Privacy policy

1. Identification and contact information
   • first and last name,
   • company name, Tax ID (NIP), National Business Registry Number (REGON)
   • job title, position, or role within the organization,
   • email address, phone number,
   • billing and shipping information.
     We use this data specifically to register accounts, fulfill orders, issue accounting documents, handle business communications, and verify users on the Website.
2. Account and User Activity Data
   • username, encrypted password,
   • assigned system permissions (e.g., company account administrator),
   • login history, changes to the user account,
   • activity in the B2B dashboard (e.g., products viewed, orders placed).
     We process this data to ensure account security, personalize the user interface, and enable full order processing.
3. Transaction and Commercial Data
   • order history,
   • invoice numbers and dates, payment information and status,
   • information about deliveries, returns, or complaints,
   • correspondence related to order fulfillment.
     This data is necessary for the proper performance of contracts, customer service, and compliance with legal obligations (e.g., tax obligations).
4. Marketing and Newsletter Data
   • personal or company data;
   • email address;
   • information regarding marketing consents;
   • data on user preferences and industry category;
   • data on interactions with the newsletter (e.g., opening messages).
     Used to send personalized commercial information, promotions, product catalogs, and news in accordance with the consent provided.
5. Data related to analytical and statistical activities
   Collected automatically when using the Services.
   • IP address,
   • data about the browser, operating system, and device,
   • pages visited, visit duration, navigation paths,
   • session ID, login token,
   • browser language, time zone,
   • data collected by Google Analytics, Facebook Pixel, or other analytics tools.

Customer Service and Contract Fulfilment

Operation of the website

Security

Recruitment

Marketing

1. Data processors acting on behalf of the controller
   Personal data may be entrusted to external service providers acting on our behalf to the extent necessary to perform the services commissioned. This applies, among others, to:
   • courier companies and logistics operators,
   • providers of IT, hosting, data security, and ERP/B2B systems,
   • entities responsible for sending newsletters, text messages, and email campaigns,
   • payment processing companies,
   • security companies;
   • external accounting firms and tax advisors,
   • providers of analytics, remarketing, and advertising systems (e.g., Google, Meta),
   • entities providing marketing, design, research, and analytics services,
   • companies supporting customer service and complaint handling.
2. Sharing personal data with independent data controllers
   • authorized public authorities (e.g., the police, the prosecutor’s office, tax authorities);
   • law firms and consulting firms;
   • insurers;
   • lending institutions;
   • manufacturers and warranty providers;
   • business partners.
3. Transfer of Data Outside the EEA (Third Countries)
   When using the services of certain technology and marketing providers, personal data may be transferred outside the European Economic Area (e.g., to the U.S.). This applies in particular to:
   • Google LLC (Google Analytics, Google Ads, Consumer Reviews),
   • Meta Platforms, Inc. (Facebook, Instagram, Facebook Pixel),
   • providers offering integrated “cloud” services (e.g., Amazon Web Services, Microsoft Azure),
   • email and analytics service providers with servers outside the EEA.
     When transferring data to third countries, we limit the scope of the transferred data to the minimum necessary to achieve the specific purpose (e.g., IP address, cookies, technical device data).
4. External Websites
   The websites may contain links to external websites or applications (e.g., manufacturer catalogs, product configurators, video tools). Use of these websites is subject to their own terms of service and privacy policies. The controller is not responsible for the actions of such websites with regard to the processing of personal data.

• the purpose of data processing,
• the type of data being processed and its sensitivity,
• the legal basis for processing,
• applicable laws (e.g., tax, accounting, civil law),
• potential claims and their statutes of limitations,
• consents given or objections raised by the data subject.
  
  In particular, personal data:
• related to the performance of a contract (e.g., maintaining an account on the Website, fulfilling orders, customer service) are retained for the entire duration of the contract, and after its termination—for the period necessary to settle transactions and safeguard against potential claims.
• subject to documentation requirements (in particular, accounting and tax requirements) are stored in accordance with national law—for as long as necessary to fulfill obligations toward public administration authorities.
• Data processed for marketing, analytical, and customer service purposes (including handling inquiries and contact forms) is retained until consent is withdrawn or an objection is raised.
• Data entrusted to us based on the user’s consent (e.g., newsletter subscription, participation in promotional campaigns) is processed until consent is withdrawn or the purpose for which consent was granted ceases to exist.
• Technical and statistical data (e.g., system logs, cookie identifiers) are stored until their analysis is complete or until they are no longer needed for security purposes.
  In cases where personal data may be relevant to legal, administrative, or complaint proceedings, we retain it for the period necessary to safeguard the rights and interests of the controller or the user.

• tailoring marketing content and commercial offers to the user’s interests and preferences,
• segmenting customers,
• improving the product offering and customizing communications,
• delivering personalized advertising campaigns,
• optimizing the Website’s performance.

• access your personal data, including the right to receive a copy of it and information about the scope and purposes of processing,
• to have your data corrected if it is inaccurate or incomplete,
• to have your personal data erased (the so-called “right to be forgotten”) if there is no longer a legal basis for its further processing,
• to restrict processing, e.g., when you contest the accuracy of the data or the legitimacy of its further processing,
• objection to data processing based on our legitimate interest—for example, in situations where you want us to stop using your data for analytical, statistical, or profiling purposes,
• object to the processing of your data for direct marketing purposes, including profiling—once you object, your data will no longer be used for this purpose,
• withdrawal of consent—at any time, without affecting the lawfulness of processing carried out prior to such withdrawal,
  To exercise any of the above rights, you may contact us using the contact information provided in this Policy (see Section 2). To ensure security and compliance with the GDPR, we may ask you to provide additional information to verify your identity.