Privacy Policy

Thank you for your interest in our on-line shop. The protection of your privacy is very important to us. In this Privacy Policy you will find the detailed information on dealing with your data. The administrator of your data is: Saketos sp. z o.o. Biedrzychowicka 2, 59-921 Sieniawka, [email protected]

1. Access Data and Hosting

Our websites can be visited without providing personal data. Each time you visit our website, the server automatically records only server logs, such as the name of the requested file, your IP address, the date and time of the call, the amount of data transmitted, and the internet service provider making the request (so-called access logs) and documents the page access.

This data is analysed solely for the purpose of ensuring our website functions correctly and improving our offer. This serves to safeguard our legitimate interest, in accordance with the Data Protection Act 2018 and UK-GDPR, in the optimal and correct presentation of our websites and offers.

1.1 Hosting

All access data will be deleted within thirty days of the end of your visit to our site.

Website hosting and display services are partially provided on our behalf by our service providers as part of a data processing agreement. Unless this privacy policy states otherwise, all access data and data collected in the forms provided for this purpose on our site will be processed on their servers. If you have questions about our service providers and the basis for our cooperation with them, please contact us. You will find our contact details in the section "Our Contact Details and Your Rights".

1.2 Content Delivery Network

To reduce the loading time of our websites, we use a so-called Content Delivery Network ("CDN"). Through CDN services - content on the site, such as large multimedia files, is delivered via regional external servers of CDN service providers. This means that so-called access data is also processed on the servers of CDN service providers. Services provided for us in this regard are performed under a data processing agreement with service providers. Our service providers have their headquarters and/or use servers located in countries outside the EU and EEA. The European Commission has not issued a decision confirming an adequate level of data protection for these countries. Our cooperation is based on Standard Contractual Clauses adopted by the European Commission. If you have questions about our service providers and the basis of our cooperation with them, please contact us. You will find contact details in the section "Our Contact Details and Your Rights".

2. Collection and Processing of Data for Contract Fulfillment and Contact Purposes

2.1 Data Processing for Contract Fulfillment

We process personal data voluntarily provided by you when placing an order for the purpose of fulfilling the contract (including enquiries about warranty claims or defects and notification requirements for necessary updates). The legal basis for this processing is contract performance under the Data Protection Act 2018 and UK-GDPR. Mandatory fields are marked as such because they contain data necessary for order fulfillment, and without this information, we are unable to process your order. The specific data collected is determined directly from the forms into which you enter your information.

Further information regarding the processing of your data, particularly concerning the transfer of data to our service providers for order fulfillment, payment processing, and shipping, can be found in the subsequent sections of this privacy policy. After contract fulfillment, processing of your data will be restricted, and after the expiry of periods required under tax and accounting regulations, the data will be deleted, unless you have expressly consented (on the legal basis of consent) to further use of this data for other purposes or we have reserved the right to use it in cases permitted by law, in which case we will inform you in this privacy policy.

2.2 Goods Management System

To process orders and fulfil the contract, we also use an external goods management system. Our service providers provide us with services in this regard under a data processing agreement. If you have questions about our service providers and the basis for our cooperation with them, please contact us. You will find contact details in the section "Our Contact Details and Your Rights".

2.3 Customer Account

If you consent to creating a customer account in accordance with consent-based legal processing - we will process the necessary personal data for this purpose. This data will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, please send a message to our contact address indicated in the section "Our Contact Details and Your Rights" or use the appropriate function in your account settings. After deleting your account, processing of your data will be restricted, and after the expiry of periods specified in tax and accounting regulations, the data will be deleted, unless you have expressly consented to further use of this data for other purposes or we have reserved the right to use it under applicable law, in which case we will inform you in this privacy policy.

Data entered by you in the form: https://saketos.co.uk/create-your-unique-bag/

are not automatically used to create a customer account in your name in our shop. Your name or company name, email address, and telephone number are necessary here to contact you by telephone or email to execute a customised/individual order and are stored in accordance with tax regulations. They are not stored in the shop database like a typical registered user, unless you register yourself.

2.4 Data Processing for Contact Purposes

As part of customer communication, we process personal data for the purpose of handling your enquiries. You provide this data voluntarily when contacting us (for example, via a contact form or email). Mandatory fields are marked as such because they contain data necessary for handling your enquiry. The specific data collected is determined directly from the forms into which you enter your information. After your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of this data for other purposes or we have reserved the right to use it in cases permitted by law, in which case we will inform you in this privacy policy.

3. Data Processing for Delivery Purposes

For the purpose of fulfilling the contract, we pass your data to the delivery company you selected during the ordering process to deliver the ordered products.

Transfer of Data to Courier Companies

The transfer of data to courier companies is a necessary part of the service delivery process and the finalisation of orders placed in our shop. Selecting the appropriate consent, visible during registration and/or editing your account in the shop panel, allows us to process your order without complications. The selected courier company will receive your delivery address, email address, and telephone number necessary for direct contact to finalise the delivery process.

4. Data Processing for Payment Purposes

To process payments in our online shop, we cooperate with external payment service providers and transfer your data to the payment company you selected during the ordering process. This is for the purpose of fulfilling the contract under the Data Protection Act 2018 and UK-GDPR.

Data Processing to Prevent Abuse and Optimise Payments

In certain situations, we may transfer additional information to our service providers, which they may use together with information necessary for payment processing. These service providers then act on our behalf as data processors and provide us with services to prevent fraud and optimise payment processes (such as invoicing, analysis of rejected payments, accounting support). In accordance with the Data Protection Act 2018 and UK-GDPR, this serves to safeguard our legitimate interests in protecting against fraud and abuse and in effective payment management.

5. Marketing Channels:

5.1 Email Advertising

If you subscribe to our newsletter, we will use the data you have provided to us on the basis of your consent to send our newsletter to you regularly via email.

The newsletter is sent as part of a data processing agreement on our behalf by an external service provider. If you have questions about our service providers and the basis for our cooperation with them, please contact us. You will find contact details in the section "Our Contact Details and Your Rights".

You can unsubscribe from the newsletter at any time. To do so, please send a message to our contact address indicated in the section "Our Contact Details and Your Rights" or use the unsubscribe link in the newsletter.

5.2 Categories of Communications in the Newsletter System

Saketos offers the following categories of marketing communications through the newsletter system:

a) Transactional messages

Directly related to order fulfillment (confirmation, delivery status, returns). These messages are mandatory and sent without the need for consent.

• Legal basis: Contract performance
• Storage period: Duration of the contract + 5 years (required by tax regulations)

b) News and Promotions

Information about new products, sales, promotional codes, and special offers.

• Legal basis: Consent
• Storage period: Until you unsubscribe + 90 days
• Opt-out option: At any time via link in the email

c) Wishlist Notifications

Information about price changes, availability, or promotions for products added to your wishlist.

• Legal basis: Consent
• Storage period: Until wishlist is deleted or subscription cancelled
• Opt-out option: At any time via link in the email

d) Product Recommendations

Personalised product suggestions based on your purchase history, viewed products, and interests.

• Legal basis: Consent
• Storage period: Until you unsubscribe from the subscription
• Opt-out option: At any time via link in the email

e) Availability Enquiries

Automatic emails with recommendations in response to an availability enquiry.

• Legal basis: Consent
• Storage period: 30 days from sending the message or until subscription cancellation

f) Surveys and Reviews

Invitations to rate products, provide feedback, and participate in satisfaction surveys.

• Legal basis: Consent / Legitimate interest (improving services)
• Storage period: Corresponding to order storage periods
• Number of messages: Limited (maximum a few per year)
• Opt-out option: At any time via link in the email

g) Reminders

Notifications about products on your wishlist subject to promotion, abandoned baskets, or availability of selected sizes and colours.

• Legal basis: Legitimate interest (improving experience)
• Storage period: Until order is placed or subscription is cancelled
• Opt-out option: At any time via link in the email

How to Manage Messaging Preferences

You can choose which categories of messages you wish to receive by:

• Using the unsubscribe link available in every email
• Sending a message to [email protected]

5.3 Advertising Sent by Traditional Mail

We also reserve the right to process your data - your name and postal address - for our own advertising purposes in relation to our products, such as sending you the latest offers and information about our products via post. This serves to safeguard our legitimate interest in contacting customers for advertising purposes.

5.4 Sending Invitations to Leave Reviews

If you have given us consent during or after placing your order, we will use your email address to send you an electronic invitation to review your purchase from our shop. The review process is conducted via our review system. You can withdraw your consent at any time by sending us a message at the contact address indicated in the section "Our Contact Details and Your Rights". Alternatively, you can use the unsubscribe link in the invitation email.

Review invitations are sent by our service provider TrustMate S.A. based in Wrocław, postal code 50-062, Bartoszowicka 3, registration number: 0000737597. As part of sending invitations, we receive from TrustMate information about the status (for example, whether the invitation was sent and whether it reached the recipient). This is done on the basis of our legitimate interest in receiving information about invitations so that we can optimise when necessary, as well as based on TrustMate's legitimate interest in being able to offer this service.

TrustMate and we are jointly responsible for sending invitations to leave reviews and for collecting and displaying review information and ratings or status.

As part of this joint responsibility between us and TrustMate, if you have questions about the protection of your data or wish to exercise your rights, please contact TrustMate. You will find contact details on their website. You will also find further information about data protection at TrustMate there. Regardless, you can always contact us directly. If necessary, your enquiry will be passed on to TrustMate, which is jointly responsible for data processing.

5.5 Brevo - Email Marketing and SMS Platform

Saketos uses the Brevo platform (formerly Sendinblue) for handling marketing communications.

Service Provider:

• Name: Brevo S.A.S.
• Address: 55 Rue d'Amsterdam, 75008 Paris, France
• Data Protection Contact:
• [email protected]
• Website:
• https://www.brevo.com
• EU-based company (France) - data stored in the EU

Legal Basis:

• Consent for newsletter
• Contract performance for transactional messages
• Legitimate interest for automation and analytics

Data Processed by Brevo:

• Email address
• First and last name
• Phone number (for SMS marketing)
• Purchase history
• Email opening history
• Link click history
• Subscription category (e.g. "News", "Promotions")
• Subscription/unsubscription date
• Email delivery status (delivered, bounce, complaint)
• Customer segments
• User ID in Brevo system

Processing Purposes in Brevo:

1. Sending newsletters (various categories)
2. Sending transactional messages (confirmations, statuses, notifications)
3. Automated email series (automation workflows)
4. Email segmentation and personalisation
5. Tracking opens and clicks
6. Campaign reporting and analytics
7. Building audiences for retargeting (export to Meta, Google Ads)

Storage Periods in Brevo:

• Active subscribers: Indefinitely (as long as on the list)
• Unsubscribed subscribers: 30-90 days after unsubscription
• Email messages: Up to 1 year
• Bounce/complaint data: Indefinitely (protective database)
• SMS data: Up to 2 years

Right to Opt Out of Brevo:

You can opt out at any time by:

• Clicking "Unsubscribe" in any email
• Sending a request to
• [email protected]

6. Personalisation and Personalised Advertising

6.1 Personalisation of the Shopping Process

On the basis of our legitimate interest under the Data Protection Act 2018 and UK-GDPR, we process your data to personalise your shopping experience, regardless of where, when, or which device you use. Personalisation includes:

• Customised product presentation based on your interests
• Product recommendations based on your purchase history and viewed items
• Personalised offers and promotions
• Customisation of the interface and user preferences
• Optimisation of experience across different devices

Processed Data: Purchase history, viewed products and categories, time spent on individual pages, products added to basket and wishlist, IP address, device information, cookie identifiers, preferences expressed in account settings.

Storage Period: Data for personalisation purposes is stored for the duration of your use of the service and 12 months after your last activity, then deleted.

Data Recipients: Providers of personalisation tools, analytics, and data management solutions.

Right to Opt Out: You have the right to opt out of personalisation at any time by changing settings in your account. In this case, your shopping experience will not be personalised.

6.2 Behavioural Analysis and Profiling

We process your data to analyse how you use the shop, create profiles of your interests and preferences, and build profiles for service personalisation purposes. We create automatic user profiles based on products you view, your purchases, and your interactions. This profiling is solely for personalisation purposes and does not constitute automated decision-making under data protection law.

Legal Basis: Legitimate interest in improving services

Data Categories: Behavioural history, interactions, conversion path, user preferences

Storage Period: 12 months after your last activity

6.3 Personalised Advertising

On the basis of our legitimate interest under the Data Protection Act 2018 and UK-GDPR, we process your data to display personalised advertisements for Saketos products on:

• Partner websites and applications
• Social media platforms (Facebook, Instagram, Pinterest, LinkedIn, etc.)
• Advertising networks (Google Ads, LinkedIn Ads, TikTok Ads, Pinterest Ads, Bing Ads, etc.)
• External advertising software provider platforms

Processed Data: Purchase history, viewed products, products added to basket, IP address, device information, cookie identifiers, geographical data.

Storage Period: Data for advertising purposes is stored for 12 months or until you opt out of this type of advertising, whichever comes first.

Data Recipients - Advertising Partners:

• Meta Platforms Ireland Limited (Facebook, Instagram)
• Google Ireland Limited (Google Ads)
• Other advertising network providers operating under data processing agreements

Right to Opt Out: You can opt out of personalised advertising by:

• Adjusting cookie settings on our website
• Options available on social media platforms
• Sending a request to
• [email protected]

6.4 Retargeting and Audience Building

We process user data to build audiences for retargeting purposes - displaying advertisements to people who have previously viewed our website or interacted with our products.

Legal Basis: Legitimate interest in effective advertising and reaching potential customers

Technique: We use pixels (Facebook Pixel, Google Ads Pixel) and other identifiers to track users across multiple websites.

Processed Data: IP address, cookies, device ID, visit history, audience segment

Storage Period: 12 months

Right to Opt Out: You can opt out of retargeting by:

• Adjusting cookie settings on our website
• Adjusting privacy settings on social media platforms
• Sending a request to
• [email protected]

7. Cookies and Similar Technologies

7.1 General Information

To make your visit to our website more attractive and enable you to use its key features, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your device. Some cookies used by us are deleted after you close your web browser (so-called session cookies). Other cookies are retained on your device and enable us to recognise your browser when you return to the site (so-called persistent cookies).

7.2 Protection of End-User Privacy

When using our online services, we use technologies that are absolutely necessary to ensure proper and optimal use of the essential functions of our website. In this respect, storing information on your end-user device or accessing information already stored on your device does not require your consent.

For features that are not absolutely necessary, storing information on your end-user device or accessing information already stored on your device requires your consent. Please note that without consent, some features or elements of the website may not be fully available. Any consents you have given remain valid until you withdraw your consent, adjust your settings, or reset the relevant settings on your device.

7.3 Other Cases of Data Processing Using Cookies and Other Technologies

We use technologies that are absolutely necessary to ensure proper and optimal use of the essential functions of our website (for example, the shopping basket function). These technologies process data such as your IP address, the time you spend on the site, information about your device and browser, and information about your use of our website (for example, information about your basket contents). This serves to safeguard our legitimate interest, in accordance with the Data Protection Act 2018 and UK-GDPR, in the optimal presentation of our offer.

We also use technological tools to fulfil legal obligations we are subject to (for example, to prove that we obtained consent to process your personal data) as well as for internet analytics and internet marketing.

In your browser's help menu, you will find explanations for changing your cookie settings. They are available at the following links: Microsoft Edge / Safari / Chrome / Firefox / Opera.

When we have been given consent by you to use specific technological tools, consent can be withdrawn at any time. To withdraw your consent, please contact us using the contact address indicated in the section "Our Contact Details and Your Rights".

7.4 Types of Cookies - Detailed Description

Essential Cookies (no consent required)

Required for shop functionality, basket management, authentication, security. Examples:

• PHPSESSID - session identifier
• Cookies for shopping basket management
• Security cookies (CSRF protection)

Do not require user consent.

Analytical Cookies

For analysing how you use the shop, identifying problems, and improving services.

• Legal basis: Legitimate interest
• Examples: Google Analytics cookies
• Description: Collect anonymised data about site traffic

Marketing Cookies

For personalising advertisements, retargeting, and building audiences.

• Legal basis: Consent required
• Examples: Facebook Pixel, Google Ads cookies
• Description: Allow tracking of users for advertising purposes

Preference Cookies

For remembering your settings (language, currency, preferences).

• Legal basis: Legitimate interest
• Description: Save your individual settings

Pixels (Web Beacons)

Small images for tracking interactions and conversions.

• Legal basis: Consent required for marketing purposes
• Examples: Facebook Pixel, Google Conversion Tracking Pixel
• Description: Track users coming from advertisements

IDFA/AAID Identifiers

For mobile devices (iOS/Android) for personalisation and retargeting.

• Legal basis: Consent required
• Description: Enable tracking on mobile devices

7.5 Consent Management Platform (CMP)

On our website, we use a consent management tool (Consent Manager Platform "CMP") to inform you about the cookies and other technologies used on our website and to obtain, manage, and document your given consents. This is necessary to fulfil a legal obligation we are subject to. The consent management platform we use is provided by Objectis Ltd., which processes your data on our behalf.

Your data will be deleted after 2 years, unless you have expressly consented to further use of this data for other purposes.

8. Use of Cookies and Technological Tools

To the extent you have given consent, we use the following cookies and technological tools on our website. The consent given can be withdrawn at any time.

Data Transfers Outside the UK/EU/EEA

Some providers of our tools have their headquarters outside the European Union:

• USA, Canada, Japan, South Korea, New Zealand, Argentina: The European Commission has issued an adequacy decision for these countries (Data Protection Framework).
• UK, Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico: Transfers are safeguarded by Standard Contractual Clauses (SCC) adopted by the European Commission.

8.1 Google

Provider: Google Ireland Ltd, Dublin 4, Ireland

Tools: Google Analytics, Google Ads, Google Ads Conversion Tracking, Google reCAPTCHA, Google Fonts

Purpose: Analysing site traffic, advertising, measuring conversions, spam protection, consistent fonts

Data: IP address, cookies, device and browser information, browsing history, conversion information

Storage: In accordance with Google's policy

Transfers: USA (Data Protection Framework)

Legal Basis: Legitimate interest

8.2 Microsoft (Bing)

Provider: Microsoft Ireland Operations Ltd, Dublin 18, Ireland

Tools: Microsoft Advertising (Bing Ads), Universal Event Tracking (UET), Bing Ads Pixel

Purpose: Advertising on Bing, Yahoo, MSN and partner networks, conversion measurement, retargeting

Data: IP address, cookies, device ID, browsing history, conversion information

Storage: Up to 180 days

Transfers: USA (Data Protection Framework)

Legal Basis: Legitimate interest

8.3 Meta (Facebook, Instagram)

Provider: Meta Platforms Ireland Ltd, Dublin 4, Ireland

Tools: Facebook Pixel, Facebook Ads, Instagram Ads, Facebook Custom Audience, Facebook Lookalike Audience

Purpose: Collecting data about user behaviour, advertising on Facebook and Instagram, retargeting, building target segments

Data: IP address, cookies, device ID, browsing history, conversion information, hashed identifying data (email, phone)

Storage: Up to 13 months

Transfers: USA (Data Protection Framework)

Legal Basis: Legitimate interest (joint control under data protection law)

8.4 TikTok

Provider: TikTok Information Technologies UK Limited, London, United Kingdom

Tools: TikTok Pixel, TikTok Ads Campaign, TikTok Custom Audience, TikTok Lookalike Audience

Purpose: Tracking user interactions, conversion measurement, retargeting, building target segments

Data: IP address, cookies, device ID, browsing history, conversion information

Storage: 12 months

Transfers: United Kingdom and outside the EU (safeguarded by SCC)

Legal Basis: Legitimate interest

8.5 LinkedIn

Provider: LinkedIn Ireland Unlimited Company, Dublin 2, Ireland

Tools: LinkedIn Insight Tag, LinkedIn Ads Campaign, LinkedIn Matched Audience, LinkedIn Lookalike Audience

Purpose: Conversion tracking, measuring advertising effectiveness, retargeting, building target segments, B2B advertising

Data: IP address, cookies, device ID, LinkedIn ID, conversion information

Storage: 90 days

Transfers: Dublin (EU) and USA (Data Protection Framework)

Legal Basis: Legitimate interest

8.6 Pinterest

Provider: Pinterest Europe Ltd, Dublin 2, Ireland

Tools: Pinterest Tag, Pinterest Ads Campaign, Pinterest Custom Audience, Pinterest Lookalike Audience

Purpose: Conversion tracking, measuring advertising effectiveness, retargeting, building target segments

Data: IP address, cookies, device ID, browsing history, conversion information

Storage: 90 days

Transfers: USA (Data Protection Framework)

Legal Basis: Legitimate interest

8.7 Managing Cookie Preferences

You can manage your cookie preferences by:

On our website:

• Cookie banner - Reject or accept marketing advertisements

In your browser:

• Chrome, Firefox, Safari, Edge: Menu > Settings > Privacy > Cookies

9. Shop Reviews - TrustMate

To display TrustMate S.A. services (such as quality badges and collected reviews) on our website, TrustMate widgets are integrated with our website.

This serves our legitimate interest, under the Data Protection Act 2018 and UK-GDPR, in optimal marketing of our offer by enabling safe online shopping. The review services offered constitute an offer from the company based in Wrocław, postal code 50-062, Bartoszowicka 3, registration number 0000737597 (hereinafter "TrustMate"), with which we are jointly responsible, in accordance with data protection law, for the protection of jointly administered data. We hereby inform you of the essential content of the joint arrangements of data controllers.

As part of the joint responsibility between us and TrustMate S.A., if you have questions about data protection and wish to exercise your rights, please contact TrustMate using the contact details indicated in TrustMate's privacy policy

You can, however, always contact us. Your enquiry or request will then be passed on to the other data controller if necessary.

Shop customers have the opportunity to voluntarily and free of charge leave reviews regarding purchases made in the shop. Reviews may also include ratings, photographs, or reviews of purchased products.

After purchases in the shop, the seller transfers the necessary data to create an email invitation to the company handling the survey process. The sending of surveys and the process of collecting reviews in forms is fully managed by TrustMate S.A. based in Bartoszowicka 3, 51-641 Wrocław.

TrustMate S.A. sends you an email requesting a review and a link to an online form allowing you to leave one - the online form allows you to answer questions from the seller about your purchases, rate them, add your own description about the review, and add photographs of the purchased product. If you do not leave a review after receiving the first invitation, TrustMate may resend the invitation.

A review can only be left by a customer who has made purchases in the seller's online shop. Reviews left by customers are published by the seller in their online shop and on the TrustMate.io profile.

10. Data Security

We endeavour to protect your personal data through:

• Encryption (SSL/TLS) of data transmission
• Restricting access to data to authorised employees
• Implementing technical and organisational security measures
• Regular security audits
• Confidentiality agreements with all service providers

However, no method of transmitting data over the Internet is 100% secure. We cannot guarantee absolute security of your data.

11. Data Transfers Outside the UK/EU/EEA

Some of our service providers (social media platforms, advertising networks, analytical tools) may be based outside the European Union or United Kingdom. Data transfers are safeguarded through:

• European Commission adequacy decisions (e.g. for the USA - Data Protection Framework)
• Standard Contractual Clauses (SCC)
• Binding Corporate Rules (BCR)

12. Changes to this Privacy Policy

We may change this privacy policy at any time to reflect changes in our data processing practices or changes in applicable law. In case of material changes, we will notify you through:

• An email sent to the address you have provided
• Clear notice on our website
• Requirement to re-accept the policy before continuing to use our services

Continued use of our services after changes constitutes acceptance of the new privacy policy.

13. Primary Data Processing Purposes

13.1 Transactional and Mandatory Purposes

Order Fulfillment

• Basis: Contract performance
• Data: Name, address, telephone, email, payment data
• Storage: 5 years (required by tax regulations)

Transactional Messages

• Basis: Contract performance
• Content: Order confirmation, delivery status, returns
• Storage: Duration of contract + 5 years
• Opt-out: Not possible (mandatory)

Delivery Fulfillment

• Basis: Contract performance
• Data: Delivery address, email, telephone
• Storage: Until delivery + 5 years
• Recipients: Courier companies

Payment Processing

• Basis: Contract performance
• Data: Payment data, transaction history
• Storage: Until completion + 5 years
• Recipients: Payment service providers

Complaint Handling

• Basis: Contract performance
• Data: Complaint information, correspondence
• Storage: 3 years (required by civil law)

Customer Account

• Basis: Consent / Contract performance
• Data: All account user data
• Storage: Until deletion + archiving
• Opt-out: Possible at any time

13.2 Marketing Purposes (Requiring Consent)

Newsletter - News and Promotions

• Basis: Consent
• Content: New products, sales, promotional codes
• Storage: Until unsubscription + 90 days
• Opt-out: At any time (link in email or account panel)

Newsletter - Wishlist Notifications

• Basis: Consent
• Content: Price changes, availability, promotions for wishlist products
• Storage: Until wishlist deletion or unsubscription
• Opt-out: Delete product from list or unsubscribe

Newsletter - Product Recommendations

• Basis: Consent
• Content: Personalised product suggestions
• Storage: Until unsubscription
• Opt-out: At any time (account panel)

Newsletter - Availability Enquiries

• Basis: Consent
• Content: Email when product becomes available
• Storage: 30 days from sending or until unsubscription

Newsletter - Surveys and Reviews

• Basis: Consent / Legitimate interest
• Content: Product rating invitations, feedback requests
• Storage: Corresponding to order storage periods
• Frequency: Limited (a few per year maximum)
• Opt-out: At any time (link in email)

Newsletter - Reminders

• Basis: Legitimate interest
• Content: Wishlist promotions, abandoned baskets, size/colour availability
• Storage: Until order placement or unsubscription
• Opt-out: At any time (link in email)

14. Your Rights

You have the following rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your data in certain circumstances.
• Right to Restrict Processing: You have the right to request that we limit how we use your data.
• Right to Data Portability: You have the right to request your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to certain types of processing, including marketing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

15. Our contact data and your rights

You may be advised free of charge on your personal data which we are storing and you may correct, limit processing, delete and transfer this data.

If you have any questions regarding the collection, processing and use of your personal data, correction, blocking or deletion of data and in order to withdraw any consents given or object to the use of specific data, please contact the Data Administrator: Saketos sp. z o.o. ul. Biedrzychowicka 2, 59-921, Sieniawka, [email protected]

You may also file a complaint to the relevant supervising body.

Right to object

If in the manner described in this Privacy Policy, in respect of the analysis and evaluation of interests, we process your personal data to protect our legally justified interests, you may object to such processing with the effect in the future. If processing is done for direct marketing, you may exercise the right to object at any time. If processing is intended for other purposes, you may object only due to the reasons arising from your particular position.

If you object, we will discontinue processing of your personal data unless we prove that there is a legally justified basis for processing and it is superior to your rights and interests or when processing is done to pursue, exercise or defend any claims. The above shall not apply if processing of data is conducted for direct marketing. In this case, we will discontinue to process your personal data for this purpose.