privacy policy

PRIVACY AND COOKIES POLICY

What are your rights?

You have the right to access, correct, and delete your data. You also have the right to object to the processing of your personal data or request that its processing be restricted.

Providing the required personal data is voluntary, but is a condition for us to provide certain services to you (e.g., maintaining an account, sending a newsletter). We do not make individual decisions about you based solely on automated processing (profiling) that would produce legal effects or significantly affect your situation in a similar way.

Our domain has an SSL certificate, so your data is encrypted.

Below you will find all the most important issues related to the processing of personal data on our website.

Who is the administrator of the website and personal data?

The controller of personal data is ecommerce.legal, a limited liability company, with its registered office in Poznań (60-529), at 77A Dąbrowskiego Street, entered into the register of entrepreneurs of the National Court Register by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the KRS under the number: 0001071438, Tax Identification Number (NIP): 7812061024, National Business Registry Number (REGON): 527034850, share capital: PLN 10,000.00, telephone number +48 781 906 020, e-mail address: biuro@ecommercelegal.pl .

Who do we share personal data with?

Related entities

The information we collect may be transferred to an entity affiliated with us, i.e. ecommerce.legal Kancelaria Prawna Dziok spółka komandytowa, address: ul. Dąbrowskiego 77a, 60-529 Poznań.

In justified cases and within the limits set by law, personal data may be transferred to ecommerce.legal Kancelaria Prawna Dziok spółka komandytowa, in particular in the event of the user’s express consent (Article 6 paragraph 1 letter a of the GDPR).

Both entities ensure the security of personal data and ensure that processing is carried out in accordance with applicable law.

External entities

We transfer personal data to other entities only to the extent the data subject has consented to data processing, to the extent necessary for the performance of the contract, or to the extent necessary for the legitimate interests pursued by the controller. These entities include online payment processors, banks, and marketing tool providers cooperating with the store. In the case of providers of commonly used marketing tools, anonymized cookies may be transferred to the United States (companies: Google LLC, Meta Platforms Inc.).

What is the legal basis for processing personal data?

Personal data is collected and processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), known as the GDPR. The processing of personal data is also regulated by the National Data Protection Act of 10 May 2018 (consolidated text: Journal of Laws of 2019, item 1781).

For what purposes do we process your data?

We process data only to the extent necessary for the operation of our store and store it for the period permitted by law.

  • In order to conclude and perform a contract and to set up and maintain an account, we process the following data: first name, last name, address, Tax Identification Number, telephone number, e-mail address, bank account number, payment card number – pursuant to Article 6(1)(b) of the GDPR, i.e. when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject before concluding a contract.
  • In order to add and verify opinions and to enable the use of the contact form, we process data such as: name and surname, e-mail address, telephone number - pursuant to Article 6 paragraph 1 letter f) of the GDPR, i.e. when processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party.
  • For the purposes of direct marketing (pursuant to Article 6(1)(a) of the GDPR – i.e. when the data subject has consented to the processing of his or her personal data for one or more specific purposes), we process the following data: first name, last name, e-mail address, telephone number, address.
  • For the purposes of sending the newsletter and running loyalty programs, we process data such as: first name, last name, e-mail address, telephone number - on the basis of Article 6 paragraph 1 letter a) of the GDPR, i.e. when the data subject has consented to the processing of their personal data for one or more specific purposes.
  • For purposes related to the fulfillment of legal obligations and the establishment and pursuit of claims: first name and last name, address of residence, PESEL number, NIP number, e-mail address, telephone number, IP number, payment card number, bank account number – pursuant to Article 6 paragraph 1 letter c) of the GDPR, i.e. when processing is necessary to fulfill a legal obligation to which the controller is subject.

What exactly are your rights in relation to the processing of your personal data?

You have the right to:

  • request access to your personal data,
  • request the rectification of your personal data,
  • object to the processing of personal data,
  • request the deletion of your personal data,
  • request to limit the processing of personal data,
  • requests to transfer personal data,
  • obtain information on automated decision-making, including profiling, and on the safeguards applied in connection with the transfer of such data outside the EU,
  • obtaining information about the purposes of processing, the categories of personal data processed, and the recipients or categories of recipients of such data,
  • obtain information about your rights under the GDPR, about the right to lodge a complaint with the Personal Data Protection Office, about the planned period of data storage or about the criteria for determining this period, and about the source of the data,
  • obtain a copy of your personal data.

If you wish to exercise any of the above rights, please let us know. We will promptly provide you with all information regarding the actions taken in response to your request.

You may withdraw your consent to the processing of your personal data at any time. To do so, please contact us.

Cookie Policy

Cookies are commonly used short text files that identify software used, tailor content to user needs, and ensure the proper functioning of websites. They are stored on the device you are using and have a domain name, storage duration, and a specific value. Cookies used in our store are secure and are divided into session cookies and persistent cookies. Session cookies are stored only until the end of the browser session. Persistent cookies are stored on the device until deleted. You can change your cookie preferences or delete them (persistent cookies) at any time using your web browser.

For what purposes do we use cookies?

We use cookies to ensure the best possible operation of the online store and to promote it. This includes creating analyses and statistics that help us understand customer needs and analyzing user activity through analytical tools belonging to companies such as Google LLC (https://policies.google.com/privacy) and Meta Platforms Inc. (https://www.facebook.com/privacy/policy/). These tools are widely used, and information on the privacy policies of these companies can be found at the links provided above. The Administrator may use Google Analytics, Universal Analytics, Google Tag Manager, Google AdWords, or Google AdSense provided by Google LLC, and the Meta Pixel service provided by Meta Platforms Inc. These services help the Administrator analyze traffic in the Online Store based on collected data processed anonymously.