Privacy policy

In connection with the entry into force and the necessity to apply Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “Regulation”), the Seller provides the following information regarding the rules for the processing of your personal data.


The protection of private information concerning users of the website https://polascrew.com (hereinafter referred to as the “Website”) is extremely important to us, and we therefore make every effort to ensure that you are safe when visiting our Website.

 

Please read this document (hereinafter referred to as the “Privacy Policy”) which explains how we protect your personal data when you visit the Website. Each time you use the Website, you are subject to this Privacy Policy, so please read it carefully each time you visit the Website.

 

This privacy policy sets out, among other things, the rules for contacting Polas Crew Sp. z o.o., with its registered office in Laszczki, address: ul. Leśna 1a, 05-090 Laszczki, entered in the Register of Entrepreneurs of the National Court Register by the District Court for Warsaw Śródmieście in Warsaw, 14th Commercial Division of the National Court Register, under KRS number: 0001112377, NIP: 5342680845, REGON: 528963936 (hereinafter referred to as the “Seller”), the rules for the collection, storage, and processing of personal data by the Seller, the sources of personal data, the scope and purpose of personal data processing, the period for which personal data is processed, and the rights of individuals regarding their personal data.

GLOSSARY

The following terms shall be understood as follows:

  • “Privacy Policy” – this should be understood as this document entitled “Privacy Policy”;
  • “Seller” - this should be understood as Polas Crew Sp. z o.o., with its registered office in Laszczki, address: ul. Leśna 1a, 05-090 Laszczki, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Warsaw Śródmieście in Warsaw, 14th Commercial Division of the National Court Register, under KRS number: 0001112377, NIP (Tax Identification Number): 5342680845, REGON (National Business Registry Number): 528963936
  • “Customer” - this should be understood as a natural person acting on their own behalf or on behalf of a legal person or an organizational unit without legal personality but with legal capacity under the law, who has used the Online Store by browsing the website available at https://polascrew.com or by submitting their personal data in order to register an individual Account in the Online Store or place an order in the Online Store, or to subscribe to the Newsletter;
  • “Individual Account” - a panel assigned individually to the Customer after registering their details in the Online Store system, marked with an individual name (login) and password provided by the Customer in the Seller's ICT system, allowing the Customer to use additional features of the Online Store;
  • “Order form” - a form used by the Customer to order Goods offered by the Seller in the Online Store and specify the delivery method, in which the Customer provides the following data: first name, last name, delivery address, e-mail address, telephone number; 
  • “Individual Account Registration” - this should be understood as a form used to register a Customer in the Online Store in order to create an Individual Account via the Online Store, through which the User provides the following personal data: first name, last name, email address, password;
  • “Logging into an Individual Account” – this should be understood as a form used to log the Customer into their Individual Account in the Online Store – after they have completed Registration – through which the Customer provides the following personal data: email address, password;
  • “Services” – means the following actions taken by the Seller as a result of the Customer providing their personal data: sending a Newsletter via email if the Customer agrees to subscribe to the Newsletter or concludes a sales agreement between the Seller and the Customer, or maintaining an individual Account or sending a reply message containing detailed information about products, orders placed by the Customer, or technical problems on the website;
  • “Newsletter” – this should be understood as an information bulletin concerning new products and promotions in the Online Store, which the Customer has agreed to subscribe to by entering their email address in the ‘Newsletter’ field on the Online Store website and selecting the “Subscribe” option.

§ 1. Preliminary provisions

1. This Online Store is operated by the Seller.

2. This Privacy Policy shall come into force on July 24, 2024. and specifies, among other things, the rules for contacting the Seller, the rules for the collection, storage, and processing of personal data by the Seller, including data that you may enter via the Online Store website by filling out the Order Form, during the account registration process, or by subscribing to the Newsletter; the sources of personal data collection, the scope and purpose of personal data processing, the period for which personal data is processed, and the rights of individuals regarding their personal data.

3. This privacy policy is not directed at persons under the age of 16, and we do not knowingly collect personal data from such persons. 

4. The Online Store may contain external links (hyperlinks) to websites, plug-ins, or applications belonging to other entities. Clicking on these links or granting permission to connect will result in your data (IP address and browser ID) being transferred to the administrator of the website in question, who becomes the co-administrator of your personal data in this respect (in accordance with the CJEU judgment in case C-40/17). Therefore, after leaving our Online Store website, we encourage you to read the privacy policy of each website you visit in this way.

5. By accepting this Privacy Policy, the Customer declares that they have read its content, accept its terms and conditions, and undertake to comply with them.

§ 2. Cookies

1. The Website uses cookies. When the User enters the Website, a message appears informing them about the Website's use of cookies. The message is visible to the User until they accept the message about the Website's use of cookies. Acceptance is done by the User clicking on the appropriate field.

2. Detailed information about cookies, explaining what they are and how they are used by the Website, is available when the User clicks on the field labeled: “Cookie Policy” appearing simultaneously with the message about the use of Cookies by the Website and in the “Cookie Policy” tab located on the Website.

§ 3. Personal data

1. Personal data is information about an identified or identifiable natural person. Data that has been anonymized in such a way that the data subjects cannot be identified at all or can no longer be identified is not personal data.

2. The administrator of personal data is Polas Crew Sp. z o.o., with its registered office in Laszczki, address: ul. Leśna 1a, 05-090 Laszczki, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Warsaw Śródmieście in Warsaw, 14th Commercial Division of the National Court Register, under KRS number: 0001112377, NIP (Tax Identification Number): 5342680845, REGON (National Business Registry Number): 528963936

3. Dane osobowe są przetwarzane zgodnie z prawem i z uwzględnieniem zasady rzetelności, przejrzystości i adekwatności.

4. Personal data is processed in accordance with the law and in accordance with the principles of fairness, transparency, and adequacy.

5. We may collect, process, store, and transfer various types of your personal data, which we have grouped as follows:

  • Identity Data, including first name, last name, gender, username, or similar identifier.
  • Contact details, including billing address, delivery address, email address, and phone number.
  • Transaction Data, including completed transactions and payments.
  • Technical Data, including IP address, login data, browser type and version, time zone and location settings, plug-in types and versions, operating system, and other technology on the devices you use to access the Website.
  • Account Data, including username and password, and order history. 
  • Usage Data, information about how you use the Online Store website and what Services you use.
  • Marketing and Communication Data, including your preferences for receiving commercial information and communications from us.

1. When you use our Online Store website, it may automatically collect your Technical Data regarding your devices or activities and behavior patterns on the web. We collect this personal data through cookies and other technologies, in accordance with the “Cookie Policy” available on our Online Store website.

§ 4. Purpose and basis for processing your personal data

1. If the User provides personal data, it will be used in accordance with the purpose for which it was provided. Below is a list of the purposes/activities of processing your personal data by category of data, assigned to the legal basis for the processing of personal data.

 

Purpose/processing activity 

Type of personal data

Basis for processing

Creating an individual customer account 

Identity Information

Contact Information

Necessity of processing for the performance of a contract

(Article 6(1)(b) of the GDPR)

Order fulfillment

Identity Information

Contact Information

Account Information

Necessity of processing for the performance of a contract

(Article 6(1)(b) of the GDPR)

Notification of Product Availability

Contact Information

Taking action prior to entering into a contract


(Article 6(1)(b) of the GDPR)

Enabling newsletter subscription

Sending a request to rate the store

Identity Data

Conclusion and performance of the contract

(Article 6(1)(b) of the GDPR)

Consent to the sending of commercial information by electronic means and consent to direct marketing carried out using telecommunications terminal equipment.

(Article 6(1)(a) of the GDPR)

Notification of changes to regulations and policies

Identity Information

Contact Information

Account Information

Necessity of processing for the performance of a contract

(Article 6(1)(b) of the GDPR)

Legal obligation to which we are subject

(Article 6(1)(c) of the GDPR)


Management and security assurance for the Seller and its Online Store (system diagnostics and maintenance, data analysis, testing, server management, and hosting)

Identity Data

Contact Details

Technical Data

Legitimate interests of the controller (conducting business, managing IT processes, ensuring network security, preventing fraud)

(Article 6(1)(f) of the GDPR)

Legal obligation to which we are subject

(Article 6(1)(c) of the GDPR)

Ensuring appropriate content for the online store and advertisements, as well as analyzing the effectiveness of advertising campaigns

Account Data

Usage Data

Marketing and Communication Data

Technical Data

Consent by accepting the message about the use of cookies by the Website, referred to in § 2(2) of this Policy

(Article 6(1)(a) of the GDPR)

Provide the Customer with feedback regarding detailed information about products, orders placed by the Customer, or technical issues on the Website.

Contact Information

Identity Information

Taking action prior to entering into a contract

Necessity of processing for the performance of a contract

(Article 6(1)(b) of the GDPR)

Transfer of data to other entities operating websites, plug-ins, or applications to which external links are provided on our website

Technical Data

Consent by accepting the message about the use of cookies by the Website, referred to in § 2(2) of this Policy

(Article 6(1)(a) of the GDPR)

 

1. Providing personal data is voluntary, however, failure to consent to the processing of personal data makes it impossible to register an individual account and fulfill orders.

2. One of the ways we process personal data is through profiling. We may use your Identity, Contact, Technical, Usage, and Account Data to create profiles of our customers' preferences and, based on these profiles, tailor our services and content to you. This allows us to decide which of our Services may be right for you.

 

§ 5. Sharing your personal data and international transfers

1. For the purposes indicated in the preceding paragraph, we may disclose your personal data to external third parties, such as courier companies, accounting firms, IT companies providing services such as hosting, cloud computing, social media websites, as well as the Tax Office and other public authorities in the Republic of Poland.

2. If the Customer chooses to pay via an external payment system, their data is transferred to the payment operator to the extent necessary to process the payment. 

3. We require all third parties to maintain security measures for your personal data and to process it in accordance with the law. We do not allow our suppliers to use Users' personal data for their own purposes, and we only allow them to process it for specific purposes and in accordance with our instructions.

4. Due to the fact that we use the services of other providers, e.g. in the field of IT support, your personal data may be transferred outside the EEA. In addition, your personal data is transferred outside the EEA when you place an order for delivery to a country that is not a member of the European Economic Area. In such cases, we ensure a similar level of protection for this data by providing at least one of the following safeguards:

    • transfer of personal data to countries recognized by the European Commission as providing adequate protection of personal data,
    • the use of data protection clauses adopted by the European Commission, guaranteeing the same level of protection as in the European Union.

    § 6. Data security

    1. The Seller processes the Customer's personal data in compliance with all rules regarding the security of personal data processing, meeting the requirements set by law. We have implemented the necessary security measures to protect your data from accidental loss, unauthorized access or use, alteration, or disclosure. We restrict access to your data to employees, agents, service providers, and other third parties to whom such disclosure is necessary from the point of view of our business activities. They will process your personal data only in accordance with the Seller's instructions and are bound by confidentiality obligations.

    2. The seller has adopted appropriate procedures to deal with suspected breaches. We will notify you and the relevant supervisory authority of a breach when we are legally required to do so.

     

    § 7. Data processing time

    1. Your personal data will be stored for no longer than is necessary to fulfill the purpose for which it was collected (i.e., the time necessary to complete an order or maintain a customer account), unless a longer period is necessary to fulfill our legal, accounting, or reporting obligations, and for the period necessary to pursue claims under the provisions of the Civil Code. 

    2. We process personal data for accounting and tax purposes for 5 years from the end of the calendar year in which the tax obligation arose. 

    3. Under certain circumstances, you may request the deletion of your personal data in accordance with § 8.

    4. In certain circumstances, we may anonymize your personal data (ensuring that it is irreversibly impossible to identify an individual) for research and statistical purposes, in which case we may store this data for an indefinite period of time without further obligation to notify you.

     

    § 8. Customers' rights related to personal data protection. Complaint to the supervisory authority

    1. In certain situations, the Customer has the right to request the Seller to view, correct, change, restrict, rectify, or delete their personal data administered by the Seller, as well as the right to object to the processing of their personal data by the Seller.  To do so, please send an email to: office@polascrew.com

    2. Please note that we will not always be able to comply with your request to delete your personal data, namely due to specific legal obligations or the pursuit of claims. In such cases, you will be notified after submitting such a request. If you would like more information about the specific rights set out in this paragraph, please contact the Seller using the contact details provided.

    3. The customer has the right to withdraw their consent to the processing of personal data at any time by sending a message to office@polascrew.com or by clicking on the deactivation link sent in each Newsletter or other marketing message. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. This means that the withdrawal of consent applies to the future, not to data processing that took place in the past, between the time of granting and withdrawing consent.

    4. The Customer has the right to request the Seller to transfer their personal data administered by the Seller to another personal data controller, provided that technical and organizational requirements allow for the transfer of such personal data. 

    5. The Seller shall, without undue delay – and in any case within one month of receiving the request – provide the Customer who has submitted one of the requests listed in this paragraph with information about the actions taken in connection with the request, or about a possible extension of the deadline due to the nature of the request or the number of requests, or about the reasons for not taking action, and about the possibility of lodging a complaint with the supervisory authority and seeking legal protection before a court. 

    6. The exercise of the rights set out above is free of charge, but the Seller may charge the Customer a reasonable fee if the request or requests are manifestly unfounded, repetitive, or excessive. In such cases, we may also refuse to comply with the request.

    7. In order to fulfill specific requests, the Seller may request certain information from the Customer to verify their identity and ensure that they are exercising their specific rights. This is a security measure to ensure that personal data is not disclosed to unauthorized persons.

    8. A customer whose personal data is administered by the Seller has the right to lodge a complaint with a supervisory authority, in particular in a Member State:

    a. your usual place of residence,

    b. your workplace, or

    c. the place where the alleged infringement was committed,

     

    if they believe that the processing of their personal data violates the GDPR. Complaints may be sent by post to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, or by email to kancelaria@uodo.gov.pl.

     

    § 9. Seller's liability and complaint procedure

    1. The Seller, acting with due diligence, ensures the correct functioning of the Website, but shall not be liable for technical limitations in the use of the Website resulting from the technical condition of the User's Equipment and resulting from a failure of the data transmission (Internet connection) used by the User.

    2. The seller asks that any irregularities related to the functioning of the Website be reported to the following email address: office@polascrew.com

    3. The Seller shall consider the complaints referred to in the preceding paragraph within 7 days of their submission, informing the User of the positive or negative outcome of the complaint, each time stating the reasons for the decision.

    4. The user is also entitled to use extrajudicial means of dealing with complaints. In the event of a dispute involving a consumer, the ODR online platform, available at: http://ec.europa.eu/consumers/odr/

     

    § 10. Final provisions, changes to the Privacy Policy, notification of changes 

    1. The Seller reserves the right to amend this Privacy Policy, which amendment shall take effect on the date of publication of the new Privacy Policy on the Online Store website. Any significant changes to this Policy will be communicated by means of an appropriate notice on the Online Store website.

    2. The Seller's contact details are provided in section 2 of the Glossary of this Privacy Policy.

    3. For any matters related to the processing of your personal data by the Seller, please contact us at the following e-mail address: office@polascrew.com or at the phone number indicated on the Website in the “Contact us” tab.