Privacy and Cookies Policy

General information

This Privacy and Cookies Policy (the “Policy”) sets out the rules under which we process and protect the personal data of Users. The Policy also governs the use of cookies and other technologies. This applies in particular to tools such as Google Analytics, Google Ads, Facebook Pixel, TikTok Pixel, Hotjar, MailerLite, Mailchimp, Bitrix24 and other integrated analytics, advertising, communication, sales and logistics systems. The provisions of the Policy apply when Users use the Website, the Shop and the social media profiles operated by the Controller.

§1. Definitions

For the purposes of this Privacy Policy, capitalised terms have the following meanings, unless the context in which they are used clearly indicates otherwise:

1. Controller – KAMAI.PL Spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Wola Batorska (address: ul. — nr 461, 32-007 Wola Batorska), entered in the Register of Entrepreneurs of the National Court Register under number KRS 0000361320 (registry court: Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XII Wydział Gospodarczy KRS – the District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register), NIP: 6832056712, REGON: 121297532, share capital: PLN 5,000.00, operating the Kamai.eu Websites.

• a. With respect to the Personal Data of representatives of B2B Partners, Newsletter Users and Visitors to the Kamai Websites, KAMAI.PL Sp. z o.o. acts as a personal data controller within the meaning of the GDPR (Regulation (EU) 2016/679).

2. Kamai Websites or Websites – Jointly:

• a) Information Website – the website publicly available at www.kamai.eu.
• b) B2B Wholesale Platform or Platform – the B2B transactional service available at b2b.kamai.eu, intended exclusively for registered and logged-in B2B Partners.

3. B2B Partner or Partner – An entrepreneur within the meaning of Article 43¹ of the Polish Civil Code who meets the conditions set out in the Terms and Conditions, holds an active Account on the B2B Wholesale Platform (b2b.kamai.eu) and purchases Goods through it solely for purposes directly related to its business activity.

4. Newsletter User – A natural person (acting on their own behalf or as a representative of an entity) who has voluntarily signed up to receive commercial information (the Newsletter) from Kamai using the dedicated form on the Kamai Websites and has given the required consents.

5. Visitor – Any natural person browsing the content of the Information Website (www.kamai.eu) or the publicly accessible parts of the Platform (b2b.kamai.eu) who is not a logged-in representative of a B2B Partner.

6. User – A general term for a natural person whose Personal Data are processed by the Controller (or by the Controller acting as a Processor) in connection with the use of the Kamai Websites. It includes in particular representatives of B2B Partners, Newsletter Users and Visitors.

7. End Customer – The final customer of a B2B Partner (the purchaser of Goods from the B2B Partner) to whom the Controller (acting as a Processor for Kamai) dispatches the Goods under the dropshipping model. The Personal Data of the End Customer are provided to the Controller by the B2B Partner for the purpose of fulfilling the Order.

8. Account – The individual panel of a B2B Partner available on the Platform (b2b.kamai.eu) after logging in, used to manage data, place Orders and access dedicated information.

9. Personal Data – Any information relating to an identified or identifiable natural person (the “data subject”), as defined in Article 4(1) of the GDPR. Examples in the context of the Kamai Websites include: contact details of representatives of B2B Partners (first name, surname, e-mail, telephone), the e-mail address of a Newsletter User, End Customer data provided for dispatch (first name, surname, delivery address, telephone), and technical data related to browsing the Websites (e.g. IP address, data from cookies).

10. Processing – An operation or set of operations performed on Personal Data, as defined in Article 4(2) of the GDPR (e.g. collection, recording, use, transmission, erasure).

11. Terms and Conditions – The terms and conditions for the provision of services by electronic means within the Kamai Websites, setting out the rules of B2B cooperation, available at https://kamai.eu/regulamin-i-inne-dokumenty-odnosnie-wspolpracy

Policy – This Privacy and Cookies Policy for the Kamai Websites.

12. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

§2. Processing of Personal Data by the Controller and as a Processor

1. Personal Data Controller: The controller of Users’ Personal Data within the meaning of the GDPR, processed in connection with the use of the Kamai Websites, is the Controller indicated in §1(1) of this Policy (KAMAI.PL Sp. z o.o.).

2. Scope and Methods of Data Collection: The Controller processes the Personal Data of Users (in particular representatives of B2B Partners, Newsletter Users and Visitors) obtained through:

• a. Forms available on the Kamai Websites (e.g. the Account registration form, the order form on the Platform, the Newsletter sign-up form, the contact form).
• b. E-mail and telephone communication.
• c. Direct interaction in the course of managing the Account and placing Orders on the Platform.
• d. Technical data collected automatically while the Kamai Websites are being used (see §4. Cookies and other information for details).

3. Purposes, Legal Bases and Periods of Data Processing (where the Controller acts as a data controller): The Controller processes Users’ Personal Data for the following purposes, on the legal bases indicated and for the specified periods:

• a. Registration and Maintenance of a B2B Partner Account on the Platform:
  • Purpose: Enabling the registration, verification, creation and management of a B2B Partner Account, which is necessary to gain access to the Platform and place Orders.
  • Data processed (examples): Company details of the B2B Partner, NIP (tax identification number), contact details of the representative (first name, surname, e-mail address, telephone number), login details.
  • Legal basis: Article 6(1)(b) of the GDPR – necessity for the performance of a contract for the provision of services by electronic means (maintaining the Account), concluded by accepting the Terms and Conditions.
  • Processing period: For as long as an active Account is held on the Platform and, after its deletion, for the period necessary to establish, pursue or defend claims (usually until the limitation period for claims arising from the contract expires) or for the period required by law (e.g. for archiving purposes).
• b. Fulfilment of Orders placed by B2B Partners:
  • Purpose: Handling the process of placing and fulfilling Orders, including payment processing, invoicing and communication concerning the Order.
  • Data processed (examples): Identification and contact details of the B2B Partner’s representative placing the Order, invoicing details, Order details.
  • Legal basis: Article 6(1)(b) of the GDPR – necessity for the performance of a sales contract concluded through the Platform; Article 6(1)(c) of the GDPR – necessity for compliance with legal obligations to which the Controller is subject (e.g. tax and accounting obligations related to issuing and storing invoices).
  • Processing period: For the time necessary to fulfil the Order, and then for the period required by law (e.g. 5 years from the end of the calendar year in which the tax payment deadline expired, for tax documentation) and until the limitation period for any claims expires.
• c. Handling enquiries (contact form, e-mail, telephone):
  • Purpose: Responding to enquiries, conducting business correspondence, serving prospective and existing B2B Partners.
  • Data processed (examples): First name, surname, e-mail address, telephone number, company name, content of the enquiry/correspondence.
  • Legal basis: Article 6(1)(f) of the GDPR – the Controller’s legitimate interest in ensuring effective business communication and handling enquiries. In the case of enquiries aimed at establishing cooperation – also Article 6(1)(b) of the GDPR (taking steps at the request of the data subject prior to entering into a contract).
  • Processing period: For the time necessary to conduct the correspondence and provide a complete response, and then for a period of up to 3 years from the end of the correspondence for archiving purposes and for defence against any claims.
• d. Sending the Newsletter:
  • Purpose: Delivering to Newsletter Users, by e-mail, the commercial and marketing information they have requested concerning the Kamai range, new products, promotions and industry events.
  • Data processed (examples): E-mail address, optionally first name.
  • Legal basis: Article 6(1)(b) of the GDPR – necessity for the performance of a contract for the supply of digital content (the Newsletter), concluded by signing up through the dedicated form and accepting the terms and conditions of the Newsletter service (in accordance with §2 of the Terms and Conditions).
  • Processing period: Until the Newsletter User unsubscribes (which is equivalent to termination of the contract) or until the Controller stops sending the Newsletter.
• e. Analytical and statistical purposes:
  • Purpose: Analysing how the Kamai Websites are used and improving their functionality, performance and appeal.
  • Data processed (examples): IP address (often anonymised or aggregated), location data, browser type, operating system, pages visited, visit duration, referral source.
  • Legal basis: Article 6(1)(f) of the GDPR – the Controller’s legitimate interest in optimising the Kamai Websites and marketing activities; for certain technologies (e.g. non-essential cookies) – Article 6(1)(a) of the GDPR (the User’s consent, given for example via the cookie banner).
  • Processing period: Depends on the technology used (e.g. the lifetime of the cookie) or until the User raises an effective objection.
• f. Direct marketing of the Controller’s own products and services:
  • Purpose: Presenting B2B Partners with information about the Controller’s range, promotions, new products or services by e-mail or telephone.
  • Data processed (examples): E-mail address, telephone number, company name of the B2B Partner.
  • Legal basis: Article 6(1)(f) of the GDPR – the Controller’s legitimate interest in marketing its own products and services within an existing B2B business relationship. These activities are carried out in compliance with the Polish Telecommunications Law and the Act on the Provision of Services by Electronic Means (which may require separate consent for communication via a given channel).
  • Processing period: Until the B2B Partner’s representative objects to the processing of data for this purpose or until the purpose of processing ceases to exist (e.g. the cooperation ends).
• g. Establishing, pursuing or defending claims:
  • Purpose: Legal protection of the Controller in the event of disputes arising from concluded contracts or other legal events.
  • Data processed (examples): Any data necessary to establish the factual and legal circumstances of the case concerned.
  • Legal basis: Article 6(1)(f) of the GDPR – the Controller’s legitimate interest.
  • Processing period: Until the limitation period for claims set out by law expires.

4. Voluntary provision of data and the requirement to provide it:

• a. Providing Personal Data is, as a rule, voluntary, but in many cases it is necessary to achieve specific purposes.
• b. Failure to provide the data required for Account registration will make it impossible to create the Account and use the Platform.
• c. Failure to provide the data necessary to place and fulfil an Order (including End Customer data under the dropshipping model) will make it impossible to process and dispatch the Order.
• d. Failure to provide an e-mail address in the Newsletter sign-up form will make it impossible to receive the Newsletter.
• e. Failure to provide contact details in an enquiry may make it impossible to respond.

5. Recipients of Personal Data (Entrusting of Processing):

• a. The Controller, acting as a data controller, may entrust the processing of Users’ Personal Data to trusted third parties (processors) that support it in running its business, on the basis of data processing agreements (in accordance with Article 28 of the GDPR). Recipients may include in particular providers of:
  • Hosting and IT infrastructure,
  • Customer relationship management (CRM) systems,
  • Tools for sending newsletters and marketing communications,
  • Analytics and statistics systems,
  • Electronic payment processing,
  • Accounting and legal services,
  • Logistics and courier services (for the fulfilment of non-dropshipping orders or process support).
• b. In its role as a Processor (for End Customer data), the Controller may use the services of subcontractors (sub-processors), e.g. courier companies, solely with the consent of and on the terms set out in the DPA concluded with the B2B Partner.
• c. Data may also be disclosed to public authorities on the basis of legal provisions.

6. Transfer of Personal Data outside the European Economic Area (EEA):

• a. The Controller uses the services of certain providers (e.g. of analytics, marketing and cloud tools) whose registered offices or data processing centres may be located outside the EEA (e.g. in the United States).
• b. Where Personal Data are transferred to third countries, the Controller ensures that this takes place on the basis of the appropriate legal mechanisms required by the GDPR, such as:
  • A European Commission decision finding that the country concerned ensures an adequate level of data protection.
  • Standard Contractual Clauses approved by the European Commission.
  • Binding Corporate Rules.
• c. The User has the right to obtain a copy of the Personal Data transferred to a third country and information about the safeguards applied.

7. Security of Personal Data: The Controller declares that it applies appropriate technical and organisational measures to ensure the protection of the Personal Data processed, appropriate to the risks and to the categories of data protected. In particular, it protects data against disclosure to unauthorised persons, removal by an unauthorised person, processing in breach of applicable law, and alteration, loss, damage or destruction.

8. Principal Legal Acts: Personal Data are processed in accordance with applicable law, in particular:

• a. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
• b. The Polish Act of 10 May 2018 on the Protection of Personal Data.
• c. The Polish Act of 18 July 2002 on the Provision of Services by Electronic Means.
• d. The Polish Act of 16 July 2004 – Telecommunications Law.

§3. Rights of Data Subjects

Scope: Every natural person whose Personal Data are processed by the Controller in connection with the use of the Kamai Websites (in particular representatives of B2B Partners, Newsletter Users and Visitors) has the rights arising from the GDPR.

1. Catalogue of Rights:

• a. Right of access to data (Article 15 of the GDPR): The User has the right to obtain from the Controller confirmation as to whether their data are being processed and, if so, access to those data and information about their processing, as well as a copy of the data.
• b. Right to rectification of data (Article 16 of the GDPR): The User may request the rectification of inaccurate personal data or the completion of incomplete data without undue delay.

2. Right to erasure of data (the “right to be forgotten”) (Article 17 of the GDPR): The User may request the erasure of data if:

• a. the data are no longer necessary for the purposes for which they were collected,
• b. consent to their processing has been withdrawn,
• c. an effective objection has been raised,
• d. the data have been processed unlawfully,
• e. erasure is required by law.

Note: This right does not apply where the processing of data is necessary, for example, to comply with legal, fiscal or tax obligations or to pursue claims.

3. Right to restriction of processing (Article 18 of the GDPR): The User may request the restriction of processing, among other cases, where:

• a. the User contests the accuracy of the data,
• b. the processing is unlawful but the User opposes the erasure of the data,
• c. the Controller no longer needs the data but the User needs them to pursue claims,
• d. an objection has been raised – pending the verification of whether it is justified.

4. Right to data portability (Article 20 of the GDPR): The User has the right to receive their personal data in a format that allows them to be transferred to another controller, where the processing is based on consent or a contract and is carried out by automated means.

5. Right to object (Article 21 of the GDPR): The User may object at any time to the processing of data where it is based on the Controller’s legitimate interest – on grounds relating to their particular situation.

6. Right to withdraw consent: Where processing is based on consent, the User may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

7. Right to lodge a complaint: The User has the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office (UODO)) if they consider that the processing of data infringes the GDPR.

8. Contact for exercising rights: To exercise their rights, the User may contact the Controller by sending a message to the e-mail address: rodo@kamai.pl.

§4. Cookies and Similar Technologies

1. Automatic Data Collection While Using the Website

When the User uses our Website, we automatically collect certain technical and behavioural data. This may include: IP address, approximate location (country/city), device identifier, browser type and language, operating system type, screen resolution, time zone and information about the User’s activity on the Website (e.g. pages visited, clicks, session duration). These data are collected by means of cookies and the other technologies described below.

2. Cookie Files (“Cookies”)

Cookies are small text files stored on the User’s end device (e.g. computer, smartphone). They allow the Website to recognise the device, remember preferences (e.g. language), optimise the operation of the Website, compile statistics and tailor content, including advertising. Cookies may originate directly from the Controller or from third parties cooperating with it.

3. Other Tracking and Analytics Technologies Used

In addition to cookies, we also use other technologies, such as:

• Browser local storage (localStorage, sessionStorage): Allows data to be stored in the User’s browser with no expiry date (localStorage) or until the session is closed (sessionStorage).
• Web beacons (pixel tags): Small images or pieces of code placed on the Website or in e-mail messages, used to monitor activity (e.g. opening an e-mail, visiting a page) and to work together with cookies.
• Browser fingerprinting: A technique for creating a unique “fingerprint” of a browser based on its technical configuration, for identification purposes.

We also use tools provided by third parties that use the above technologies for specific purposes.

4. Purposes of Using Cookies and Similar Technologies

We use these technologies for the following purposes:

• Necessary (Technical): Ensuring the correct operation of the Website, its basic functions and security (e.g. authentication, form handling, bot protection). They are essential to the use of the website and usually do not require consent.
• Analytics and Performance: Understanding how Users use the Website, compiling anonymous statistics, analysing traffic, identifying errors and optimising the operation of the Website. They require the User’s consent.
• Marketing (Advertising): Personalising the advertising content displayed to the User on our Website and on other websites (remarketing), and measuring the effectiveness of advertising campaigns. They require the User’s consent.
• Functional: Remembering the User’s choices and preferences (e.g. language, region), improving functionality, integration with social media, and supporting sales and communication processes (e.g. CRM, newsletters). They may require the User’s consent.

5. Examples of Third-Party Tools Used

For the above purposes, the Controller uses or may use tools provided by third parties. Examples of such tools (the list may not be exhaustive and may change):

• Analytics and Optimisation: Google Analytics 4, Google Optimize, Microsoft Clarity, Hotjar, Smartlook, Mouseflow, Fullstory, YouTube analytics.
• Marketing and Advertising: Google Ads (including Google Signals, Floodlight), Meta (Facebook) Pixel, Meta Ads Conversion API, TikTok Pixel, LinkedIn Insight Tag, Twitter Pixel (X Ads Pixel), Pinterest Tag, Snapchat Pixel, Wykop Pixel.
• Tag Management: Google Tag Manager (GTM).
• CRM and Marketing Automation: Bitrix24, Woodpecker.co, Mailchimp, Mailerlite, GetResponse, Brevo (Sendinblue), Twilo.
• E-commerce Platforms and Integrations: Apilo.com, Enova365 (including EnovaB2B), Shopify (including Shopify B2B and other extensions).
• Reviews and Reputation: Trustpilot, Opineo, Ceneo, Google Merchant Reviews, Trusted Shops.
• Security: reCAPTCHA, Cloudflare Bot Management, Akamai Bot Defender.
• Communication Integrations: Meta Business Suite, Google Business Profile, WhatsApp Business API.
• Payment Processors (which may set their own cookies): Stripe, PayPal, Przelewy24, Tpay, Klarna, PayU, ING (iMoje), Revolut.

6. User Consent and Preference Management

On their first visit to the Website, the User is asked to consent to the use of cookies and similar technologies (other than those Necessary for the operation of the Website) through the consent management tool displayed (e.g. the cookie banner). The User may at any time change their preferences or withdraw consent to particular types of cookies (e.g. analytics, marketing) using the same tool or by changing the settings of their web browser. Detailed information on managing cookies in popular browsers is usually available in the help section of the browser concerned. Refusing or withdrawing consent to certain types of cookies may affect the functionality of the Website.

7. Deleting Cookies

The User can delete stored cookies from their device. This can be done using the relevant functions of the web browser or dedicated software tools.

8. Server Logs

Independently of cookies, the server hosting the Website automatically records certain information in its logs (e.g. IP address, date and time of the request, browser type). These data are used solely for administrative and diagnostic purposes and to ensure system security. They are not linked to specific Users in order to identify them.

9. Transfer of Data Outside the European Economic Area (EEA)

The use of certain tools (particularly those provided by US companies, e.g. Google, Meta) may involve the transfer of Users’ personal data outside the EEA. In such cases, the data are transferred with the appropriate legal safeguards required by the GDPR, such as standard contractual clauses approved by the European Commission or decisions finding that the third country concerned ensures an adequate level of data protection. Information about the safeguards applied is available from the providers of the individual tools or from the Controller.

10. Data Security

The Controller applies appropriate technical and organisational measures to protect the data collected by means of cookies and similar technologies against unauthorised access, loss or destruction, in accordance with applicable law and best practice.

12. Compliance and Purpose of Using Cookies

All cookies and similar technologies used on the Website are collected and used in accordance with current law, including the requirements of the GDPR, the ePrivacy Directive and the recommendations of supervisory authorities. Their use is based on best practice in the provision of modern and secure e-commerce services, in both the B2C and B2B models. The Controller uses tools provided by reputable third parties which – as far as technically and organisationally possible – are verified in each case for compliance with European personal data protection regulations. Thanks to cookies and the technologies that accompany them, the Controller can provide Users with the highest possible quality of service, including optimised order handling, faster content loading, a better-matched range, more effective sales support and communication tailored to the needs and preferences of recipients.

11. Contact

For matters concerning cookies, tracking technologies and the processing of personal data in this respect, and to exercise your rights under the GDPR, please contact us at the e-mail address: rodo@kamai.pl.

§5. Purposes of Processing Personal Data

The Controller processes Users’ personal data, provided voluntarily or collected automatically while the Website is being used, for the following purposes:

1. Provision of services by electronic means and performance of Contracts:

• a) Necessary for the proper functioning, technical configuration, administration and security of the Website and the services provided through it.
• b) Enabling the User to use the full functionality of the Website, including logging in, managing an account (where applicable), and placing orders or enquiries.
• c) Performance of contracts concluded with the User through the Website (e.g. contracts for the sale of goods or services), including handling the order process, payment, delivery and any returns and complaints.
• d) Communication with the User on matters related to the services provided, the performance of contracts, account handling or responding to enquiries (e.g. via contact forms, e-mail, telephone).
• e) Monitoring the status of the User’s session and ensuring its continuity and security.

2. Analytics, statistics and development:

• a) Conducting statistical analyses, research and audits concerning the audience, the manner of use and the popularity of the Website and its individual elements.
• b) Understanding Users’ needs and preferences in order to optimise the Website, improve its usability (UX/UI), tailor content and develop the Controller’s range of products and services.
• c) Diagnosing technical problems, detecting errors and monitoring the performance of the IT infrastructure.
• d) Conducting A/B tests and other research aimed at improving the Website and the range.

3. Marketing and personalisation:

• a) Conducting marketing activities concerning the Controller’s own products and services and, where applicable, those of cooperating entities.
• b) Tailoring the marketing content, offers and advertisements displayed to the User on the Website and in third-party advertising networks (remarketing/retargeting) to their potential interests, preferences or activity history – which may require the User’s separate consent in accordance with applicable law.
• c) Sending commercial information, newsletters and promotional materials by electronic means (e-mail) or other communication channels – solely after obtaining the User’s prior, voluntary consent.
• d) Creating User segments or profiles for analytical and marketing purposes (in compliance with the GDPR, including the right to object).
• e) Organising competitions, promotions or loyalty programmes.

4. Security and legal compliance:

• a) Ensuring the security of the Website, preventing fraud, abuse and security incidents (e.g. hacking attacks, bot activity) and protecting the rights of the Controller and Users.
• b) Verifying the identity of Users where required by law or necessary for the security of transactions or services.
• c) Complying with legal obligations to which the Controller is subject, arising among others from tax and accounting regulations, telecommunications law, the regulations on the provision of services by electronic means and the GDPR.
• d) Establishing, pursuing or defending legal claims of the Controller or Users.
• e) Archiving data for evidential purposes, to ensure accountability and to meet legal requirements concerning data retention periods.
• f) Carrying out internal audits and controls and ensuring compliance with the Controller’s policies and terms and conditions.
• g) Cooperating with supervisory authorities, courts and other competent state authorities within the scope of their powers.

5. Other legitimate purposes:

• a) Processing data for other purposes that are compatible with the original purposes of data collection or arise from the Controller’s legitimate interests (e.g. restructuring, sale of the business), provided that the rights and freedoms of Users are respected.

§6. Amendments to the Privacy Policy and Final Provisions

1. Right to amend the Policy: The Controller reserves the right to unilaterally amend this Privacy Policy at any time. Amendments may be prompted in particular, but not exclusively, by: a) changes in applicable law, especially in the field of personal data protection, telecommunications law, the provision of services by electronic means or consumer rights; b) developments in internet technologies, including the use of new technical or organisational solutions affecting the scope or manner of data processing; c) changes in the operation or expansion of the Website or the Platform, including the introduction of new services or functionalities; d) the need to clarify the provisions of the Policy, remove ambiguities or errors, or respond to comments from Users or supervisory authorities; e) organisational or business changes at the Controller.

2. Notification of amendments and entry into force: The Controller will give notice of any amendments to the Privacy Policy by publishing the new, consolidated text of the Policy on the Website in the dedicated section (https://kamai.eu/regulamin-i-inne-dokumenty-odnosnie-wspolpracy). The Controller may also, at its own discretion, inform registered Users of material amendments by e-mail or by a notice within the User’s account. Amendments take effect upon their publication on the Website and/or the B2B Platform, unless a later effective date is indicated in the text of the amended Policy.

3. Obligation to review amendments and acceptance: The User is obliged to review the current text of the Privacy Policy regularly. Continued use of the Website or the B2B Platform by the User after amendments have been introduced constitutes acceptance of them. If the User does not accept the amendments, the User should stop using the Website and/or the Platform.

4. Governing law: This Privacy Policy and all matters relating to the processing of personal data by the Controller are governed by the law of the Republic of Poland. Matters not regulated herein are subject to the relevant provisions of Polish law and, where applicable, also to the provisions of European Union law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

5. Dispute resolution and jurisdiction: Any disputes arising from or in connection with this Privacy Policy or the processing of personal data that cannot be resolved amicably will be submitted for resolution to the Polish common court having subject-matter jurisdiction, whose territorial jurisdiction is determined by the registered office of the Controller. This provision does not deprive Users who are consumers of the protection afforded to them by provisions that cannot be derogated from by agreement under the law of the country in which the consumer has their habitual residence.

6. No waiver of rights: Any failure or delay by the Controller in exercising any right or remedy arising from this Privacy Policy or from the law does not constitute a waiver of that or any other right or remedy, nor does it preclude or restrict the further exercise of that or any other right or remedy.

7. Language version: If the Privacy Policy is drawn up in several language versions, the Polish language version is binding, unless mandatory provisions of law provide otherwise.

8. Contact details: Any questions, comments, requests or demands concerning this Privacy Policy, the processing of personal data or the exercise of the User’s rights should be sent to the e-mail address: rodo@kamai.pl or in writing to the address of the Controller’s registered office indicated in §1 of this Policy.