PRIVACY POLICY

PRIVACY AND COOKIES POLICY FOR THE WEBSITE https://lunziano.com

§ 1.

General Provisions

1. The Privacy and Cookies Policy for the website https://lunziano.com (hereinafter: the “Policy”) was created and adopted by “Limoncello” Limited Liability Company with its registered office in Poland, Jasin (62-020), ul. Bazyliowa 2, registered under NIP number 7773409137.
   
   

2. The terms used in the Policy mean:
   
   

1. Website: the website https://lunziano.com;
   
   

2. User: an entity using the publicly accessible Website;
   
   

3. Owner: “Limoncello” sp. z o.o. with its registered office in Poland, Jasin (62-020), ul. Bazyliowa 2, registered under KRS number 0001047195, NIP 7773409137, REGON 525850120;
   
   

4. Cookies: text files sent by the Website and stored on the User’s end device, which the User uses while browsing websites. The files contain information necessary for the proper functioning of the Website. Cookies most often contain the domain name of the website they come from, the time they are stored on the end device, and a number;
   
   

3. The purpose of the Policy is, in particular:
   
   

1. to provide Users with information regarding the use of Cookies on the Website, as required by law, including the Telecommunications Law;
   
   

2. to ensure the protection of Users’ privacy in accordance with the standards and requirements set out in applicable legal regulations.
   
   

4. The Owner limits the collection and use of information about Users to the minimum necessary to provide services to them.
   
   

5. To obtain full access via the Website to the content and services offered by the Owner, it is recommended to accept the principles set out in the Policy.
   
   

6. The following legal provisions apply, among others:
   
   

1. the Act of 16 July 2004 – Telecommunications Law (Journal of Laws 2017.1907, consolidated text, as amended);
   
   

2. the Act of 18 July 2002 on the provision of electronic services (Journal of Laws 2017.1219, consolidated text, as amended);
   
   

3. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR) (OJ L 119, 4.5.2016), together with Polish data protection regulations.
   
   

§ 2.

Protection of Privacy and Personal Data

1. Data concerning Users is processed by the Owner in accordance with the law. The personal data obtained by the Owner is processed based on the User’s consent or another legal basis permitting data processing under applicable regulations, in particular the Regulation (GDPR).
   
   

2. The Owner exercises special diligence to protect the interests of data subjects and ensures, in particular, that the data:
   
   

1. is processed lawfully, fairly, and in a transparent manner for Clients and other data subjects;
   
   

2. is collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
   
   

3. is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed;
   
   

4. is accurate and, where necessary, kept up to date;
   
   

5. is stored in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed;
   
   

6. is processed in a manner ensuring appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical or organizational measures.
   
   

3. The Owner applies appropriate technical and organizational measures that ensure the protection of personal data processing, suitable to the nature, scope, context, and purposes of processing, as well as to the risk of violating the rights or freedoms of natural persons.
   
   

4. The Owner strives to systematically modernize the IT, technical, and organizational measures used to protect such data. In particular, the Owner provides updates to IT security measures to safeguard against viruses, unauthorized access, and other threats resulting from the operation of IT systems and telecommunications networks.
   
   

5. Every User who has in any way provided their data to the Owner is granted access to their data and the ability to exercise other rights of data subjects in accordance with applicable law. These rights include:
   
   

1. the right to withdraw consent to the processing of personal data;
   
   

2. the right to receive information regarding their personal data;
   
   

3. the right to control data processing, including the right to supplement, update, rectify, or delete data;
   
   

4. the right to object to processing or to request restriction of processing;
   
   

5. the right to lodge a complaint with the supervisory authority and to use other legal measures to protect their rights.
   
   

6. The Owner may process personal data in an automated manner, including profiling, under the principles set out in the Regulation. In such cases, the Owner’s actions aim at marketing purposes or the need to personalize messages sent to Users (including adjusting information to the User’s needs or expectations). The User has the right to object to such processing — the objection may be submitted by sending a message to the Owner at: hello@lunziano.com.
   
   

7. A person who has access to personal data processes it solely on the basis of authorization granted by the Owner or under a data processing agreement, and only upon the Owner’s instructions.
   
   

§ 3.

Cookies

1. Cookies identify the User, which allows the content of the website they use to be tailored to their needs. By remembering their preferences, Cookies enable the appropriate adjustment of content directed to them, including advertisements. The Owner uses Cookies to ensure a proper standard of convenience for the Website, and the collected data is used only internally within the company to optimize operations.
   
   

2. Cookies are used to:
   
   

1. adapt the content of the Website to the User’s preferences;
   
   

2. optimize the use of the Website, in particular by recognizing the User’s end device;
   
   

3. create statistics;
   
   

4. maintain the User’s session;
   
   

5. provide advertising content to the User.
   
   

3. Cookies may be placed on the User’s end device.
   
   

4. The collected data is used to monitor and verify how Users use the Website, in order to improve its functioning and ensure more efficient and seamless navigation.
   
   

5. It should be noted that in some cases, beyond the Owner’s control, software installed by the User on their end device for browsing websites (e.g., a web browser) may introduce default storage of Cookies on the User’s end device. Users may change Cookie settings at any time. These settings may be changed, among other ways, to block automatic placement of Cookies or to notify the User each time Cookies are placed on their end device. Detailed information in this regard is available in the settings and instructions of the software (web browser).
   
   

6. The User may disable or restore the option of Cookie collection at any time by changing the settings in their web browser.
   
   

7. Changing these settings constitutes an objection, which in the future may cause difficulties in using the Website. Completely disabling the option to accept Cookies will not prevent the User from viewing the content on the Website, except for those requiring login.
   
   

8. Failure to change the settings means that data will be stored on the User’s end device (using the Website will automatically place Cookies on the User’s device).
   
   

9. The stored data placed on the User’s end device does not cause any configuration changes to the User’s device or the software installed on that device.
   
   

10. Information regarding Cookies also applies to other similar technologies used within the Website.
    
    

11. On our website, third parties place information in the form of cookies and other similar technologies on your end device (e.g., computer, smartphone) and gain access to it. These are our trusted partners with whom we continuously cooperate in order to tailor advertisements on our and their websites to your needs and interests, as well as the services provided by us and our trusted partners.
    
    

§ 4.

Final Provisions

1. The Policy was adopted by resolution of the company and enters into force on 14 December 2025. Any amendments to the Policy may be made in the same manner.
   
   

2. Any deviations from the Policy require written form under pain of nullity.
   
   

3. The law governing the Policy is the law of the Republic of Poland.
   
   

4. Matters not regulated in the Policy shall be governed by the relevant provisions of law.