General information

This document sets out the principles of the Privacy Policy of the Online Shop (hereinafter referred to as the “Online Shop”). The Controller of the Internet Shop is Tomasz Dębowski, conducting his business under the name AWG Polonez Tomasz Dębowski, entered in the register of entrepreneurs of the Central Registration and Information on Business Activity conducted by the Minister of Business and Technology at the address Wymysłów 28A, 62-740 Tuliszków, Tax ID: 6660009393, Enterprise ID (REGON): 311078398.

Words written with a capital letter have the meaning given to them in the terms and conditions of this Online Shop.

Personal data collected by the Online Shop Controller are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU 119, p. 1), hereinafter referred to as: the GDPR.

The Controller of the online shop makes special efforts to protect privacy and information provided to him and concerning the customers of the online shop. The Controller shall exercise due care in selecting and applying appropriate technical measures, including those of a programming and organisational nature, ensuring the protection of the processed data, in particular protecting the data against unauthorised access, disclosure, loss and destruction, unauthorised modification, as well as against their processing in violation of the applicable legislation.

The use the Goods and Services available on the website is not offered to children under the age of 16. The Data Controller does not envisage the targeted collection of data relating to children under the age of 16.

Personal data

Personal Data Controller

The Controller of your personal data is:

AWG Polonez Tomasz Dębowski

Wymyslów 28A

62-740 Tuliszków

You can contact the Data Controller regarding your personal data via:

• email: polonez@polonez-kat.com.pl
• letter: Wymysłów 28A, 62-740 Tuliszków
• phone: +48 607 32 72 72

Aims and legal bases for processing personal data

The Data Controller processes your personal data for the following purposes and scope:

• to take action prior to the conclusion of a contract at your request (e.g. creation of an Account), i.e. the data provided in the registration form in the Online Shop, i.e. your e-mail address and the password established, your gender; if you register for an Account via an external authentication service (e.g. Google+, Facebook) we collect your first and last name, and if you register for the purchase of Goods we collect your first and last name and the data you provide for the purpose of processing your order such as your shipping address; in order to provide Services which require the creation of an Account such as maintaining your order history, informing you of the status of your order, we process your data provided in your Account and when you purchase Goods;
• to provide Services which do not require the creation of an Account and the purchase of Goods, i.e. browsing the web pages of the Online Shop and searching for Goods, we process personal data concerning your activity in the Online Shop, i.e. data concerning the Goods you have viewed, data concerning the session of your device, operating system, browser, location and unique ID, IP address;
• to perform a contract of sale of the Goods (e.g. delivery of the ordered Goods), we process the personal data provided by you when purchasing the Goods, such as your name, e-mail address, address data, payment data and, if you purchase via an Account, additionally the password you have established;
• for the purpose of statistics on the use of the various functionalities available in the Online Shop, to facilitate the use of the Online Shop and to ensure the IT security of the Online Shop, we process personal data relating to your activity in the Online Shop and the amount of time spent on each subpage in the Online Shop, your search history, your location, your IP address, your device ID, data relating to your Internet browser and operating system;
• for the establishment, investigation and enforcement of claims and the defence of claims in court proceedings and other enforcement bodies, we may process your personal data provided when you purchase Goods or set up an Account and other data necessary to prove the existence of a claim or which arises from a legal requirement, court order or other legal procedure;
• for the purpose of dealing with complaints, claims and requests and responding to customer enquiries, we process the personal data you provide in the contact form, complaints and requests, or in order to respond to your enquiries in another form and some of the personal data you provide in your Account, as well as the data relating to the order of Goods and other Services provided by us which are the cause of the complaint, claim or request and the data contained in the documents accompanying the complaint, claim or request;
• for the marketing of our Goods and Services and those of our customers and partners, including remarketing, for which purpose we process the personal data provided by you when you set up and update your Account, data relating to your activity in the Online Shop including your orders, which are recorded and stored via cookies, in particular your order history, search history, clicks in the Online Shop, login and registration dates, history and your activity in relation to our communication with you. In the case of remarketing, we use your activity data to reach you with our marketing messages outside the Online Shop and we use third-party providers for this purpose. These services consist of displaying our communications on websites other than the Online Shop. You will find details of this in the Cookie policies;
• to organise competitions and loyalty programmes, i.e. to notify you of the points you have accumulated, to notify you of a prize and to advertise our offer, we use your personal data provided in your Account and when registering for a competition or loyalty programme. Detailed information on this is provided in the terms and conditions of the respective competition or loyalty programme;
• for market and opinion research purposes by us or our partners, i.e. order information, your data provided in your Account or when purchasing Goods, your e-mail address. We do not use the data collected as part of market research and opinion surveys for advertising purposes. Exact instructions are given in the information about the respective survey or where you enter your data.

Categories of personal data concerned

The controller processes the following categories of relevant personal data:

• contact details;
• data relating to activity in the Online Shop;
• order data in the Online Shop;
• data on complaints and requests;
• data relating to marketing services.

Voluntary provision of personal data

The provision of the required personal data by you is voluntary, but is a condition for the provision of services by the Data Controller through the Online Shop.

Processing time

Personal data will be processed for the period necessary for the execution of orders, services, marketing activities and other services performed for the Customer. Personal data will be deleted in the following cases:

• when the data subject requests their deletion or withdraws the consent given;
• when the data subject has not taken action for more than 10 years (a dormant contact);
• upon becoming aware that stored data is out of date or inaccurate.

Some data in the following areas: e-mail address, first and last name, may be stored for a further period of 3 years for evidential purposes, processing of complaints, claims and claims related to the services provided by the Online Shop – this data will not be used for marketing purposes.

Data relating to orders of Goods and paid services, competitions and loyalty programmes will be stored for a period of 5 years from the date of delivery of the order.

We store the data of customers who are not logged in for a period of time corresponding to the life cycle of the cookies stored on the devices or until they are deleted from the Customer’s device by the Customer.

Your personal data about your preferences, behaviour and choice of marketing content may be used as the basis for automated decisions to determine the online shop’s sales opportunities.

Recipients of personal data

We transfer your personal data to the following categories of recipients:

• to state authorities, e.g. the public prosecutor’s office, the police, the President of the Personal Data Protection Office (PUODO), the President of the Office for Competition and Consumer Protection (UOKiK), if they request us to do so,
• to the service providers we use for the operation of the Online Shop, e.g. for order processing. 

Rights of the data subject

Under the GDPR, you have the right to:

• request access to your personal data;
• request the rectification of your personal data;
• request the deletion of your personal data;
• request the restriction of the processing of personal data;
• object to the processing of personal data;
• request the portability of personal data.

The Controller shall inform you without undue delay – and in any case within one month of receipt of your request – of the action taken in relation to your request. If necessary, the one-month period may be extended by a further two months due to the complexity of the request or the number of requests.

In any event, the Data Controller will inform you of such extension within one month of receipt of the request, stating the reasons for the delay.

Right of access to personal data (Article 15 of the GDPR)

You have the right to obtain information from the Data Controller as to whether your personal data is being processed.

If the Controller processes your personal data, you have the right to:

• access your personal data;
• be informed about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of storage of your data or the criteria for determining that period, your rights under the GDPR and your right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;
• obtain a copy of your personal data.

If you wish to request access to your personal data please send your request to polonez@polonez-kat.com.pl

Right to rectification of personal data (Article 16 of the GDPR)

If your personal data is inaccurate, you have the right to request the Controller to rectify it immediately.

You also have the right to request the Controller to complete your personal data.

If you wish to request the rectification of your personal data or their completion, please send your request to polonez@polonez-kat.com.pl

If you have registered with the Online Shop, you can correct and complete your personal data yourself after logging in to the Online Shop.

The right to erasure of personal data, the so-called “right to be forgotten” (Article 17 of the GDPR)

You have the right to request the Data Controller to delete your personal data when:

• your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• you have withdrawn specific consent, insofar as personal data was processed on the basis of your consent;
• your personal data was processed unlawfully;
• you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of your personal data is related to direct marketing;
• you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Controller of the personal data or by a third party.

Despite your request for erasure, the Controller may continue to process your personal data for the purpose of establishing, asserting or defending claims, of which you will be informed.

If you wish to request the deletion of your personal data please send your request to polonez@polonez-kat.com.pl

The right to request the restriction of the processing of personal data (Article 18 of the GDPR)

You have the right to request the restriction of the processing of your personal data when:

• you question the accuracy of your personal data – the Data Controller will restrict the processing of your personal data for a period of time to allow you to check the accuracy of the data;
• when the processing of your data is unlawful and instead of erasure you request the restriction of the processing of your personal data;
• your personal data is no longer needed for the purposes of the processing, but it is needed to establish, assert or defend your claims;
• when you have objected to the processing of your personal data – until it is determined whether the legitimate interests on the part of the Controller override the grounds for your objection.

If you wish to request a restriction of the processing of your personal data, please send your request to polonez@polonez-kat.com.pl

Right to object to the processing of personal data (Article 21 of the GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in relation to:

• processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Controller of the personal data or by a third party;
• processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please send your request to polonez@polonez-kat.com.pl

Right to request portability of personal data (Article 20 of the GDPR)

You have the right to receive your personal data from the Controller in a structured, commonly used machine-readable format and to send it to another controller.

You may also request that it is the Data Controller who directly transfers your personal data to another controller (if technically possible).

If you wish to request the transfer of your personal data, please send your request to polonez@polonez-kat.com.pl

Right of withdrawal of consent

You can withdraw the consent you have given for the processing of your personal data at any time.

The withdrawal of your consent to process your personal data does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, please send your request to polonez@polonez-kat.com.pl or use the relevant options in your Account.

Complaint to the supervisory authority

If you believe that the processing of your personal data is in breach of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, of your place of work or the place where the alleged breach took place.

In Poland, the supervisory authority under the GDPR is the President of the Office for Personal Data Protection (PUODO).