Privacy Policy
1. Data Controller
The data controller for the personal data of users of the online store is Rower Express Serhii Shapoval, located at Aleja Jana Pawla II 43A, 01-001 Warszawa, VAT number: 5223291356, REGON: 528051508. Personal data is processed in accordance with applicable laws, particularly with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) dated April 27, 2016.
2. Scope of Collected Data
The online store collects users' personal data to fulfill orders, provide services, offer customer support, and for contacting users. The following data may be collected:
- Name and surname
- Delivery address
- Email address
- Phone number
- Payment information (if applicable)
3. Purpose of Data Processing
Personal data is processed for the following purposes:
- Order fulfillment and product delivery.
- Contacting customers in relation to order processing.
- Handling complaints and returns.
- Sending commercial information (newsletter) — only if consent is given.
- Fulfilling obligations under applicable laws (e.g., accounting document storage).
4. Legal Basis for Data Processing
The processing of personal data is based on:
- Article 6(1)(b) GDPR – data processing necessary for the performance of a contract (order fulfillment).
- Article 6(1)(c) GDPR – data processing for compliance with legal obligations (e.g., accounting documentation).
- Article 6(1)(a) GDPR – user consent for data processing for marketing purposes (newsletter).
5. Data Recipients
Personal data may be shared with entities cooperating with the Data Controller, as required to fulfill orders, such as courier services, payment processors, and governmental authorities authorized by law.
6. User Rights
Users have the right to:
- Access their personal data and receive a copy of it.
- Correct, delete, or limit the processing of their data.
- Object to data processing.
- Transfer their data to another data controller.
- Withdraw consent to data processing at any time (if processing is based on consent).
- File a complaint with a supervisory authority if they believe their data is being processed unlawfully.
7. Data Retention
Users' personal data is retained for the duration necessary to fulfill the order and as required by law (e.g., accounting documents must be stored for 5 years).
8. Contact for Personal Data Inquiries
Any inquiries regarding the processing of personal data should be sent to the following email address: rowerexpress.pl@gmail.com, or by mail to the company's address: Aleja Jana Pawla II 43A, 01-001 Warszawa.