Privacy Policy

Contents:

§ 1 General provisions
§ 2 Personal Data Administrator
§ 3 Contact details
§ 4 Principles of personal data processing
§ 5 Purposes and legal basis for personal data processing
§ 6 Period of storage of personal data
§ 7 Categories of personal data
§ 8 Cookies
§ 9 Data Sharing
§ 10 Customer Rights

1. This Privacy Policy defines the principles of processing and protection of personal data of Customers using the online store available at https://sportowybutik.pl (hereinafter referred to as the "Online Store").
2. This Privacy Policy constitutes the fulfillment of the information obligation incumbent on the Controller in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

The Administrator of Personal Data of Customers of the Online Store is DEWMAR SC with its registered office at 181 Środkowa Street in Białka Tatrzańska (34-405), Tax Identification Number (NIP): 7361704140, (hereinafter referred to as the "Administrator").

You can contact the Administrator via e-mail: info@sportowybutik.pl or in writing to the following address: Sportowy Butik, ul. Środkowa 181, Białka Tatrzańska 34-405.

1. The Administrator processes Customers' personal data in accordance with the provisions of the GDPR.
2. The Controller applies technical and organisational measures required by EU law to ensure the protection of personal data being processed and to secure personal data against disclosure to unauthorised persons, takeover by unauthorised persons, processing in violation of the regulations and alteration, loss or destruction.
3. The Administrator declares that the provision of data marked as required in the Online Store is voluntary, but necessary to use the functionalities, including the creation and management of a Customer account and the placement and fulfillment of an order.
4. The Customer may consent to receiving commercial information from the Administrator, including via electronic means of communication, and to the use of telecommunications terminal equipment for marketing purposes. Expressing these consents is voluntary and is not a condition for order fulfillment or maintaining a Customer account in the Online Store.

1. Customers' personal data will be processed for the following purposes:
a) maintaining the Customer's account in the Online Store (Article 6, paragraph 1, letter b of the GDPR),
b) fulfillment of orders in the Online Store (Article 6, paragraph 1, letter b of the GDPR),
c) providing a newsletter service (Article 6, paragraph 1, letter b of the GDPR),
d) direct marketing of own services and products, with the exception of the newsletter service, which is a legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR),
e) responding to a message sent via the contact form (Article 6, paragraph 1, point a) of the GDPR, i.e. consent expressed by initiating contact),
f) implementation of the complaint or contract withdrawal process (Article 6, paragraph 1, letter b of the GDPR),
g) analytical research, consisting in particular in the study and analysis of traffic on our website for the purpose of collecting statistics, which is the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR),
h) archival (evidence) purposes in the event of a legal need to prove facts, which is a legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR),
i) possible determination, investigation or defence against claims constituting the implementation of the legitimate interest of the Controller (Article 6 paragraph 1 letter f of the GDPR).

1. Customer data will be stored for the following period:
a) data relating to the management of the Customer's account - for the period of its maintenance in the Online Store and no longer than until the Customer requests its deletion,
b) data related to the execution of orders - for a period of 5 years from the end of the year in which the sale took place, unless their further storage is justified by the limitation period for claims, 
c) running the newsletter service – until you unsubscribe from the newsletter,
d) data related to the implementation of marketing activities – until an objection is raised,
e) data related to the response to an inquiry – until the correspondence is conducted or the consent is withdrawn, unless further storage of the data is justified by an overriding interest of the Controller, e.g. defense against possible claims.
f) data related to the implementation of the complaint or withdrawal process - for a period of 5 years from the end of the year in which the complaint was considered or the contract was withdrawn,
g) keeping statistics – until an objection is raised, but no longer than for a period of 50 months from the time of the Customer's last activity on the website
h) archival purposes – for the period necessary to achieve this purpose,
i) establishing, pursuing or defending against claims - for the period necessary to achieve this purpose.

1. The Administrator collects, processes and stores the following Customer data: 
a) in connection with the creation of a Customer account: e-mail address, name and surname, address, telephone number, and in the case of entrepreneurs also the Tax Identification Number and company name;
b) in connection with placing an order: e-mail address, name and surname, address, telephone number, and in the case of entrepreneurs also the Tax Identification Number and company name;
c) in connection with sending a message via the contact form: e-mail address, name and surname and telephone number;
d) in connection with the provision of the newsletter service: name and e-mail address.
2. When using the Online Store, the Administrator automatically collects and stores information such as: IP address, request URL, device identifier, amount of time spent on individual pages, browser type, browser language, date and time of using the website, screen resolution, type and version of the operating system, and other such information.

1. The Online Store uses small files called cookies. They are stored on the end device of the person visiting the Online Store, if the web browser allows it.
2. Cookies are computer data, specifically text files, stored on the Customer's end device and intended for use with the Online Store. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique number.
3. Cookies are used for the following purposes:
a) recognizing the device used by the Customer in order to properly display the content of the website,
b) creating statistics that help understand how customers use websites, which allows for the improvement of their structure and content,
c) maintaining the Online Store Customer’s session, thanks to which the Customer does not have to re-enter the login and password on each subpage of the Online Store,
d) adapting the content and functioning of the Online Store by matching an anonymous, randomly generated tracking identifier, thanks to which it is possible, among other things, to check where the Customer comes from, what search engine he used, what link he clicked on, what keywords he entered and at what point he stopped using the Online Store,
e) collecting general and anonymous data for the implementation of advertising campaigns via remarketing lists, enabling the display of advertising content tailored to the Customer's preferences.
4. Web browsers typically allow cookies to be stored on the Customer's end device by default. Customers can change their settings in this regard. Web browsers allow the deletion of stored cookies and the automatic blocking of cookies. Detailed information on this topic can be found in the Help or documentation for the web browser.
5. The Online Store uses marketing and analytical tools from third-party providers who use cookies in the Online Store. These tools are primarily provided by Google LLC (Google Analytics, Google Ads, Google Tag Manager, Google Merchant Center) and Facebook Inc. (Facebook Pixel). More information about the cookies used by the above-mentioned entities can be found in their privacy policies. Some of the above-mentioned providers may store Customer data outside the European Economic Area. In such situations, Customer data will be transferred only to countries that ensure an adequate level of protection (based on the European Commission Implementing Decision of July 12, 2016, introducing the Privacy Shield), and to countries that do not ensure an adequate level of protection, only if appropriate safeguards are in place, including standard contractual clauses adopted by the European Commission.

§ 9 Data Sharing

1. Customers' personal data may be transferred to entities to which the Administrator entrusts personal data processing on the basis of agreements and to entities authorized to obtain personal data under the law. 
2. In order to perform the contract concluded via the Online Store and to ensure the proper functioning of the Store, the Administrator makes the personal data of Customers available, in particular, to entities providing services:
a) postal,
b) electronic payments,
c) accounting,
d) hosting,
e) IT and software delivery,
f) newsletter,
g) marketing in the scope of online store operation.

§ 10 Customer Rights

1. The Customer has the right to access their data and the right to request its rectification, erasure, or restriction of processing. To the extent that the basis for personal data processing is the legitimate interest of the controller, the Customer has the right to object to the processing of their personal data.
2. To the extent that the processing of the Client's personal data is based on consent, the Client has the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
3. To the extent that the Customer's data is processed for the purpose of concluding and performing the Agreement or processed based on consent, the Customer also has the right to transfer personal data, i.e., to receive personal data from the controller in a structured, commonly used, machine-readable format. The Customer may send this data to another controller. 
4. The Customer also has the right to lodge a complaint with the supervisory authority responsible for personal data protection.