The data controller (hereinafter referred to as “Diana Kozyrieva”, “The Company” or “We”) in the sense of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:
The Inspector General for Personal Data Protection in Poland is the authority in charge with personal data matters in the country. One of our attorneys in Poland can help you with submissions to this authority or obtain special permits and licenses for performing various personal data – related activities.

If you have any questions and / or requests related to your personal data that the Company processes, you can contact us at: Marshalkowska 58/6, Mazowieckie, Warsaw, Poland 00545

You can contact our Data Protection Officer at the following email: dmilkanovabrand@gmail.com

Diana Kozyrieva respects the privacy of your personal information. The protection of your personal information throughout the entire process of processing personal data, as well as the security of all data processed by the Company, is an important issue for us. We process personally identifiable information collected during your visit to our web site in accordance with national and European law.

Our products are not aimed at children under 14 years old and we will not deliberately collect, use, provide or process in any other form any personal information of children under the age of 14. We therefore also ask you, if you are under 14 years old, please do not send us your personal information (for example, your name, address and email address).
If you are under 14 years old, and you nevertheless wish to ask a question or buy our products in any way which requires you to submit your personal information, please get your parent or guardian to do so on your behalf.

This Privacy Policy aims to provide you with comprehensive information in a clear and understandable language about what actions are taken with the personal data you provide to us, including:

• What personal data do we process?
• For what purposes do we process your personal data?
• For how long do we keep the personal data you provide?
• Whom we share your personal information with?
• What are your rights regarding your personal data and how you can exercise them?
• How we notify you of a change to our Privacy Policy?

With this Privacy Policy, Diana Kozyrieva declares that it has implemented all technical and organizational measures to protect the personal data of individuals prescribed by law or regulation at national and European level.

Any information and data by which an individual can be identified falls directly or indirectly under the definition of “personal data”.
For example, indirect identification is your mobile number. Direct identification is achieved when you provide a unique identifier such as Personal Identification Number (PIN), passport number, etc.
"Special categories of personal data" means data revealing racial or ethnic origin, political views, religious or philosophical beliefs or membership of trade unions, as well as the processing of genetic data, biometric data for the sole purpose of identifying an individual, health data or data about the sexual life or sexual orientation of the individual.

Diana Kozyrieva does not collect any special categories of personal data as such are not required for the use of our website and / or for the purchase of products using Diana Milkanova. If sensitive categories of personal data are provided by you in the course of your communication with the Company or use of our web site, it will be deleted as soon as possible after the processing of such data is established.

The processing of personal data includes the collection, storage, destruction, transfer, correction, updating, deletion and all other activities carried out with your personal data.
Diana Kozyrieva processes personal data on the grounds of the performance of a contract with the customer (Article 6, paragraph 1, item "b" of the GDPR). We may also procees personal data after obtaining clear, free and unambiguous consent from you for the purposes of processing expressed through your voluntary registration or provision of data on the website (Article 6, paragraph 1, item “a” of the GDPR).
The consent you provide can always be withdrawn by contacting us or using the contact form available on our website.

The personal data provided by you shall be used for the following purposes, including but not limited to:

• Provide an opportunity to use all the functionalities of the website and place orders online;
• Execution and administration of orders for purchase of products placed on the web site;
• Managing your contractual relations with us and the delivery of purchase products;
• Marketing activities, if the legal requirements for digital marketing are met;

Your personal data is not subject to automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR.

When you visit the Website, Diana Kozyrieva processes (collects) your personal information in the following ways:

• by completing your account registration form on our website (https://dmilkanova.com)
• by filling your required billing details without setting up an account first;
• by processing information about IP addresses, cookies, operating system and browser type.

Depending on the legal ground on which we process your personal data, the storage period of personal data may be different.
Your personal data is stored as long as we have valid legal grounds for processing it. After this period has expired and in case there is no legal ground to continue storing your personal data, your information shall be deleted.

Diana Kozyrieva respects your privacy and keeps your data secured. Subject to statutory requirements or business needs, Diana Kozyrieva may disclose your personal data to the following categories of recipients:

• Service providers: When we use service, providers related to client management systems, technical maintenance and provision of internal IT systems and operational support to our activities, Diana Kozyrieva may disclose personal data to those service providers. Please be informed that such disclosure shall commence only in case there are legitimate grounds for doing so and only based on a written agreement ensuring that the receiver provides adequate levels of protection for the personal data;
• External companies providing services related to card payments: Diana Kozyrieva uses external companies administering card payments when purchasing products and services provided by us. Your bank details may be shared with this external provider only in case there are legitimate grounds for doing so and only based on a written agreement ensuring that the receiver provides adequate levels of protection for the personal data;
• State and municipal authorities: In the course of compliance with its legal obligations Diana Kozyrieva may be obliged to disclose personal data of its customers to state or municipal authorities;

Diana Kozyrieva does not transfer your personal data outside the European Union (“EU”) and the European Economic Area (“EEA”). Only in case one of our service providers uses servers located outside of the EU or the EЕA we may transfer your personal data outside of the said boundaries. However, in such cases Diana Kozyrieva shall ensure that adequate measures for protecton of your personal data are in place and that the requirements of the GDPR are met.

Subject to European law (GDPR), you have the following rights to your personal data processed by Diana Kozyrieva:
1.   Access your personal data that Diana Kozyrieva processes and get a copy thereof;
2.   In case of incompleteness or inaccuracy in the data that Diana Kozyrieva processes, your personal data will be corrected (right to rectification);
3.   Request the erasure of your personal data when the conditions are met. Such cases are if the purpose for which the data is collected is achieved, you have withdrawn your consent when the processing is based on consent and there is no other legal basis for processing, your data is being processed unlawfully processed, and others;
4.   In the cases specified by the law, you may require that the processing of your personal data is restricted;
5.   In the cases specified by the law, you may object to the processing of your personal data;
6.   Exercise your data portability rights and request that your data be provided in a structured, commonly used and machine-readable format;
7.   Withdraw your consent when processing your personal data is based on consent.

You can exercise any of the above rights by submitting a formal request to the following address: Marshalkowska 58/6, Mazowieckie, Warsaw, Poland 00545
Email: dmilkanovabrand@gmail.com. In order to exercise your rights, it is mandatory to establish the identity of the claimant when submitting a request for exercising your rights.

This policy may be updated periodically to reflect changes in personal data protection legislation and best practices. Diana Kozyrieva undertakes to notify you of any significant changes to this privacy policy.