I. PRIVACY POLICY

1. The Administrator of the Personal Data on the website at: healthy-doggo.com, is Refoamed sp. z o. o., ul. Pasaż ursynowski 11/78, 02-784, Warszawa, Poland, NIP: 9512514698,REGON:388236058

2. Respecting your rights as personal data subjects (data subjects) and respecting the applicable legislation, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as RODO, the Act of 10 May 2018 on the protection of personal data (Journal of Laws, item 1000, hereinafter referred to as the Act) and other relevant data protection legislation, we undertake to maintain the security and confidentiality of the personal data obtained from you. All employees have been adequately trained in the processing of personal data and our company, as Personal Data Administrator, has implemented appropriate safeguards and technical and organisational measures to ensure the highest level of personal data protection. We have data protection procedures and policies in place in line with the RODO to ensure the lawfulness and fairness of our data processing processes, as well as the enforceability of any rights you have as a data subject. Additionally, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).

3. Any enquiries, requests, complaints relating to the processing of personal data by our company (Personal Data Administrator), hereinafter referred to as Notifications, should be addressed to the following e-mail address: office@refoamed.com or in writing to the address of the Personal Data Administrator, i.e. Refoamed sp. z o. o., Pasaż ursynowski 11/78, 02-784, Warszawa, Poland, NIP: 9512514698, REGON: 388236058

4. The content of the Application shall clearly indicate:

a) the details of the person or persons to whom the Notification relates,

b) the event which is the reason for the Notification,

c) present your demands and the legal basis for these demands,

d) indicate how you would like the matter to be dealt with.

5. We collect the following personal data on our website:

a) name – when filling in the contact form, you will be asked to provide your name so that we can contact you via the form on our website.

b) e-mail address – we will send you confirmation of your subscription to the newsletter and completion of the contact form via your e-mail address.

c) your device’s IP address – information resulting from the general rules of Internet connections such as the IP address (and other information contained in system logs) is used by the Website administrator for technical purposes. IP addresses may also be used for statistical purposes, including in particular the collection of general demographic information (e.g. about the region from which the connection is made).

6. It is necessary to provide the data indicated in the preceding paragraph in the following cases: when filling in the contact form on our Website, in order to obtain a response to an enquiry sent using the contact form on our Website.

7. Our Website uses Cookies technology in order to adapt its functioning to your individual needs. Accordingly, you may agree that the data and information you have entered will be remembered so that it can be used the next time you visit our Website without having to enter it again. The owners of other websites will not have access to this data and information. If, on the other hand, you do not agree with the personalisation of the Website, we suggest that you disable the use of cookies in the options of your Internet browser.

8. As a user of our Website, each of you has the opportunity to choose whether and to what extent you wish to use our services and to share information and data about yourself within the scope of this Privacy Policy.

9. Your personal data is processed by our company as Personal Data Controller for the purpose of processing requests sent via the contact form. In accordance with the principle of minimisation, we process only those categories of personal data which are necessary to achieve the purposes referred to in the preceding sentence.

10. We process personal data for the time necessary to achieve the purposes mentioned in the preceding sentence. Personal Data may be processed for a longer period than that indicated in the preceding sentence where such an entitlement or obligation imposed on the Personal Data Controller results from specific legislation or where the service we provide is of a continuous nature.

11. The source of the Personal Data processed by the Controller shall be the data subjects.

12. Your personal data is not transferred to a third country within the meaning of the RODO.

13. We do not share any personal data with third parties without the express consent of the data subject. Personal data without the consent of the data subject may only be shared with entities under public law, i.e. authorities and administrations (e.g. tax authorities, law enforcement authorities and other entities authorised by generally applicable laws).

14. Personal data may be entrusted for processing to entities processing such data on behalf of our company as Personal Data Controller. In such a situation, we as the Personal Data Controller shall enter into a personal data processing entrustment agreement with the processor. The processor shall process the entrusted personal data, but only for the purposes, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without the entrustment of your Personal Data for processing, we would not be able to carry out our activities on the Website or provide you with answers to your questions. As Personal Data Controller, we entrust personal data for processing to:

a) providing web hosting services for the website on which our Website operates,

b) providing postal services,

c) providing other services to us as the Personal Data Controller that are necessary for the day-to-day operation of the Online Shop.

Personal data is not subject to profiling by the Personal Data Controller.

16. In accordance with the provisions of the RODO, every person whose personal data we process as a Personal Data Controller has the right to:

a) to be informed about the processing of personal data, as referred to in Article 12 of the RODO – the Controller is obliged to provide you, as data subjects, with the information set out in the RODO (inter alia, about your data, the contact details of the DPO, the purposes and legal grounds for the processing of personal data, the recipients or categories of recipients of personal data, if any, or the period for which the data will be processed or the criteria for determining this period); this obligation should be fulfilled already at the moment of data acquisition (i.e., e.g. This obligation shall be complied with already at the time of the collection of the data (i.e. when the person sends the contact form on the website) or, if the data are not obtained from the data subject but from another source, within a reasonable period, depending on the circumstances; the controller may refrain from providing this information if the data subject already has it,

b) access to your personal data as referred to in Article 15 of the RODO – if you provide us with personal data, you have the right to inspect and access it; however, this does not mean that you have the right to access all documents on which your data appears, as they may contain confidential information; you do, however, have the right to know what your data is and for what purpose we process it and the right to obtain a copy of your personal data, with the first copy being issued free of charge and for each subsequent copy, in accordance with the provisions of the RODO, we will charge an appropriate administrative fee corresponding to the cost of making the copy,

c) correction, completion, updating, rectification of personal data referred to in Article 16 of the RODO – if your personal data has changed, please inform us as the Personal Data Controller of this fact so that the data held by us is factually correct and up to date; also, if there has been no change to your personal data but for whatever reason the data is incorrect or has been recorded incorrectly (e.g. as a result of a clerical error), please inform us in order to correct or rectify such data,

d) erasure of data (right to be forgotten) as referred to in Article 17 of the RODO – in other words, you have the right to request the “erasure” of data held by us as Data Controller and the right to request us as Data Controller to inform other controllers to whom we have provided your data of the need to erase it. You may request the erasure of your personal data in particular when:

the purposes for which the personal data was collected have been achieved, e.g. we have fulfilled the sales contract concluded with you in full, the basis for the processing of your personal data was solely consent, which has subsequently been withdrawn and there is no other legal basis for further processing of your personal data, you have lodged an objection based on Article 21 of the RODO and you consider that we do not have any overriding legal grounds allowing further processing of your personal data, your personal data has been processed unlawfully i.e. for unlawful purposes or without any basis for processing your personal data – please note that in this case you must have a basis for your request, the need to erase your personal data arises by law, the personal data relates to a minor and was collected in connection with the provision of information society services,

e) restriction of processing as referred to in Article 18 of the RODO – you may apply to our company to request the restriction of the processing of your personal data (which would consist in the fact that, until the dispute is clarified, our company would primarily only store it) if: you question the correctness of your personal data, or you believe that we are processing your data without a legal basis, but at the same time you do not want us to erase the personal data (i.e. you do not exercise the right referred to in the preceding letter), or you have lodged an objection as referred to in point. (f) of this point, or your personal data are needed to establish, assert or defend a claim e.g. before a court,

f) data portability as referred to in Article 20 RODO – you have the right to obtain your data in a computer-readable format and the right to have your data sent in such a format to another controller; you have this right only if the processing of your data was based on consent or if the data was processed by automated means,

g) to object to the processing of your personal data as referred to in Article 21 of the RODO – you have the right to object if you do not agree with our processing of personal data that we have already processed for legitimate purposes in accordance with the law; in particular, you have the right to object to the processing of your personal data for direct marketing purposes,

h) not to be subject to profiling as referred to in Article 22 in conjunction with Article 4(4) of the RODO – in our Online Shop you will not be subject to automated decision-making or profiling within the meaning of the RODO, unless you have given your consent; in addition, we will always inform you of profiling should it take place,

i) to lodge a complaint with the supervisory authority (i.e. the President of the Office for the Protection of Personal Data) referred to in Article 77 of the RODO – if you consider that we are processing your personal data unlawfully or in any way violating your rights under the generally applicable data protection legislation.

17. With regard to the right to erasure (right to be forgotten), we point out that under the provisions of the RODO you do not have the right to exercise this right if:

a) the processing of your personal data is necessary for the exercise of your right to freedom of expression and information, e.g. if you have posted your data on a blog, in comments, etc,

b) the processing of your personal data is necessary for our company to comply with legal obligations under the law – we cannot delete your data for the period of time necessary to comply with obligations (e.g. tax obligations) imposed on us by the law,

c) the processing of your data is done for the purpose of investigating, establishing or defending claims.

18. If you wish to exercise your rights referred to in the preceding paragraph, please use the relevant tabs on the Website, which allow you to delete your account and the data stored on our Website, or send a message by e-mail to: office@refoamed.com or in writing to the mailing address referred to in para. 3 above.

19. Each identified security breach shall be documented and, in the event of one of the situations set out in the provisions of the RODO or the Act, the data subjects and, if applicable, the PUODO shall be informed of such data breach.

20. All capitalised words shall have the meaning given to them in the Terms and Conditions of our Online Shop, unless otherwise stated in this Privacy Policy.

21. In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply. In the event of any inconsistency between the provisions of this Privacy Policy and the aforementioned regulations, these regulations shall prevail.

II. COOKIES POLICY

I. DEFINITIONS

1. Administrator – Refoamed sp. z o. o., Pasaż ursynowski 11/78, 02-784, Warsaw, Poland, NIP: 9512514698,REGON: 388236058

Cookies – computer data, small text files, saved and stored on the Devices through which the User accesses the Administrator’s website. 2.

2. Device – an electronic device through which the User accesses the Administrator’s website.

3. User – means an entity to whom, in accordance with the Regulations and legal regulations, electronic services may be provided or with whom an Agreement for the provision of electronic services may be concluded.

II. USE OF COOKIES

1. The Administrator uses cookies on the website.

2. The information collected by cookies is used for the purpose of proper optimisation of the website, as well as for statistical and advertising purposes.

3. Cookies record website User activity by recognising the Device, thanks to which the website is displayed in a manner optimised to the individual preferences of the User.

4. The solutions used on the website are safe for the Devices of Users using the Administrator’s website. It is not possible for dangerous or malicious software to get into the User’s Device.

5. The Administrator uses two types of cookies:

a) Session Cookies: these are files that are stored on the User’s Device and remain there until the session of the respective browser ends. The stored information is then permanently deleted from the Device’s memory. The mechanism of session cookies does not permit the collection of any personal data or any confidential information from the User’s Device.

b) Persistent cookies: these are stored on the User’s Device and remain there until they are deleted. The end of the session of the browser in question or the switching off of the Device does not delete them from the Device. The mechanism of Persistent Cookies does not allow any personal data or any confidential information to be retrieved from the User’s Device.

6. Display of mentions from social media such as Facebook and Instagram in order to get a quicker view of the actions and its community. The data are not modified in any way on the website.

Facebook.com [cookie administrator: Facebook Inc with its registered office in the USA or Facebook Ireland with its registered office in Ireland]

7. Collection of general and anonymous statistical data via analytical tools.

Google.com [cookie administrator: Google Inc. with its registered office in the USA].

III. MEANS OF DEFINING THE CONDITIONS FOR STORING OR ACCESSING COOKIES

1. The User has the possibility of limiting or disabling the access of Cookies to his Device. If this option is exercised, the use of the Administrator’s website will be possible, except for functions that by their nature require Cookies.

2. The User may, independently and at any time, change the settings concerning Cookies, specifying the conditions for storing and accessing Cookies to the User’s Device. The User may change the settings referred to above by means of the settings of his/her Internet browser or by means of the configuration of the service. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the web browser settings or inform on their placement on the Device each time. Detailed information on the possibility and methods of using cookies is available in the settings of your software (web browser).

3. The User may, at any time, delete Cookies using the available functions of the Internet browser he/she is using.