Personal Data Administrator

The administrator of your personal data is JANIK Daniel Janicki, operating at the address:
Jarosławiec 400/6, 22-424 Sitno, Poland, holding NIP number 9222825711 and REGON number 522597577,
email address: danieljanicki91@gmail.com (hereinafter referred to as the “Administrator”).

Contact Details

You may contact the Administrator in writing via traditional mail to the registered business address
or by email at: kontakt@vegeta-typuje.pl.

Purposes and Legal Grounds for Processing Personal Data

The personal data collected by the Administrator are processed for the following purposes:

Contact purposes (to establish contact, define, modify or terminate a legal relationship, e.g. contact form,
email correspondence, social media, telephone contact) — depending on the method of contact, the legal basis for processing
is Article 6(1)(a), (b) and/or (f) of the GDPR, as well as your consent to receive commercial information within the meaning
of the Act of 18 July 2002 on the provision of electronic services and the Act of 16 July 2004 – Telecommunications Law.
Providing personal data is voluntary but necessary to handle your inquiry. Failure to provide data will prevent us from responding
to your request.

Conclusion and performance of a contract — the legal basis is Article 6(1)(b) GDPR and Article 6(1)(a) GDPR.
Providing personal data is voluntary but required for the performance of the contract. Failure to provide data will make it impossible
to conclude the contract and provide services.

Establishment, pursuit or defense of claims — the legal basis is Article 6(1)(f) GDPR, justified by the legitimate
interests of both the Administrator and the data subject, arising from applicable legal provisions, including the Civil Code.

Sending commercial information regarding products and services offered by the Administrator via electronic communication
means, in accordance with applicable laws — the legal basis is Article 6(1)(a), (b) and/or (f) GDPR and your consent to receive marketing
communications. With consent, the Administrator may also contact you to request reviews, customer satisfaction surveys, present offers or
other related activities. Providing data is voluntary but necessary to receive such communications.

Newsletter — the legal basis is Article 6(1)(a) and (b) GDPR, as well as additional consent to receive electronic commercial
information. Data are processed for the purpose of performing the Newsletter subscription agreement and pre-contractual actions at your request.
Providing personal data is voluntary but necessary to receive the Newsletter.

Categories of Personal Data

The Administrator may collect the following personal data:

• First name and last name
• Email address
• Subject and content of messages containing personal data voluntarily provided by you

Personal Data Security

The Administrator applies appropriate technical and organizational measures to ensure the protection of personal data. Every effort is made
to secure data against unauthorized access, loss or misuse, including physical, organizational and server security measures.

However, these measures may prove insufficient if users do not observe basic security rules themselves.

Recipients of Personal Data

Your personal data may be disclosed to:

• Employees, associates and management members of the Administrator, authorized to process data and bound by confidentiality obligations
• Entities processing data on behalf of the Administrator, including IT service providers, accounting, legal, courier, postal, marketing and hosting service providers
• Public authorities authorized to obtain data under applicable law

Cookies

The Administrator does not automatically collect data identifying users, except for information contained in cookies during use of the website.

Cookies are small text files stored on your device, used to ensure proper website operation, maintain user sessions, create statistics and tailor
promotional content.

The website uses session cookies and persistent cookies. Session cookies are deleted when you log out or close your browser. Persistent cookies are
stored for a specified period or until deleted by the user.

Cookies are used for the following purposes:

• Creating statistics that help understand how users use the website, which helps improve it
• Determining a user profile to better match promotional/advertising materials online
• Maintaining the user session (after logging in) so the user does not have to log in again on each subpage

You can manage cookie settings through your browser preferences. Blocking cookies may affect website functionality.
You may also delete persistent cookies using the appropriate options in your browser.

The Administrator may also collect server logs, including your IP address, platform and browser type, ISP, and the referring page URL. Some pages
may also include web beacons (electronic images). These allow collection of information such as IP address, page URL, page load time, browser type,
and cookie data to assess advertising effectiveness. These data are archived and used for statistical analysis and traffic evaluation only and are not
combined with personal data.

The Administrator may use third-party analytics tools such as Google Analytics. You can opt out of Google Analytics by installing the browser add-on
available here: https://tools.google.com/dlpage/gaoptout.

Your Rights

Depending on the legal basis for processing, you have the right to access your personal data, rectify it, object to processing, or request deletion.
You also have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You may withdraw consent in writing to the Administrator’s address or by email at: kontakt@vegeta-typuje.pl.

Data Retention Period

Personal data will be processed for the period required by law and necessary to fulfill processing purposes, in particular to handle inquiries,
conclude and perform contracts, meet legal obligations, store accounting and tax documents, and for limitation periods for claims and marketing
activities — in any case no longer than until consent is withdrawn (where processing is based on consent).

Automated Processing and Profiling

Your personal data will not be processed in an automated manner and will not be subject to profiling.

Right to Lodge a Complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office (Poland),
ul. Stawki 2, Warsaw, Poland.

Changes to the Privacy Policy

This Privacy Policy may be reviewed and updated as needed. Users will be informed about changes on the website. Updates aim to reflect changes
in the Administrator’s data-processing practices and to strengthen personal data protection.