Privacy Policy

  1. The Owner of this website places the highest priority on protecting Users' personal data. We make every effort to ensure that Users feel safe when providing their personal data when using the website.
  2. User is a natural person, legal person or organizational unit without legal personality, to which the law grants legal capacity, using electronic services available on the website.
  3. This privacy policy explains the principles and scope of processing of the User's personal data, the User's rights, the obligations of the data controller, and informs about the use of cookies.
  4. The Administrator uses state-of-the-art technical and organizational measures to ensure a high level of protection of processed personal data and protection against access by unauthorized persons.

I. PERSONAL DATA CONTROLLER

The controller of personal data is LOCALGROWTH SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at ul. SZCZĘSNA 26, 02-454 WARSAW, entered into the register of entrepreneurs maintained by the District Court in Warsaw, Commercial Division, under the KRS number: 0000966086, Tax Identification Number (NIP): 5223223277 (hereinafter referred to as the "Owner").

II. PURPOSE OF PERSONAL DATA PROCESSING

  1. The Administrator processes the User's personal data for the purpose of:
    • Customer Account Management – We offer the ability to create a Customer Account in our online store, allowing you to track your order history and monitor the status of current orders. Creating a Customer Account is required to place an order in the app. Data processing is necessary to fulfill the Customer Account agreement, in accordance with the terms and conditions described in our store's terms and conditions.
    • Sales Processing – Your personal data is necessary to receive payment, deliver ordered goods, issue sales documents, and settle transactions. We process your data because it is necessary to perform the sales contract and comply with legal obligations related to tax regulations.
    • Accepting complaints and withdrawals – in the event of a complaint or return, we process your data to process these requests, i.e., to process the complaint or return. This is necessary to perform the contract and meet legal obligations related to the seller's liability for the conformity of the goods with the contract.
    • Posting product reviews – We allow you to post reviews of products available in our store. Data processing is necessary to fulfill the agreement for the provision of the review service.
    • Using additional services – We offer additional services, such as delivery, installation, and configuration of devices. Data processing is necessary for the performance of the contract concluded when using these services.
    • Marketing – We want to learn about your opinions on our products and services, promote our offers, and provide personalized offers and promotions. We process data from our marketing database based on our legitimate interest, in accordance with Recital 47 of the GDPR.
    • Profiling in Marketing – To conduct marketing, we conduct profiling, which does not affect your rights or freedoms. The basis for data processing is our legitimate interest in promoting our products and services.
    • Marketing communications – if you consent to receiving marketing communications (including newsletters) electronically or by telephone, we will use your email address and/or phone number to send you commercial offers from our stores. The basis for data processing is your voluntary consent, which you can express, for example, by subscribing to our newsletter.
    • Push notifications – You can opt in to receiving push notifications from the app. You can opt out of receiving notifications at any time by changing the app settings or your mobile device's operating system settings.
    • Providing clarifications – If you ask us a question or raise a concern, we process your data to provide an answer and ensure the best possible experience. The basis for data processing is our legitimate interest in providing comprehensive information and a positive experience to our customers and users.
  2. This means that these data are needed in particular to: a. register on the website; b. conclude a contract; c. make settlements; d. deliver the goods or provide services ordered by the User;
  3. The User may also consent to receiving information about new products and promotions, which will result in the Administrator processing personal data in order to send the User commercial information regarding, among others, new products or services, promotions or sales.
  4. Personal data are also processed as part of the fulfilment of legal obligations incumbent on the data controller and the performance of tasks in the public interest, including tasks related to security and defence or the storage of tax documentation.
  5. Personal data may also be processed for the purposes of direct marketing of products, securing and pursuing claims or defending against claims of the User or a third party, as well as marketing of services and products of third parties or own marketing that is not direct marketing.

III. TYPE OF DATA

  1. The Administrator processes the following personal data, the provision of which is necessary for: a. registration on the website:
    • name and surname;
    • e-mail address; b. making purchases via the website:
    • name and surname;
    • sex;
    • delivery address;
    • phone number;
    • e-mail address; c. Data provided by the User optionally:
    • date of birth;
    • PESEL number (in case of requesting an invoice);
    • Tax Identification Number (in the case of a request to issue an invoice for an entrepreneur).

IV. LEGAL BASIS FOR PERSONAL DATA PROCESSING

  1. Personal data are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, pp. 1–88, hereinafter referred to as the "GDPR Regulation".
  2. The Administrator processes personal data only after obtaining the User's consent, expressed at the time of registration on the website or at the time of confirmation of a transaction made on the website.
  3. Consent to the processing of personal data is entirely voluntary, however, failure to do so will prevent you from registering on the website and making purchases via the website.

V. USER RIGHTS

  1. The user may at any time request information from the controller about the scope of personal data processing.
  2. Users may request correction or rectification of their personal data at any time. Users can also do so themselves by logging in to their account.
  3. The User may withdraw their consent to the processing of their personal data at any time, without providing a reason. The request to not process the data may concern a specific processing purpose indicated by the User, e.g., withdrawing consent to receive commercial information, or may apply to all data processing purposes. Withdrawing consent for all processing purposes will result in the User's account being deleted from the website, along with all of the User's personal data previously processed by the controller. Withdrawing consent will not affect any actions already taken.
  4. The User may request that the Administrator delete their data at any time, without providing a reason. Requesting data deletion will not affect any actions previously taken. Data deletion simultaneously deletes the User's account, along with all personal data previously stored and processed by the Administrator.
  5. The User may object to the processing of personal data at any time, both with respect to all of the User's personal data processed by the Controller, as well as only to a limited extent, for example, with respect to processing for a specific purpose. The objection will not affect any actions previously taken. Filing an objection will result in the deletion of the User's account, along with all personal data previously stored and processed by the Controller.
  6. The user may request that the processing of personal data be restricted, either for a specified period of time or indefinitely, but within a specified scope. The controller will be obligated to comply with this request. This request will not affect any actions already taken.
  7. The User may request that the Administrator transfer the User's processed personal data to another entity. To do so, the User should submit a request to the Administrator, specifying the entity to which the User's personal data should be transferred and the specific data the User wishes the Administrator to transfer. After the User confirms their request, the Administrator will electronically transfer the User's personal data to the designated entity. Confirmation of the request by the User is necessary for the security of the User's personal data and to ensure that the request originates from an authorized person.
  8. The Administrator informs the User about the actions taken within one month of receiving one of the requests mentioned in the previous points.

VI. PERSONAL DATA STORAGE PERIOD

  1. In principle, personal data is stored only for as long as necessary to fulfill the contractual or statutory obligations for which it was collected. This data will be deleted immediately if its storage is no longer necessary, for evidentiary purposes, in accordance with civil law, or in connection with statutory retention obligations.
  2. Contract information is retained for evidentiary purposes for a period of three years, starting from the end of the year in which the business relationship with the User ended. Data will be deleted after the statutory limitation period for pursuing contractual claims has expired.
  3. In addition, the administrator may retain archival information regarding concluded transactions, as their storage is related to the User's claims, e.g. under warranty.
  4. If no contract has been concluded between the User and the Owner, the User's personal data is retained until the User's account on the website is deleted. Account deletion may occur as a result of the User's request, withdrawal of consent to the processing of personal data, or objection to the processing of such data.

VII. ENTRUSTING DATA PROCESSING TO OTHER ENTITIES

  1. The Administrator may entrust the processing of personal data to entities cooperating with the Administrator, to the extent necessary to complete the transaction, e.g. to prepare the ordered goods and deliver parcels or to transmit commercial information from the Administrator (this applies to Users who have consented to receiving commercial information).
  2. Apart from the purposes indicated in this Privacy Policy, Users' personal data will not be made available in any way to third parties or transferred to other entities for the purpose of sending marketing materials of these third parties.
  3. Personal data of website users are not transferred outside the European Union.
  4. This Privacy Policy complies with the provisions of Article 13(1) and (2) of the GDPR.