Privacy Policy

Good morning!

If you have found your way here, it is a reliable sign that you value your privacy. We understand this very well, which is why we are providing you with a document containing the rules for processing your personal data and using cookies and other tracking technologies in connection with the operation of the https://katemat.com/ store.

First of all, the store administrator is UniDigital Mateusz Bober, Jazowa 25/14B, 35-326 Rzeszów, Poland, NIP 5170318784.

This privacy policy has been constructed in the form of questions and answers. The choice of this form was dictated by the care of clarity and legibility of the information presented to you. Below you will find the table of contents of this policy corresponding to the questions we answer in turn.

# 1: Who is the administrator of your personal data?

# 2: Who can you contact regarding the processing of your personal data?

# 3: What information do we have about you?

# 4: Where do we get your personal information from?

# 5: Is your data secure?

# 6: For what purposes do we process your personal data?

User account - details

Orders - details

Complaints and withdrawals - details

Newsletter - details

Comments and product reviews - details

Mailing service - details

Tax and accounting obligations - details

Archive - details

Custom marketing - details

Analysis, statistics, optimization - details

# 7: How long will we keep your personal information?

# 8: Who are the recipients of your personal data?

# 9: Do we transfer your data to third countries or international organisations?

# 10: Do we use profiling? Do we make automated decisions based on your personal data?

# 11: What rights do you have in relation to the processing of your personal data?

# 12: Do we use cookies and what are they?

# 13: On what basis do we use cookies?

# 14: Can you disable cookies?

# 15: For what purposes do we use our own cookies?

# 16: What third party cookies are used?

Google Analytics - details

Google Tag Manager - details

Google AdWords - details

Google AdSense - details

# 17: Do we track your behaviour within our store?

# 18: Do we target ads to you?

§ 19: How can you manage your privacy?

# 20: What are server logs?

# 21: Is there anything else you should know?

If you have any concerns about our privacy policy, you can contact us at any time by sending an email to contact@katemat.com.

# 1: Who is the administrator of your personal data?

The administrator of your personal data is UniDigital Mateusz Bober, Jazowa 25/14B, 35-326 Rzeszów, Poland, NIP 5170318784.

# 2: Who can you contact regarding the processing of your personal data?

As part of the implementation of data protection in our organization, we have decided not to appoint a data protection officer due to the fact that it is not mandatory in our situation. For matters related to data protection and privacy in general, you can contact us by email at contact@katemat.com.

# 3: What information do we hold about you?

Depending on the purpose, we may process the following information about you:

- name,

- residential address,

- business address,

- tax identification number,

- email address,

- telephone number,

- data included in correspondence addressed to us,

- bank account number,

- IP address,

- image (profile picture),

- products you have viewed in the store,

- details of orders placed,

- details of abandoned shopping carts,

- activity in relation to newsletter messages,

a) information about the operating system and the web browser you are using,

b) the pages you view,

c) time spent on the site,

d) page views, click-throughs between pages,

e) clicks on particular links,

f) the source from which you navigated to our site,

g) the age range you are,

h) Your gender,

i) Your approximate location limited to your town or city,

- Your interests as determined by your online activities.

We have described the scope of the data processing precisely for each processing purpose. Information in this regard can be found later in this policy.

# 4: Where do we get your personal data from?

In most cases, you provide it to us yourself. This happens when:

- you register a user account,

- You place an order in the store,

- sending a complaint or withdrawing from the contract,

- you subscribe to the newsletter,

- you add a comment or opinion about a product,

- you contact us.

In addition, some information about you may be automatically collected by the tools we use:

- The store mechanism and newsletter system collect your IP address,

- The store engine collects information about the products you have viewed, details of orders placed, including unfinished ones,

- The newsletter mechanism collects information about your activity in relation to the content sent to you within the newsletter, such as opening messages, clicking on links, etc,

- Google Analytics collects a range of information about how you use our store.

# 5: Is your data secure?

We care about the security of your personal information. We have analyzed the risks involved in the various processes of processing your data and then implemented appropriate security and data protection measures. We monitor the condition of our technical infrastructure on an ongoing basis, we train our staff, we look at the procedures applied and introduce the necessary improvements. If you have any questions about your personal data, we are available to you at contact@katemat.com.

# 6: For what purposes do we process your personal data?

These purposes are more than one. Below is a list of them, followed by a more detailed discussion. We have also assigned to each purpose the corresponding legal basis for processing.

- Registration and maintenance of a user account - Article 6(1)(b) of the RODO,

- Order processing - Article 6(1)(b) of the RODO,

- Handling of complaints or withdrawal from the contract - article 6 (1) (f) RODO,

- Dispatch of newsletters - Article 6(1)(a) of the DPA,

- Handling of comments or opinions about a product - article 6.1.a RODO,

- handling correspondence - article 6.1.f RODO,

- fulfilment of tax and accounting obligations - Article 6(1)(c) RODO,

- creation of an archive for the possible need to defend, establish or assert claims, as well as for the identification of a returning customer - article 6(1)(f) RODO,

- Own marketing - article 6(1)(f) RODO,

- Analysis, statistics and optimization - article 6(1)(f) RODO.

User account - details

When you create a user account, you must provide the necessary data: first name, last name, date of birth, email address and password. Providing the data is voluntary, but necessary to create an account.

As part of editing your account details, you can provide further data, in particular data that may be used to place orders, such as your name, surname, address of residence or place of business, NIP number, telephone number.

In addition, our system used for user accounts records your IP number that you used when registering a user account.

Furthermore, we use the integration of the Google Analytics tool with the user account mechanism. In this way, the data collected by the Google Analytics tracking code about your use of our store is assigned to your user account. This includes information such as:

- information about the operating system and the web browser you use,

- the pages you view,

- time spent on the site,

- page transitions,

- clicks on particular links,

- the source from which you navigated to our site,

- the age range you are,

- Your gender,

- Your approximate location limited to your town or city.

- Your interests as determined by your online activities.

We analyze such information about you in order to optimize our websites for user experience, effectiveness and conversion, which is our legitimate interest as referred to in Article 6(1)(f) of the DPA.

You can modify the information about you provided to us in connection with the registration of your user account at any time.

The data provided by you in connection with the creation of your account is processed in order to provide you with an electronic service consisting of providing you with the ability to use your user account. This service is provided on the basis of an agreement concluded in accordance with the principles described in the regulations, which means that in this regard the legal basis for the processing of your personal data is Article 6(1)(b) of the RODO.

The data will be stored for the duration of the user account. At any time you can decide to delete your account, but this will not lead to the removal of information about your orders placed using the account from our database. Order data is kept in our archive for the lifetime of the store due to ensuring that we can identify the returning customer, reconstruct their purchase history, discounts granted, etc., which is our legitimate interest referred to in Article 6(1)(f) of the RODO.

Orders - details

When placing an order in the store, you need to provide the data necessary to complete the order. Depending on the details of the order, the directory of data may be different. For example, if you are ordering physical products, we need to know the address where the order will be delivered to you. If you are requesting a VAT invoice for a company, we need to know your VAT ID number and business address. Providing data is voluntary, but necessary to place an order.

In addition, our system used to handle the order process saves your IP number, which you used to place the order.

Each order is saved in our database, which means that your personal data assigned to the order is also accompanied by information concerning the order, such as products ordered, selected method of payment, selected method of delivery, deadline for payment.

The data collected in connection with the order are processed in order to perform the contract concluded by placing the order (art. 6(1)(b) RODO), issue an invoice (art. 6(1)(c) RODO in connection with the regulations governing the issue of invoices), include the invoice in the accounting documentation and fulfil other tax and accounting obligations (art. 6(1)(c) RODO in conjunction with the provisions governing tax and accounting obligations) and for archival purposes for the possible need to defend, establish or assert claims, as well as to identify a returning customer, which is our legitimate interest (Article 6(1)(f) RODO).

Order data will be processed for the time necessary to process the order and thereafter until the expiration of the statute of limitations for claims under the concluded contract. In addition, after the expiration of this period, the data may still be processed by us for archival purposes for the possible need to defend, establish or assert claims, as well as to identify a returning customer. Please also note that we are required to keep accounting records, which may contain your personal data, for the period required by law.

Complaints and withdrawals - details

If you make a complaint or withdraw from the contract, you provide personal data contained in the complaint or statement of withdrawal from the contract, which includes name and surname, address of residence, telephone number, e-mail address, bank account number. Providing the data is voluntary, but necessary to make a complaint or withdraw from the contract.

Data provided to us in connection with the lodging of a complaint or withdrawal from the contract are used for the purpose of the complaint procedure or the withdrawal from the contract procedure, and then for archival purposes, which is our legitimate interest (Article 6(1)(f) RODO).

The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure. Complaint documents will be stored until the expiry of the warranty rights. Statements of withdrawal will be stored together with accounting records for the period required by law.

Newsletter - details

By subscribing to the newsletter, you give us your name and e-mail address. Providing this data is voluntary, but necessary in order to subscribe to the newsletter.

In addition, our system used to handle the newsletter saves your IP number that you used to subscribe to the newsletter, determines your approximate location, the email client you use to handle your email, and tracks your actions taken in connection with the messages sent to you. As such, we also have information about which messages you opened, within which messages you clicked on links, etc.

The data you provide to us in connection with your subscription to the newsletter are used for the purpose of sending you the newsletter, and the legal basis for their processing is your consent (Art. 6(1)(a) RODO) given when you signed up for the newsletter. With regard to the processing of information that does not come from you but has been collected automatically by our mailing system, we rely in this respect on our legitimate interest (Article 6 (1) (f) RODO) in analyzing the behavior of newsletter subscribers in order to optimize mailing activities.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link included in each message sent as part of the newsletter or by simply contacting us. Despite opting out of the newsletter, your data will continue to be stored in our database for the purpose of identifying the returning subscriber and for the possible defence of claims relating to the sending of the newsletter to you, in particular for the purpose of demonstrating the fact that you have given your consent to receive the newsletter and when you withdrew it, which is our legitimate interest referred to in Article 6(1)(f) of the RODO.

You can modify your data provided for the purpose of receiving the newsletter at any time by clicking on the appropriate link visible in each message sent within the newsletter or simply by contacting us.

Product comments and opinions - details

When adding a comment or feedback on a product, you must provide at least a user name that will be associated with the comment or feedback (the name may include personal information such as your first or last name) and an email address. Providing this data is voluntary, but necessary to add a comment or opinion. You can also add your avatar (may include your image, such as a photo) and provide your website address, but this is not mandatory.

Data provided in connection with the addition of a comment or opinion will be processed in order to publish the comment or opinion on the site. The basis for processing is your consent (Article 6.1.a) resulting from the submission of the form used to publish the comment or opinion. You can withdraw your consent at any time by requesting that your comment or opinion be deleted.

Your comment or opinion will remain publicly available on the site for the duration of its online availability, unless you first request that the comment or opinion be deleted. You can also modify the content of the comment at any time, as well as modify the data assigned to it as about the person who added the comment or opinion.

Correspondence handling - details

When contacting us, you naturally provide us with your personal data contained in the content of the correspondence, in particular your e-mail address and name. The provision of data is voluntary, but necessary to make contact.

Your data is processed in this case for the purpose of contacting you, and the basis for processing is Article 6(1)(f) RODO, i.e. our legitimate interest. The legal basis for processing after contact has ended is also our legitimate aim to archive the correspondence for the purpose of ensuring that we can prove certain facts in the future (Article 6(1)(f) RODO).

The content of the correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request a history of any correspondence you have had with us (if it has been archived), as well as to request its deletion, unless archiving it is justified by our overriding interests, such as defending against potential claims from you.

Tax and accounting obligations - details

If we issue an invoice to you, it forms part of your accounting records, which will be kept for the period of time required by law. Your personal data is then processed in order to fulfil our tax and accounting obligations (Article 6(1)(c) of the RODO in conjunction with the provisions governing tax and accounting obligations).

Archive - details

As part of the description of the individual purposes for the processing of personal data above, we have indicated time limits for the storage of personal data. These periods are often related to our archiving of certain data for the purpose of ensuring that we can prove certain facts in the future, reconstruct the course of our cooperation with you, the correspondence exchanged, or defend, establish or assert claims. We rely in this respect on our legitimate interest as referred to in Article 6(1)(f) of the RODO.

Self-marketing - details

We use an abandoned cart recovery mechanism within our store. In a situation where you start the ordering process but do not complete it, our system will note this fact in order to take actions to make you complete your order. These actions may include, but are not limited to, sending you an email with an incentive to complete your order or displaying a targeted advertisement while you are browsing the Internet.

Our store may also collect information about your browsing activity and display targeted advertisements to you while you browse the Internet. However, if you are not a registered user, the information used for this purpose is not personal. It becomes personal only when it is combined with your personal data collected in your user account.

We carry out the activities described above based on our legitimate interest referred to in Article 6(1)(f) of the RODO consisting in marketing our own products.

Analysis, statistics, optimization - details

We collect statistical information about your browsing behaviour on our websites, such as clicks on links, transitions between pages, time spent on particular pages, etc. We analyse this information in order to optimise our websites for user experience, effectiveness and conversion. In most cases, the information processed in this way is not personal data. An exception is if you are a registered user. In that case, we may combine this information with other data about you that we have stored in your user account.

We carry out the activities described above based on our legitimate interest referred to in Article 6(1)(f) of the RODO to optimise our websites.

# 7: How long will we keep your personal data?

Data retention periods have been indicated separately for each processing purpose. You will find this information within the details dedicated to each separate purpose of processing.

# 8: Who are the recipients of your personal information?

We venture to say that modern business cannot do without services provided by third parties. We also use such services. Some of these services involve the processing of your personal data. Third party service providers that are involved in the processing of your personal data are:

- a hosting provider, which stores your data on a server,

- a cloud service provider where backups that may contain your personal data are stored,

- the mailing system provider where your data is stored if you are a newsletter subscriber,

- provider of a CRM system in which we store your data in order to improve the customer service process and for archival purposes,

- provider of an invoicing system, where we store your data in order to issue invoices.

- courier companies that process your data to the extent necessary to deliver your order,

- a law firm that accesses your data if it is necessary to provide legal assistance to us,

- a maintenance service provider who accesses the data if the technical work carried out concerns areas where personal data is located,

- other subcontractors who gain access to the data if the scope of their activities requires such access.

Your personal data may also be transferred to tax authorities to the extent necessary for the performance of tax, accounting and settlement obligations. This refers in particular to all declarations, reports, statements and other accounting documents containing your personal data.

Moreover, if necessary, your personal data may be disclosed to entities, authorities or institutions authorized to access the data under the law, such as police services, security services, courts, prosecutor's offices.

Moreover, we use tools that collect a number of information about you related to the use of our store. This includes, in particular, the following information:

- information about the operating system and the web browser you use,

- the pages you view,

- time spent on the site,

- page transitions,

- clicks on particular links,

- the source from which you navigated to our site,

- the age range you are,

- Your gender,

- Your approximate location limited to your town or city.

- Your interests as determined by your online activities.

By itself, this information does not, in our judgment, have the nature of personal information. Because this information is collected by third-party tools that we use, the information is also processed by the tool providers in accordance with their terms of use and privacy policies. Generally, this information is used to provide, improve and manage our services, to develop new services, to measure the effectiveness of advertising, to protect against fraud and abuse, and to personalize the content and advertising displayed on individual services, websites, and applications. We have tried to describe these in more detail later in this policy as part of the explanation of each tool.

# 9: Do we transfer your data to third countries or international organisations?

Yes, some of the processing operations of your personal data may involve the transfer of your personal data to third countries.

We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the USA. The providers of these tools guarantee an adequate level of protection of personal data through the relevant compliance mechanisms provided for by the RODO, in particular by subscribing to the Privacy Shield program or using standard contractual clauses.

The storage of personal data on servers located in third countries occurs within the following tools:

- MailChimp mailing system, whose provider is Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA - in terms of your name, email address, IP address and statistical information related to your reactions to the messages we send,

- Google's G-Suite services, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with respect to all data processed by Google services, including data contained in files which are synchronized with Google Drive.

Both Rocket Science Group LLC and Google Ireland Limited ensure an adequate level of data protection by applying the compliance mechanisms provided for by the RODO, in particular by joining the Privacy Shield program. Below are links leading to confirmations of participation in the Privacy Shield program, where you can read information about the processing of personal data by these entities.

- Google: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI,

- MailChimp: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG.

We would also like to remind you at this point that we use external tools that can collect anonymous information about you. We have mentioned this several times within this policy, including in response to a previous question. The providers of these tools often use servers located around the world, particularly in the United States of America (USA), to store the information they collect.

# 10: Do we use profiling? Do we make automated decisions based on your personal data?

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

Yes, we do use tools which may take certain actions depending on the information collected by the tracking mechanisms, but we believe that these actions do not have a material impact on you because they do not differentiate between you as a customer, do not affect the terms of any contract you may enter into with us, etc.

Using certain tools, we may, for example, target you with personalized advertising based on your past activities on our site or suggest products that may be of interest to you. This is called behavioral advertising. We encourage you to learn more about behavioural advertising, particularly with regard to privacy issues. Detailed information, including the ability to manage your settings for behavioral advertising, can be found here: http://www.youronlinechoices.com.

We emphasize that within the tools we use, we do not have access to information that would allow us to identify you. The information we refer to here is, in particular:

- information about the operating system and the web browser you are using,

- your browsing activity,

- time spent on the site,

- transitions between different subpages,

- the source from which you navigated to our site,

- the age range you are,

- your gender,

- Your approximate location limited to your town or city,

- Your interests as determined by your online activities.

We do not combine the information identified above with any personal information about you that we have in our databases. This information is anonymous and does not allow us to identify you personally. This information is stored on the servers of the providers of the respective tools, and these servers can usually be located around the world.

An exception to the anonymous nature of the information referred to above is if you have a user account with us. In that case, this information may be combined with your data collected in your user account. However, we still do not use this information to make decisions about you that are based solely on automated processing, including profiling, that would produce legal effects or materially affect you in a similar way. We believe that actions in the area of targeting you with advertisements depending on your activity in our store and taking optimization actions do not materially affect you. Therefore, we rely on our legitimate interest referred to in Article 6(1)(f) of the RODO in this regard.

# 11: What rights do you have in relation to the processing of your personal data?

The RODO grants you the following potential rights in relation to the processing of your personal data:

- the right to access your data and to receive a copy of it,

- The right to rectify (amend) your data,

- The right to erasure (if in your opinion there are no grounds for us to process your data, you can request that we erase it),

- the right to restrict processing (you can request that we restrict processing to only storing your data or carrying out activities agreed with you, if in your opinion we have incorrect data or are processing it unfairly),

- the right to object to processing (you have the right to object to processing on the basis of a legitimate interest; you should indicate the particular situation that you think justifies us stopping the processing covered by the objection; we will stop processing your data for those purposes unless we can demonstrate that the grounds for our processing override your rights or that your data is necessary for us to establish, assert or defend our claims)

- the right to data portability (you have the right to receive from us in a structured, commonly used machine-readable format the personal data you have provided to us under the contract or your consent; you can have this data sent directly to another entity),

- the right to withdraw your consent to the processing of your personal data where you have previously given such consent,

- The right to lodge a complaint to the supervisory authority (if you find that we process your data unlawfully, you can lodge a complaint with the President of the Office for Personal Data Protection or other competent supervisory authority).

The rules related to the exercise of the rights indicated above are described in detail in Articles 16 - 21 of the RODO. We encourage you to familiarize yourself with these provisions. On our part, we believe it is necessary to explain to you that the rights indicated above are not absolute and you will not be entitled to them in relation to all activities involving the processing of your personal data.

We would like to emphasize that one of the rights indicated above is always available to you - if you believe that we have violated data protection regulations while processing your personal data, you have the possibility to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

You can also always ask us to provide you with information on what data we hold about you and for what purposes we process it. It is enough for you to send a message to contact@katemat.com. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address given above if you have any questions relating to the processing of your personal data.

# 12: Do we use cookies and what are they?

Our store, like almost all other websites, uses cookies.

Cookies are small text pieces of information stored on your terminal device (e.g. computer, tablet, smartphone) that can be read by our information and communication system (our own cookies) or by third party information and communication systems (third party cookies). In cookies, specific information can be recorded and stored, to which ICT systems can then gain access for specific purposes.

Some cookies used by us are deleted after the session of the web browser ends, i.e. after it is closed (so-called session cookies). Other cookies are stored on your terminal device and allow us to recognize your browser the next time you visit the site (persistent cookies).

If you want to learn more about cookies as such, you can read, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie.

# 13: On what basis do we use cookies?

We use cookies on the basis of your consent, except to the extent that the cookies are necessary for the proper provision of electronic services to you.

As far as your consent to cookies is concerned, we assume that you give your consent through the settings of your Internet browser or through additional software supporting cookies management. We assume that you agree to all cookies used by us, which are not blocked by your browser or additional software you use.

Please note that disabling or restricting cookies may prevent you from using some of the features available in our store and cause difficulties in using our store, as well as many other websites that use cookies. For example, if you block social media plug-in cookies, the buttons, widgets and social features implemented in our store may not be available to you.

# 14: Can you disable cookies?

Yes, you can manage your cookie settings within your web browser. You can block all or selected cookies. You can also block cookies from specific sites. You can also delete previously saved cookies and other site and plug-in data at any time.

Browsers also offer the option of using incognito mode. You can use this mode if you do not want information on visited sites and downloaded files to be stored in your browsing and download histories. Cookies created in incognito mode are deleted when you close all incognito mode windows.

Browser plug-ins to control cookies are also available, such as Ghostery (https://www.ghostery.com). Cookie control options may also be provided by additional software, in particular anti-virus packages, etc.

Moreover, there are tools available on the Internet that make it possible to control certain types of cookies, in particular to manage behavioural advertising settings (e.g. www.youronlinechoices.com/, www.networkadvertising.org/choices).

Please note that disabling or restricting cookies may prevent you from using some of the features available in our store and cause difficulties in using our store, as well as many other websites that use cookies. For example, if you block cookies for social network plug-ins, buttons, widgets and social functions implemented in our store may not be available to you.

# 15: For what purposes do we use our own cookies?

Own cookies are used to ensure proper functioning of particular mechanisms of the store, such as maintaining the session after logging into the account, remembering the last viewed products and products added to the basket.

In cookies we also store information about the cookie settings you have defined using a mechanism for managing cookies.

Proprietary cookies are also used to operate the abandoned cart recovery mechanism.

# 16: What third party cookies are used?

The following third-party cookies operate within our store:

- Google Analytics,

- Google Tag Manager,

- Google Ads,

- Facebook Custom Audiences,

- Facebook, Twitter, LinkedIN, Pinterest (social tool cookies),

- Hotjar,

- YouTube.

Details of individual third party cookies are described below.

Google Analytics - details

We use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this regard based on our legitimate interest to create statistics and analyze them in order to optimize our websites.

In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses cookies from Google LLC concerning the Google Analytics service. You can block the Google Analytics tracking code at any time by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout.

Google Analytics automatically collects information about your use of our website. The information collected in this way is usually transmitted to and stored on Google servers, which may be located around the world.

Due to the IP anonymization activated by us, your IP address is shortened before being transmitted. Only in exceptional cases is the full IP address transmitted to Google's servers and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is, as a rule, not combined with other Google data.

We would like to point out that we do not collect any data within Google Analytics that would allow your identification. Accordingly, the data collected within the framework of Google Analytics does not have the nature of personal data for us. The information we have access to within Google Analytics is, in particular:

- information about the operating system and the web browser you use,

- which pages you view within our store,

- time spent in our store and on its sub-sites,

- transitions between pages,

- the source from which you navigate to our store.

In addition, we use the following Advertising Features within Google Analytics:

- demographic and interest reports,

- remarketing,

- ad reporting features, user-ID.

We do not collect personally identifiable information within the Advertising Features either. The information we have access to is, in particular:

- the age range you are in,

- Your gender,

- Your approximate location limited to your town or city,

- Your interests as determined by your online activities.

Google Analytics and Google Analytics 360 services are certified to the independent security standard ISO 27001. ISO 27001 is one of the most widely recognized standards in the world and certifies that the systems operating Google Analytics and Google Analytics 360 meet the relevant requirements.

If you are interested in details related to Google's use of data from sites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites.

Google Tag Manager details

We use Google Tag Manager provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to manage tags, which are small pieces of code that allow us to monitor user traffic and behavior, gather information about the effectiveness of advertisements, and take action to improve our store. Google Tag Manager does not collect any personally identifiable information about you; however, this tool does trigger other tags that may collect data.

Google Ads - details

We use remarketing functions available within the Google AdWords system operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this regard based on our legitimate interest in marketing our own products or services.

When you visit our website, a Google remarketing cookie is automatically left on your device, which collects information about your activities in our store. With the information collected in this way, we are able to show you advertisements within the Google network based on your behavior in our store. For example, if you view a product, this information will be recorded by a remarketing cookie so that we can target advertising to you for that product, or any other product we deem appropriate. This advertising will be displayed to you within the Google network when you use the Internet, browse other websites, etc.

Please note that we do not collect any personally identifiable information about you when you use Google Ads. The possible aggregation of data in such a way that it becomes personal data may be carried out on Google's part, but in this respect we are no longer responsible, as Google carries out these activities on the basis of the contract concluded with you as a user of Google services.

We, using Google AdWords, are only able to define the audience groups that we would like our ads to reach. On this basis, Google decides when and how to present you with our advertising.

Further processing of the information only takes place if you have consented to Google linking your browsing history to your account and using the information from your Google account to personalize the ads that are displayed on the websites. In this situation, Google will use your data to create and define target group lists for remarketing purposes on different devices. For this purpose, Google will temporarily combine the information collected with other data it has in its possession to create targeting groups.

If you do not wish to receive personalized ads, you can manage your ad settings directly on the Google website: https://adssettings.google.com/.

Facebook Custom Audiences - details

As part of the Facebook Ads system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, we use the Custom Audiences feature to target specific user groups with targeted advertising messages. We do this based on our legitimate interest in marketing our own products or services.

In order to target you with targeted advertisements based on your behaviour in our store, we have implemented Facebook Pixel as part of our website, which automatically collects information about your use of our website. The information collected in this way is usually transmitted to Facebook servers, which may be located anywhere in the world, particularly in the United States of America (USA).

The information collected by Facebook Pixel is anonymous, i.e. it does not allow us to identify you personally. Depending on your activity on our pages, you may reach a specific audience, but we do not in any way identify individuals belonging to these groups.

However, we would like to inform you that Facebook may combine the information collected with other information about you collected through your use of Facebook and use it for its own purposes, including marketing. Such activities of Facebook are no longer under our control, and you can find information about them directly in Facebook's privacy policy: https://www.facebook.com/privacy/explanation. You can also manage your privacy settings from your Facebook account. You will find useful information in this regard here: https://www.facebook.com/ads/settings.

Social tools - details

Our website uses plugins, buttons and other social tools, collectively referred to as "plugins", provided by social networks such as Facebook, Instagram, LinkedIN, Twitter, Pinterest.

When you view our website that contains a plug-in of a particular social network, your browser sends the administrator of that social network information about your visit. Because a plug-in is a piece of a social network embedded in our website, your browser sends a request to download the content of that social network to our website.

Plugins collect certain information about you, such as your user ID, the site you visited, the date and time, and other browser information.

The social network administrators use some of this information to personalize your viewing experience on our site. For example, when you visit a page with a "Like" button, the social network administrator needs information about who you are to show you which of your friends also like our page.

The information collected by plugins may also be used by social network administrators for their own purposes, such as improving their own products, creating user profiles, analyzing and optimizing their own activities, and targeting advertisements. We have no real influence on how the information collected by the plugins is subsequently used by the social network administrators. You can find details in this regard in the rules and privacy policies of the individual social networks.

Social Media Plug-ins collect and transmit information to the administrators of these social media sites even if you browse our site without being logged in to your social media account. However, your browser then sends a more limited set of information.

If you are logged in to one of the social networking sites, the site administrator will be able to directly associate your visit to our site with your profile on that social networking site.

If you do not want the social network to attribute the data collected during your visit to our website directly to your profile on that social network, then you must log out of that social network before visiting our website. You can also completely prevent plug-ins from being loaded on the website by using the appropriate extensions for your browser, such as script blocking.

In addition, the use of some plug-ins may involve the publication of certain information within your social profiles. For example, information about clicks on the "Like" button may be available on your Facebook timeline. Of course, if you share some content on your social media using plugins embedded on our website, this sharing will naturally be visible in your profile.

With regard to the details related to the processing of the information collected by the plugins by the administrators of the social media sites, in particular the purpose and scope of the data collection and their further processing and use by the administrators, as well as the possibility of contacting you and your rights in this regard and the possibility of making settings to ensure the protection of your privacy, everything can be found in the privacy policies of the respective service providers:

Facebook - https://www.facebook.com/privacy/explanation,

Twitter - https://twitter.com/en/privacy,

LinkedIN - https://www.linkedin.com/legal/privacy-policy,

Instagram - https://www.facebook.com/help/instagram/155833707900388,

Pinterest - https://policy.pinterest.com/pl/privacy-policy.

Hotjar - details

We use the Hotjar tool to better understand your needs and to optimise our website for your user experience, which is our legitimate interest. The tool is provided by a third party entity, namely Hotjar Limited, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta.

Hotjar records every visitor to our site and enables us to play a video of their movement around our site, as well as to generate so-called heat maps. Within the Hotjar tool we do not have access to information that allows us to identify you, as Hotjar does not record the process of filling in forms. The information we have access to within Hotjar is, in particular:

- information about the operating system and the web browser you are using,

- the pages you view within our site,

- the time spent on our site and on its sub-sites,

- links between different pages on our site,

- the source from which you came to our site,

- the places where you clicked with your mouse.

In order to use Hotjar, we have implemented a special Hotjar tracking code in the code of our site. The tracking code uses cookies from Hotjar Limited. The information collected through the cookies is stored by Hotjar in a pseudonymous user profile. Neither Hotjar nor we use this information to identify you.

You can object to Hotjar's creation of your user profile, Hotjar's storage of information about your use of our site and Hotjar's use of cookies here: https://www.hotjar.com/legal/compliance/opt-out.

If you are interested in details related to Hotjar's data processing, we encourage you to read Hotjar's privacy policy: https://www.hotjar.com/legal/policies/privacy.

YouTube - details

We embed YouTube widgets on our pages, allowing you to play YouTube videos directly from our pages. YouTube is operated by Google LLC.

The videos are embedded on the site in privacy mode. Based on information provided by YouTube, this means that no cookies are stored on your device and Google does not collect any information about you until you play the video.

When you play a video, YouTube saves cookies on your device and receives information that you played the video from a specific website, even if you do not have a Google Account or are not currently signed in. If you are logged in to your Google account, this service provider will be able to directly associate your visit to our website with your account. The purpose and scope of data collection and their further processing and use by Google, as well as the possibility of contacting you and your rights in this respect and the possibility of making settings to protect your privacy are described in Google's privacy policy.

If you do not want Google to attribute the data collected during video playback directly to your profile, you must log out of your account before playing the video. You can also completely prevent plug-ins from being loaded on the site by using the appropriate extensions for your browser, such as script blocking.

The information collected by the cookies associated with the YouTube videos embedded on our sites is used by Google to ensure the correct and safe functioning of the widget, to analyze and optimize the services provided by YouTube as well as for personalization and advertising purposes.

Please remember that by playing videos available on YouTube you are using services provided electronically by Google LLC. Google LLC is a separate entity, independent from us, which provides electronic services for you. For details on YouTube's terms of use, including privacy protection, you may refer to documents provided directly by YouTube:

# 17: Do we track your behavior within our store?

Yes, we use Google Analytics, Google AdWords, Hotjar and Facebook Custom Audiences tools that involve collecting information about your activities in our store. These tools are described in detail within the question on third party cookies, so we will not repeat that information here either.

# 18: Do we target ads to you?

Yes, we use Facebook Ads and Google Ads where we can target ads to specific groups defined based on various criteria such as age, gender, interests, occupation, job, activities previously undertaken within our store. These tools are described in detail in the question on third party cookies, so we will not repeat that information here either.

§ 19: How can you manage your privacy?

The answer to this question is found in many places in this privacy policy when describing specific tools, behavioral advertising, cookie consent, etc. However, we have once again compiled this information in one place for your convenience. Below you will find a list of options for managing your privacy.

- cookie settings within your web browser,

- Browser plug-ins that support the management of cookies, e.g. Ghostery,

- Additional software for managing cookies,

- incognito mode in your browser,

- behavioral advertising settings, e.g. youronlinechoices.com,

- Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout,

- Google Ads Settings: https://adssettings.google.com/,

- Facebook Ads Settings: https://www.facebook.com/ads/settings,

- HotJar Opt-out: https://www.hotjar.com/legal/compliance/opt-out

# 20: What are server logs?

Using the store involves sending requests to the server, on which the store is stored. Every request made to the server is recorded in the server logs.

The logs include, among others, your IP address, date and time of the server, information about the Internet browser and operating system you are using. The logs are saved and stored on the server.

The data stored in the server logs are not associated with particular users of the website and are not used by us to identify you.

Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except persons authorized to administer the server.

# 21: Is there anything else you should know?

As you can see, the topics of personal data processing, the use of cookies and privacy management in general are quite complex. We have made every effort to ensure that this document provides you with as much information as possible on the issues that are important to you. If anything is unclear to you, you want to know more, or you just want to talk about your privacy, please email us at contact@katemat.com.