Skip to content
New collection AUTUMN 2026 / New Collection AUTUMN 2026 /

Privacy policy

1. GENERAL PROVISIONS

1.1.

This Privacy Policy of the Online Store is provided for informational purposes only. It does not create any contractual obligations for Users or Customers of the Online Store.

This Privacy Policy sets out the principles governing the processing of personal data by the Data Controller, including the legal bases, purposes and retention periods for the processing of personal data, the rights of data subjects, as well as information regarding the use of cookies and analytical tools.

1.2.

The Data Controller of the personal data collected through the Online Store is:

LEES ICON SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

ul. Sygnały 62/312

44-251 Rybnik

Poland

KRS (National Court Register): 0001240698

Tax Identification Number (NIP): 6423270684

REGON (National Business Registry Number): 544712601

E-mail:

kontakt@leesicon.pl

Returns and complaints:

zwroty@leesicon.pl

1.3.

Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).

1.4.

The use of the Online Store is voluntary.

Providing personal data is also voluntary, except where:

  1. the provision of personal data is necessary for the conclusion and performance of a Sales Agreement or the provision of an Electronic Service; failure to provide such data will make it impossible to conclude the agreement;
  2. the obligation to provide personal data results from applicable legal provisions, including accounting or tax regulations.

1.5.

The Data Controller exercises particular care to ensure that personal data are:

  • processed lawfully;
  • collected for specified, explicit and legitimate purposes;
  • accurate and kept up to date;
  • retained for no longer than is necessary for the purposes for which they are processed;
  • protected against unauthorised access, disclosure, alteration, loss or destruction.

1.6.

The Data Controller implements appropriate technical and organisational measures to ensure that the processing of personal data complies with the requirements of the GDPR.

1.7.

Terms used in this Privacy Policy, including but not limited to Online Store, Electronic Service, and Seller, shall have the meanings assigned to them in the Terms and Conditions of LEESICON.PL.

1.8. Scope of Personal Data Processed

The Data Controller may process the following categories of personal data relating to Users and Customers:

  • full name;
  • delivery address;
  • residential address;
  • e-mail address;
  • telephone number;
  • invoicing details, including company name and Tax Identification Number (NIP), where applicable;
  • bank account number for the purpose of processing refunds;
  • IP address;
  • order details and purchase history;
  • technical information relating to the device used to access the Online Store;
  • information collected through cookies and similar technologies.

1.9. Purposes and Retention Periods for Personal Data Processing

Personal data are processed by the Data Controller for the following purposes:

  • processing orders and concluding Sales Agreements;
  • maintaining the Customer Account;
  • complying with legal obligations, including accounting and tax obligations;
  • handling complaints, returns and withdrawals from the Sales Agreement;
  • communicating with Customers regarding the fulfilment of orders;
  • sending newsletters and marketing communications, solely where the Customer has provided the appropriate consent;
  • carrying out statistical analyses and marketing activities;
  • establishing, exercising or defending legal claims.

Personal data are retained:

  • for the period necessary to perform the Sales Agreement;
  • for the period required under applicable tax and accounting legislation, but no less than five (5) years following the end of the relevant tax year;
  • for the period necessary to process complaints, returns and other claims;
  • until the expiry of any applicable limitation periods relating to claims arising from the Sales Agreement;
  • where processing is based on consent, until such consent is withdrawn.

2. LEGAL BASIS FOR PROCESSING PERSONAL DATA

2.1.

The Data Controller is entitled to process personal data only where at least one of the following legal bases applies:

  1. the data subject has given consent to the processing of their personal data for one or more specific purposes;
  2. the processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
  3. the processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
  4. the processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data.

2.2.

Every processing activity carried out by the Data Controller must be based on at least one of the legal grounds specified in Section 2.1.

The specific legal bases applicable to particular processing activities carried out by LEESICON.PL are described in Section 3 – Purpose, Legal Basis and Retention Period of Personal Data Processing.

3.3. Data Received Through the "Wygodne Zwroty" (Convenient Returns) Service

Where the Customer uses the Wygodne Zwroty (Convenient Returns) service provided in cooperation with AlleKurier Sp. z o.o., ul. Balicka 12A/B4, 30-149 Kraków, Poland, the Data Controller receives from AlleKurier the Customer's personal data provided by the Customer via:

https://allekurier.pl/uslugi/zwrot-towaru

Such personal data are transferred solely for the purpose of processing the return of a Product following the Customer's exercise of the statutory right of withdrawal.

With respect to personal data received from AlleKurier:

  • LEES ICON Sp. z o.o. acts as an independent Data Controller;
  • the personal data are processed in accordance with the GDPR and this Privacy Policy;
  • the data are used exclusively for the purpose of handling the Product return.

4. RECIPIENTS OF PERSONAL DATA

4.1.

For the proper operation of the LEESICON.PL Online Store, including the performance of Sales Agreements, the Data Controller uses the services of third-party providers, including software providers, courier companies and payment service providers.

The Data Controller cooperates exclusively with service providers that ensure compliance with the GDPR and implement appropriate technical and organisational safeguards for personal data protection.

4.2.

Personal data may be transferred to countries outside the European Economic Area (EEA) only where:

  • the destination country ensures an adequate level of data protection within the meaning of the GDPR;
  • or the transfer is based on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism;
  • and the data subject is entitled to obtain a copy of the safeguards applied.

4.3.

Personal data are not disclosed to all entities listed in this Privacy Policy.

They are disclosed only to those recipients whose involvement is necessary for the specific processing purpose concerned.

4.4. Categories of Data Recipients at LEESICON.PL

4.4.1. Courier Companies, Carriers and Shipping Brokers

The Data Controller discloses Customers' personal data to the courier company or shipping broker selected by the Customer only to the extent necessary for the delivery of the ordered Products.

At LEESICON.PL this includes, among others:

  • InPost (parcel lockers and courier services);
  • DPD;
  • Pocztex;
  • AlleKurier (where the Customer uses the Wygodne Zwroty service).

4.4.2. Payment Service Providers

The Data Controller discloses Customers' personal data to payment service providers only to the extent necessary to process payments.

These currently include:

  • Przelewy24;
  • BLIK;
  • Stripe (card payments).

4.4.3. Credit and Leasing Institutions

LEESICON.PL does not offer instalment payments or leasing services.

Accordingly, the Data Controller does not disclose personal data to credit institutions or leasing providers.

4.4.4. Review Platform Providers

The Data Controller may disclose Customers' personal data to a review platform provider where the Customer has consented to submit a product review.

At LEESICON.PL:

  • the review system is operated internally;
  • personal data are not disclosed to external review providers.

4.4.5. Technical and IT Service Providers

The Data Controller discloses personal data to providers of technical services necessary for the operation of the Online Store, including providers of:

  • hosting services;
  • e-commerce software;
  • e-mail marketing systems;
  • CRM systems;
  • analytics services.

Such providers may include:

  • home.pl;
  • cyberFolks;
  • dhosting (depending on the hosting provider selected);
  • Google (Gmail and Google Analytics);
  • Meta (Facebook Pixel and Instagram).

4.4.6. Accounting, Legal and Professional Advisers

Where necessary, the Data Controller may disclose personal data to:

  • accounting firms;
  • legal advisers or law firms;
  • debt collection agencies.

Such disclosure shall be limited strictly to the extent necessary for the relevant purpose.

4.4.7. Social Media Plugin and Marketing Tool Providers

The Data Controller may disclose personal data to providers of marketing technologies, including:

  • Meta Platforms Ireland Ltd. (Facebook and Instagram);
  • Google Ireland Ltd. (Google Ads and Google Analytics).

The categories of personal data processed may include:

  • device information;
  • visited webpages;
  • activity within the Online Store;
  • advertisements displayed to the User.

5. PROFILING IN THE ONLINE STORE

5.1.

The Data Controller informs Users that profiling, within the meaning of Article 22 of the General Data Protection Regulation (GDPR), may be carried out in the Online Store.

Profiling consists of the automated analysis of a Customer's behaviour within the Online Store for the purpose of tailoring marketing communications, offers and content to the Customer's preferences.

5.2.

The profiling carried out by the Data Controller does not result in decisions producing legal effects concerning the Customer or similarly significantly affecting the Customer.

Profiling does not affect the Customer's ability to conclude a Sales Agreement or to use the services provided by LEESICON.PL.

Profiling may result in, among other things:

  • reminders regarding abandoned shopping carts;
  • personalised product recommendations;
  • sending discount codes;
  • tailoring newsletter content;
  • displaying advertisements based on the Customer's interests.

5.3.

Profiling carried out by LEESICON.PL may be based on:

  • browsing history;
  • purchase history;
  • activity within the Online Store (for example, adding products to the shopping cart);
  • technical data (such as the type of device used);
  • marketing consent, where such consent has been provided.

5.4.

The delivery of personalised content (including discount codes) requires the Data Controller to possess the Customer's contact details, such as an e-mail address or telephone number.

5.5.

The data subject has the right to:

  • not be subject to profiling;
  • object to profiling;
  • withdraw consent to marketing communications at any time;
  • request restriction of the processing of personal data.

Objections may be submitted by e-mail to:

kontakt@leesicon.pl

6. RIGHTS OF THE DATA SUBJECT

6.1. Right of Access, Rectification, Erasure, Restriction of Processing and Data Portability

The data subject has the right to request from the Data Controller:

  • access to their personal data;
  • rectification of inaccurate personal data;
  • erasure of personal data ("right to be forgotten");
  • restriction of processing;
  • data portability.

These rights arise from Articles 15–21 of the General Data Protection Regulation (GDPR).

6.2. Right to Withdraw Consent

Where personal data are processed on the basis of consent (for example, in relation to newsletters or customer reviews), the data subject may withdraw such consent at any time.

The withdrawal of consent shall not affect the lawfulness of processing carried out before the withdrawal.

6.3. Right to Lodge a Complaint with a Supervisory Authority

The data subject has the right to lodge a complaint with the competent supervisory authority responsible for personal data protection.

In Poland, the competent authority is:

President of the Personal Data Protection Office (UODO)

ul. Stawki 2

00-193 Warsaw

Poland

6.4. Right to Object

The data subject has the right to object, at any time, to the processing of personal data based on Article 6(1)(e) or Article 6(1)(f) GDPR.

This right also applies to profiling based on those legal grounds.

Following the receipt of such objection, the Data Controller shall cease processing the personal data unless compelling legitimate grounds exist which override the interests, rights and freedoms of the data subject or unless the processing is necessary for the establishment, exercise or defence of legal claims.

6.5. Right to Object to Direct Marketing

Where personal data are processed for direct marketing purposes, the data subject has the right to object to such processing at any time.

The objection also applies to profiling related to direct marketing.

6.6. Exercising Your Rights

To exercise any of the rights described in this section, you may contact the Data Controller using the following details:

E-mail:

kontakt@leesicon.pl

Postal address:

LEES ICON Sp. z o.o.

ul. Sygnały 62/312

44-251 Rybnik

Poland

Alternatively, you may use the contact form available in the Online Store.

7. COOKIES AND ANALYTICS

7.1. Cookies

Cookies are small text files stored on the device of a person visiting the Online Store.

Cookies enable the proper functioning of the website, content personalisation, traffic analysis and the implementation of marketing activities.

7.2. Types of Cookies Used by LEESICON.PL

Cookies may be classified according to:

(1) Provider

  • first-party cookies (set by LEESICON.PL);
  • third-party cookies (for example Google or Meta).

(2) Storage Period

  • session cookies, which are deleted when the browser is closed;
  • persistent cookies, which remain stored for a specified period.

(3) Purpose

  • strictly necessary cookies;
  • functional cookies;
  • analytical cookies;
  • marketing and social media cookies.

7.3. Purposes of Using Cookies

The Data Controller may use cookies for the following purposes:

  • identifying logged-in Users (strictly necessary cookies);
  • remembering products added to the shopping cart;
  • remembering information entered into forms;
  • adapting the appearance and functionality of the website to User preferences;
  • compiling website usage statistics;
  • personalising advertisements and measuring the effectiveness of advertising campaigns.

7.4. Analytical and Marketing Tools

The Data Controller may use the following services:

Google Ireland Limited

  • Google Analytics
  • Google Ads
  • Google Tag Manager

Google cookies may analyse, among other things:

  • user behaviour;
  • visited webpages;
  • time spent in the Online Store;
  • traffic sources.

Meta Platforms Ireland Limited

  • Facebook Pixel
  • Instagram integrations

Meta cookies may analyse:

  • User activity within the Online Store;
  • advertising performance;
  • conversion events.

7.5. Managing Cookies

Users may manage cookies through their web browser settings.

In particular, Users may:

  • block cookies;
  • delete cookies;
  • restrict their operation.

Please note that disabling strictly necessary cookies may prevent certain features of the Online Store from functioning correctly.

7.6. Consent to Cookies

Upon the first visit to the Online Store, Users may consent to the use of:

  • analytical cookies;
  • marketing cookies;
  • social media cookies.

Strictly necessary cookies are installed automatically, as they are essential for the operation of the Online Store.

8. FINAL PROVISIONS

8.1.

The Online Store may contain links to third-party websites.

The Data Controller recommends that Users review the privacy policies applicable to such websites.

The Data Controller accepts no responsibility for the privacy practices of third-party websites.

8.2.

The Data Controller reserves the right to amend this Privacy Policy, in particular in the event of:

  • changes in applicable law;
  • technological developments;
  • changes to the functionality of the Online Store;
  • introduction of new services or technical solutions.

8.3.

Any amendments to this Privacy Policy will be published on the Online Store website.

Where a Customer holds a Customer Account, the Data Controller may additionally notify the Customer by e-mail.

8.4.

Continued use of the Online Store following the effective date of any amendments shall constitute acceptance of the revised Privacy Policy.

8.5.

Any matters not governed by this Privacy Policy shall be subject to the provisions of:

  • the General Data Protection Regulation (GDPR);
  • the Polish Personal Data Protection Act;
  • the Polish Act on the Provision of Electronic Services;
  • the Polish Consumer Rights Act.