PRIVACY AND COOKIES POLICY for discover.botanicaloils.online

Effective from: 09 September 2026

1. Data Controller

The controller of the personal data of users of discover.botanicaloils.online and persons purchasing the e-book “The Golden Book of Oils” is:

Karolina Wawrzyniak
contact address: ul. Podmiejska 16, 64-100 Leszno, Poland
e-mail address: info@botanicaloils.online
telephone number: +48 790 559 096

hereinafter referred to as the “Controller”.

For matters concerning personal data, you may contact the Controller at: info@botanicaloils.online

The GDPR requires that a person whose personal data is collected is provided, among other things, with information about the Controller, the purposes and legal bases of processing, the data retention period and their rights.

2. What Personal Data May Be Processed?

In connection with the use of the website and the purchase of the e-book, the Controller may process, in particular:

• first and last name,

• e-mail address,

• order and payment information,

• information related to complaints and correspondence,

• technical data related to the use of the website, such as IP address, device information, browser information and cookies,

• other data voluntarily provided by the user when contacting the Controller.

The Controller does not receive or store the Customer’s full payment card number where such data is processed directly by the payment service provider.

3. Purposes and Legal Bases for Processing Personal Data

Personal data may be processed for the following purposes:

Processing the order and delivering the e-book – to the extent necessary to enter into and perform the contract.

Processing payments – to the extent necessary to complete the purchase using the selected payment method.

Handling enquiries and complaints – for the purposes of correspondence, performance of the contract and the establishment, exercise or defence of potential legal claims.

Compliance with legal obligations – where the retention of certain data or documents is required by applicable law, in particular tax law.

Website security and the establishment, exercise or defence of legal claims – on the basis of the Controller’s legitimate interests, where applicable.

Analytics and online marketing – where technologies requiring the user’s consent are used, personal data will be processed after the appropriate consent has been obtained. The user may withdraw such consent.

4. Newsletter and E-mail Marketing

As of the date of publication of this Policy, providing an e-mail address when making a purchase is primarily required for processing the order and communicating with the Customer in connection with the purchase.

Purchasing the e-book does not automatically subscribe the Customer to a newsletter.

If a newsletter or e-mail marketing requiring consent is introduced in the future, the user will be given the opportunity to provide separate, voluntary consent.

Consent to marketing may be withdrawn in the manner indicated in the messages received or by contacting the Controller at info@botanicaloils.online

5. Recipients of Personal Data

In connection with the operation of the website and processing of sales, personal data may be disclosed to entities providing the Controller with services necessary for the operation of the website, including, in particular:

• the sales and automation platform provider – systeme.io

• the payment service provider processing the selected payment method,

• hosting, domain and technical infrastructure providers,

• e-mail service providers,

• analytics and advertising service providers,

• providers of accounting, tax, legal or IT services, where the use of such services is necessary.

Personal data is disclosed only to the extent necessary to fulfil the relevant purpose.

6. Transfers of Personal Data Outside the European Economic Area

Some providers of technological, analytical, advertising or payment tools used by the Controller may process personal data outside the European Economic Area.

Where such a transfer takes place, it should be carried out using the mechanisms provided for under the GDPR that are appropriate for the relevant recipient and the country to which the personal data is transferred.

7. How Long Do We Retain Personal Data?

Data relating to an order is retained for the period necessary to perform the contract and subsequently for the period required by applicable law or necessary for the establishment, exercise or defence of legal claims.

Data processed on the basis of consent is processed until the consent is withdrawn, unless another legal basis exists for its continued processing.

Data relating to correspondence may be retained for the period necessary to handle the relevant matter and any potential claims.

Technical data and information stored in cookies are retained for a period determined by the type of cookie concerned or until the cookie is deleted or the relevant consent is withdrawn.

8. Rights of the Data Subject

In the circumstances provided for under the GDPR, the user has the right to:

• access their personal data,

• rectify their personal data,

• erase their personal data,

• restrict the processing of their personal data,

• data portability,

• object to processing based on legitimate interests,

• withdraw consent at any time where processing is based on consent,

• lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

The scope of individual rights depends on the legal basis and circumstances of the processing. The Polish Personal Data Protection Office (UODO) identifies, among others, the rights of access, rectification, erasure, restriction of processing, data portability and objection.

9. Voluntary Provision of Personal Data

Providing the personal data required when placing an order is voluntary but necessary to enter into and perform the contract and to deliver the e-book.

Failure to provide the required personal data may make it impossible to process the order.

Providing personal data for marketing purposes, if such an option is made available in the future, will be voluntary and will not be a condition for purchasing the e-book.

10. Cookies

The website may use cookies and similar technologies.

Cookies may be used, in particular, for the following purposes:

• ensuring the proper functioning of the website and the purchasing process,

• ensuring security,

• remembering certain settings,

• collecting statistics and analysing how the website is used,

• measuring the effectiveness of advertising activities,

• carrying out marketing activities where appropriate tools are used.

Strictly necessary cookies may be used to the extent required for the proper functioning of the website.

Analytics or marketing cookies which, under applicable law, require consent should only be activated after such consent has been obtained.

The user may manage cookies through their browser settings and, where an appropriate mechanism has been implemented on the website, through the consent management panel.

11. Analytics and Advertising Tools

The Controller may use analytics and advertising tools in the future, in particular Meta Pixel.

Before implementing technologies requiring the user’s consent, an appropriate consent management mechanism will be introduced and this Privacy Policy will be updated accordingly.

12. Data Security

The Controller applies appropriate organisational and technical measures to protect personal data, taking into account the nature, scope and risks associated with the processing.

13. Changes to the Privacy Policy

This Privacy Policy may be amended if there are changes to the operation of the website, the tools used, the manner in which personal data is processed or applicable law.

The current version of the Privacy Policy will be available on the website.

14. Contact

For matters concerning privacy and the processing of personal data, please contact:

info@botanicaloils.online