1. General provisions
- 1.1. This Privacy Policy sets out the principles for the processing of personal data and the use of cookies in connection with the use of the Online Store available at www.animalkingdom.live. The document contains in particular information on the purposes, legal bases and periods of data processing, as well as the rights of data subjects.
- 1.2. The controller of personal data is Dorota Kempko, conducting business activity under the name DOROTA KEMPKO, entered into the Central Register and Information on Business Activity (CEIDG), with the business address and address for service: ul. Piotrkowska 147/11, 90-440 Łódź, NIP: 9820323729, REGON: 100677857, e-mail address: [email protected], telephone number: +48 797 375 588 (hereinafter: "Administrator").
- 1.3. The Administrator processes personal data in accordance with applicable law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR").
- 1.4. The use of the Online Store, including making purchases, is voluntary. Providing personal data is voluntary; however, it may be necessary to conclude and perform a contract or to fulfil legal obligations imposed on the Administrator. Failure to provide the required data may prevent the achievement of these purposes.
- 1.5. Terms used in this Privacy Policy and written with a capital letter have the meaning assigned to them in the Online Store Terms and Conditions.
2. Legal bases for data processing
- 2.1. The Administrator processes personal data only when at least one of the following legal bases applies:
a) the data subject has given consent to the processing of their personal data for one or more specified purposes (Article 6(1)(a) GDPR);
b) processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR);
c) processing is necessary for compliance with a legal obligation to which the Administrator is subject (Article 6(1)(c) GDPR);
d) processing is necessary for the purposes of legitimate interests pursued by the Administrator or by a third party (Article 6(1)(f) GDPR), such as in particular:
- conducting direct marketing of own products or services,
- pursuing or defending claims,
- ensuring the security and proper functioning of the Online Store. - 2.2. Where personal data processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
3. Purpose, legal basis and period of personal data processing in the online store
- 3.1. The Administrator processes personal data only to the extent necessary to achieve specific purposes. Detailed information regarding the purposes of processing, legal bases and data retention periods is presented below.
- 3.2. Personal data may be processed for the following purposes:
a) Order processing (including delivery and payments)
Personal data is processed for the purpose of concluding and performing a sales contract, including in particular processing orders, handling payments, delivering products and contacting the customer regarding the order.
Legal basis: Article 6(1)(b) GDPR (performance of a contract or taking steps prior to entering into a contract).
Data retention period: for the period necessary to perform the contract, and thereafter until the expiry of claims arising from the contract. - b) Customer account management
Personal data is processed for the purpose of creating and maintaining a customer account, including enabling access to order history and managing account settings.
Legal basis: Article 6(1)(b) GDPR (performance of a contract for the provision of electronic services).
Data retention period: for the duration of maintaining the customer account, and thereafter until the expiry of claims related to its operation. - c) Handling returns, complaints and withdrawal from the contract
Personal data is processed for the purpose of handling complaints, processing returns and exercising the right to withdraw from the contract, as well as for contacting the customer regarding such requests.
Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (compliance with legal obligations imposed on the Administrator).
Data retention period: for the period necessary to process the request, and thereafter until the expiry of claims arising from the contract and legal obligations. - d) Contact with the user (form, e-mail, telephone)
Personal data is processed in order to respond to inquiries submitted by the user, including through the contact form, e-mail or telephone, as well as for further communication related to the inquiry.
Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Administrator consisting in handling correspondence and communication with users), and in the case of inquiries aimed at concluding a contract – Article 6(1)(b) GDPR.
Data retention period: for the period necessary to conduct correspondence, and thereafter until the expiry of claims. - e) Accounting and tax obligations
Personal data is processed for the purpose of issuing accounting documents (e.g. invoices), maintaining accounting records and fulfilling tax obligations.
Legal basis: Article 6(1)(c) GDPR (compliance with a legal obligation imposed on the Administrator).
Data retention period: for the period required by law, in particular for 5 years from the end of the calendar year in which the tax obligation arose, unless legal provisions require a longer retention period. - f) Pursuing or defending claims
Personal data may be processed for the purpose of establishing, pursuing or defending claims that may be raised by the Administrator or against the Administrator.
Legal basis: Article 6(1)(f) GDPR – legitimate interest of the Administrator consisting in protecting its rights.
Data retention period: until the expiry of claims, in accordance with applicable law, generally for a period of up to 6 years. - g) Marketing of own products and services
Personal data may be processed for the purpose of conducting marketing activities related to products and services offered by the Administrator.
Legal basis: Article 6(1)(f) GDPR – legitimate interest of the Administrator consisting in promoting its own products and services.
The data subject has the right to object at any time to the processing of personal data for direct marketing purposes.
Data retention period: until an effective objection is submitted or the purpose of processing ceases to exist. - h) Newsletter
Personal data is processed for the purpose of sending newsletters containing information about products, services, promotions and other content related to the Administrator's activities.
Legal basis: Article 6(1)(a) GDPR (consent of the data subject).
Data retention period: until consent is withdrawn or the user unsubscribes from receiving the newsletter. - i) Publication and management of customer reviews
Personal data may be processed for the purpose of enabling the publication of reviews regarding products, purchases or services provided by the Administrator, as well as for presenting them to other users of the Online Store.
Legal basis: Article 6(1)(a) GDPR (consent of the data subject).
Data retention period: until consent is withdrawn or the review is deleted by the Administrator. - j) Ensuring security and proper functioning of the Online Store
Personal data may be processed in order to ensure the security of the Online Store, protect against abuse, detect unauthorized activities, manage IT systems and ensure the proper functioning of the service.
Legal basis: Article 6(1)(f) GDPR – legitimate interest of the Administrator consisting in ensuring the security, integrity and reliability of the Online Store.
Data retention period: for the period necessary to achieve the indicated purposes, but no longer than until the need for processing ceases, unless legal provisions require a longer retention period. - k) Operation of the Loyalty Program
Personal data may be processed for the purpose of operating the Loyalty Program "ANIMALKINGDOM Regular Customer Card", in particular for the purpose of:
- identifying Program participants,
- verifying compliance with participation conditions,
- issuing and managing the Regular Customer Card,
- calculating and providing benefits resulting from participation in the Program,
- communication related to participation in the Program.
Legal basis: Article 6(1)(b) GDPR (performance of the agreement for participation in the Program).
Retention period: for the duration of participation in the Program, and thereafter until the expiry of possible claims. - l) Statistical analysis and development of the Online Store
Personal data may be processed for the purpose of analyzing how the Online Store is used, creating visit statistics, improving website functionality, developing the offer and improving the quality of services provided.
Legal basis:
- Article 6(1)(a) GDPR – user consent expressed through cookie settings, with regard to the use of analytical and marketing tools,
- Article 6(1)(f) GDPR – legitimate interest of the Administrator consisting in analyzing the operation of the Online Store and its development, with regard to necessary technical data.
Data retention period: until consent is withdrawn, and with regard to data processed on the basis of the Administrator's legitimate interest – until an effective objection is submitted or the purpose of processing ceases to exist.
4. Recipients of personal data
- 4.1. In order to ensure the proper functioning of the Online Store and the provision of electronic services, the Administrator may transfer personal data to entities cooperating with the Administrator, solely to the extent necessary to achieve specific processing purposes.
- 4.2. Recipients of personal data may include in particular:
a) payment and financial service providers, including in particular Przelewy24, PayPal, PayPo and payment operators handling payments by payment cards, BLIK, Google Pay, Apple Pay, iDEAL, Bancontact, Klarna (including Sofort) and other payment methods made available in the Online Store – for the purpose of processing payments for orders.
b) carriers, postal operators and entities responsible for order delivery, including InPost, DHL, DPD, FedEx and Poczta Polska (including the Global Express service) – for the purpose of delivering orders.
c) providers of hosting, IT and technical services and entities ensuring the functioning of the Online Store.
d) providers of customer communication and newsletter delivery tools, including MailerLite.
e) providers of analytical, statistical and marketing tools, including Google Analytics and Meta Platforms.
f) providers of systems used for publishing and managing customer reviews.
g) entities providing accounting, legal, consulting or auditing services.
h) entities authorized to receive data under applicable law. - 4.3. The Administrator uses in particular services provided by entities handling electronic payments, order deliveries, newsletter distribution, web analytics and online advertising.
- 4.4. Personal data is transferred only to the extent necessary to achieve a given processing purpose.
5. Transfer of data outside the European Economic Area (EEA)
- 5.1. Due to the use by the Administrator of services provided by suppliers of analytical, marketing, mailing and payment tools, personal data may be transferred outside the European Economic Area (EEA).
- 5.2. In the event of transferring data outside the EEA, the Administrator ensures that such transfer takes place in accordance with applicable legal provisions, in particular on the basis of a European Commission adequacy decision or by applying appropriate safeguards, such as standard contractual clauses approved by the European Commission.
- 5.3. The data subject may obtain additional information regarding the safeguards applied by contacting the Administrator.
6. Rights of data subjects
- 6.1. A person whose personal data is processed by the Administrator has the following rights:
a) the right to access personal data,
b) the right to rectify data,
c) the right to erasure of data ("the right to be forgotten"),
d) the right to restrict processing of data,
e) the right to data portability,
f) the right to object to the processing of data,
g) the right to withdraw consent at any time if the processing is based on consent; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. - 6.2. In the case of processing personal data based on the legitimate interest of the Administrator, the data subject has the right to object to such processing at any time.
- 6.3. If personal data is processed for direct marketing purposes, the data subject has the right to object to such processing at any time.
- 6.4. The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), if they consider that the processing of personal data violates applicable legal provisions.
- 6.5. In order to exercise their rights, the data subject may contact the Administrator:
- electronically: [email protected],
- in writing: Dorota Kempko, ul. Piotrkowska 147/11, 90-440 Łódź.
7. Profiling
- 7.1. The Administrator may use personal data to conduct analytical and marketing activities, including profiling.
- 7.2. Profiling consists in particular of analyzing user activity in the Online Store, purchase history or interest in specific products in order to better match marketing content, advertisements and offers to user preferences.
- 7.3. Profiling used by the Administrator does not result in making decisions towards the user that produce legal effects or similarly significantly affect their situation.
- 7.4. The data subject has the right to object at any time to profiling based on the legitimate interest of the Administrator.
8. Cookies and similar technologies
- 8.1. The Online Store uses cookies and similar technologies to ensure the proper functioning of the website, analyze traffic and conduct marketing activities.
- 8.2. Cookies are small text files stored on the user's device while using the website.
- 8.3. The Administrator uses the following types of cookies:
a) Necessary cookies
Cookies necessary for the proper functioning of the Online Store, enabling, among others:
- logging into the account,
- remembering the contents of the shopping cart,
- completing the order process,
- ensuring website security.
The use of these cookies does not require the user's consent.
b) Functional cookies
Cookies that allow user settings to be remembered and the operation of the website to be adjusted to user preferences. These cookies are used only after obtaining the user's consent.
c) Analytical cookies
Cookies used to analyze how the website is used and to create visitor statistics.
The Administrator uses:
- Google Analytics 4 (GA4).
These cookies are used only after obtaining the user's consent.
d) Marketing cookies
Cookies used for advertising and remarketing activities.
The Administrator may use:
- Meta Pixel,
- Google advertising tools,
- MailerLite mailing and marketing tools.
These cookies are used only after obtaining the user's consent. - 8.4. Google Analytics 4
The Store uses Google Analytics 4 provided by Google Ireland Limited. This tool enables the analysis of website traffic, creation of statistics and improvement of the functioning of the Online Store.
The Administrator may receive information regarding, among others, the number of visits, traffic sources, device types, approximate user location and the way users interact with the website.
Data collected through Google Analytics 4 is processed in accordance with Google's privacy policy and is used only after obtaining the user's consent. - 8.5. Meta Pixel
The Store may use Meta Pixel provided by Meta Platforms Ireland Limited.
This tool enables the analysis of the effectiveness of advertisements conducted on Facebook and Instagram, remarketing activities and creation of advertising audience groups.
Meta Pixel is activated only after the user has provided consent through the cookie consent management mechanism. - 8.6. The User may change cookie settings or withdraw previously granted consent at any time through the cookie consent management mechanism available in the Online Store.
- 8.7. Regardless of the above, the User may also manage cookies through the settings of their internet browser. Restricting the use of cookies may affect some functionalities of the Online Store.
- 8.8. Examples of cookies used in the Online Store: Cookie nameProviderPurposeStorage periodPHPSESSIDOnline StoreFile necessary for the proper operation of the user's session.SessioncartOnline StoreRemembering products added to the shopping cart.Until the end of the session or removal of the cart._gaGoogle Analytics 4Traffic analysis and creation of visitor statistics.Up to 2 years*_fbpMeta PixelMeasurement of advertising effectiveness and remarketing activities.Up to 3 months**
* The storage period may change depending on the configuration of the Online Store or the provider of a given tool.
** The storage period of third-party cookies (Google, Meta) may change in accordance with the current policy of the respective provider. - 8.9. Detailed information regarding currently used cookies, their storage periods and providers may change due to updates of the tools and technologies used. The Administrator regularly updates information regarding the cookies used.
9. Final provisions
- 9.1. This Privacy Policy shall apply from the date of its publication on the Online Store website.
- 9.2. The Administrator reserves the right to introduce changes to this Privacy Policy in the event of changes in applicable laws, implementation of new technological or organizational solutions, as well as changes to the scope or method of providing services.
- 9.3. The current version of the Privacy Policy is always available on the Online Store website.
- 9.4. Changes to the Privacy Policy do not limit the rights of data subjects arising from applicable legal provisions.
- 9.5. Last update of the Privacy Policy: 3.08.2026
Cookies