Privacy Policy (GDPR) of the online store gooduniform.pl

This Privacy Policy describes the rules for the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (GDPR).

Who is the Data Controller?
 The controller of your personal data is Oksana Afanasieva GOODUNIFORM, NIP 5214099151, REGON 540468452.

Permanent place of business activity:
 Pomorskie Voivodeship, Gdynia, Hieronima Derdowskiego Street, No. 7, 81-369, Poland.

Address for correspondence:
 Oksana Afanasieva, Pomorskie Voivodeship, Gdynia, Bernadowska Street, No. 1f, apt. 5, 81-553, Poland.

Domain owner: https://gooduniform.pl/

How can you contact us regarding personal data matters?
 You may contact us by e-mail at: info@gooduniform.pl
 or by post at the address indicated above.

How do we obtain your personal data?
 Your personal data are collected directly from you when you place orders, submit inquiries or complaints via our online store, electronic forms, e-mail, telephone, postal correspondence or in person.

What personal data do we process?
 We process in particular the following categories of personal data:
 first name and last name;
 username, login and password to your online store account;
 contact details, including postal address, e-mail address and telephone number;
 identification numbers (PESEL, NIP);
 company name;
 bank account number;
 payment card details;
 data relating to obligations;
 transaction data;
 order history, insofar as it constitutes personal data.

Purposes and legal bases for processing personal data
 Your personal data are processed on the basis of Article 6(1)(b) GDPR for the performance of a contract concluded with you or in order to take steps prior to entering into a contract, in particular for the purpose of:
 providing information about our offer;
 processing and fulfilling orders;
 handling complaints, withdrawals from contracts and other consumer rights;
 responding to inquiries submitted by you;
 contacting you in matters related to the concluded contract.

Your personal data are also processed on the basis of your consent (Article 6(1)(a) GDPR) for the purpose of:
 analysing website traffic using cookies;
 conducting marketing activities by telephone or electronic means of communication.

You may withdraw your consent at any time, without giving reasons, in the same manner in which it was granted. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

Additionally, your personal data are processed on the basis of Article 6(1)(c) GDPR in order to comply with legal obligations arising from tax and accounting regulations.

Your personal data may also be processed on the basis of Article 6(1)(f) GDPR for the purposes of the legitimate interests of the controller, in particular:
 conducting marketing activities, including direct marketing of our own services;
 contacting you using available communication channels, including e-mail and telephone, where permitted by law;
 establishing, pursuing or defending legal claims;
 archiving data and ensuring accountability in accordance with applicable laws.

Is the provision of personal data mandatory?
 Providing personal data is voluntary; however, providing certain data is necessary in order to conclude a contract and process orders, including:
 first name and last name;
 e-mail address;
 full postal address;
 telephone number;
 payment details;
 company name and NIP, where applicable.

Failure to provide these data may result in the inability to conclude a contract, process an order, complaint or inquiry.

In cases required by law, we may request additional data necessary for tax or accounting purposes.

Your rights related to personal data processing
 You have the right to:
 access your personal data;
 rectify inaccurate or incomplete data;
 request erasure of personal data (“right to be forgotten”);
 restrict the processing of personal data;
 data portability;
 object to the processing of personal data, including processing for direct marketing purposes;
 withdraw consent at any time, where processing is based on consent.

You also have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Recipients of personal data
 Your personal data may be disclosed to:
 IT and technical service providers;
 entities analysing statistical data;
 public authorities, where required by law;
 social media platforms;
 accounting service providers;
 payment service providers;
 postal operators and courier companies;
 legal advisors;
 marketing service providers;
 other entities, where required by law or with your consent.

Retention period
 Personal data are stored only for as long as necessary to achieve the purposes for which they are processed and in accordance with applicable laws.

Data are stored for the duration of the contract and after its termination for a period of up to 6 years or for the duration of legal proceedings.

Marketing-related data are stored until you object to such processing or until the contract expires, whichever occurs first.

Transfers outside the European Economic Area
 Personal data may be transferred outside the EEA to IT service providers whose servers are located outside the EEA, including in the United States.

Such transfers are carried out on the basis of decisions of the European Commission or appropriate safeguards, including standard contractual clauses. In certain cases, transfers may take place on the basis of your explicit consent.

You have the right to obtain a copy of personal data transferred to a third country.

Automated decision-making
 We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Cookies
 Our website uses cookies. Cookies are stored on your device and are linked exclusively to your browser. They do not identify you personally.

Cookies are used to analyse website traffic and improve website functionality. You may change your cookie settings in your browser at any time. Disabling cookies may limit or prevent access to certain features of the website.