Privacy policy

Privacy Policy and Cookie Policy of the Online Store www.roughradical.com.pl

General information

This document sets out the principles of the Privacy Policy in the Online Store (hereinafter referred to as the "Online Store"). The Administrator of the Online Store is Krzysztof Królikowski, conducting business activity under the name „RADICAL POLSKA” Krzysztof Królikowski, entered in the register of entrepreneurs of the Central Registration and Information on Business, maintained by the Minister of Entrepreneurship and Technology, at ul. Wigury 4, 95-035 Ozorków, VAT ID (NIP) 7321868958, REGON 472372463.

Words used with a capital letter have the meaning given to them in the terms and conditions of this Online Store.

Personal data collected by the Administrator of the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), hereinafter referred to as: the GDPR.

The Administrator of the Online Store takes particular care to protect the privacy and the information provided to it concerning Customers of the Online Store. The Administrator selects and applies with due diligence appropriate technical measures, including those of a software and organisational nature, ensuring the protection of the processed data, in particular securing the data against being made available to unauthorised persons, against disclosure, loss and destruction, unauthorised modification, as well as against processing in breach of applicable law.

The Services available on the website (in particular the possibility of placing an Order in the Store) are not addressed to persons under 16 years of age. The personal data administrator does not intend to deliberately collect data concerning persons under 16 years of age.

Personal data

Personal data administrator

The administrator of your personal data is:

RADICAL POLSKA Krzysztof Królikowski
ul. Wigury 4, 95-035 Ozorków

Regarding your personal data, you may contact the personal data administrator using:

  • e-mail: [email protected],

  • postal mail: ul. Wigury 4, 95-035 Ozorków,

  • the contact form.

Purposes and legal bases for processing personal data

The personal data administrator processes your personal data for the following purposes and to the following extent:

  • to take steps prior to concluding a contract at your request (e.g. setting up an Account), i.e. the data provided in the registration form in the Online Store, that is the e-mail address and the password set, gender; if you register when purchasing Goods, we collect your first name and surname and the data provided in order to process the Order, such as the shipping address; in order to provide Services requiring an Account, such as keeping an Order history and informing you of the Order processing status, we process the data you provide in your Account and when purchasing Goods;

  • in order to provide Services that do not require setting up an Account or purchasing Goods, i.e. browsing the Online Store's web pages and the Goods search engine, we process personal data concerning your activity in the Online Store, that is data concerning the Goods you view, data concerning your device session, operating system, browser, location and unique ID, IP address;

  • in order to perform the contract for the sale of Goods (e.g. delivery of the ordered Goods), we process the personal data you provide when purchasing Goods, such as first name and surname, e-mail address, address details, payment details, and if you make the purchase via an Account, additionally the password set;

  • for the purpose of statistics on the use of individual functionalities available in the Online Store, making the use of the Online Store easier and ensuring the IT security of the Online Store, we process personal data concerning your activity in the Online Store and the amount of time spent on each subpage of the Online Store, your search history, location, IP address, device ID, data concerning your web browser and operating system;

  • for the purpose of establishing, pursuing and enforcing claims and defending against claims in court proceedings and before other enforcement authorities, we may process your personal data provided when purchasing Goods or setting up an Account, as well as other data necessary to prove the existence of a claim or which results from a legal requirement, court order or other legal procedure;

  • for the purpose of handling complaints, grievances and requests and answering Customers' questions, we process the personal data you provide in the contact form, in complaints, grievances and requests, or in order to answer questions submitted in another form, as well as certain personal data provided by you in your Account, and also data concerning the order for Goods and other Services provided by us which is the subject of the complaint, grievance or request, and data contained in documents attached to complaints, grievances and requests;

  • for the purpose of marketing our Goods and Services and those of our clients and partners, including remarketing; for this purpose we process the personal data you provide when creating and updating your Account, data concerning your activity in the Online Store including Orders, which are recorded and stored by means of "cookies", in particular Order history, search history, clicks in the Online Store, login and registration dates, the history of and your activity connected with our communication with you. In the case of remarketing, we use data about your activity in order to reach you with our marketing messages outside the Online Store, and for this purpose we use the services of external providers. These services consist in displaying our messages on websites other than the Online Store. Details on this can be found in the provisions concerning "cookies";

  • for the purpose of organising competitions and loyalty programmes, i.e. notifications about points collected, notifications about winning and advertising our offer, we use your personal data provided in your Account and when registering for a competition or loyalty programme. Detailed information on this is provided each time in the terms of participation in the given competition or loyalty programme;

  • for the purpose of market and opinion research carried out by us or our partners, i.e. information about the Order, your data provided in your Account or when purchasing Goods, e-mail address. Data collected as part of market research and opinion research is not used by us for advertising purposes. Precise instructions are provided in the information about the given survey or in the place where you enter your data.

Collection, acquisition, scope and purpose of collecting personal data

The Administrator informs Users that it entrusts the processing of personal data to the following entities:

  • Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, VAT ID (NIP): 676-248-20-64, KRS: 0000537197 – for the purpose of using the edrone.me mailing system, used to send the newsletter,
  • Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, VAT ID (NIP): 676-248-20-64, KRS: 0000537197: – for marketing purposes solely and exclusively for the needs of an e-mail, SMS or social media campaign launched or indicated by the Administrator by means of the edrone system,

The Administrator informs that it uses the following technologies to track actions taken by the user/Customer within the Store's website:

  • edrone tracking codes – for the purpose of analysing the statistics of the Store's website, as well as for marketing purposes solely and exclusively for the needs of an e-mail, SMS or social media campaign launched or indicated by the Administrator by means of the edrone system.

Categories of personal data concerned

The personal data administrator processes the following categories of personal data concerned:

  • contact data;

  • data concerning activity in the Online Store;

  • data concerning orders in the Online Store;

  • data concerning complaints, grievances and requests;

  • data concerning marketing services.

Voluntary nature of providing personal data

Providing the required personal data is voluntary on your part and constitutes a condition for the provision of Services by the personal data administrator via the Online Store.

Data processing period

Personal data will be processed for the period necessary to process Orders, Services, marketing activities and other services performed for the Customer. Personal data will be deleted in the following cases:

  • when the data subject requests its deletion or withdraws the consent given;

  • when the data subject has taken no action for more than 10 years (inactive contact);

  • after obtaining information that the stored data is out of date or inaccurate.

Certain data, namely the e-mail address, first name and surname, may be stored for a further period of 3 years for evidentiary purposes and for handling complaints, grievances and claims related to the services provided by the Online Store - this data will not be used for marketing purposes.

Data concerning Orders for Goods and paid Services, competitions and loyalty programmes, to the extent covering the data necessary for keeping accounting books, will be stored for a period of 5 years counted from the end of the calendar year in which the tax payment deadline expired.

Data concerning Customers who are not logged in is stored for a period corresponding to the life cycle of the "cookies" saved on devices, or until the Customer deletes them on the Customer's device.

Your personal data concerning preferences, behaviour and choice of marketing content may be used as a basis for taking automated decisions in order to determine the sales opportunities of the Online Store.

Recipients of personal data

We transfer your personal data to the following categories of recipients:

  • state authorities, e.g. the public prosecutor's office, the Police, the President of the Personal Data Protection Office (PUODO), the President of the Office of Competition and Consumer Protection (UOKiK), if they approach us with such a request,

  • service providers we use in running the Online Store, e.g. in order to process an order. Depending on the contractual arrangements and circumstances, these entities act on our instructions or independently determine the purposes and means of processing; a list of providers can be found below:

  1. Operator: DPD sp. z o.o. with its registered office in Warsaw, Purpose: Processing the order

  2. Operator InPost S.A. with its registered office in Kraków, Purpose: Handing over the order

  3. Poczta Polska S.A. with its registered office in Warsaw, Purpose: Processing the order

  4. Trusted Shops GmbH with its registered office in Cologne, Purpose: Surveying opinions on the level of Customer satisfaction with the purchase made, or covering purchases with Buyer Protection

  5. PayU S.A. with its registered office in Poznań, Purpose: Processing the payment

  6. PayPo sp. z o.o. with its registered office in Warsaw, Purpose: Processing the deferred payment

Rights of the data subject

Under the GDPR you have the right to:

  • request access to your personal data;

  • request rectification of your personal data;

  • request erasure of your personal data;

  • request restriction of the processing of personal data;

  • object to the processing of personal data;

  • request the portability of personal data.

The personal data administrator shall, without undue delay – and in any case within one month of receiving the request – provide you with information on the action taken in connection with the request you have submitted. If necessary, the one-month period may be extended by a further two months owing to the complex nature of the request or the number of requests.

In every case the personal data administrator will inform you of such an extension within one month of receiving the request, stating the reasons for the delay.

Right of access to personal data (Article 15 of the GDPR)

You have the right to obtain from the personal data administrator information as to whether your personal data is being processed.

If the Administrator processes your personal data, you have the right to:

  • access to the personal data;

  • obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of that data, the envisaged period for which your data will be stored or the criteria used to determine that period, the rights available to you under the GDPR and the right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;

  • obtain a copy of your personal data.

If you wish to request access to your personal data, submit your request to: [email protected].

Right to rectification of personal data (Article 16 of the GDPR)

If your personal data is inaccurate, you have the right to request that the Administrator rectify your personal data without undue delay.

You also have the right to request that the Administrator complete your personal data.

If you wish to request rectification or completion of your personal data, submit your request to: [email protected].

If you have registered in the Online Store, you can rectify and complete your personal data yourself after logging in to the Online Store.

Right to erasure of personal data, the so-called "right to be forgotten" (Article 17 of the GDPR)

You have the right to request that the personal data administrator erase your personal data when:

  • your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

  • you have withdrawn a given consent, to the extent that the personal data was processed on the basis of your consent;

  • your personal data was processed unlawfully;

  • you have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that the processing of personal data is connected with direct marketing;

  • you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the personal data administrator or by a third party.

Despite a request for erasure of personal data being submitted, the personal data administrator may continue to process your data for the purpose of establishing, pursuing or defending claims, of which you will be informed.

If you wish to request erasure of your personal data, submit your request to: [email protected].

Right to submit a request for restriction of the processing of personal data (Article 18 of the GDPR)

You have the right to request restriction of the processing of your personal data when:

  • you contest the accuracy of your personal data – the personal data administrator will restrict the processing of your personal data for a period enabling the accuracy of that data to be verified;

  • the processing of your data is unlawful and, instead of erasure of the personal data, you request restriction of the processing of your personal data;

  • your personal data is no longer needed for the purposes of the processing, but it is needed for establishing, pursuing or defending your claims;

  • you have objected to the processing of your personal data – until it is established whether the legitimate grounds on the part of the personal data administrator override the grounds set out in your objection.

If you wish to request restriction of the processing of your personal data, submit your request to: [email protected].

Right to object to the processing of personal data (Article 21 of the GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

  • processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the personal data administrator or by a third party;

  • processing for the purposes of direct marketing.

If you wish to object to the processing of your personal data, submit your request to: [email protected].

Right to request the portability of personal data (Article 20 of the GDPR)

You have the right to receive your personal data from the personal data administrator in a structured, commonly used, machine-readable format and to transmit it to another personal data administrator.

You may also request that the personal data administrator transmit your personal data directly to another administrator (provided that this is technically feasible).

If you wish to request the portability of your personal data, submit your request to: [email protected].

Right to withdraw consent

You may withdraw the consent given for the processing of your personal data at any time.

Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, submit your request to: [email protected] or use the appropriate functionalities in your Account.

Complaint to a supervisory authority

If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (PUODO).

"Cookies"

General information

When browsing the websites of the Online Store, "cookies" are used, hereinafter referred to as Cookies, i.e. small pieces of text information that are saved on your end device in connection with the use of the Online Store. Their use is intended to ensure the correct operation of the Online Store's websites.

These files make it possible to identify the software you use and to tailor the Online Store individually to your needs.

Cookies usually contain the name of the domain they come from, the time they are stored on the device and an assigned value.

Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or malicious software to reach your devices through Cookies.

Types of Cookies

We use two types of Cookies:

  • Session Cookies: these are stored on your device and remain there until the given browser session ends. The saved information is then permanently deleted from your device's memory. The session Cookies mechanism does not allow any personal data or any confidential information to be retrieved from your device.

  • Persistent Cookies: these are stored on your device and remain there until they are deleted. Ending the given browser session or switching off the device does not remove them from your device. The persistent Cookies mechanism does not allow any personal data or any confidential information to be retrieved from your device.

Purposes

We also use third-party Cookies for the following purposes:

  • configuration of the Online Store;

  • recording the course of a visit to the Online Store (pages visited, clicks, scrolling, cursor movements) in order to detect errors and make the Online Store more convenient to use, by means of the OpenReplay tool running on a server of the entity that operates the Online Store, located in the European Union; content typed into form fields is not recorded and recordings are deleted after 14 days at the latest;

  • creating statistics that help to understand how Customers of the Online Store use the websites, which makes it possible to improve their structure and content, via the Google Analytics analytical tools, whose administrator is Google Ireland Ltd. with its registered office in Ireland; Google's privacy protection policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;

  • determining the Customer's profile in order to display tailored materials to them in advertising networks, using the Google Adwords online advertising tool, whose administrator is Google Ireland Ltd. with its registered office in Ireland; Google's privacy protection policy is available at the following links: http://www.google.com/intl/pl/policies/privacy/, http://www.google.com/intl/pl/policies/privacy/partners/;

  • for the purpose of surveying opinions on the level of Customer satisfaction with the purchase made, or covering purchases with buyer protection by Trusted Shops GmbH with its registered office in Cologne;

  • running advertising campaigns, measuring their effectiveness and displaying tailored advertisements on Facebook and Instagram, by means of the Meta Pixel tool, whose provider is Meta Platforms Ireland Ltd. with its registered office in Ireland; the tool is activated only after you consent to marketing Cookies; the Meta privacy policy is available at the following link: https://www.facebook.com/privacy/policy/;

  • running advertising campaigns, measuring their effectiveness and displaying tailored advertisements on TikTok, by means of the TikTok Pixel tool, whose provider is TikTok Technology Ltd. with its registered office in Ireland; the tool is activated only after you consent to marketing Cookies; the TikTok privacy policy is available at the following link: https://www.tiktok.com/legal/page/eea/privacy-policy/en;

  • playing YouTube videos embedded on the “About the brand” page; the provider of the YouTube service is Google Ireland Ltd. with its registered office in Ireland; the videos are loaded only after you consent to functional Cookies; Google's privacy policy is available at the following link: https://policies.google.com/privacy;

  • presenting information about the PayPo deferred payment on the “PayPo” page, which embeds a frame from the start.paypo.pl service operated by PayPo sp. z o.o. with its registered office in Warsaw; the frame stores a technical Cookie of that service;

  • protecting the Online Store against attacks and automated traffic and delivering its pages efficiently, by means of the Cloudflare services, whose provider is Cloudflare, Inc. with its registered office in the USA; these Cookies belong to the necessary category; the Cloudflare privacy policy is available at the following link: https://www.cloudflare.com/privacypolicy/.

To learn about the rules for using Cookies, we recommend that you read the privacy policies of the companies indicated above.

Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information may be retained about how you navigate the network or about the time you spend using the website.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at the link https://www.google.com/ads/preferences/.

Using your web browser settings or the service configuration, you can change the Cookie settings yourself and at any time, specifying the conditions for their storage and for Cookies to access your device. You can change these settings so as to block the automatic handling of Cookies in your web browser settings, or to be informed each time they are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in the settings of your software (web browser).

Services

The Customer may receive commercial information from the Seller in the form of messages sent to the e-mail address provided by the Customer (Newsletter service). To this end, a valid e-mail address must be provided or the appropriate field in the registration form or Order form must be activated. The Customer may withdraw consent to receiving commercial information at any time. The agreement for the provision of the Newsletter service is concluded for an indefinite period and is terminated when the Customer sends a request to remove their e-mail address from the Newsletter subscription or unsubscribes using the link contained in a message sent as part of the Newsletter service.

List of Cookies and changing your consent

Below is the current list of Cookies and similar technologies used in the Online Store, grouped by category, with the provider, purpose and storage period. Cookies other than the necessary ones are stored only after you give your consent. You can change or withdraw your consent at any time: Cookie settings.