Privacy Policy

Privacy Policy

The personal data administrator responsible for their processing is:
Maciej Rogulski
Jana Kasprowicza 12d
Lodz 92-781
[email protected]

Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal data. For each website call-up, the server automatically saves only so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting Internet service provider (so-called access logs) and documents the page call-up. This data is analyzed exclusively for the purpose of ensuring the proper functioning of our website and improving our offer. This serves to protect our legitimate interest in the optimal, correct presentation of our websites and offers pursuant to Art. 6 para. 1 lit. f GDPR.

Hosting

All access data will be deleted no later than one month after the end of your visit to our website.

The services for hosting and displaying the website are partly provided on our behalf by our service providers as part of a data processing contract. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis for cooperation with them, please contact us. You will find our contact details in the section "Our contact details and your rights".

2. Collection and processing of data for the purposes of contract execution and contact

2.1 Data processing for the purposes of contract performance

We process the personal data you voluntarily provide when placing an order in order to perform the contract (including inquiries regarding the handling of claims for warranty for defects or guarantees and the obligation to provide information on necessary updates). The legal basis in this respect is Article 6, paragraph 1, letter b of the GDPR. Mandatory fields are marked as such because they concern data that are necessary to perform the order and without their provision we are unable to perform it. What data is collected results directly from the forms into which the data is entered.

Further information on the processing of your data, in particular the transfer of data to our service providers for the purpose of order processing, payment and shipping, can be found in the following sections of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted and after the retention periods required under tax regulations and the Accounting Act have expired, the data will be deleted (Article 6 paragraph 1 letter c GDPR), unless you expressly consent (Article 6 paragraph 1 letter a GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy.

Merchandise management system

We also use an external goods management system to process orders and execute the contract. Our service providers provide us with services in this regard under a data processing agreement. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find their contact details in the section "Our contact details and your rights".

2.2 Customer account

If, in accordance with Art. 6 sec. 1 lit. a GDPR, you give your consent to set up a customer account, we will process your personal data required for this purpose. They will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the customer account settings. After deletion of your customer account, the processing of your data will be restricted and after the retention periods specified in tax regulations and the Accounting Act have elapsed, the data will be deleted (Art. 6 sec. 1 lit. c GDPR), unless you expressly consent (Art. 6 sec. 1 lit. a GDPR) to the further use of this data or, in accordance with applicable law, we reserve the right to continue using the data for other purposes, about which we inform you in this privacy policy.

2.3 Data processing for contact purposes

As part of customer communication, we process personal data in order to process your enquiries (Article 6, paragraph 1, letter b of the GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they concern data that is necessary to process the enquiry. The data collected results directly from the forms into which the data is entered. After your enquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy.

3. Data processing for the purpose of delivery

In order to perform the contract (Article 6, paragraph 1, letter b of the GDPR), we transfer your data to the shipping company you selected during the ordering process, which was commissioned to deliver the ordered products. If you have any questions about our service providers and the basis for cooperation with them, please contact us. You can find our contact details in the section "Our contact details and your rights".

4. Data processing for the purpose of payment execution

In order to process payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the payment service company you selected during the ordering process. The above serves to perform the contract (Article 6, paragraph 1, letter b of the GDPR).

Data processing for the purpose of preventing abuse and optimizing payments

In some cases, we may provide our service providers with additional information that they may use together with the information required to process payments. These service providers then act on our behalf as processors and provide us with services to prevent abuse and optimize payment processes (e.g. invoicing, analysis of rejected payments, accounting support). In accordance with Article 6 (1) (f) of the GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.

5. Marketing channels: e-mail

If you subscribe to our newsletter, we will use the data you provide to us on the basis of your consent (Article 6, Section 1, Letter a of the GDPR) to regularly send you our newsletter by electronic means.

You can unsubscribe from the newsletter at any time. To do this, send a message to our contact address indicated in the section "Our contact details and your rights" or use the unsubscribe link provided in the newsletter. After unsubscribing from the newsletter recipient list, we will delete your e-mail address, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or, in accordance with applicable law, we reserve the right to continue using the data, about which we inform you in this privacy policy.

The newsletter is sent as part of the entrustment of data processing on our behalf by an external service provider. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

Sending an invitation to leave a review of your purchase

If you have given your consent to this during or after placing your order (Article 6, paragraph 1, letter a of the GDPR), we will use your e-mail address to send you an electronic invitation to evaluate a purchase made in our shop. The opinion/rating is issued via the opinion system we use. You can withdraw your consent at any time by sending a message with information about the withdrawal of consent to our contact address specified in the section "Our contact details and your rights". Alternatively, you can also use the unsubscribe link included in the message with the invitation to submit an opinion. If you withdraw your consent, we will remove your e-mail address from the newsletter recipient list. Your e-mail address will be deleted from our systems unless you have given your unambiguous consent (Article 6, paragraph 1, letter a of the GDPR) to its further use for other purposes or, in accordance with applicable law, we have reserved the right to its further use for other purposes (e.g. for the purposes of fulfilling the contract), in which case we inform you about it in this privacy policy.

6. Cookies and similar technologies

General information

In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser when you next visit the website (so-called persistent cookies).

Privacy protection for end devices
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user's end device or access to information already stored on his end device does not require the user's consent.

For functions that are not strictly necessary, storing information on the user's end device or accessing information already stored on the user's end device requires the user's consent. Please note that in the absence of consent, some functions or elements of the website may not be fully available. Any consent granted by the user remains valid until the consent is withdrawn, the settings are configured or the relevant settings on the end device are reset.

Other cases of data processing using cookies and other technologies

We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. the shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about your device and browser, as well as information about the use of our website (e.g. the contents of the shopping cart). This serves, in accordance with Art. 6 para. 1 letter f GDPR, to pursue our legitimate interest in the optimal presentation of our offer.

In addition, we also use technological tools to comply with legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the relevant legal bases for data processing, can be found in the following sections of this privacy policy.

In the help menu of your web browser you will find explanations on how to change cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have given us your consent to use certain technological tools (Article 6, paragraph 1, letter a of the GDPR), you may withdraw your consent at any time. To withdraw your consent, please contact us using the contact address provided in the section "Our contact details and your rights".

7. Use of cookies and similar technological tools

On our website, we use the cookies and other similar tools/technologies of external service providers indicated below. Unless otherwise indicated in the description of the individual technologies, their use takes place on the basis of your consent within the meaning of Art. 6 sec. 1 lit. a GDPR. Once the purpose of processing has been achieved and the use of the tool/technology has ended, the data collected as part of the use of these tools/technologies will be deleted. You may withdraw your consent at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis for our cooperation with them, please contact us. Contact details can be found in the section "Our contact details and your rights".

7.1 Using Google services

We use the technology tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") indicated below. The information automatically collected by Google technologies regarding your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise specified for the individual Google technologies described in this privacy policy, the data processing is based on a joint data controller agreement with Google in accordance with Art. 26 of the GDPR. Further information on data processing by Google can be found in privacy policy on the Google website.

Our service providers are headquartered in and/or use servers located in countries outside the EU and EEA for which the European Commission has issued a so-called adequacy decision stating an adequate level of data protection.

Our service providers are based and/or use servers located in countries outside the EU and EEA. The European Commission has not issued decisions regarding the adequacy of data protection in these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Google Analytics

For the purpose of analyzing the use of our website, we use Google Analytics, a web analytics tool from Google that automatically processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. When a user visits our website from the EU, their IP address is stored on a server located in the EU to obtain location data and then immediately deleted before the traffic is redirected to further Google servers. Data processing within the Google Analytics service is carried out on the basis of a data processing agreement concluded with Google.

In order to optimize and make our website offer more attractive, we have also activated data sharing settings for "Google products and services". This allows Google to access the data collected and processed within Google Analytics and use it to improve the products and services provided by Google. The data is shared with Google for this purpose on the basis of an additional agreement between the data controllers. We have no influence on the subsequent processing of the data by Google.

For web analytics purposes we also use the tool Google Signals, which is an extension of Google Analytics services and enables so-called "cross-device tracking" (identifying users using multiple devices). This means that if your internet-enabled devices are connected to your Google account and you have activated the "personalized advertising" option in your Google account, then Google can generate reports on how our website is used (in particular on the number of users using different devices), even if you change devices. We do not process your personal data in this respect, we only receive statistics based on the functions and technologies of Google Signals.

If you do not consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, no cookies will be read or stored on your end device. The data processing described in the previous paragraphs does not take place. In order to fill gaps in the statistical analysis of the website by means of behavior and conversion modeling, pings with data (so-called user agent, information on user behavior, screen resolution, IP address) are sent to Google.

Google Ads

With the help of Google Ads we promote our website in search results and on third-party websites. For this purpose, when you visit our website, a cookie will be automatically saved on your device remarketing cookie Google, which enables the display of interest-based advertising based on the websites you visit by processing your data (IP address, time of visit to the website, information about your device and browser, as well as information about your use of our website) using a pseudonymous identifier (ID). Further data processing only takes place if you have activated the option of personalizing ads in your Google account settings. In this case - if you are logged in to Google while visiting our website, Google will use your data together with the data collected within Google Analytics to create and define so-called target group lists for cross-device remarketing purposes.

For web analytics purposes we use the tool Google Ads Conversion Tracking, to measure and analyze your behavior when you visit our website via an advertisement within the Google Ads tool. Cookies may be used for this purpose and data such as IP address, time of visit, information about the device and browser, as well as information about the use of our website, e.g. visit to the website or registration for the newsletter, may be processed. Pseudonymized user profiles are then created based on this data.

Google reCAPTCHA

In order to protect against spam and to prevent abuse and misuse of our web forms (e.g. by using malicious bots), our website has integrated the Google reCAPTCHA tool, which processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website) and, on the basis of this, uses JavaScript and cookies to analyze your use of our website. Personal data entered by you in individual form fields on our pages will not be read or saved.

Google Fonts

In order to ensure a consistent presentation of the content on our websites, a script called "Google Fonts" is integrated into our website, which processes your data (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website). We have no influence on the above data processing by Google.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing the video: IP address, time of visit, information about the user's device and browser.

7.2 Using Facebook services

Facebook Pixel

We use the Facebook Pixel tool provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" also known as "Meta Platforms Ireland"). The scope of the functionalities we use is set out below. The Facebook pixel automatically collects and stores data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website, e.g. visit to the website or registration for the newsletter). Pseudonymous user profiles are then created based on this data. As part of the so-called extended data comparison in Facebook Analytics - for comparison purposes, hashed information is also collected and stored by which natural persons can be identified (e.g. names, e-mail addresses and telephone numbers).
For this purpose, when you visit our website, the Facebook Pixel stores a cookie on your device that enables automatic recognition of your browser using a pseudonymized cookie ID when you visit other websites. Facebook (by Meta) will link this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the purpose of personalizing advertising. The information automatically collected by Facebook (by Meta) technologies about your use of our website is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Further information on data processing by Facebook can be found in Facebook's privacy policy (by Meta). Our service providers have their headquarters and/or use servers in countries for which the European Commission has issued decisions confirming an adequate level of data protection. Our service providers are headquartered in: USA, Canada, Japan, South Korea, New Zealand, Great Britain, Argentina. The decision confirming an adequate level of data protection for the USA applies as a basis for transferring data to third countries, provided that the service provider has been certified. The certificate has been obtained. Our service providers have their headquarters and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
The European Commission has not issued decisions regarding the adequacy of data protection in relation to these countries. Data transfers within the framework of our cooperation with service providers from these countries are based on the following safeguards: standard data protection clauses of the European Commission.

Facebook Analytics Tools

As part of Facebook Business tools – based on the data collected using the Facebook pixel code regarding your use of our website, statistics of user activity on our website are created. Data processing by Facebook takes place on the basis of a concluded data entrustment agreement. Data analysis (statistics regarding website use) serves to optimize and make our website more attractive.

Facebook Ads (Ad Management)

Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint data controller agreement pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.

Based on statistics generated by the Facebook Pixel tool regarding the activity of users visiting our websites, we conduct the following activities via the function: Facebook Custom Audience broadcasting advertisements to the appropriate target group, while defining the profile/characteristics of the target group. As part of the extended data matching function (see above), Facebook is the entity processing data on our behalf.

Based on the pseudonymous Cookie ID stored by the Facebook Pixel and the information collected about user activities on our website, we create a function Facebook Pixel Remarketing personalized advertising.

For the purposes of web analytics and optimisation of our offer – using the function Facebook Pixel Conversions we analyze the activity of users who visit our website via advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data transfer agreement.

8. Social media

8.1 Social media plug-ins: Facebook (by Meta), Instagram (by Meta), Pinterest

Our website uses so-called social media plugins (buttons). These plugins are accessible via an HTML link, which ensures that when you visit our website containing such plugins (buttons), no automatic, direct connection is established to the servers of the operator of the social media service. When you click on one of the buttons (plugins), a new browser window opens displaying the page of the social media service in question, where you can confirm the use of the button, e.g. "Like" or "Share".

8.2 Our activity on social media: X (formerly: Twitter), Instagram (by Meta), YouTube

If you have given the social networking site consent in this regard (Article 6, paragraph 1, letter a of the GDPR), your data will be automatically collected and stored when you visit our account/profile on the aforementioned social networking sites for the purposes of web analytics and marketing. Pseudonymous user profiles are created based on this data. They can be used, for example, to place so-called personalized advertisements within and outside social networking sites that are likely to match your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social media portals, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for submitting inquiries are described in the privacy policies of the individual social media portals linked below. If you need help in this regard, you can also contact us.

X is a social network provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("X"). The automatically processed information about your activities and use of our profile on X is usually transferred to a server of X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103 in the USA and stored there

Instagram (by Meta) is a social network offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The automatically processed information about your activities and use of our fan page account on Instagram is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and saved there. The data processed within the framework of the visit to the fan page account on Instagram (by Meta) is carried out in accordance with Art. 26 GDPR on the basis of the joint agreements concluded by the joint controllers. Further information on the processing of your personal data within the framework of the visit to the fan page on Facebook (information on the page statistics function) is available at here.

Our service providers have their headquarters and/or use servers in countries for which the European Commission has issued decisions confirming an adequate level of data protection. The headquarters of our service providers are located in: USA, Canada, Japan, South Korea, New Zealand, Great Britain, Argentina.

The decision on the adequacy of data protection for the USA applies as a basis for transferring data to third countries, provided that the service provider in question has been certified. The certificate has been obtained.

Our service providers are headquartered in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
The European Commission has not issued decisions regarding the adequacy of data protection in relation to these countries. Data transfers within the framework of our cooperation with service providers from these countries are based on the following safeguards: standard data protection clauses adopted by the European Commission.

YouTube is a social networking service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The automatically processed information about your activities and use of our YouTube profile is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043 in the USA and stored there.

9. Our contact details and your rights

9.1 Your rights

Persons whose data is processed have the following rights:

in accordance with Article 15 of the GDPR: the right to obtain information about data processing within the scope specified in that Article;
in accordance with Article 16 of the GDPR: the right to rectify your inaccurate or incomplete personal data;
in accordance with Article 17 of the GDPR: the so-called "right to be forgotten", i.e. the right to delete your personal data stored with us, unless their further processing is necessary:
- to exercise the right to freedom of expression and information;
- to comply with a legal obligation;
- for reasons of public interest;
- to establish, pursue or defend legal claims;
in accordance with Article 18 of the GDPR: the right to restrict the processing of personal data, provided that:
- the accuracy of this personal data is disputed by you;
- the processing is unlawful and you oppose their deletion;
- we no longer need the personal data but you require it to establish, pursue or defend legal claims;
- you have objected to the processing of your data pursuant to Article 21;
in accordance with Article 20 of the GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller;
in accordance with Article 77 of the GDPR: the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office "UODO").

The right to object

If we process personal data in the manner described in this privacy policy in order to protect our legitimate interests, you may object to the processing of your data for this purpose - with effect for the future. If the processing is for direct marketing purposes, you may exercise your right to object at any time. If the processing is for other purposes, you only have the right to object for reasons arising from your particular situation.

Once you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests and rights, or the processing is for the purpose of asserting, exercising or defending legal claims.

The previous sentence does not apply when the data is processed for direct marketing purposes. In such a case, we will always cease further processing of your personal data after you have expressed your objection.

9.2 Contact us

If you have any questions regarding the collection, processing and use of your personal data, or if you wish to request information, rectification, restriction of processing or deletion of data, or to revoke consent or object to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.