PRIVACY POLICY

1. GENERAL PROVISIONS

1.1. This Privacy Policy is for informational purposes only and describes the rules for processing personal data by the online store operating at www.gorsetyfitness.pl.

1.2. The controller of personal data is ADAM PENSIEK DECOR, with its place of business at ul. Ostromęcko 9, 73-240 Bierzwnik, correspondence address: ul. Marzenin 25, 66-530 Drezdenko, Poland, VAT ID: PL2810050120, REGON: 321418975, e-mail: shop@gorsetyfitness.pl (hereinafter referred to as the “Controller”).

1.3. Personal data are processed in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR),

• the Act of 18 July 2002 on the provision of electronic services.

1.4. The Controller has not appointed a Data Protection Officer. All matters related to personal data may be addressed directly to the Controller via the e-mail address indicated above.

2. PURPOSES, SCOPE AND LEGAL BASIS OF DATA PROCESSING

The Controller processes personal data for the following purposes:

2.1. Order processing and performance of sales contracts

Scope of data: full name, e-mail address, phone number, delivery address, billing details
Legal basis:

• Article 6(1)(b) GDPR – performance of a contract

• Article 6(1)(c) GDPR – legal obligations (accounting)

• Article 6(1)(f) GDPR – establishment, exercise or defence of legal claims

2.2. Newsletter distribution

Scope of data: e-mail address
Legal basis:

• Article 6(1)(a) GDPR – consent

Consent may be withdrawn at any time by clicking the unsubscribe link in the newsletter or by contacting the Controller.

2.3. Website analytics – Google Analytics

The Controller uses Google Analytics, a service provided by Google LLC, to analyse website traffic and improve services.
Scope of data: anonymised IP address, statistical data regarding website visits
Legal basis: Article 6(1)(a) GDPR – user consent given via the cookie consent banner

Data may be transferred outside the European Economic Area (to the USA) based on standard contractual clauses approved by the European Commission.

3. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed to the following categories of recipients:

• accounting and bookkeeping service providers,

• IT and hosting service providers,

• the Shoper e-commerce platform operator,

• courier company DHL Express,

• Google LLC (Google Analytics).

4. DATA RETENTION PERIOD

Personal data are stored for the following periods:

• order-related data – for the period required by applicable accounting and tax regulations,

• customer account data – until the account is deleted,

• newsletter data – until consent is withdrawn,

• analytical data – in accordance with Google Analytics retention settings.

5. RIGHTS OF DATA SUBJECTS

Each data subject has the right to:

• access their personal data,

• rectify personal data,

• erase personal data (“right to be forgotten”),

• restrict processing,

• data portability,

• object to processing,

• withdraw consent at any time,

• lodge a complaint with the President of the Personal Data Protection Office (Poland) or the relevant supervisory authority in their country of residence.

6. COOKIES

6.1. The Store uses cookies:

• necessary cookies – required for the proper functioning of the website,

• analytical cookies – Google Analytics (used only after obtaining user consent).

6.2. Consent to the use of cookies is given via the cookie banner and may be withdrawn at any time by changing browser settings.

7. FINAL PROVISIONS

7.1. The Store may contain links to external websites. The Controller is not responsible for the privacy policies applicable on those websites.

7.2. The Controller applies appropriate technical and organisational measures to ensure the protection of personal data, including the use of SSL encryption.