Personal Data Privacy Policy (GDPR)

www.offrodaparts.pl

Valid from December 20, 2021.

§1

Identity of the data controller

1. By the administrator of personal data provided during the use of the site and the store at www.offroadparts.pl there is Dariusz Dvorzynski, managing business under the company: ORE4X4 SP. o. o. with its headquarters at Laski 41, 05-660 Warka, Poland, is registered in the Register of Entrepreneurs of the National Judicial Register KRS number: 0001084092 NIP: 7972085631, e-mail: biuro@ore4x4.pl, phone number. 730 010 745.
2. The cookie policy was provided in the cookie policy at: https://ore4x4.pl/pl/content/polityka-cookies
3. The following Privacy Policy covers the rules for processing data of site users, customers using the services, and subscribers on the fan page – Facebook called "".@ORE4x4"and an Instagram called"@ORE4x4", as well as data collected by contacting by email (email address or phone).
4. Personal data is processed in accordance with the applicable legislation, i.e. Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016. On the Protection of Individuals with regard to the Processing of Personal Data and on the Free movement of such data and repealing Directive 95/46 / EC (hereinafter: GDPR), Act of 10 May 2018 On Data Protection, as well as the Law of July 18, 2002 On the provision of services in electronic form.

§2

Definitions used

The following definitions are used in this Policy::

1. Service / shop-the online service is available at www.offroadparts.plthrough which the user can view its content, make a purchase of the selected product, subscribe to the newsletter, or contact the data administrator using the data available on the site.
2. Personal data controller-the entity that makes decisions about the purpose and means of processing users 'and buyers' data, i.e.: : Ore4x4 SP. O. O. with its office at Laski 41, 05-660 Warka, Poland, is registered in the Register of Entrepreneurs of the National Judicial Register under the number KRS: 0001084092 NIP: 7972085631, e-mail: biuro@ore4x4.pl** , phone number. 730 010 745**
3. User-a natural person to whom the data relates and who uses the services available on the site, as well as customers and contact persons through messages sent to the fan page – Facebook under the name"".@ORE4x4"and an Instagram called"@ORE4x4", as well as data collected by contacting by email (email address or phone).
4. Personal data-any information that can lead to the identification of an individual at no extra cost or time, including their identification, address and contact details.

§3

Data processing purposes

1. The Personal Data Controller processes users ' personal data for the following purposes: a. to fulfill a contract to which the data subject is a party, or to take measures at the request of the data subject, i.e. to conclude and execute a sales contract or a service contract, in accordance with article 6 (1). (B) GDPR, (B) answer the question asked using the contact details available on the service's website, in the contact form, or via social media, in accordance with article 6 (1). b) RODO, tj. the need for data for the execution of the contract or before its conclusion, at the request of the data subject, c. registration and creation of an account in the store, in particular, for adding products to favorites, viewing order history, storing identification and address data to facilitate subsequent orders in the store, etc. The creation of an account for this purpose is carried out in accordance with Article 6 (1). A) GDPR, i.e. the consent of the data subject, d. documenting the performance of services, including issuing an invoice or invoice to an individual, maintaining accounting and tax records in accordance with Article 6 (1). C) GDPR, i.e. to fulfill the legal duties assigned to the controller of personal data, in accordance with article 70 of the Law of 29 August 1997 Tax Code, e. sending commercial and marketing information by the data controller (newsletter) to the email address specified by the user when subscribing to the newsletter, with the consent of the data subjects in accordance with Article 6 (1). a) RODO, tj. consent of the person, F. marketing the data controller's own products and services in the traditional way, in accordance with Article 6 (1). f) GDPR, i.e. for the exercise of the legitimate interests of the data controller or the data subject, g.for the assertion of rights and claims by the data controller or the data subject in accordance with Article 6 (1). F) GDPR, i.e. to implement the legitimate interests of the data controller or data subject.
2. Providing data is necessary for entering into and executing sales and service contracts, maintaining accounting and tax records, filing claims, and answering questions.
3. The provision of personal data for sending the newsletter is voluntary, but necessary for this purpose if the user wants to receive the newsletter.
4. The lack of necessary data prevents the correct execution of the contract (including order fulfillment and delivery, invoicing or invoicing, or contact at the request of the data subject).

§4

Amount of data processed

1. The amount of personal data processed has been reduced to the minimum necessary to achieve the purpose for which the data is processed, i.e.: a. for issuing an invoice or invoice: first or first name of the subject, legal address, TIN, other payment data, b. for implementing the purchase and sale agreement: first name, last name, address, telephone number, e-mail address, additionally the bank account number from which the payment was made or other payment data, as well as other data provided when using the services of the personal data controller, c. to send a request using the data available on the site: e-mail address, phone number, name, any other data voluntarily provided by the data subject, and in the case of placing an order by this means, also address data and other data necessary for order fulfillment and delivery, d. to send a newsletter (e-mail,email, etc.). first or last name of the user).

§5

Data processing period

The data processing period depends on the purpose for which the data was collected, and is:

a. for the execution of contracts and services, as well as the issuance of accounting documents – 5 years, starting from the end of the calendar year in which the tax payment deadline expired-in accordance with article 70 of the Law of August 29, 1997. Tax Code,

B. for filing claims by the data administrator or the person to whom they relate-in accordance with Article 118 of the Law of April 23, 1964-the Civil Code. Unless otherwise provided by a special provision, the statute of limitations is six years, and for claims for periodic payments and claims related to the conduct of business – three years.,

c. to provide answers through ICT tools (requests, course information, etc.)- data is processed only for the period required for the response, but not more than 6 months from the date of receipt of the request,

D. to send a newsletter - before the withdrawal of consent, without prejudice to the compliance of the processing that was performed before the withdrawal.

§6

Data source

1. Personal data is collected directly from the data subjects.
2. Personal data is provided by direct contact with the data administrator using the data available on the website of the service / store, or using the forms used to receive data or in the traditional form.

§7

Data recipients

1. The user's personal data may be provided only to persons authorized to do so in accordance with separate legislation or with their consent.
2. Personal data of the user, in particular customers, can also be transferred to online payment operators served in the store, or to banks that maintain the seller's bank account.,
3. The user's personal data may be transferred to other entities to perform services on behalf of the data controller or to deliver software that the data controller uses for data processing, including for the following purposes: a. website hosting and email service of the hosting provider, b. accounting and tax accounting of the data controller by a third-party entity (accounting), c. a courier service broker, in particular for the delivery of goods to the chosen carrier, d. issuance of accounting documents through specialized platforms and information systems, e. maintenance and distribution of newsletters (system for distribution).
4. The administrator is the administrator of the data of observers who use electronic communication tools at the following email address: biuro@offroadparts.pl Otherwise, the data administrator of users of these social networks is Facebook, Inc., located at 1 Hacker Way, Menlo Park, CA 94025, USA, and the processing of this data is carried out under the conditions described in the rules and policies privacy policy of users of these services, including:: https://www.facebook.com/privacy.
5. Data processing may take place outside the European Economic Area, in particular in the United States of America, in connection with the use of the tools of suppliers located in this country (Google, Facebook, etc.) and will be based on standard contractual provisions concluded between the personal data administrator and the service provider. Data processing will not violate the privacy of individuals. The data controller and service provider will provide the highest level of data protection guarantees.
6. Otherwise, the user's personal data is not processed outside the European Economic Area.

§8

Rights of data subjects

1. Users, including buyers, have the right to::
   • access to the content of personal data, including obtaining the first copy of personal data free of charge,
   • for data correction, deletion or restriction of processing (if further processing is not required by law),
   • before revoking consent to the processing of personal data, in particular, for sending out newsletters or creating an account in the store. The revocation of consent does not affect the compliance of the processing that was performed prior to its revocation.
   • to object to data processing-for reasons related to the specific situation regarding the processing of personal data under Article 6 (1). E) or f) GDPR,
   • to get information about who is the data administrator, as well as to get information about the purpose, scope and method of data processing, the content of this data, the data source, and how it is shared, including recipients or categories of data recipients,
   • file a complaint with the Office for Personal Data Protection (UODO) if the data processing violates the provisions of the General Data Protection Regulation (GDPR). The complaint can be submitted electronically or in a traditional form to the address: Office for Personal Data Protection, Stavki 2 str., 00-193 Warsaw.
2. To exercise the right to information, access the data content, correct it, and other rights, you can contact the data administrator. Contact details are located on the tab Contact Information on this site.

§8

Final provisions

In the event of a change in the current privacy policy, in particular, when it is required by the applicable technical solutions, changes in the legislation in the field of privacy of data subjects, appropriate changes will be made to the above entry, which will be valid for 14 days from the date of its publication on the service's website.