COOKIES POLICY

Last Updated: January 13, 2026

1. INTRODUCTION

This Cookies Policy (hereinafter "Policy") defines the principles of use by Chinczyk.com (hereinafter: "Shop", "We", "Us") of cookies and similar tracking technologies on the website www.chinczyk.com (hereinafter "Service").

This Policy complies with:

• EU Regulation (EU) 2016/679 of April 27, 2016 (GDPR)
• Personal Data Protection Act of May 10, 2018
• Directive 2002/58/EC on privacy and electronic communications (ePrivacy Directive)
• Act on Competition and Consumer Protection
• Directive 2000/31/EC on electronic commerce

We care about your privacy and transparency. Below you will find detailed information about which cookies we use, for what purpose, and how you can control them.

2. WHAT ARE COOKIES?

A cookie is a small text file stored on your device (computer, phone, tablet or smartwatch).

Cookies contain:

• The name of the website they come from
• Storage time on your device
• A unique identification number
• Sometimes information about your behavior on the website

Important: Cookies do not change your device settings or delete files. They are simple text files.

2.1 Session Cookies vs. Persistent Cookies

Type	Description	Storage Duration
Session cookies	Stored only during your visit	Until browser is closed
Persistent cookies	Remain on your device	From minutes to several years

2.2 First-Party Cookies vs. Third-Party Cookies

Type	Description	Example
First-party cookies	Placed directly by the Shop	PHPSESSID, language_preference
Third-party cookies	Placed by service providers	Google Analytics, Meta Pixel

3. PURPOSES OF USING COOKIES

We use cookies for the following purposes:

3.1 Essential Cookies

Purpose: Ensure proper functioning of the Service

These cookies are absolutely necessary for the site to work and can be used without your consent.

We use them for:

• Maintaining your user session
• Login and authentication
• Security (protection against abuse, CSRF)
• Storing your shopping cart contents
• Processing payments
• Remembering selected language
• Handling accessibility preferences

Disabling these cookies will prevent you from using basic site features (login, adding to cart, checkout).

3.2 Analytical Cookies

Purpose: Analyze and improve the Service

We use them for:

• Analyzing how you navigate the site
• Measuring the number of users and time spent on the site
• Identifying most popular pages and features
• Optimizing content and navigation
• Improving Service performance
• Conducting A/B tests (comparing different versions of the site)

Requires: Your explicit consent (Article 7 GDPR)

Option to opt-out: You can withdraw consent or disable these cookies at any time

3.3 Functional Cookies

Purpose: Personalize your experience

We use them for:

• Remembering your preferences (language, region, interface customizations)
• Storing information about recently viewed products
• Enabling/disabling specific features
• Improving Service usability
• Enabling plugins and social features

Requires: Your explicit consent (Article 7 GDPR)

3.4 Marketing Cookies

Purpose: Advertising and marketing

We use them for:

• Providing personalized ads based on your interests
• Tracking marketing campaign effectiveness
• Building user profiles for advertising purposes (retargeting)
• Displaying product ads on other websites
• Measuring return on investment (ROI) from campaigns

Requires: Your explicit consent (Article 7 GDPR)

Example: After viewing product X in our Shop, you'll see ads for product X on other sites

4. SPECIFIC COOKIES AND TOOLS

4.1 Essential Cookies (no consent required)

Cookie Name	Provider	Description	Duration	Legal Basis
PHPSESSID	Chinczyk.com	Maintaining user session	Session time	Article 6(1)(b) GDPR
language_preference	Chinczyk.com	Remembering selected language	1 year	Article 6(1)(b) GDPR
cart_items	Chinczyk.com	Shopping cart contents	Session time	Article 6(1)(b) GDPR
auth_token	Chinczyk.com	Login and authentication	Until logout	Article 6(1)(b) GDPR
security_token	Chinczyk.com	Security (CSRF protection)	Session time	Article 6(1)(b) GDPR
prestashop_	PrestaShop SA (France)	Platform system cookies	Variable	Article 6(1)(b) GDPR

4.2 Analytical Cookies (require consent)

Tool	Provider	Description	Data	Duration	Legal Basis
Google Analytics	Google Ireland Limited	Traffic analysis, visitors, conversions, on-site events	Client ID, Session ID, Page Views, Event data	Up to 24 months	Article 6(1)(a) GDPR
Hotjar	Hotjar Ltd (Malta)	Session recordings, heatmaps, user surveys, usability tests	Session recordings, scroll behavior, click behavior	Up to 365 days	Article 6(1)(a) GDPR

4.3 Marketing Cookies (require consent)

Tool	Provider	Description	Data	Duration	Legal Basis
Meta Pixel (Facebook)	Meta Platforms Ireland Ltd	Conversion tracking, retargeting, audience building	Conversion events, user interactions, product views	Up to 90 days	Article 6(1)(a) GDPR
Google Ads Conversion Tracking	Google Ireland Limited	Google Ads campaign conversion tracking, display remarketing	Conversion events, user IDs, purchase data	Up to 540 days	Article 6(1)(a) GDPR
LinkedIn Insight Tag	LinkedIn Ireland Unlimited Company	Conversion tracking, B2B audience building, visit tracking	Conversion events, member data	Up to 90 days	Article 6(1)(a) GDPR
Google Display Remarketing	Google Ireland Limited	Displaying ads for products viewed on other sites	User IDs, product interests, browsing history	Up to 540 days	Article 6(1)(a) GDPR

4.4 Third-Party Service Provider Cookies

Cookies may also be placed by:

Category	Providers	Purpose
Payments	Stripe, PayPal, Autopay, Apple Pay, Google Pay	Secure payment processing, fraud detection
Logistics	DHL, InPost, Pocztex, FedEx	Shipment tracking, system integration
Email marketing	PrestaShop	Tracking opens, clicks, conversions
Customer Support	Zendesk, WhatsApp, Messenger	Communication, support, ticketing

5. WEB BEACONS AND TRACKING PIXELS

In addition to cookies, our Shop may contain invisible pixels (1x1 pixel tracking) placed by:

5.1 Types of Pixels

Pixel	Provider	Purpose	Availability
Facebook Conversion Pixel	Meta Platforms Ireland Ltd	Measuring purchase conversions, audience building	Operates via Meta Pixel cookie
Google Analytics Event Tracking	Google Ireland Limited	Recording events (clicks, scrolls, purchases)	Operates via Google Analytics
LinkedIn Insight Tag	LinkedIn Ireland Unlimited Company	Tracking B2B user interactions	Operates via LinkedIn cookie
Microsoft Advertising	Microsoft	Bing and Microsoft Ads campaign tracking	Operates via MUID cookie

5.2 How Tracking Pixels Work?

Pixels work similarly to cookies – they store information about your behavior on our site (which products you viewed, whether you made a purchase) in order to:

• Measure advertising effectiveness
• Show you more relevant ads
• Optimize marketing campaigns

6. HOW TO MANAGE COOKIES?

6.1 Managing in Your Browser

You can change cookie settings in any browser:

Google Chrome

1. Open Chrome
2. In the top right corner, click ⋮ (Menu) → Settings
3. Go to Privacy and security → Cookies and other site data
4. Choose one of the options:

• Allow all cookies (default)
• Block third-party cookies (recommended)
• Block all cookies (may cause login issues)

In the "Sites that can always use cookies" section, you can add exceptions

Deleting cookies:

• Press Ctrl+Shift+Delete (Windows) or Cmd+Shift+Delete (Mac)
• Select "All time" in Time range
• Check "Cookies and other site data"
• Click "Clear data"

Mozilla Firefox

1. Open Firefox
2. In the top right corner, click ☰ (Menu) → Settings
3. Go to Privacy & Security → Cookies and Site Data
4. Choose:

• Allow cookies (default)
• I will manage – set your own preferences
• Block – all cookies

In the "Exceptions" section, you can add sites that may use cookies

Deleting cookies:

• Press Ctrl+Shift+Delete (Windows) or Cmd+Shift+Delete (Mac)
• Check "Cookies"
• Click "Clear"

Safari

1. Open Safari
2. Click Safari (in top menu) → Preferences
3. Go to the Privacy tab
4. In "Cookies and website data" section, select:

• Never (blocks all)
• Always (allows all)
• Current website only (only for currently visited site)

Check "Prevent cross-site tracking" (recommended)

Deleting cookies:

• Click Safari → Clear History
• Select "All time" or a time period
• Click "Clear History"

Microsoft Edge

1. Open Edge
2. In the top right corner, click ⋯ (Menu) → Settings
3. Go to Privacy, search and services → Cookies and other site data
4. Choose:

• Allow all cookies
• Block third-party cookies (recommended)
• Block all cookies

Deleting cookies:

• Press Ctrl+Shift+Delete (Windows)
• Check "Cookies and other site data"
• Click "Clear"

6.2 Removing Existing Cookies

In most browsers, you can delete them using:

Windows: Press Ctrl+Shift+Delete (or Ctrl+H → History → Clear browsing data)
Mac: Press Cmd+Shift+Delete (or Cmd+Y → History → Clear)

6.3 Opt-Out Tools

You can also use tools that allow you to opt out of tracking:

Google Analytics Opt-Out

• Install the Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout
• Once installed, Google Analytics will no longer track your visits

Your Online Choices

• Go to https://www.youronlinechoices.eu/
• With a transparent interface, you can manage tracking preferences for multiple ad providers
• Select "Opt-Out" for providers you want to object to

Digital Advertising Alliance Opt-Out

• Go to https://optout.aboutads.info/
• The tool allows you to choose which companies can track you for advertising purposes

6.4 Blocking Tracking (Do Not Track)

If your browser supports "Do Not Track":

Browser	How to Enable
Chrome	Settings → Privacy and security → Do Not Track
Firefox	Settings → Privacy → Send a "Do Not Track" signal
Safari	Preferences → Privacy → Ask websites not to track
Edge	Settings → Privacy → Send "Do Not Track" requests

Important: Not all providers respect this setting. It's just a signal to websites.

7. CATEGORIES OF DATA PROCESSED BY COOKIES

Through cookies we process:

• Behavioral data: information about pages viewed, time spent, clicked elements
• Location data: IP address, approximate geolocation
• Device data: browser type, operating system, screen resolution
• Identification data: user ID (if logged in)
• Browsing history: products viewed, search keywords
• User preferences: language choice, interface customizations
• Transaction data: purchase history (for marketing cookies)

Important: Cookies do not contain sensitive data such as:

• ❌ Passwords
• ❌ Credit card / bank account numbers
• ❌ Biometric data
• ❌ Medical information

This data is transmitted using a secure HTTPS/TLS 1.3 connection with end-to-end encryption.

8. RELATIONSHIP OF COOKIES WITH PERSONAL DATA

Cookies may contain or be related to your personal data. Processing of such data is based on:

Cookie Type	Legal Basis	Details
Essential Cookies	Article 6(1)(b) GDPR	Necessary to perform a contract (e-commerce)
Analytical Cookies	Article 6(1)(a) GDPR	Your consent
Functional Cookies	Article 6(1)(a) GDPR	Your consent
Marketing Cookies	Article 6(1)(a) GDPR	Your consent

Cookies are processed in accordance with our Privacy Policy, where you will find detailed information about data protection.

9. SECURITY OF DATA STORED IN COOKIES

9.1 Transmission Encryption

All communication between your browser and our servers is done via HTTPS/TLS 1.3 – the latest encryption standard.

What does this mean?

• 🔒 Your data is encrypted (no one can intercept it)
• 🔒 The transmission path is secure
• 🔒 The server is authenticated (verified SSL certificate)

How to check?

• Type our website address in your browser
• You should see 🔒 (lock) next to the URL

9.2 Technical Security Measures

• 🔒 AES-256 – encryption of data at rest on servers
• 🔒 Hashing – passwords hashed with bcrypt/Argon2 algorithms (we never store plain text)
• 🔒 PCI DSS 3.2.1 – compliance with payment security standards
• 🔒 WAF (Web Application Firewall) – protection against attacks
• 🔒 Rate Limiting – protection against brute-force attacks

9.3 Operational Security

• 👮 24/7 Monitoring – continuous system observation
• 👮 Security audits – regular penetration tests
• 👮 Backup – daily data backups
• 👮 Restricted access – only authorized employees can view data

10. COOKIE STORAGE PERIOD

Different cookies are stored for different periods:

Cookie Type	Storage Duration
Session cookies	Until browser is closed
Essential persistent cookies	1 to 5 years
Analytical cookies	6 to 24 months
Marketing cookies	3 to 18 months
Payment provider cookies	30 days to 2 years

After the validity period expires:

• Cookies automatically expire and are deleted from your device
• You can delete them earlier in your browser settings

11. YOUR RIGHTS RELATED TO COOKIES

You have the right to:

11.1 Give and Withdraw Consent

• ✅ Give consent to cookies in the banner on our website
• ✅ Withdraw consent at any time – without any consequences
• ✅ Change preferences – you can modify settings on each visit

How to do this?

• ✅ Write to us by email: shop@chinczyk.com

11.2 Managing Cookies in Your Browser

• ✅ Changing cookie settings (see section 6.1)
• ✅ Deleting existing cookies
• ✅ Blocking new cookies
• ✅ Approving each cookie before it's placed

11.3 Rights Related to Personal Data

If cookies process your personal data, you have rights under GDPR:

• ✅ Right of access – you can ask us what cookie data we collect about you
• ✅ Right to rectification – if data is inaccurate
• ✅ Right to erasure – you can ask us to delete your data
• ✅ Right to object – you can object to processing for marketing

How to exercise these rights?

• Send an email to: shop@chinczyk.com
• Specify which right you want to exercise
• Attach a copy of your ID
• We will respond within 30 days

12. COOKIES AND PROFILING

Using cookies, we may create user profiles – assess your preferences and interests.

12.1 What is Profiling?

Profiling is an automated analysis of your behavior to:

• Show you more relevant product recommendations
• Display ads that may interest you
• Personalize site content

12.2 Does Profiling Have Legal Effects?

NO. Our profiling does not result in decisions with legal effects for you, such as:

• ❌ Loan denial
• ❌ Service access denial
• ❌ Price or offer change

If such a situation were to occur, you have the right to human intervention and explanation of the decision (Article 22 GDPR).

13. COOKIE PROVIDERS AND PRIVACY POLICIES

Below are links to privacy policies of third-party cookie providers. We recommend familiarizing yourself with them:

13.1 Analytics

Provider	Policy Link
Google Analytics	https://policies.google.com/privacy
Hotjar	https://help.hotjar.com/hc/en-us/articles/115011789248

13.2 Marketing and Advertising

Provider	Policy Link
Meta (Facebook)	https://www.facebook.com/policies/cookies
Google Ads	https://policies.google.com/technologies/ads
LinkedIn	https://www.linkedin.com/legal/cookie-policy

13.3 Payments

Provider	Policy Link
Stripe	https://stripe.com/privacy
PayPal	https://www.paypal.com/en/webapps/mpp/ua/privacy-full
Autopay	https://autopay.eu/storage/app/media/Autopay_en/Documents/privacy_policy.pdf

13.4 Logistics

Provider	Policy Link
DHL	https://www.dhl.com/en/en/dhl-contact/dhl-privacy-policy.html
FedEx	https://www.fedex.com/en-us/cookie-notice.html
InPost	https://inpost.pl/en/privacy-policy
Polish Post	https://www.poczta-polska.pl/en/privacy-policy

14. COOKIES BANNER AND PREFERENCE MANAGEMENT

14.1 What Does the Cookies Banner Look Like?

On your first visit to our website, you will see a cookies banner containing:

• ✅ Information about cookie use
• ✅ Link to this Policy
• ✅ "Accept All" button (accept all cookies)
• ✅ "Reject" button (accept only essential cookies)
• ⚙️ "Settings" button (customize preferences)

15. PECR AND ePrivacy DIRECTIVE

The cookies policy also complies with Directive 2002/58/EC on privacy and electronic communications (called PECR or ePrivacy Directive), which requires:

✅ Obtaining consent to place cookies (except essential ones)
✅ Transparency – explaining which cookies are used
✅ Preference management – easy way to change settings
✅ Real consent – must be explicit and informed (not default)

We meet all these requirements.

16. WHAT HAPPENS IF I DISABLE COOKIES?

16.1 If You Disable Essential Cookies

Feature	What Will Happen
Login	❌ You won't need to log in every time
Shopping Cart	❌ Products in your cart will disappear
Payment	❌ You won't be able to complete purchases
Language	❌ Site will always be in default language
Security	❌ Site will be exposed to CSRF attacks

Conclusion: Disabling essential cookies prevents using our Service.

16.2 If You Disable Analytical Cookies

What Will Happen
✅ We won't collect data about your visit
✅ Other features will work normally
⚠️ We'll lose information about popular pages
⚠️ It will be harder for us to optimize the Service

16.3 If You Disable Marketing Cookies

What Will Happen
✅ You won't see personalized ads
✅ We won't build a profile for advertising
✅ Other features will work normally
⚠️ You may see less relevant ads

17. CHANGES TO COOKIES POLICY

We reserve the right to update this Policy to adapt to:

• Changes in laws and regulations
• Changes in our practices
• New technologies
• User feedback

17.1 How We Notify You of Changes?

• Minor changes (technical, clarifications) – published without notice
• Material changes (increasing our control, reducing your rights) – we will inform you minimum 30 days before taking effect

17.2 Form of Notification

• Email to the address in our records
• Notification on the website
• Requirement to re-express consent (if required)

18. CONTACT INFORMATION

Questions about the Cookies Policy?

If you have questions, concerns, or want to manage your cookie preferences:

Contact Information

Email	shop@chinczyk.com
Headquarters	ul. Leśna 10A, 74-105 Pniewo
Contact Form	https://chinczyk.com/en/contact

19. GLOSSARY OF TERMS

Term	Explanation
Cookie	Small text file stored on your device
First-party cookie	Cookie placed directly by our website
Third-party cookie	Cookie placed by external service providers
Session cookie	Cookie deleted when browser is closed
Persistent cookie	Cookie remains on your device
Web beacon	Invisible pixel for tracking
Retargeting	Displaying ads for products you viewed
Remarketing	Same as retargeting
GDPR	General Data Protection Regulation
PECR / ePrivacy	Electronic communications privacy directive
Consent	Explicit, voluntary, conscious expression of will
Profiling	Automatic analysis of preferences
Opt-out	Withdrawal from tracking
Do Not Track	Browser signal to websites "don't track me"
Consent Management Platform (CMP)	Tool for managing cookies

20. EXTERNAL SERVICES USING COOKIES

Our Service may link to external websites and services that also use cookies. Their cookie policies may differ from ours. We recommend familiarizing yourself with their policies.

SUMMARY

✅ We use cookies to improve your experience
✅ We collect minimal necessary data
✅ All data is securely protected
✅ We respect your rights – you can manage cookies at any time
✅ We are transparent – we explain exactly what we do
✅ We comply with GDPR, PECR and other regulations