Privacy Policy dated 01.08.2026

Privacy Policy of the Mubino online store
(www.mubino.pl)

PRIVACY POLICY

1. The administrator of personal data provided by the Client when using the Store is the Seller (Mubino Julia Badura, ul. Raciborska 35e/7, 40-047 Katowice).
   
   

2. The Client's personal data is processed for the following purposes and on the basis of the following legal grounds:
   
   
   1. necessity for the performance of a contract or for taking steps prior to entering into a contract (Article 6(1)(b) of the GDPR) for the purpose of:
   1. placing orders and processing purchases;
   2. registration, maintenance and servicing of the Client Account (only if voluntarily created by the Client);
   3. responding to messages, inquiries or requests addressed to the Seller via the contact form;
   4. accepting orders for products offered through the Store and fulfilling delivery contracts;
   5. processing complaints;
   6. issuing accounting documents, making tax and accounting settlements, maintaining and archiving tax and accounting documentation;
   7. potentially establishing and pursuing claims or defending against them, including conducting legal proceedings and debt collection;
   8. archiving data and documents containing personal data for evidentiary purposes;
   9. sending a mailing newsletter containing marketing content and/or commercial information (e.g., information about products, offers, news, promotions, contests, etc.);
   10. conducting other marketing activities;
   11. conducting analyses and statistics on how Clients use the Store based on data collected using "cookies";
       
       
   2. legal obligation in connection with the performance of the contract (Article 6(1)(c) in conjunction with Article 6(1)(b) of the GDPR) for the purpose of processing submitted complaints;
      
      
   3. consent (Article 6(1)(a) of the GDPR) expressed by providing data via electronic forms on the website, for the purpose of transmitting marketing information;
      
      
   4. legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), for the purpose of:
   1. contact – providing information, where the legitimate interest is customer care and answering questions asked;
   2. pursuing claims related to the concluded contract, where the Administrator's legitimate interest is the ability to pursue and protect against potential claims;
      
      
   5. legal obligation (Article 6(1)(c) of the GDPR) for the purpose of fulfilling obligations arising from legal provisions, including accounting regulations and tax obligations.
      
      

3. Personal data may be transferred to entities processing personal data on behalf of the Administrator, including: entities providing courier services, where such entities process data on the basis of agreements concluded with the Administrator and only in accordance with his instructions.
   
   
   
4. In addition, personal data may be shared with, among others: entities providing insurance, banking, equipment servicing, postal, accounting, legal, email and marketing services.
   
   
   
5. Data collected for the purpose of registering a Client Account or processing purchases – placing orders – will be processed for the period of purchase processing and Account operation. Personal data will also be processed for a period enabling the consideration of complaints, including storage until the expiry of any claims or the expiry of the archiving obligation resulting from legal provisions, in particular the obligation concerning the storage of accounting documents. This data includes: name, surname, address, email address, phone number.
   
   
   
6. Data collected for the purpose of transmitting marketing information will be processed for the period of consent. This data includes: name, surname, address, email address, phone number.
   
   
   
7. The Administrator will cease processing personal data processed on the basis of the administrator's legitimate interest earlier if an objection to this type of data processing is filed. In the event of processing personal data based on expressed consent, the data will be stored until its withdrawal.
   
   
   
8. The Client has the right to:
   
   
1. access – obtain confirmation from the Administrator as to whether personal data concerning him or her is being processed. If data about a person is processed, he or she is entitled to obtain access to it and to obtain the following information: about the purposes of processing, categories of personal data, recipients or categories of recipients to whom the data has been or will be disclosed, about the period of data storage or the criteria for determining it, about the right to request rectification, erasure or restriction of processing of personal data concerning the data subject, and to object to such processing (Article 15 of the GDPR);
   
   
2. receive a copy of the data – obtain a copy of the data undergoing processing, whereby the first copy is free of charge, and for subsequent copies the administrator may impose a reasonable fee based on administrative costs (Article 15(3) of the GDPR);
   
   
3. rectification – request the rectification of personal data concerning him or her that is inaccurate, or to complete incomplete data (Article 16 of the GDPR);
   
   
4. erasure of data – request the erasure of personal data concerning him or her, if the administrator no longer has a legal basis for processing it or the data is no longer necessary for the purposes of processing (Article 17 of the GDPR);
   
   
5. restriction of processing – request the restriction of processing of personal data (Article 18 of the GDPR), when:
1. the data subject contests the accuracy of the personal data – for a period enabling the administrator to verify the accuracy of these data,
2. the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use,
3. the administrator no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims,
4. the data subject has objected to processing – pending the verification whether the legitimate grounds of the administrator override those of the data subject;
   
   
6. data portability – receive the personal data concerning him or her, which he or she has provided to the Administrator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another administrator, if the data are processed on the basis of the data subject's consent or a contract concluded with him or her and if the data are processed by automated means (Article 20 of the GDPR);
   
   
7. object – object to the processing of personal data concerning him or her for the legitimate purposes of the administrator, on grounds relating to his or her particular situation, including profiling. In such a case, the Administrator shall assess the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or grounds for the establishment, exercise or defence of legal claims. If, according to the assessment, the interests of the data subject are more important than the interests of the Administrator, the Administrator will be obliged to cease processing the data for these purposes (Article 21 of the GDPR).
   
   
   
9. To exercise the above-mentioned rights, the data subject should contact the Administrator (using the contact details provided in § 2 of the Store Regulations) and inform him about which right and to what extent he wishes to exercise it;
   
   
   
10. The provision of personal data is voluntary, but in the scope of data processed on the basis of a legal obligation and the performance of a contract and taking steps prior to entering into a contract, it is necessary for the conclusion and performance of the contract. Failure to provide data necessary for contact, including sending marketing information, will prevent contact and the provision of marketing materials via e-mail or telephone.
    
    
    
11. If the Client believes that the Administrator has violated personal data protection regulations with his actions, he has the right to lodge a complaint with the President of the Personal Data Protection Office regarding such action by the Administrator.
    
    
    
12. The website uses "cookies". By using the Store's website, the Client or Buyer accepts that "cookies" will be installed on the end device, which enable the Seller to provide services.
    
    
    
13. "Cookies" are used for the following purposes:
    
    
1. creating statistics that help understand how Clients use the website, which directly affects the improvement of its structure and content;
   
   
2. maintaining the Client's internet session, thanks to which he does not have to re-enter login data to the Account or perform additional actions, e.g., re-add a product to the cart, on every subpage of the Store.
   
   
   
14. Web browsing software (internet browser) usually by default allows the storage of "cookies" on the Client's end device. Store Clients can change these settings. The internet browser allows the deletion of "cookies". It is also possible to automatically block "cookies". Detailed information on this topic is contained in the help or documentation of the Client's specific internet browser.
    
    
    
15. Restrictions on the use of "cookies" may adversely affect some functions available in the Store.
    
    
    
16. The Client has the right to decide on the access of "cookies" to his end device by setting appropriate settings (rights) for these files in the settings window of his internet browser.
    
    
    
17. Leaving the software settings installed on the end device unchanged by the Client means consent to placing "cookies" on the Client's device