Privacy Policy

PRIVACY AND COOKIES POLICY

What are your rights?

You have the right to access your data, rectify it, and request its deletion. You are also entitled to object to the processing of your personal data or request restrictions on its processing.

Providing the required personal data is voluntary, but it is a condition for us to provide certain services to you (e.g., maintaining an account, sending a newsletter). We do not make any individual decisions based solely on automated processing (profiling) that would produce legal effects concerning you or similarly significantly affect your situation.

Our domain has an SSL certificate, ensuring that your data is encrypted.

Below you will find all the most important information related to the processing of personal data on our website.

Who is the administrator of the website and personal data?

The personal data administrator is ecommerce.legal spółka z ograniczoną odpowiedzialnością with its registered office in Poznań (60-529), ul. Dąbrowskiego 77A, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register under number: 0001071438, NIP: 7812061024, REGON: 527034850, share capital: 10,000.00 PLN, phone number: +48 781 906 020, e-mail address: biuro@ecommercelegal.pl.

To whom do we disclose personal data?

Related entities

The information we collect may be transferred to an entity related to us, i.e., ecommerce.legal Kancelaria Prawna Dziok spółka komandytowa, address: ul. Dąbrowskiego 77a, 60-529 Poznań.

In justified cases and within the limits defined by law, personal data may be transferred to ecommerce.legal Kancelaria Prawna Dziok spółka komandytowa, in particular with the explicit consent of the user (Article 6(1)(a) GDPR).

Both entities take care of the security of personal data and ensure that the processing is carried out in compliance with applicable legal regulations.

External entities

We transfer personal data to other entities only to the extent that the data subject has given consent for the processing, where it is necessary for the performance of a contract, or where it results from the legitimate interests pursued by the controller. These include online payment operators, banks, and providers of marketing tools cooperating with the store. In the case of commonly used marketing tool providers, anonymized cookies may be transferred to the United States (companies: Google LLC, Meta Platforms Inc.).

What is the legal basis for processing personal data?

Personal data is collected and processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), known as GDPR. The processing of personal data is also regulated by the national Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2019, item 1781).

For what purposes do we process your data?

We process data only to the extent necessary for the functioning of our store and store it for periods permitted by law.

  • For the purpose of concluding and performing a contract and for creating and maintaining an account, we process data such as: first name, last name, residential address, tax identification number (NIP), phone number, e-mail address, bank account number, payment card number – based on Article 6(1)(b) GDPR.

  • For the purpose of adding and verifying reviews and enabling the use of the contact form, we process data such as: first and last name, e-mail address, phone number – based on Article 6(1)(f) GDPR.

  • For direct marketing purposes (based on Article 6(1)(a) GDPR), we process data such as: first name, last name, e-mail address, phone number, address.

  • For sending newsletters and running loyalty programs, we process data such as: first name, last name, e-mail address, phone number – based on Article 6(1)(a) GDPR.

  • For fulfilling legal obligations and establishing or pursuing claims, we process data such as: first and last name, residential address, PESEL number, NIP, e-mail address, phone number, IP address, payment card number, bank account number – based on Article 6(1)(c) GDPR.

What rights do you have in connection with the processing of your personal data?

You have the right to:

  • request access to your personal data,

  • request rectification of your personal data,

  • object to the processing of your personal data,

  • request deletion of your personal data,

  • request restriction of processing,

  • request data portability,

  • obtain information about automated decision-making, including profiling, and safeguards applied regarding data transfers outside the EU,

  • obtain information about the purposes of processing, categories of processed data, and recipients or categories of recipients of such data,

  • obtain information about rights under GDPR, the right to lodge a complaint with the supervisory authority, the planned data retention period or criteria for determining this period, and the source of the data,

  • obtain a copy of your personal data.

If you wish to exercise any of the above rights, please inform us. We will promptly provide you with all the information.

Contact