Privacy Policy

We care about the security of your data and clear rules for using our website.

CONTENTS:

GENERAL PROVISIONS
GROUNDS FOR DATA PROCESSING
PURPOSE, LEGAL BASIS, PERIOD AND SCOPE OF DATA PROCESSING ON THE WEBSITE
RECIPIENTS OF DATA ON THE WEBSITE
PROFILING ON THE WEBSITE
RIGHTS OF THE DATA SUBJECT
COOKIES ON THE WEBSITE, USAGE DATA AND ANALYTICS
FINAL PROVISIONS

1. GENERAL PROVISIONS

1.1. This privacy policy for the website available at https://luxdecor.expert, hereinafter referred to as the Website, is for information purposes, which means that it does not impose obligations on Website users. The Privacy Policy sets out, in particular, the rules governing the processing of personal data by the Controller on the Website, including the legal grounds, purposes and scope of personal data processing and the rights of data subjects, as well as information on the use of cookies and analytics tools on the Website.

1.2. The controller of personal data collected via the Website is PRZEDSIĘBIORSTWO PRODUKCYJNO – HANDLOWE UNICELL INTERNATIONAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office in Wasilków (registered office and service address: ul. Supraślska 25, 16-010 Wasilków, Poland); entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000018265; the registration court holding the company’s records: District Court in Białystok, 12th Commercial Division of the National Court Register; share capital: PLN 2,650,000.00; NIP (Tax ID): 5422503648; REGON: 050623653; email address: unicell@unicell.pl – hereinafter referred to as the “Controller”.

1.3. Contact details of the Data Protection Officer appointed by the Controller: email address: iod@unicell.com.pl.

1.4. Personal data on the Website are processed by the Controller in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR” or the “GDPR Regulation”. Official text of the GDPR: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

1.5. Use of the Website is voluntary. Likewise, the provision of personal data by a Website user in connection with such use is voluntary.

1.6. The Controller takes particular care to protect the interests of the persons whose personal data it processes and, in particular, is responsible for and ensures that the data it collects are: (1) processed lawfully; (2) collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes; (3) accurate and adequate in relation to the purposes for which they are processed; (4) kept in a form permitting identification of data subjects for no longer than is necessary for the purposes of processing; and (5) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

1.7. Taking into account the nature, scope, context and purposes of processing and the risks to the rights and freedoms of natural persons, varying in likelihood and severity, the Controller implements appropriate technical and organisational measures to ensure and be able to demonstrate that processing is performed in accordance with the GDPR. Those measures are reviewed and updated where necessary. The Controller applies technical measures to prevent unauthorised persons from obtaining or modifying personal data transmitted electronically.

2. GROUNDS FOR DATA PROCESSING

2.1. The Controller is entitled to process personal data where, and to the extent that, at least one of the following conditions applies: (1) the data subject has consented to the processing of their personal data for one or more specific purposes; (2) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the data subject’s request before entering into a contract; (3) processing is necessary for compliance with a legal obligation to which the Controller is subject; or (4) processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

2.2. Each instance of personal data processing by the Controller requires at least one of the grounds indicated in section 2.1 of the Privacy Policy. The specific grounds on which the Controller processes the personal data of Website users are set out in the following section of the Privacy Policy in relation to each purpose of processing.

3. PURPOSE, LEGAL BASIS, PERIOD AND SCOPE OF DATA PROCESSING ON THE WEBSITE

3.1. In each case, the purpose, legal basis, period and scope of processing, as well as the recipients of personal data processed by the Controller, depend on the actions taken by the relevant user on the Website.

3.2. The Controller may process personal data on the Website for the following purposes, on the following legal grounds, for the following periods and within the following scope: Purpose: Direct marketing Legal basis and period: Article 6(1)(f) GDPR (the Controller’s legitimate interest). Data are stored for as long as the legitimate interest pursued by the Controller exists, but no longer than the limitation period for claims against the data subject arising from the Controller’s business activities. Limitation periods are determined by law, in particular the Civil Code (the standard limitation period for business-related claims is three years, and for a sales contract two years). The Controller may not process data for direct marketing purposes where the data subject has effectively objected to such processing. Scope: Email address Purpose: Direct marketing Legal basis and period: Article 6(1)(f) GDPR (the Controller’s legitimate interest). Data are stored for as long as the legitimate interest pursued by the Controller exists, but no longer than the limitation period for claims against the data subject arising from the Controller’s business activities. Limitation periods are determined by law, in particular the Civil Code (the standard limitation period for business-related claims is three years, and for a sales contract two years). The Controller may not process data for direct marketing purposes where the data subject has effectively objected to such processing. Scope: Email address Purpose: Marketing Legal basis and period: Article 6(1)(a) GDPR (consent). Data are stored until the data subject withdraws consent to further processing for this purpose. Scope: First name, surname, email address Purpose: Marketing Legal basis and period: Article 6(1)(a) GDPR (consent). Data are stored until the data subject withdraws consent to further processing for this purpose. Scope: First name, surname, email address Purpose: Establishing, pursuing or defending claims that may be raised by the Controller or against the Controller Legal basis and period: Article 6(1)(f) GDPR. Data are stored for as long as the legitimate interest pursued by the Controller exists, but no longer than the limitation period for claims against the data subject arising from the Controller’s business activities. Limitation periods are determined by law, in particular the Civil Code (the standard limitation period for business-related claims is three years, and for a sales contract two years). Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Establishing, pursuing or defending claims that may be raised by the Controller or against the Controller Legal basis and period: Article 6(1)(f) GDPR. Data are stored for as long as the legitimate interest pursued by the Controller exists, but no longer than the limitation period for claims against the data subject arising from the Controller’s business activities. Limitation periods are determined by law, in particular the Civil Code (the standard limitation period for business-related claims is three years, and for a sales contract two years). Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Entering into and performing contracts with the Controller’s business partners Legal basis and period: Article 6(1)(b) GDPR – for the duration of the contract and the settlement period after its termination. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Entering into and performing contracts with the Controller’s business partners Legal basis and period: Article 6(1)(b) GDPR – for the duration of the contract and the settlement period after its termination. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Compliance with legal obligations incumbent on the Controller, e.g. issuing or retaining invoices and other accounting documents and responding to complaints Legal basis and period: Article 6(1)(c) GDPR – for the period for which the law requires the data to be retained. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Compliance with legal obligations incumbent on the Controller, e.g. issuing or retaining invoices and other accounting documents and responding to complaints Legal basis and period: Article 6(1)(c) GDPR – for the period for which the law requires the data to be retained. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Verification of creditworthiness Legal basis and period: Article 6(1)(f) GDPR – for the period necessary to carry out such an assessment when entering into, renewing or extending the scope of a contract. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Verification of creditworthiness Legal basis and period: Article 6(1)(f) GDPR – for the period necessary to carry out such an assessment when entering into, renewing or extending the scope of a contract. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Fraud detection and prevention Legal basis and period: Article 6(1)(c) and (f) GDPR – for the duration of the contract and subsequently until claims become time-barred or for the duration of proceedings conducted by the competent public authorities. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Fraud detection and prevention Legal basis and period: Article 6(1)(c) and (f) GDPR – for the duration of the contract and subsequently until claims become time-barred or for the duration of proceedings conducted by the competent public authorities. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Recruitment Legal basis and period: Article 6(1)(a) and (c) GDPR – for the duration of the recruitment process (unless consent has been given to process the data for this and future recruitment processes). Scope: First name and surname; email address; data contained in the attached CV and cover letter; other data contained in the message. Purpose: Recruitment Legal basis and period: Article 6(1)(a) and (c) GDPR – for the duration of the recruitment process (unless consent has been given to process the data for this and future recruitment processes). Scope: First name and surname; email address; data contained in the attached CV and cover letter; other data contained in the message. Purpose: Protection of property in monitored areas Legal basis and period: Article 6(1)(d) and (e) GDPR – for 30 days. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Protection of property in monitored areas Legal basis and period: Article 6(1)(d) and (e) GDPR – for 30 days. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: Making contact as a legitimate interest of the Controller Legal basis and period: Article 6(1)(f) of the General Data Protection Regulation of 27 April 2016. Scope: First name and surname; email address; other data contained in the message. Purpose: Making contact as a legitimate interest of the Controller Legal basis and period: Article 6(1)(f) of the General Data Protection Regulation of 27 April 2016. Scope: First name and surname; email address; other data contained in the message. Purpose: In all other cases, your personal data are processed solely on the basis of prior consent, within the scope and for the purpose specified in that consent Legal basis and period: Article 6(1)(a) GDPR – from the date consent is given until it is withdrawn. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). Purpose: In all other cases, your personal data are processed solely on the basis of prior consent, within the scope and for the purpose specified in that consent Legal basis and period: Article 6(1)(a) GDPR – from the date consent is given until it is withdrawn. Scope: First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, city/town, country); residential/business/registered office address (if different from the delivery address). For Customers who are not consumers, the Controller may additionally process the Customer’s company name and tax identification number (NIP). 4. RECIPIENTS OF DATA ON THE WEBSITE 4. RECIPIENTS OF DATA ON THE WEBSITE

Purpose of data processing	Legal basis for processing and data retention period	Scope of processed data
Direct marketing	Article 6(1)(f) GDPR (the Controller’s legitimate interest) Data are stored for as long as the legitimate interest pursued by the Controller exists, but no longer than the limitation period for claims against the data subject arising from the Controller’s business activity. Limitation periods are set by law, in particular the Civil Code (the basic limitation period for claims related to business activity is three years, and for a sales contract two years). The Controller may not process data for direct marketing purposes if the data subject effectively objects to such processing.	Email address
Marketing	Article 6(1)(a) GDPR (consent) Data are stored until the data subject withdraws consent to further processing for that purpose.	First name, surname, email address
Establishing, pursuing or defending claims that may be raised by the Controller or against the Controller	Article 6(1)(f) GDPR Data are stored for as long as the legitimate interest pursued by the Controller exists, but no longer than the limitation period for claims against the data subject arising from the Controller’s business activity. Limitation periods are set by law, in particular the Civil Code (the basic limitation period for claims related to business activity is three years, and for a sales contract two years).	First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, town/city, country); residential/business/registered office address (if different from the delivery address) In the case of customers who are not consumers, the Controller may additionally process the customer’s company name and tax identification number (NIP).
Entering into and performing contracts with the Controller’s business partners	Article 6(1)(b) GDPR – for the duration of the contract and the settlement period after its termination	First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, town/city, country); residential/business/registered office address (if different from the delivery address) In the case of customers who are not consumers, the Controller may additionally process the customer’s company name and tax identification number (NIP).
Compliance with legal obligations incumbent on the Controller, e.g. issuing or retaining invoices and other accounting documents and responding to complaints	Article 6(1)(c) GDPR – for the period for which the law requires the data to be retained	First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, town/city, country); residential/business/registered office address (if different from the delivery address) In the case of customers who are not consumers, the Controller may additionally process the customer’s company name and tax identification number (NIP).
Verification of creditworthiness	Article 6(1)(f) GDPR – for the period necessary to make such an assessment when concluding, renewing or extending the scope of a contract	First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, town/city, country); residential/business/registered office address (if different from the delivery address) In the case of customers who are not consumers, the Controller may additionally process the customer’s company name and tax identification number (NIP).
Fraud detection and prevention	Article 6(1)(c) and (f) GDPR) – for the duration of the contract and thereafter for the period after which claims become time-barred or for the duration of the proceedings	First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, town/city, country); residential/business/registered office address (if different from the delivery address) In the case of customers who are not consumers, the Controller may additionally process the customer’s company name and tax identification number (NIP).
Recruitment	Article 6(1)(a) and (c) GDPR) – for the duration of the recruitment process (unless consent was given to process data for this and future recruitment)	First name and surname; email address; data contained in the attached CV and cover letter; other data contained in the message content;
Protection of property in monitored areas	Article 6(1)(d) and (e) GDPR) – for a period of 30 days	First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, town/city, country); residential/business/registered office address (if different from the delivery address) In the case of customers who are not consumers, the Controller may additionally process the customer’s company name and tax identification number (NIP).
Making contact as a legitimate interest of the Controller	Article 6(1)(f) of the General Data Protection Regulation of 27 April 2016.	First name and surname; email address; other data contained in the message content;
In all other cases, your personal data are processed solely on the basis of prior consent, within the scope and for the purpose specified in that consent	Article 6(1)(a) GDPR – from the date consent is given until it is withdrawn.	First name and surname; contact telephone number; email address; delivery address (street, building number, unit number, postal code, town/city, country); residential/business/registered office address (if different from the delivery address) In the case of customers who are not consumers, the Controller may additionally process the customer’s company name and tax identification number (NIP).

4. RECIPIENTS OF DATA ON THE WEBSITE

4.1. For the Website to function properly, the Controller must use the services of third parties (such as a software provider). The Controller uses only processors that provide sufficient guarantees that appropriate technical and organisational measures will be implemented so that processing meets the requirements of the GDPR and protects the rights of data subjects.

4.2. The Controller does not transfer data in every case or to all recipients or categories of recipients indicated in the Privacy Policy. The Controller transfers data only where necessary to fulfil a particular purpose of personal data processing and only to the extent necessary to fulfil that purpose.

4.3. The personal data of Website users may be transferred to the following recipients or categories of recipients: service providers supplying the Controller with technical, IT and organisational solutions that enable the Controller to conduct its business, including the Website (in particular providers of software used to operate the Website, email and hosting providers, and providers of business management software and technical support for the Controller). The Controller discloses a user’s collected personal data to a selected provider acting on its behalf only where and to the extent necessary to fulfil a particular processing purpose consistent with this Privacy Policy.

service providers supplying the Controller with technical, IT and organisational solutions that enable the Controller to conduct its business, including the Website (in particular providers of software used to operate the Website, email and hosting providers, and providers of business management software and technical support for the Controller). The Controller discloses a user’s collected personal data to a selected provider acting on its behalf only where and to the extent necessary to fulfil a particular processing purpose consistent with this Privacy Policy.

5. PROFILING ON THE WEBSITE

5.1. The GDPR requires the Controller to provide information about automated decision-making, including profiling referred to in Article 22(1) and (4) GDPR, and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject. With this in mind, the Controller provides information on possible profiling in this section of the Privacy Policy.

5.2. The Controller may use profiling on the Website for direct marketing purposes. Profiling on the Website may result, for example, in a suggestion for a Product that may match a person’s interests or preferences. Despite profiling, the person remains free to decide whether they wish to learn more about the suggested product.

5.3. Profiling on the Website consists of the automated analysis or prediction of a person’s behaviour on the Website, for example by analysing their viewing of a particular Product page on the Website or their previous history of visits to the Website.

5.4. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

6. RIGHTS OF THE DATA SUBJECT

6.1. Right of access, rectification, restriction, erasure or portability – the data subject has the right to request from the Controller access to and rectification or erasure of their personal data (the “right to be forgotten”), restriction of processing, and the right to object to processing, as well as the right to data portability. The detailed conditions for exercising these rights are set out in Articles 15–21 GDPR.

6.2. Right to withdraw consent at any time – where the Controller processes a person’s data on the basis of consent (under Article 6(1)(a) or Article 9(2)(a) GDPR), that person has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6.3. Right to lodge a complaint with a supervisory authority – a person whose data are processed by the Controller has the right to lodge a complaint with a supervisory authority in the manner and under the procedure specified in the GDPR and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.

6.4. Right to object – the data subject has the right, at any time and on grounds relating to their particular situation, to object to the processing of personal data concerning them based on Article 6(1)(e) (public interest or public tasks) or (f) (the Controller’s legitimate interest), including profiling based on those provisions. In such a case, the Controller may no longer process those personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims.

6.5. Right to object to direct marketing – where personal data are processed for direct marketing purposes, the data subject has the right at any time to object to the processing of personal data concerning them for such marketing, including profiling to the extent that it is related to such direct marketing.

6.6. To exercise the rights referred to in this section of the Privacy Policy, you may contact the Controller by sending an appropriate message in writing or by email to the Controller’s address indicated at the beginning of the Privacy Policy, or by using the contact form available on the Website.

7. COOKIES ON THE WEBSITE, USAGE DATA AND ANALYTICS

7.1. Cookies are small pieces of text information in the form of text files sent by a server and stored on the device of a person visiting the Website (for example, on a computer or laptop hard drive or on a smartphone memory card, depending on the device used to visit our Website). Detailed information about cookies, including their history, can be found, among other places, at: https://en.wikipedia.org/wiki/HTTP_cookie.

7.2. The Controller may process data contained in cookies when visitors use the Website for the following purposes: remembering data entered in Order Forms or surveys; adapting Website content to the user’s individual preferences (e.g. colours, font size and page layout) and optimising use of the Website; compiling anonymous statistics showing how the Website is used; remarketing, i.e. examining the behavioural characteristics of Website visitors through anonymous analysis of their activities (e.g. repeated visits to specific pages, keywords, etc.) in order to create profiles and deliver advertising tailored to their predicted interests, including when they visit other websites in the advertising networks of Google Inc. and Facebook Ireland Ltd.;

remembering data entered in Order Forms or surveys;
adapting the content of the Website to the individual preferences of the user (e.g. concerning colours, font size, website layout) and optimising use of the Website’s websites
compiling anonymous statistics showing how the Website is used;
remarketing, i.e. researching the behaviour of Website visitors through anonymous analysis of their actions (e.g. repeated visits to specific pages, keywords) in order to create their profile and provide them with advertisements tailored to their expected interests, including when they visit other websites on the advertising network of Google Inc. and Facebook Ireland Ltd.

7.3. By default, most web browsers available on the market accept the storage of cookies. Anyone may define the conditions for the use of cookies through their browser settings. This means that the ability to store cookies can, for example, be partially restricted (including temporarily) or disabled altogether; however, in the latter case, this may affect some Website functions.

7.4. Browser settings concerning cookies are relevant to consent to the use of cookies by our Website; under applicable law, such consent may also be expressed through browser settings. If such consent is not given, the browser’s cookie settings should be changed accordingly.

7.5. Detailed information on changing cookie settings and deleting cookies in the most popular web browsers is available in each browser’s help section and on the following pages (click the relevant link): in Chrome in Firefox in Internet Explorer in Opera in Safari in Microsoft Edge

7.6. The Controller may use Google Analytics and Universal Analytics services provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on the Website. These services help the Controller analyse Website traffic. Data collected through these services are processed in anonymised form (as usage data that do not allow a person to be identified) to generate statistics useful for Website administration. These data are aggregated and anonymous, i.e. they do not contain identifying characteristics (personal data) of Website visitors. When using these services on the Website, the Controller collects data such as the source and medium through which visitors reach the Website and their behaviour on the Website, information on the devices and browsers used to visit the Website, IP address and domain, geographical data, demographic data (age and gender), and interests.

7.7. A person can easily prevent information about their activity on the Website from being shared with Google Analytics by installing the browser add-on provided by Google Inc., available here: https://tools.google.com/dlpage/gaoptout?hl=en.

7.8. The Controller may use the Facebook Pixel service provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the Website. This service helps the Controller measure advertising effectiveness, learn what actions Website visitors take and display tailored advertisements to those persons. Detailed information on how the Facebook Pixel works is available at: https://www.facebook.com/business/help/742478679120153?helpref=page_content.

7.9. The operation of the Facebook Pixel can be managed through the advertising settings in your Facebook.com account: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

8. FINAL PROVISIONS

8.1. The Website may contain links to other websites. After following a link to another website, the Controller encourages users to review the privacy policy applicable there. This Privacy Policy applies only to the Controller’s Website.