• Privacy Policy of the Shop

Privacy policy of 08.11.2025.

Privacy Policy of the Shop Tomshoes Online Store
www.tomshoes.pl
(“Shop”)

Dear User!

We care about your privacy and want you to feel comfortable while using our services. Therefore, below we present the most important information on the policy for the processing of your personal data and on cookies which are used by our Shop. This information has been prepared with regards to the GDPR, i.e. the general data protection regulation.

PERSONAL DATA CONTROLLER

LAVISH SPÓŁKA Z OGRANICZONA ODPOWIEDZIALNOŚCIĄ with its registered seat at ul. Nadrzeczna 3F/P06, 05-552 Wólka Kosowska, Poland, entered in the National Court Register - Register of Entrepreneurs by SĄD REJONOWY DLA M.ST.WARSZAWY W WARSZAWIE,XIV WYDZIAŁ GOSPODARCZY KRAJOWEGO REJESTRU SĄDOWEGO, under KRS (National Court Register) number 0000930667, NIP (Tax Identification Number) 1231503606, REGON (National Official Business Register number) 52047583500000.

If you wish to contact us in relation to our processing of your personal data, please email us at: office@tomshoes.pl.

YOUR RIGHTS

You have the right to request:

  • access to your personal data, including obtaining a copy of your data (Article 15 of the GDPR or, if applicable, Article 13 sec. 1(f) of the GDPR),
  • their rectification (Article 16 of the GDPR),
  • erasure (Article 17 of the GDPR),
  • restriction of their processing (Article 18 of the GDPR),
  • the transfer of data to another controller (Article 20 of the GDPR),

and the right to:

  • object to the processing of your personal data at any time:
    • on grounds relating to your particular situation - with regard to the processing of your personal data based on Article 6 sec. 1(f) of the GDPR (i.e. the legitimate interests pursued by us);

Contact us if you wish to exercise your rights. You can object to our use of cookies (which you will read about below) in particular by using the appropriate settings on your browser.

If you consider that your data is being processed unlawfully, you can lodge a complaint with the competent data protection authority.

PERSONAL DATA AND PRIVACY

Your data is processed by us for purposes related to the operation of the Shop and the provision of the services offered therein. Below you will find detailed information on the processing of your data depending on your activities.

1. Placing an order in the Shop

For what purpose do we process your data?
to process your order
On what basis do we process your data?
a sales contract (Article 6 sec. 1(b) of the GDPR) a legal obligation, particularly related to accounting, safety and regulatory compliance of products, requiring us to process your personal data (Article 6(1)(c) of the GDPR)
For how long will we process your data?
for the duration of the aforementioned contract until the expiry of our legal obligations
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
you will not be able to place an order

2. Creating an account in the Shop

For what purpose do we process your data?
to execute a contract for the provision of an account in the Shop
On what basis do we process your data?
a contract for provision of services (Article 6 sec. 1(b) of the GDPR)
For how long will we process your data?
for the duration of the aforementioned contract
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
you will not be able to create an account and use its features, such as viewing your order history or checking your order status

3. Contacting us (e.g. to ask a question)

For what purpose do we process your data?
to respond to your inquiries or requests
On what basis do we process your data?
a contract or actions taken at your request prior to entering into a contract (Article 6 sec. 1(b) of the GDPR) - if your enquiry or request relates to a contract to which we are or may be a party our legitimate interest in processing your data for the purpose of communicating with you (Article 6 sec. 1(f) of the GDPR) - if your enquiry or request is not related to a contract
For how long will we process your data?
for the duration of the contract binding us or, if no contract is concluded - 1 month 15 days or until we have taken account of your objection to the processing*
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
we will not be able to respond to your enquiry or request
*whichever is applicable in a particular case

4. Browser settings or other similar action allowing analytical activities

For what purpose do we process your data?
to analyse how you use and navigate through the Shop in order to improve its functionality
(read more in the "Analytics" and "Cookies" parts of our Privacy Policy)
On what basis do we process your data?
our legitimate interest in processing the data for the purpose stated above
(Article 6 sec. 1(f) of the GDPR)
For how long will we process your data?
until the cookies used for analytical purposes expire or are deleted by you*
What happens if you do not provide the data?
we will not take into account the way you use and navigate through the Shop when working on its development
*whichever is applicable in a particular case

5. Using services (other than those mentioned above), such as browsing our website or using other features available on it – if they require data processing

For what purpose do we process your data?
execution of the contract concluded between us
On what basis do we process your data?
a contract for provision of services (Article 6 sec. 1(b) of the GDPR)
For how long will we process your data?
for the contract period
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
you will not be able to use those functions for which the processing of data is necessary

6. Any act or omission which may give rise to a claim relating to the Shop or our services

For what purpose do we process your data?
to establish, assert or defend possible claims relating to the contract concluded or the services provided
On what basis do we process your data?
our legitimate interest to process your personal data for the purpose stated above (Article 6 sec. 1(f) of the GDPR)
For how long will we process your data?
until the expiry of the claim period or until we take account of your objection to the data processing*
What happens if you do not provide the data?
inability to establish, assert or defend claims
*whichever is applicable in a particular case

ANALYTICAL ACTIVITIES

As part of the the Shop's website, we perform analytical activities to make it more intuitive and accessible - we will do so if you allow such activities. As part of the analysis, we will take into account the way in which you navigate the Shop, for example, how much time you spend on a particular subpage, or where in the Shop you click. This allows us to optimize the layout, appearance and content of the Shop as we work on its development, in order to improve its functionality.

DATA SECURITY

When processing your personal data, we use organisational and technical means in accordance with applicable law, including the encryption of the connection using the SSL/TLS protocol.

COOKIES

Our Shop, like most websites, uses the so-called cookies. These cookies:

  • are saved in the memory of your device (computer, telephone, etc.);
  • do not change the settings of your device.

In our Shop, cookies are used for:

  • statistical purposes,

To learn how to manage cookies, including how to turn them off in your browser, you can use the help file of your browser. You can find out more about this by pressing F1 in your browser. In addition, appropriate tips can be found on the following pages, depending on the browser you are using:

Below you can find information on the functions of the cookies we process and their validity period.

Cookie name Validity period of the cookie Cookie function
_ga session duration tracking user activity on the website for statistical purposes

Using appropriate options of your browser, you can at any time:

  • delete cookies,
  • block the use of cookies in the future.

In such cases, we will no longer process them.

EXTERNAL SERVICES / DATA RECIPIENTS

We use external services to help us in our business. We entrust them with the processing of your data - these processors only process data upon our documented request.

Below you will find a list of the recipients of your data:

ACTION DATA RECIPIENTS TRANSFERS OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
any action connected with the Shop hosting provider does not take place
entity providing us with technical/IT support does not take place
persons cooperating with us on the basis of civil law contracts, supporting our current activities does not take place
sales software provider does not take place
placing an order in the Shop entity supplying the product to you does not take place
provider of the business facilitation software (e.g. accounting software) does not take place
provider of the standard office software (including email boxes) does not take place
accounting office does not take place
contacting us (e.g. to ask a question) provider of the standard office software (including email boxes) does not take place

Additionally:

relevant public authorities to the extent that we are required to provide them with the data.