WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?

The Administrator of your personal data, according to the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), is ULTRAS-PIRO (hereinafter also referred to as “ADO”).

HOW CAN YOU CONTACT US?

You can contact ADO via email (pyroacab@gmail.com) or by sending written correspondence to the address of the business activity.

WHAT DATA DO WE PROCESS?

We process the following personal data:

• Name, surname,
• Delivery address,
• Contact details, such as phone number, email address, VAT identification number (NIP), address details – in case an invoice is requested by a business.

If you withdraw from the contract or your complaint is recognized, and the refund is made directly to your bank account, we ask you to provide your bank account number to process the refund.

WHAT IS THE PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

ADO processes your personal data for the following purposes:

• To conclude and fulfill obligations arising from contracts (Article 6(1)(b) of the GDPR – processing for the performance of a contract);
• Issuing invoices and receiving payments (Article 6(1)(b) and (c) of the GDPR – processing for the performance of a contract and fulfilling a legal obligation);
• Debt collection and defense against claims (Article 6(1)(f) of the GDPR – legitimate interests);
• Handling complaints and guarantees (Article 6(1)(c) of the GDPR – fulfilling a legal obligation);
• Collecting, storing, and sharing retention data with appropriate authorities (Article 6(1)(c) of the GDPR);
• Enabling users to exercise all consumer rights (e.g., contract withdrawal, warranty).

WHO CAN ACCESS YOUR PERSONAL DATA?

The recipients of personal data are ADO employees. Additionally, under relevant agreements, data may be shared with entities cooperating with ADO in fulfilling services arising from the contract, specifically:

• Logistics companies (e.g., courier companies),
• Debt collection agencies, law firms we collaborate with,
• Our accounting services – in case an invoice is issued,
• Entities providing hosting services for JEST IMPREZKA Joanna Pszeniczny.

We offer our Users online payment systems, especially prepayment. Payment data is obtained from external payment service providers and credit agencies with whom we cooperate to process payments and verify solvency. We only share the necessary data for payment processing with our payment service providers. Payment data includes the preferred payment method, billing address, IBAN and BIC, or account number and bank code. Payment data also includes other information directly related to payment processing, such as details used by external payment service providers for identification, e.g., PayU ID (if the user makes a payment via PayU).

In general, these service providers may process users’ data on our behalf only under specific conditions. If they act as processors for us, they access user data only to the extent and for the period necessary to provide a particular service.

Additionally, ADO may share data with public authorities authorized to access retention data (data will only be shared to the extent truly necessary and required by the applicable laws, and in accordance with those laws).

DATA PROCESSING TIMEFRAMES:

We store your personal data until your User account is deleted from the Service. Your account may be deleted upon your request, in case you withdraw consent for data processing, object to the processing of your personal data, or request its deletion.

Only archived information about your transactions will remain in our system, stored in connection with your legal claims, e.g., warranty rights, and to comply with applicable legal regulations.

DATA PROTECTION:

ADO ensures that it applies appropriate technical and organizational measures to safeguard the security of processed personal data from disclosure. This applies to the order placement process and customer login. We use the SSL (Secure Socket Layer) encryption system. Additionally, our websites and other systems are secured by technical and organizational measures against the loss, destruction, access, alteration, or dissemination of users’ data by unauthorized persons. Relevant procedures and IT system protections have been implemented.

RIGHTS RELATED TO THE PROCESSING OF YOUR PERSONAL DATA:

Individuals whose personal data is processed by ADO have the right to request access to their personal data, rectification, deletion, or restriction of processing, as well as to object to the processing and request data portability. Additionally, they have the right to withdraw consent and lodge a complaint with the supervisory authority. The supervisory authority is the Inspector General for Personal Data Protection/President of the Office for Personal Data Protection.

Providing personal data is entirely voluntary; however, failure to provide data such as name, delivery address, and phone number will prevent us from contacting you to fulfill the contract.

ADDITIONAL INFORMATION:

ADO does not perform profiling related to the processing of your personal data, nor does it process personal data automatically in a way that affects your rights. ADO does not transfer personal data to countries outside the European Economic Area.