Privacy policy and processing of personal data.

1. Definitions

1.1. Operator. The operator responsible
for the processing of personal data according to the GDPR Regulation is cooperative Shop and refers to this platform.

1.2. Data Protection Officer
(DPO) = The address to which requests for information on the processing of personal data may be transmitted is the e-mail address:
office@cooperativashop.com

1.3. Cookies. A “cookie” is a small file, usually consisting of letters and numbers. It is downloaded to the memory of a
computer or other type of device used for internet browsing (Smartphone, Tablet, etc.), when the user accesses a certain website.

1.4. The data
subject within the meaning of the GDPR Regulation. Represents the identified natural person (who can be identified, directly or indirectly, especially by reference to an identification element:
name, identification number, location data, an online identifier, or to one or more specific elements). The data subject may be a requester of a service made available by the Controller, as well
as any other natural person whose personal data is transmitted to the Controller.

1.5. Categories of processed data. They represent personal data
and are processed by the Operator only when you enter the data in a section of the site or to send them through e-mail.

1.6. Processing of personal
data: Means any operation performed on personal data or on sets of personal data, with or without the use of automatic manipulation methods, such as collection, registration, organization,
structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction,
erasure or destruction.

2. What information will be processed?

2.1. Information collected through
cookies. For a better direction of advertising campaigns and improvement of services and products, Cooperative Shop uses information about the items purchased by our customers. If you have
approved the storage of cookies in your browser and you agree to their use, the Cooperative Shop receives information about the pages visited by you, accessing the products and other activities on
the platform.

2.2. The Shop Cooperative does not save or process in any other form any personal information, such as, for example, information
about your medical condition, religion or belief, etc.

2.3. Data provided by customers. On the Cooperative Shop we process personal information
about users. Mainly, we process the personal data you provide to us when you sign up for the newsletter list. This data includes, in particular, your personal e-mail address and name.

3. For what purposes is personal data saved?

3.1 For a better redirection of promotions and
promotions, the Cooperative Shop stores data related to cookies in the accesses on the site, the products viewed and other activities on the site. The saving is done only on the basis of your
consent to the use of relevant cookies. This agreement is entirely voluntary. Usually, based on the information provided, the Shop Cooperative obtains statistics and analyzes on the actions of the
users of the site. They make it possible to better redirect the advertising or modify the content of the site to what interests you and what you are looking for most of the time, a large group of
users of the platform. In this case, the processing of personal data is usually automatic.

3.2. For our product promotions and promotion of the
Shop Cooperative in the form of promotional communication sent to users, the Cooperative Shop mainly uses email addresses. The manipulation is carried out in this case only on the basis of your
consent, which is entirely voluntary. If you do not agree, you will be able to continue to use our platform in its entirety. You agree to the Cooperative Shop when registering when entering your
email address. Please note that registration on the Cooperative Shop can only be done by people older than 15 years. Your consent can be withdrawn at any time by clicking on the link found in any
newsletter.

LEGAL BASIS: the legitimate interest of the Operator to avoid online frauds and to ensure the general functionality of the site, the
execution of a contract and the consent of the data subject, as the case may be.

4. Your rights as a data subject in connection with the processing
of the personal data provided

4.1. The rights of the data subjects and how they can be exercised

According to the GDPR Regulation, as a data subject you are the beneficiary of the peak of rights, namely:

4.1.1. The right to information and
access regarding personal data. It is represented by the right to obtain a confirmation of whether or not personal data concerning you are being processed and, if so, access to that
data.

4.1.2. Right to rectification. It is represented by the right to request the Operator and to obtain the rectification of inaccurate personal
data addressed to you and / or to obtain the completion of personal data that are incomplete, with the mention that in the case of an online account these changes you can make personally from the
editing section of the account data, if applicable.

4.1.3. The right to delete the data (“the right to be forgotten”) is represented by the right
to have the possibility to delete the personal data that concern you if certain reasons mentioned in the GDPR Regulation are applied.

4.1.4. The
right to restrict the processing is represented by the right to restrict the processing of data in certain cases.

4.1.5. The right to data
portability: It is represented by the right to receive the personal data concerning you and to transmit them to another Operator.

4.1.6. The right
to opposition: It is represented by the right to oppose at any time the processing of personal data concerning you, according to the GDPR
Regulation.

4.1.7. The right not to be the subject of a decision based solely on the automatic processing of personal data It is included by the
creation of profiles, which produce legal effects that concern you or similarly affect you to a significant extent.

4.1.8. The right to address
through a complaint to the National Supervisory Authority for Personal Data Processing. When you believe that your data has not been processed in accordance with the legal
provisions.

4.2. How can you exercise these rights?

In order to exercise the rights mentioned
above, we kindly ask you to address by written request in electronic format, dated and containing your original signature to the e-mail address: office@cooperativashop.com to the attention of the
person responsible for the protection of personal data.

4.3. How long does it take to respond to your
requests?

Within a maximum of one month calculated from the moment of receiving your request, you will be provided with information on the actions
taken or, where appropriate, on the motivation for which the requested measures cannot be taken.

Note: Please note that in order to comply with a
request for access to personal data, we will take all possible measures to verify the identity of the data subject.

Also, according to the GDPR
Regulation, the resolution term mentioned above can be extended by no more than two months if necessary, taking into account the complexity of your case and the number of requests, and you will be
informed about this aspect, if applicable.

5. Destinations or categories of recipients of personal
data

The recipients who handle personal data within the European Union have the obligation to comply with the same legal provisions, offering the
same level of protection as the Operator.

Note: In the case of recipients operating on the territory of the United States of America, the Operator
warrants that they are certified “Privacy Shield” and are considered by the European Commission as providing an adequate level of protection. The list of companies that adhere to the “Privacy
Shield” is available on this website: https://www.privacyshield.gov/welcome .

5.1 Data transmission for the purpose of newsletter service
operation

To be sure that this service works at the desired parameters, we use a third party specialized in the field of e-mail delivery,
respectively the MailChimp service belonging to The Rocket Science Group. The privacy policy of this third party regarding the protection of personal data can be read here:
https://mailchimp.com/legal/privacy

You can always opt out of the newsletter service – either by pressing the “Unsubscribe” button in the received
e-mail, or by sending an email to the address office@cooperativashop.com

5.2. Transmission of data to public institutions, courts of law, as well
as competent authorities to investigate the perpetration of criminal acts

In special cases, when required to do so by law, our company may provide
competent institutions with information on personal data.

5.3. Transmission to other third parties

In order to offer you a pleasant experience in the online environment, we are constantly preoccupied with improving / maintaining the software we use. In this regard, we have concluded development
contracts with companies specialized in the field of programming and software maintenance.

5.4. Social
networks

Our platform uses “plugins” from social network operators. All social networking plugins on our Platform are clearly and distinctly
marked.

5.5. Traffic analysis services

Our platform uses the web analysis services “Google
Analytics” and “Google AdSense” of Google Inc., for statistical purposes.

Our platform uses Google Analytics, a service that analyzes the current
platform provided by Google, Inc. (“Google”), using cookies. More data about this can be found on our cookie policy page

You may refuse the use of
cookies by selecting the appropriate settings of your browser, but in this situation you may not be able to use all the functionalities of our Website. You can also opt out of using Google
Analytics in the future by downloading and installing the Google Analytics Opt-out Browser Addon for your browser. More details here: https://tools.google.com/dlpage/gaoptout?hl=en
.

Note: Further details are available on the Google Analytics Terms of Service and Google Analytics
pages

6. LEGAL BASIS

6.1. Regulation (EU) 2016/679 on the protection of natural persons with regard
to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

Last update: 07.07.2022