1. Personal Data Controller
The Personal Data Controller is Dataland Sp. z o.o. Wiślańska 26, 43-430 Skoczów, entered into the Register of Entrepreneurs of the National Court Register (KRS) maintained by the District Court in Bielsko-Biała, 8th Commercial Division of the National Court Register under KRS number 0000309832, NIP (Tax ID): 5482559919, REGON (Business ID): 240940645, share capital: PLN 50,000.00 (hereinafter: the "Controller").
-
In matters regarding your personal data, you may contact us via the following e-mail address: gb@4-bike.pl
The Controller has not appointed a Data Protection Officer (DPO).
2. Purposes and Grounds for Data Processing
Personal data are processed on the basis of:
-
Art. 6(1)(b) of the GDPR – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
-
Art. 6(1)(c) of the GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject (e.g., tax and accounting obligations).
-
Art. 6(1)(a) of the GDPR – the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
-
Art. 6(1)(f) of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Controller (e.g., establishing, investigating, or defending against claims).
3. Scope of Processed Data
The Controller, through the Website and other forms of communication, collects and processes the personal data of Users specified below, provided during the registration processes on the Website:
-
name and surname
-
e-mail address
-
phone number
-
delivery address
-
payment data
-
IP address
The processing of your personal data allows us to provide services, including maintaining your account, fulfilling orders, contacting you regarding the performance of the agreement, and sending marketing information (including the newsletter). Personal data will be stored for the duration of the agreement and for the period required by applicable law, taking into account the statute of limitations for claims and tax obligations.
Personal data processed on the basis of your consent will be stored until such consent is withdrawn.
The User has the right to access and rectify their personal data at any time, as well as to request the Controller to immediately erase them ("the right to be forgotten").
Requests regarding the processing of personal data may be submitted via e-mail to the Personal Data Controller’s address: gb@4-bike.pl
4. Data Recipients
Data may be transferred to the following entities:
-
Payment system operators
-
Courier and postal companies
-
Hosting and IT service providers
-
Google LLC – in the scope of analytical services (Google Analytics) with the application of EU Standard Contractual Clauses.
5. Data Retention Period
-
data related to order fulfillment – up to 6 years,
-
data for marketing purposes – until the consent is withdrawn,
-
data from cookies – up to 24 months or until deleted by the user.
6. Rights of Data Subjects
Every person whose data is being processed has the right to:
-
Access their personal data.
-
Rectify (correct) their personal data.
-
Erase their data ("right to be forgotten").
-
Restrict the processing of their data.
-
Data portability (transferring data to another controller).
-
Object to the processing of data based on a legitimate interest of the Controller.
-
Withdraw consent at any time (if processing is based on consent), without affecting the lawfulness of processing based on consent before its withdrawal.
-
Lodge a complaint with the President of the Personal Data Protection Office (UODO) if they believe the processing violates the provisions of the GDPR.
We do not make decisions in an automated manner, and we do not profile data.
7. Cookies
The Website uses cookies to ensure its proper functioning, for analytical purposes, and for marketing. Users can manage their cookie settings through their web browser.
-
technical cookies – essential for the proper functioning of the website,
-
analytical cookies
-
functional cookies – e.g., shopping cart management, logging in.
The User can independently manage cookies through their browser settings or via the "Manage cookies" button available on the website.
8. Newsletter
The newsletter is sent only after obtaining consent. The User may withdraw their consent at any time by clicking the unsubscribe link in the message or by contacting the Controller.
The newsletter may contain marketing content regarding the Controller's products.
9. External Links
The Website may contain links to other websites that are not operated by the Controller. The Controller is not responsible for the privacy practices or the content of these external websites. We encourage Users to review the privacy policies of any third-party sites they visit.
10. Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy at any time. Any changes will be published on this page, and the effective date at the beginning of the document will be updated. In the event of significant changes, the Controller may provide additional notification (e.g., via email or a pop-up on the Website).