookies, specifying the conditions for their storage and access by Cookies to their device. Changes to the settings referred to in the previous sentence can be made by the Customer using the web browser settings or using the service configuration. These settings can be changed in particular in such a way as to block the automatic handling of Cookies in the settings of the web browser or inform about each time they are placed on the device of a given Customer. Detailed information on the possibilities and ways of handling Cookies are available in the software (web browser) settings. Each customer may delete cookies at any time using the functions available in the web browser he uses. Restricting the use of cookies may affect some of the functionalities available on the Store's website.

PERSONAL DATA INSPECTOR - CONTACT
The Customer of the Store may contact the Data Administrator at any time in order to obtain information on whether and how the Administrator uses or intends to use his Personal Data and information obtained using Cookies. In order to ensure that the Customer's personal data will always be processed faithfully, in a transparent and lawful manner, the Administrator has appointed a Personal Data Protection Officer. The address at which you can contact the Personal Data Inspector is: the address of the Administrator's business: TAMO Marcin Laskowski, ul. Węglowa 22C/130 81-338 Gdynia with the note: "Personal data protection" or e-mail address hello@tamo.design


Gdynia 2023