PRIVACY POLICY STATEMENT

1. INTRODUCTION
1. This privacy policy statement ("Privacy Policy") describes how Goldenberry Group sp. z o.o. ("Goldenberry," "we," "our," "us") collects and processes information about you when you interact with us or use the website goldenberry.linkwebshop.com or specific customer webshops named in the format [customer name].linkwebshop.com („Services”).
2. We exclusively engage in the sale of products to businesses, and the information we process primarily relates to the companies you represent.
3. This Privacy Policy concerns the processing of personal data that you provide us with or that we collect through the Services or other sources.
4. Goldenberry is the data controller for user personal data. Any inquiries to Goldenberry can be directed to the contact details provided in point 6.
2. PERSONAL DATA WE COLLECT, PURPOSES, AND LEGAL BASIS FOR PROCESSING
1. When you use the Services: We automatically collect information about the user and the way they use the Services when the user visits the Services. This includes information about the user's IP address, the type of browser used, the web pages visited on the site, the links the user activates, and general usage patterns of the Services.
1. The purpose is to fulfill our legitimate interest in optimizing user comfort and improving the functionality of the Services, as well as recording the time that visitors spend using the Services and providing suitable offers to you.
2. The legal basis for data processing is the General Data Protection Regulation ("GDPR") Article 6(1)(f), as we have conducted a balancing analysis and determined that the described activities do not infringe upon your interests or fundamental rights and freedoms.
2. When you represent a company that is our customer and create a user account: We collect information about your name, email address, phone number, the company you represent, and any other information you choose to provide us with, including saved product ideas and product "likes," etc.
1. The purpose of processing is to communicate with you, including via email and phone, respond to inquiries, notify you of defects, provide you and the company you represent with the best possible service, including accommodating specific requests and needs, and to provide us with preliminary conditions to offer suitable products and marketing to the company you represent.
2. The legal basis for data processing is our legitimate interest in communicating with you and providing you with the best possible service, as well as introducing our products to the market for the company you represent. Pursuant to GDPR Article 6(1)(f), we have conducted a balancing of interests analysis and determined that the described activities do not infringe upon your interests or fundamental rights and freedoms.
3. When you represent a company that is our customer and create a user account: We collect information about your name, email address, phone number, the company you represent, and any other information you choose to provide us with, including saved product ideas and product "likes," etc.
1. The purpose of processing is to communicate with you, including via email and phone, respond to inquiries, notify you of defects, provide you and the company you represent with the best possible service, including accommodating specific requests and needs, and to provide us with preliminary conditions to offer suitable products and marketing to the company you represent.
2. The legal basis for data processing is our legitimate interest in communicating with you and providing you with the best possible service, as well as introducing our products to the market for the company you represent. Pursuant to GDPR Article 6(1)(f), we have conducted a balancing of interests analysis and determined that the described activities do not infringe upon your interests or fundamental rights and freedoms.
4. If you make purchases of our products:We collect information about your name, the company you represent, email address, phone number, optionally your photo, payment method, information about the products you purchase on behalf of the company you represent, delivery preferences, etc.
1. The purposeof processing is to deliver the products you have ordered and fulfill the contract we have entered into with you/the company you represent.
2. The legal basis for data processing is the performance of a contract/order and the delivery of the purchased products, pursuant to GDPR Article 6(1)(b).
3. RECIPIENTS OF PERSONAL DATA and transfer of data to third countries
1. We only share your personal data with individuals/countries outside the European Economic Area (EEA) when required by law or for the purpose of providing the services and products offered by us within the Services.
2. Disclosure to data processors: The information you provide us with in connection with a purchase is disclosed to the supplier of the products you purchased. Disclosure of this information is necessary for the completion of the purchase, including the delivery of products.
3. Disclosure to data processing entities: Your information may be transferred to external business partners who process personal data on our behalf. We use external business partners for various activities such as technical operations and improvement of the Services, analysis, newsletter distribution, and targeted advertising. One of these providers is Link Network ApS, CVR number 35 65 95 60, which is a provider of a technical purchasing platform facilitating the submission of offers from multiple product suppliers and combining orders from multiple buyers to suppliers. Link Network ApS also facilitates the payment function and serves as the address for our online stores.

These companies are data processors and are subject to our instructions. They process data for which we are the data controllers and are not allowed to use personal data for any purpose other than the fulfillment of the agreement with them. They are also required to maintain confidentiality regarding this data. We have entered into written agreements regarding data processing with all data processing entities that process personal data on our behalf.

1. One of the data processing entities is Google Analytics v/Google LLC, located in the United States. Adequate safeguards for the transfer of personal data to the United States are provided through the certification of data processors under the EU-U.S. Privacy Shield, cf. GDPR Article 45. A copy of the Google LLC certificate can be found here: [provide URL].
1. WHEN DO WE DELETE YOUR PERSONAL DATA
1. Information related to the use of the Services is deleted if the user has not used the Services for 18 months.
2. If you have not logged into your account for a period longer than 18 months, we will delete your account and the information we have registered about you. You can also delete your account through the profile settings in the Service. However, we will retain information about your purchases to fulfill our legal obligations in accordance with accounting, bookkeeping, and tax regulations.
3. Information may be retained for a longer period if: i) longer retention is legally justified, ii) it is necessary to establish, exercise, or defend a legal claim, or iii) it is necessary to fulfill legal obligations. Accounting records are kept for 5 years from the end of the financial year to comply with the requirements specified in the Danish/Polish Accounting Act, respectively.
4. Information collected about your opinions regarding our newsletters will be deleted when you withdraw your consent to receive our newsletters. Documentation regarding your consent to receive direct marketing will be kept for 2 years to demonstrate that we have not violated the law by sending you marketing materials.
2. YOUR RIGHTS
1. To ensure transparency regarding the processing of your personal data, in this section we provide you with information about your rights:
2. Right of access to data: You have the right to request information, among other things, about the information we have registered about you, the purposes of the registration, the categories of personal data, and the recipients of the personal data, as well as information about the source of the data. You also have the right to receive a copy of the personal data we process about you. 
3. Right to rectification of data: You have the right to have incorrect personal data about you corrected/changed by us.
4. Right to erasure of data: Under certain circumstances, you have the right to have all or some of your personal data deleted, for example, if you withdraw your consent and we do not have another legal basis for continued processing. To the extent that further processing of your personal data is necessary, for example, to fulfill legal obligations or to establish, exercise, or defend a legal claim, we are not obligated to delete your personal data.
5. Right to restriction of processing to storage only: Under certain circumstances, you have the right to restrict the processing of your personal data to storage only, for example, if you believe that the information we process about you is inaccurate.
6. Right to object: The user has the right to object to the processing of their personal data by us when it is used for direct marketing purposes. You can unsubscribe from newsletters and direct marketing through your user account. The user also has the right to object, for reasons related to their particular situation, to the processing of their personal data based on legitimate legal grounds.
7. Right to withdraw consent: The user has the right to withdraw their consent to specific data processing activities at any time, including in relation to feedback/responses to our newsletter.
3. CONTACT DETAILS
1. For any questions or comments regarding this Privacy Policy or if you wish to exercise one or more of your rights, please contact:

Goldenberry Group sp. z o. o., ul. Słowikowskiego 81C, 05-090 Raszyn, Polska, NIP: 9512401600, REGON: 363065870, e-mail: goldenberry@goldenberry.com.pl, tel.: 22 841 32 37 (call charges according to the customer's operator tariff)

1. Amendment to the clause / privacy policy information
1. If we make any changes to this Privacy Policy, the latest version of the Privacy Policy will always be available in the Services, including the user's account if the user has created such an account.