The administrator of personal data responsible for their processing is: GRATRANS Gracjan Kurzawski; ul. Lipowa 7; 63:714 Świnków; euroline@o2.pl. Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.
1. Access data and hosting
Our websites can be visited without providing any personal data. For each website call-up, the server automatically saves only so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting Internet service provider (so-called access logs) and documents the page call-up. This data is analyzed exclusively for the purpose of ensuring the proper functioning of our website and improving our offer. This serves to protect our legitimate interest in the optimal, correct presentation of our websites and offers pursuant to Art. 6, paragraph 1, letter f of the GDPR.
Hosting
All access data will be deleted no later than seven days after the end of your visit to our website. The services for hosting and displaying the website are partly provided on our behalf by our service providers as part of a data processing contract. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis for cooperation with them, please contact us. You will find our contact details in the section “Our contact details and your rights”.
2. Collection and processing of data for the purposes of contract execution and contact
2.1 Data processing for the purposes of contract execution
We process the personal data you voluntarily provide when placing an order in order to execute the contract (including inquiries regarding the handling of claims for warranty for defects or guarantees and within the scope of the obligation to inform about necessary updates). The legal basis in this respect is Art. 6 sec. 1 letter b GDPR. Mandatory fields are marked as such because they concern data that is necessary to execute the order and without their provision we are unable to execute it. The data that is collected results directly from the forms into which the data is entered. Further information on the processing of your data, in particular regarding the transfer of data to our service providers for the purpose of order execution, payment and shipping, can be found in the following parts of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted and after the retention periods required under tax regulations and the Accounting Act have elapsed, the data will be deleted (Article 6 paragraph 1 letter c of the GDPR), unless you expressly consent (Article 6 paragraph 1 letter a of the GDPR) to the further use of this data for other purposes or we reserve the right to further use it in cases permitted by law, about which we inform you in this privacy policy.
2.2 Customer account
If, in accordance with Article 6 paragraph 1 letter a of the GDPR, you grant your consent to set up a customer account, we will process your personal data required for this purpose. They will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, send a message to our contact address indicated in the section “Our contact details and your rights” or use the appropriate function in the customer account settings. After deletion of your customer account, the processing of your data will be restricted and after the retention periods specified in tax regulations and the Accounting Act have elapsed, the data will be deleted (Article 6 paragraph 1 letter c of the GDPR), unless you expressly consent (Article 6 paragraph 1 letter a of the GDPR) to the further use of this data or, in accordance with applicable law, we reserve the right to continue using the data for other purposes, about which we inform you in this privacy policy.
2.3 Data processing for contact purposes
As part of customer communication, we process personal data in order to process your enquiries (Article 6, paragraph 1, letter b of the GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they concern data that is necessary to process the enquiry. The data collected results directly from the forms into which the data is entered. After your enquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy.
3. Data processing for the purpose of delivery
In order to execute the contract (Article 6, paragraph 1, letter b of the GDPR), we transfer your data to the shipping company selected by you during the ordering process, which was commissioned to deliver the ordered products.
4. Data processing for the purpose of payment execution
In order to process payments in our online shop, we work with external service providers who handle electronic online payments and pass on your data to the payment service provider you select during the ordering process. This serves to fulfil the contract (Article 6, paragraph 1, letter b of the GDPR).
Data processing for the purpose of preventing abuse and optimising payments.
In some situations, we may provide our service providers with additional information that they can use together with the information required to process payments. These service providers then act on our behalf as processors and provide us with services in the field of preventing abuse and optimising payment processes (e.g. invoicing, analysis of rejected payments, accounting support). In accordance with Article 6, paragraph 1, letter f of the GDPR, this serves to fulfil our legitimate interests in the protection against abuse and fraud and in the effective management of payments.
5. Cookies and similar technologies
General information
In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser when you next visit the website (so-called persistent cookies). Privacy protection of end devices When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user’s end device or access to information that is already stored on his end device does not require the user’s consent.
For functions that are not absolutely necessary, the storage of information on the user’s end device or access to information already stored on his end device requires the user’s consent. Please note that in the event of a lack of consent, some functions or elements of the website may not be fully available. Any consent granted by the user remains valid until you withdraw your consent, configure the settings or reset the corresponding settings on your end device.
Any further data processing using cookies and other technologies We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. the shopping cart function). These technologies process data such as your IP address, time of visit, information about your device and browser, as well as information about the use of our website (e.g. the contents of the shopping cart). This serves in accordance with Art. 6 sec. 1 lit. f GDPR to pursue our legitimate interest in the optimal presentation of our offer.
In addition, we also use technological tools to fulfil the legal obligations to which we are subject (e.g. to prove that we have received consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the relevant legal basis for data processing, can be found in the following sections of this privacy policy.
Our website may also use other technologies that are not individually mentioned in this privacy policy. You can find further information on these technologies and the relevant legal basis for data processing on the Usercentrics consent management platform integrated into our website.
You can access the Usercentrics platform by clicking on the “fingerprint” button in the lower left or right corner of the page.
You will find explanations on how to change your cookie settings in the help menu of your internet browser. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have given us your consent to use certain technological tools (Article 6, paragraph 1, letter a of the GDPR), you may withdraw your consent at any time. To withdraw your consent, please contact us using the contact address provided in the section “Our contact details and your rights”.
Alternatively, you can withdraw your consent by clicking on the “fingerprint” icon in the lower right or left corner of the page. If you reject the use of cookies, the functionality of our website may be limited.
Use of the Usercentrics platform to manage user consent
Our website uses the Usercentrics consent management tool to provide you with information about the cookie-based technologies used on our website and to obtain, manage and document your consent to the processing of your personal data by these technologies. This is in accordance with Article 6, paragraph 1, letter a of the GDPR. c GDPR necessary to fulfil our legal obligation under Article 7 para. 1 GDPR, which stipulates that in the case of processing based on consent, the controller must be able to demonstrate that the data subject has consented to the processing. The Usercentrics Consent Management Tool is a service of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf and on our behalf. When you visit our website, the Usercentrics server saves a so-called server log file (“Log”), which contains your anonymised IP address, the date and time of the visit, information about your device and browser and information about your consents to individual cookies. Your data will be deleted after three years, unless you have expressly consented to the further use of this data in accordance with Article 6 para. 1 lit. a or we reserve the right to further use the data for other purposes in accordance with applicable law, which are legally permissible and about which we inform you in this privacy policy.
6. Use of cookies and similar technological tools
If you have given your consent (Article 6, paragraph 1, letter a of the GDPR), we use the cookies and other similar technological tools of external service providers indicated below on our website. After the purpose of processing has been achieved and the use of the given technological tool has ended, the data collected as part of the use of these tools will be deleted. You may withdraw your consent at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section “Cookies and similar technologies”. Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find their contact details in the section “Our contact details and your rights”.
6.1 Use of Google services
We use the technology tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) indicated below. The information automatically collected by Google technologies regarding your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google technology tools, your address is shortened by the activated IP anonymization before being stored on Google servers. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. Unless otherwise specified for the individual Google technologies described in this privacy policy, the data processing takes place on the basis of a joint data controller agreement with Google pursuant to Art. 26 of the GDPR. Further information on data processing by Google can be found in the privacy policy on the Google website.
Google Analytics
For the purpose of analyzing the use of our website, we use Google Analytics, a web analytics tool from Google that automatically processes your data (IP address, time of visit, information about your device and browser, as well as information about your use of our website) for this purpose and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing within Google Analytics is carried out on the basis of a data processing agreement concluded with Google.
In order to optimize and make our website offer more attractive, we have also activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed within Google Analytics and to use it to improve the products and services provided by Google. Data is shared with Google for this purpose on the basis of an additional agreement concluded between the data controllers. We have no influence on the subsequent processing of the data by Google.
To create and perform A/B tests of our website, we also use the Google Optimize tool, which is an extension of the Google Analytics services.
For web analytics purposes, we also use Google Signals, which is an extension of Google Analytics and enables so-called “cross-device tracking” (identifying users using multiple devices). This means that if your internet-enabled devices are connected to your Google account and you have activated the “personalized advertising” option in your Google account, Google can generate reports on how our website is used (in particular, the number of users using different devices), even if you change devices. We do not process your personal data in this respect; we only receive statistics based on Google Signals functions and technologies. For the purposes of analyzing the use of our website and advertising, we also use the so-called DoubleClick Cookie within the Google Analytics service, which allows your browser to be recognized when using other websites. Google will use this information to compile a report on your activities on our website and to provide other services related to the use of the website.
Google AdSense
Our website promotes advertising space from other providers and advertising networks via Google AdSense. These advertisements are displayed to you in various places on our website. As part of the integration of Google AdSense, when you visit our website, a so-called DoubleClick cookie from Google is stored on your end device, which enables the display of advertisements based on your interests and processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and automatically assigns you a pseudonymous user ID (UserID).
Google Ads
With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, when you visit our website, a remarketing cookie from Google is stored on your device automatically, which enables the display of advertisements based on your interests based on the pages you visit and processes your data (IP address, time of visit, information about your device and browser, as well as information about your use of our website) for this purpose using a pseudonymous identifier (ID). Further data processing only takes place if you have activated the option to personalize ads in your Google account settings. In this case – if you are logged in to Google while visiting our website, Google will use your data together with the data collected within Google Analytics to create and define so-called target group lists for cross-device remarketing purposes.
For web analytics purposes, we use Google Ads Conversion Tracking to measure and analyze your behavior when you visit our website via an ad within the Google Ads tool. Cookies may be used for this purpose and data such as IP address, time of visit, device and browser information, as well as information about your use of our website, e.g. visit to the website or registration for the newsletter, may be processed. Pseudonymized user profiles are then created based on this data.
Google Maps
In order to visually display geographic information, Google Maps will store and process information about your use of the maps and individual functions, including e.g. your IP address and location data. We have no influence on this data processing by Google.
Google reCAPTCHA
In order to protect against spam and to prevent abuse and misuse of our web forms (e.g. by malicious bots), our website has integrated the Google reCAPTCHA tool, which processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and, based on this, uses JavaScript and cookies to analyze your use of our website. Personal data entered by you in individual form fields on our pages will not be read or saved.
YouTube Video Plugin
In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing the video: IP address, time of visit, information about your device and browser.
6.2 Use of Facebook services
Facebook Pixel
We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The scope of the Facebook Pixel functionalities used by us is indicated below. Facebook Pixel automatically collects and stores data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website, e.g. visit to the website or registration for the newsletter). Pseudonymous user profiles are then created based on this data.
As part of the so-called extended data comparison in Facebook Analytics – for comparison purposes, hashed information is also collected and stored that can be used to identify natural persons (e.g. names, e-mail addresses and telephone numbers).
For this purpose, when you visit our website, Facebook Pixel stores a cookie on your device that enables automatic recognition of your browser when visiting other websites using a pseudonymous Cookie ID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the personalisation of advertising. The information automatically collected by Facebook technologies regarding your use of our website is usually transferred to a server of Facebook, Inc. 1601 Willow Road, Menlo Park, California 94025, USA and stored there. The European Commission has not issued an adequacy decision for the USA. To the extent that data transfer to the USA is our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the Facebook privacy policy.
Facebook analytical tools
As part of Facebook Business tools – based on the data collected using the Facebook pixel code regarding your use of our website, statistics on user activity on our website are created. Data processing by Facebook takes place on the basis of a concluded data processing agreement. The analysis of data (statistics regarding website usage) serves to optimize and make our website more attractive.
Facebook Ads (advertisement management)
Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of a given advertising campaign. Facebook is responsible for the precise implementation, and in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint data controllership agreement in accordance with Art. 26 of the GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.
Based on statistics generated using the Facebook Pixel tool regarding the activity of users visiting our websites, we use the Facebook Custom Audience function to broadcast advertisements to the appropriate group of recipients, while defining the profile/characteristics of the target group.
As part of the extended data comparison function (see above), Facebook is the entity processing data on our behalf.
Based on the pseudonymised Cookie ID saved by the Facebook Pixel and the information collected about the activity of users on our website, we create personalised advertising using the Facebook Pixel Remarketing function.
For the purposes of web analytics and optimisation of our offer, we use the Facebook Pixel Conversions function to analyse the activity of users who visit our website via advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data processing agreement.
6.3 Other service providers in the field of analytical and marketing tools
Use of Hotjar for web analytics
For the purpose of analyzing the use of our website – using the web analytics tool Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta (“Hotjar”), when visiting our website, data is automatically collected and stored (your IP address, time of visit, information about your device and browser, as well as information about your use of our website) based on which pseudonymized user profiles are created. Cookies may be used for this purpose. Without separate, express consent – pseudonymized user profiles are not combined with the personal data of the entity to which the pseudonym was assigned. Data processing in connection with the services provided by Hotjar takes place within the framework of a concluded data processing agreement. Use of Pinterest Tag for web analytics and advertising purposes
For web analytics and advertising purposes on Pinterest and on third-party websites – via technology from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”), when you visit our website, data is automatically collected and stored (your IP address, time of visit, information about your device and browser, as well as information about your use of our website), based on which pseudonymous user profiles are created. Cookies are used for this purpose, which, based on the information collected and the websites you visit, then enable the display of advertisements based on your interests. Pinterest combines the information collected with other data from your Pinterest account and uses it to compile reports on user activity on websites and to provide other services related to the use of websites. We have no influence on the processing of data by Pinterest and only receive statistics generated as part of the Pinterest Tag function. This allows us to measure the behavior of users who visit our website via an advertisement placed on Pinterest. The information automatically collected by Pinterest is usually transferred to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107 in the USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing is carried out in accordance with Article 26 of the GDPR on the basis of joint agreements between the joint controllers.
7. Social media
7.1 Social media plugins: Facebook (Meta), Instagram (Meta), Whatsapp
Our website uses so-called social media plugins (buttons). These plugins are accessible via an HTML link, which ensures that when you visit our site containing such plugins (buttons), no automatic, direct connection is established to the servers of the operator of the given social media service. After clicking on one of the buttons (plugins), a new browser window will open displaying the page of the given social media service, where you can confirm the use of the given button, e.g. “Like” or “Share”.
7.2 Our activity on social media: Facebook, Instagram
If you have given your consent to the social network in this regard (Article 6, paragraph 1, letter a of the GDPR), when you visit our account/profile on the aforementioned social network, your data will be automatically collected and stored for web analytics and marketing purposes. Pseudonymous user profiles are created based on this data. They can be used, for example, to place so-called personalized advertisements within and outside the social network that are likely to match your interests. Cookies are usually used for this purpose. Detailed information on the processing and use of your data by the individual social network, as well as information on your rights and the possibility of configuring privacy settings and contact details for submitting inquiries are described in the privacy policies of the individual social network linked below. If you need help in this regard, you can also contact us.
Facebook (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The automatically processed information about your activities and use of our fan page on Facebook (by Meta) is usually transferred to a server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing within the framework of visiting the fan page on Facebook (by Meta) takes place in accordance with Art. 26 GDPR on the basis of joint agreements between the joint controllers, which are available here. Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) is available here. Instagram (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The automatically processed information about your activities and use of our fan page account on Instagram is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing within the framework of visiting the fan page account on Instagram (by Meta) takes place in accordance with Art. 26 GDPR on the basis of joint agreements between the joint controllers. Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) can be found here.
8. Our contact details and your rights
8.1 State of law
The data subjects whose data are processed have the following rights: in accordance with Art. 15 of the GDPR: the right to obtain information about the data processing to the extent specified in this article; in accordance with Art. 16 of the GDPR: the right to have any incorrect or incomplete personal data about you rectified; in accordance with Art. 17 of the GDPR: the so-called “right to be forgotten”, i.e. the right to have your personal data stored with us deleted, provided that their further processing is not necessary: for exercising the right to freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; for the establishment, exercise or defence of claims; in accordance with Art. 18 of the GDPR: the right to restrict the processing of your personal data, provided that: the accuracy of the personal data is disputed by you; the processing is unlawful and you object to their deletion; we no longer need the personal data, but you require them to establish, exercise or defend claims; you have objected to the processing of the data pursuant to Art. 21; 20 GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller; in accordance with Art. 77 GDPR: the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office “UODO”). Right to object If we process personal data in the manner described in this privacy policy in order to protect our legitimate interests, you may object to the processing of your data for this purpose – with effect for the future. If the processing takes place for direct marketing purposes, you may exercise the right to object at any time. If the processing takes place for other purposes, you only have the right to object for reasons arising from your particular situation. After you exercise your right to object, we will not continue to process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests and rights, or if the processing is to pursue, exercise or defend legal claims. The previous sentence does not apply when data is processed for direct marketing purposes. In such a case, we will always cease further processing of your personal data after you have expressed your objection.
8.2 Contact Us
If you have any questions regarding the collection, processing and use of your personal data, or if you wish to request information, rectification, restriction of processing or deletion of data, or to revoke consent or object to the use of certain data, please contact the data controller indicated at the beginning of this policy directly.
The personal data administrator responsible for their processing is:
GRATRANS Gracjan Kurzawski
ul. Lipowa 7
63-714 Świnków
euroline@o2.pl
Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.
1. Access data and hosting
You can visit our websites without providing any personal data. For each website call-up, the server automatically saves only so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting Internet service provider (so-called access logs) and documents the page call-up. This data is analyzed exclusively for the purpose of ensuring the proper functioning of our website and improving our offer. This serves to protect our legitimate interest in the optimal, correct presentation of our websites and offers pursuant to Art. 6 para. 1 lit. f GDPR.
Hosting
All access data will be deleted no later than seven days after the end of your visit to our website.
The services for hosting and displaying the website are partly provided on our behalf by our service providers as part of a data processing contract. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis for cooperation with them, please contact us. You will find our contact details in the section “Our contact details and your rights”.
2. Collection and processing of data for the purposes of contract execution and contact
2.1 Data processing for the purposes of contract execution
We process the personal data you voluntarily provide when placing an order in order to perform the contract (including inquiries regarding the handling of claims for warranty for defects or guarantees and the obligation to provide information on necessary updates). The legal basis in this respect is Article 6, paragraph 1, letter b of the GDPR. Mandatory fields are marked as such because they concern data that are necessary to perform the order and without their provision we are unable to perform it. What data is collected results directly from the forms into which the data is entered.
Further information on the processing of your data, in particular the transfer of data to our service providers for the purpose of order processing, payment and shipping, can be found in the following sections of this privacy policy. After the contract has been fulfilled, the processing of your data will be restricted and after the retention periods required under tax regulations and the Accounting Act have elapsed, the data will be deleted (Article 6 paragraph 1 letter c GDPR), unless you expressly consent (Article 6 paragraph 1 letter a GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy in such a case.
2.2 Customer account
If, in accordance with Article 6 paragraph 1 letter a of the GDPR, you grant your consent to set up a customer account, we will process your personal data required for this purpose. They will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, send a message to our contact address indicated in the section “Our contact details and your rights” or use the appropriate function in the customer account settings. After deletion of your customer account, the processing of your data will be restricted and after the retention periods specified in tax regulations and the Accounting Act have elapsed, the data will be deleted (Article 6 paragraph 1 letter c of the GDPR), unless you expressly consent (Article 6 paragraph 1 letter a of the GDPR) to the further use of this data or, in accordance with applicable law, we reserve the right to continue using the data for other purposes, about which we inform you in this privacy policy.
2.3 Data processing for contact purposes
As part of customer communication, we process personal data in order to process your enquiries (Article 6, paragraph 1, letter b of the GDPR). You provide us with this data voluntarily when contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because they concern data that is necessary to process the enquiry. The data collected results directly from the forms into which the data is entered. After your enquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6, paragraph 1, letter a of the GDPR) to the further use of this data for other purposes or we reserve the right to further use it in legally permitted cases, about which we will inform you in this privacy policy.
3. Data processing for the purpose of delivery
In order to execute the contract (Article 6, paragraph 1, letter b of the GDPR), we transfer your data to the shipping company selected by you during the ordering process, which was commissioned to deliver the ordered products.
4. Data processing for the purpose of payment execution
In order to process payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the payment service company you selected during the ordering process. The above serves to perform the contract (Article 6, paragraph 1, letter b of the GDPR).
Data processing for the purpose of preventing abuse and optimizing payments
In some cases, we may provide our service providers with additional information that they may use together with the information required to process payments. These service providers then act on our behalf as processors and provide us with services to prevent abuse and optimize payment processes (e.g. invoicing, analysis of rejected payments, accounting support). In accordance with Article 6 (1) (f) of the GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.
5. Cookies and similar technologies
General information
In order to make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser when you next visit the website (so-called persistent cookies).
Privacy protection for end devices
When using our online offer, we use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website. In this respect, the storage of information on the user’s end device or access to information already stored on his end device does not require the user’s consent.
For functions that are not strictly necessary, storing information on the user’s end device or accessing information already stored on the user’s end device requires the user’s consent. Please note that in the absence of consent, some functions or elements of the website may not be fully available. Any consent granted by the user remains valid until the consent is withdrawn, the settings are configured or the relevant settings on the end device are reset.
Any further processing of data using cookies and other technologies
We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. the shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about your device and browser, as well as information about the use of our website (e.g. the contents of the shopping cart). This serves, in accordance with Art. 6 para. 1 letter f GDPR, to pursue our legitimate interest in the optimal presentation of our offer.
In addition, we also use technological tools to comply with legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the relevant legal bases for data processing, can be found in the following sections of this privacy policy.
In the help menu of your web browser you will find explanations on how to change cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
7. Use of cookies and similar technological tools
If you have given your consent (Article 6, paragraph 1, letter a of the GDPR), we use the cookies and other similar technological tools of external service providers indicated below on our website. After the purpose of processing has been achieved and the use of the given technological tool has ended, the data collected as part of the use of these tools will be deleted. You may withdraw your consent at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section “Cookies and similar technologies”. Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You will find their contact details in the section “Our contact details and your rights”.
7.1 Use of Google services
Korzystamy z wskazanych poniżej narzędzi technologicznych firmy Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irlandia (“Google”). Informacje zbierane automatycznie przez technologie firmy Google dotyczące korzystania z naszej strony internetowej są zazwyczaj przekazywane na serwer Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA i tam przechowywane. Komisja Europejska nie wydała dla USA decyzji w sprawie odpowiedniego stopnia ochrony danych. Nasza współpraca opiera się na standardowych klauzulach ochrony danych przyjętych przez Komisję Europejską. W przypadku gdy w ramach użycia narzędzi technologicznych Google dochodzi do przetwarzania Państwa adresu IP, wówczas dzięki włączonej anonimizacji IP Państwa adres jest skracany przed zapisaniem na serwerach Google. Tylko w wyjątkowych przypadkach pełny adres IP zostanie przesłany na serwer Google i tam skrócony. O ile nie określono inaczej dla poszczególnych technologii Google opisanych w niniejszej polityce prywatności, przetwarzanie danych odbywa się na podstawie zawartej z Google umowy o współadministrowanie danymi osobowymi zgodnie z art. 26 RODO. Dalsze informacje dotyczące przetwarzania danych przez Google znajdą Państwo w polityce prywatności na stronie firmy Google.
Google Analytics
For the purpose of analyzing the use of our website, we use Google Analytics, a web analytics tool from Google that automatically processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and creates pseudonymous user profiles based on them. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing within the Google Analytics service is based on a data processing agreement concluded with Google.
In order to optimize and make our website offering more attractive, we have also activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed within Google Analytics and to use it to improve the products and services provided by Google. The data is shared with Google for this purpose on the basis of an additional agreement concluded between the data controllers. We have no influence on the subsequent processing of the data by Google.
We also use Google Optimize, an extension of Google Analytics, to create and perform A/B tests of our website.
For web analytics purposes, we also use the Google Signals tool, which is an extension of Google Analytics services and enables so-called “cross-device tracking” (identifying users using multiple devices). This means that if your internet-enabled devices are connected to your Google account and you have activated the “personalized advertising” option in your Google account, then Google can generate reports on how our site is used (in particular, the number of users using different devices), even if you change devices. We do not process your personal data in this respect, we only receive statistics based on Google Signals functions and technologies.
Google AdSense
Our website promotes advertising space from other providers and advertising networks via Google AdSense. These advertisements are displayed to you in various places on our website. As part of the integration of Google AdSense, when you visit our website, a so-called DoubleClick cookie from Google is stored on your end device, which enables the display of advertising based on your interests and processes your data for this purpose (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and automatically assigns you a pseudonymous user ID (UserID).
Google Ads
With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, when you visit our website, a Google remarketing cookie is automatically saved on your device, which enables the display of interest-based advertising based on the websites you visit, processing your data (IP address, time of visit to the website, information about your device and browser, as well as information about your use of our website) using a pseudonymous identifier (ID). Further data processing only takes place if you have activated the option to personalize ads in your Google account settings. In this case – if you are logged into Google while visiting our website, Google will use your data together with the data collected within Google Analytics to create and define so-called target group lists for cross-device remarketing purposes.
For web analytics purposes, we use Google Ads Conversion Tracking to measure and analyze your behavior when you visit our website via a Google Ads ad. Cookies may be used for this purpose and data such as IP address, time of visit, device and browser information, as well as information about the use of our website, e.g. website visit or newsletter registration, may be processed. Pseudonymized user profiles are then created based on this data.
Google Maps
For the visual presentation of geographic information, Google Maps will store and process information about your use of the maps and individual functions, including your IP address and location data. We have no influence on this data processing by Google.
Google reCAPTCHA
In order to protect against spam and to prevent abuse and misuse of our web forms (e.g. by using malicious bots), our website has integrated the Google reCAPTCHA tool, which processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information about the use of our website) and, on the basis of this, uses JavaScript and cookies to analyze your use of our website. Personal data entered by you in individual form fields on our pages will not be read or saved.
7.2 Use of Facebook services
Facebook Pixel
We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The scope of the Facebook Pixel functionalities used by us is indicated below. Facebook Pixel automatically collects and stores data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website, e.g. visit to the website or registration for the newsletter). Pseudonymous user profiles are then created based on this data.
As part of the so-called extended data comparison in Facebook Analytics – for comparison purposes, hashed information is also collected and stored that can be used to identify natural persons (e.g. names, e-mail addresses and telephone numbers).
For this purpose, when you visit our website, Facebook Pixel stores a cookie on your device that enables automatic recognition of your browser when visiting other websites using a pseudonymous Cookie ID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for the purpose of personalising advertising. The information automatically collected by Facebook technologies regarding your use of our website is usually transferred to a server of Facebook, Inc. 1601 Willow Road, Menlo Park, California 94025, USA and stored there. The European Commission has not issued an adequacy decision for the USA. To the extent that data transfer to the USA is our responsibility, our cooperation is based on the standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the Facebook privacy policy.
Facebook Analytics Tools
As part of Facebook Business tools – based on the data collected using the Facebook pixel code regarding your use of our website, statistics of user activity on our website are created. Data processing by Facebook takes place on the basis of a concluded data entrustment agreement. Data analysis (statistics regarding website use) serves to optimize and make our website more attractive.
Facebook Ads (ad management)
Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint data controller agreement pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.
Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular for the decision to display a given advertisement to individual users. Unless otherwise specified for individual functions and tools, data processing takes place on the basis of a joint data controller agreement pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transfer to Facebook Ireland. This does not include the subsequent processing of data by Facebook Ireland.
Based on the pseudonymous Cookie ID stored by Facebook Pixel and the information collected about user activities on our website, we create personalised advertising via the Facebook Pixel Remarketing function.
For the purposes of web analytics and optimisation of our offer – using the Facebook Pixel Conversions function, we analyse the activities of users who visit our website via advertisements displayed as part of the Facebook Ads service. Data processing by Facebook takes place on the basis of a concluded data processing agreement.
7.3 Other service providers in the field of analytical and marketing tools
Using Hotjar for web analytics purposes
For the purposes of analyzing the use of our website – using the web analytics tool Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta (“Hotjar”), when visiting our website, data is automatically collected and stored (your IP address, time of visit, information about your device and browser, as well as information about your use of our website), based on which pseudonymized user profiles are created. Cookies may be used for this purpose. Without separate, express consent – pseudonymized user profiles are not combined with the personal data of the entity to which the pseudonym was granted. Data processing in connection with the services provided by Hotjar takes place within the framework of a concluded data processing agreement.
8. Social Media
8.1 Social media plugins: Facebook (Meta), Instagram (Meta), Whatsapp
Our website uses so-called social media plugins (buttons). These plugins are accessible via an HTML link, which ensures that when you visit our website containing such plugins (buttons), no automatic, direct connection is established to the servers of the operator of the social media service. When you click on one of the buttons (plugins), a new browser window opens displaying the page of the social media service in question, where you can confirm the use of the button, e.g. “Like” or “Share”.
8.2 Our activity on social media: Facebook, Instagram
If you have given your consent to the social network in this regard (Article 6, paragraph 1, letter a of the GDPR), when you visit our account/profile on the aforementioned social network, your data will be automatically collected and stored for web analytics and marketing purposes. Pseudonymous user profiles are created based on this data. They can be used, for example, to place so-called personalized advertisements within and outside the social network that are likely to match your interests. Cookies are usually used for this purpose. Detailed information on the processing and use of your data by the individual social network, as well as information on your rights and the possibility of configuring privacy settings, as well as contact details for submitting inquiries, are described in the privacy policies of the individual social network linked below. If you need help in this regard, you can also contact us.
Facebook (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The automatically processed information about your activities and use of our fan page on Facebook (by Meta) is usually transferred to a server of Meta Platforms Ireland, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing within the framework of visiting the fan page on Facebook (by Meta) takes place in accordance with Art. 26 GDPR on the basis of joint agreements between the joint controllers, which are available here . Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) is available here .
Instagram (by Meta) is a social network provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The automatically processed information about your activities and use of our fan page account on Instagram is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025 in the USA and saved there. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on the standard data protection clauses adopted by the European Commission. Data processing within the framework of visiting the fan page account on Instagram (by Meta) takes place in accordance with Art. 26 GDPR on the basis of joint agreements between the joint controllers. Further information on the processing of your personal data within the framework of visiting the fan page on Facebook (information on the page statistics function) can be found here.
9. Our contact details and your rights
9.1 State of law
Persons whose data is processed have the following rights:
- in accordance with Article 15 of the GDPR: the right to obtain information about data processing within the scope specified in that article;
- in accordance with Article 16 of the GDPR: the right to rectify your inaccurate or incomplete personal data;
- in accordance with Article 17 of the GDPR: the so-called “right to be forgotten”, i.e. the right to delete your personal data stored by us, provided that their further processing is not necessary:
- to exercise the right to freedom of expression and information;
- to comply with a legal obligation;
- for reasons of public interest;
- to establish, pursue or defend legal claims;
- in accordance with Article 18 of the GDPR: the right to restrict the processing of personal data, provided that:
- the accuracy of this personal data is disputed by you;
- the processing is unlawful and you oppose their deletion;
- we no longer need the personal data but you require it to establish, pursue or defend legal claims;
- you have objected to the processing of your data pursuant to Article 21;
- in accordance with Article 20 of the GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller;
- in accordance with Article 77 of the GDPR: the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office “UODO”).
| Right to object If we process personal data in the manner described in this privacy policy in order to safeguard our legitimate interests, you may object to the processing of your data for this purpose – with effect for the future. If processing takes place for direct marketing purposes, you may exercise your right to object at any time. If processing takes place for other purposes, you only have the right to object for reasons arising from your particular situation. After you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests and rights, or if the processing is for the purpose of asserting, exercising or defending legal claims. The previous sentence does not apply where data is processed for direct marketing purposes. In such a case, we will always cease further processing of your personal data after you have expressed your objection. |
9.2 Contact Us
If you have any questions regarding the collection, processing and use of your personal data, or if you wish to request information, rectification, restriction of processing or deletion of data, or to revoke consent or object to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.