TABLE OF CONTENTS:
- 1. GENERAL PROVISIONS
- 2. SCOPE AND PURPOSES OF DATA COLLECTION AND LEGAL BASES
- 3. RECIPIENTS OF DATA AND DATA TRANSFER
- 4. DATA RETENTION PERIOD
- 5. RIGHTS OF DATA SUBJECTS
- 6. COOKIES AND ANALYTICAL TOOLS
- 7. FINAL PROVISIONS
The online store www.frogum.com places great emphasis on protecting the privacy and personal data of its users. This Privacy Policy outlines how we collect, process, use, and protect personal data when you visit our online store and use our services. We strictly comply with the provisions of the General Data Protection Regulation (GDPR) and applicable national data protection laws.
1. GENERAL PROVISIONS
1.1. The online store available at www.frogum.com is operated by FROGUM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Grodzisk Mazowiecki (address: ul. Cieszyńska 22, 05-825 Grodzisk Mazowiecki, Poland); entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under KRS number: 0000963251; share capital: PLN 390,000; NIP (Tax ID): 5291807370; REGON: 362379750, email: b2c@frogum.com, telephone number: +48 2222 82 808 (hereinafter referred to as the "Administrator").
1.2. The Administrator acts as the controller of users' personal data within the meaning of the General Data Protection Regulation (GDPR).
1.3. Providing personal data by the user is entirely voluntary, yet necessary for utilizing specific electronic services (such as the customer account, order form, newsletter) or concluding a sales contract.
1.4. Contact with the Administrator's Data Protection Officer is available via email at patrycja@frogum.com.
2. SCOPE AND PURPOSES OF DATA COLLECTION AND LEGAL BASES
2.1. Personal data is processed by the Administrator for various purposes related to the operation of the online store, based on the provisions of the GDPR:
2.1.1. Contract performance and order processing: Processing is necessary for the performance of a sales contract or to take steps prior to entering into a contract (Article 6(1)(b) GDPR). This includes order details, delivery and billing addresses, and payment data.
2.1.2. Customer account ("My Garage" account): Processing is based on your consent (Article 6(1)(a) GDPR) for the purpose of providing user functionalities and managing your order history.
2.1.3. Newsletter and direct marketing: Processing is based on your consent (Article 6(1)(a) GDPR) for the purpose of sending product information, news, and promotional offers via email.
2.1.4. Compliance with legal obligations: The Administrator processes data to fulfill tax and accounting retention obligations (Article 6(1)(c) GDPR).
2.1.5. Legitimate interests: Processing may also be carried out to safeguard the legitimate interests of the Administrator (Article 6(1)(f) GDPR), in particular for the establishment, exercise, or defense of legal claims, as well as for fraud prevention and ensuring IT security.
3. RECIPIENTS OF DATA AND DATA TRANSFER
3.1. Users' personal data may be disclosed to external service providers who assist the Administrator in business operations. These include:
3.1.1. Transport and courier companies for order fulfillment and delivery.
3.1.2. Payment service providers (e.g., PayPro S.A. / Przelewy24.pl) for online payment processing.
3.1.3. IT, hosting, and software service providers (including the operator of the Magento e-commerce platform).
3.1.4. Accounting, legal, and tax advisors.
3.2. Transfer of data to third countries outside the European Union takes place only in compliance with legal regulations and ensuring an adequate level of protection (e.g., through EU Standard Contractual Clauses).
4. DATA RETENTION PERIOD
4.1. Personal data is stored only for as long as necessary to fulfill the respective processing purposes or as required by statutory retention periods (e.g., under commercial and tax law, typically 6 to 10 years).
4.2. Data processed based on consent will be stored until such consent is withdrawn.
5. RIGHTS OF DATA SUBJECTS
5.1. As a data subject, you have the following rights under the GDPR regarding the Administrator:
5.1.1. Right of access (Article 15 GDPR).
5.1.2. Right to rectification of inaccurate data or completion (Article 16 GDPR).
5.1.3. Right to erasure ("right to be forgotten", Article 17 GDPR).
5.1.4. Right to restriction of processing (Article 18 GDPR).
5.1.5. Right to data portability (Article 20 GDPR).
5.1.6. Right to object to processing (Article 21 GDPR).
5.1.7. Right to withdraw consent at any time with effect for the future (Article 7(3) GDPR).
5.1.8. Right to lodge a complaint with a supervisory authority for data protection (Article 77 GDPR).
6. COOKIES AND ANALYTICAL TOOLS
6.1. The online store uses cookies (small text files stored on your device) to ensure proper website functionality, enhance user experience, and conduct statistical analysis.
6.2. We use analytical and marketing tools (e.g., Google Analytics and Meta Pixel) to understand user behavior and optimize our marketing activities. These tools may use cookies. Such usage is based on your consent or our legitimate interest in optimizing our services.
6.3. Users can prevent the storage of cookies by adjusting their browser settings or delete existing cookies. However, this may limit the functionality of the online store.
7. FINAL PROVISIONS
7.1. The Administrator reserves the right to update this Privacy Policy to reflect changing legal frameworks or technical developments.
7.2. For any questions regarding data protection or to exercise your rights, you can contact us at any time via email at b2c@frogum.com.