1. CONTACT WITH THE ADMINISTRATOR

You can contact the Administrator via email: grenadiermilitary44@gmail.com or by mail at the company’s correspondence address.

2. PERSONAL DATA SECURITY

2.1. To ensure the integrity and confidentiality of data, the Administrator has implemented procedures that allow access to personal data only to authorized persons and only to the extent necessary for the performance of their tasks related to sales and shipping of purchased goods. The Administrator uses organizational and technical solutions to ensure that all operations on personal data are recorded and performed only by authorized persons.

2.2. The Administrator also takes all necessary actions to ensure that its subcontractors and other cooperating entities guarantee the use of appropriate security measures whenever they process personal data on behalf of the Administrator.

2.3. The Administrator continuously analyzes risks and monitors the adequacy of the security measures applied to identified threats. If necessary, the Administrator implements additional measures to enhance data security.

3. PURPOSES AND LEGAL BASES FOR DATA PROCESSING ON THE WEBSITE www.grenadiermilitary44.com

3.1. Personal data of all users of the Administrator's websites (www.grenadiermilitary44.com), collected through cookies or other similar technologies, are processed:

3.1.1. To provide electronic services related to making content available to users – the legal basis for processing is the necessity of processing for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR);

3.1.2. For analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR), consisting of conducting analysis of user activity and preferences to improve the functionalities and services offered;

3.1.3. To possibly determine and pursue claims or defend against them – the legal basis for processing is the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR), which consists of protecting its rights;

3.1.4. For the marketing purposes of the Administrator and other entities – the rules for processing personal data for marketing purposes are described in the “Marketing” section below.

3.2. The user activity on the Administrator’s website, including their personal data, is recorded in system logs (a special software used to store a chronological record containing information about events and actions related to the IT system used to provide services by the Administrator). The information collected in the logs is processed mainly for service-related purposes. The Administrator also processes this information for technical, administrative, security, and system management purposes, as well as for analytical and statistical purposes – the legal basis for processing is the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR).

3.3. The session established by the user's web browser with the Administrator’s servers from the moment of logging in until logging out from the website is protected by the TLS protocol. This means that all data, including personal data, is transmitted using cryptographic security (encryption).

MARKETING

4.1. The Administrator processes users' personal data for marketing activities, which may include:

4.1.1. Displaying marketing content to the user that is not tailored to their preferences (contextual advertising);

4.1.2. Displaying marketing content that matches the user's interests (behavioral advertising);

4.1.3. Conducting other activities related to direct marketing of goods and services (sending commercial information electronically and conducting telemarketing activities).

4.2. In order to carry out marketing activities, the Administrator may, in some cases, use profiling. This means that through automatic data processing, the Administrator evaluates selected factors concerning individuals to analyze their behavior or create forecasts for the future. The legal basis for processing data in this case is the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR).