Data Protection Policy

Sulima Sp. z o. o. Sulima Sp. z o.o. ul. Esperanto 14a/26 01-049 Warsaw NIP 527-23-11-716, REGON 016319321, KRS 0000098842 District Court for the City of St. Petersburg. Sulima Sp. z o. o. (hereinafter: “Sulima Sp. z o. o.” or “Administrator”) is a company registered with the District Court for the Capital City of Warsaw in Warsaw XII Commercial Division of the National Court Register Share capital: PLN 165,000 (hereinafter: “Sulima Sp. z o. o.” or “Administrator”) processes personal data within the meaning of Regulation 2016/679 of the European Parliament and of the Council of the European Union of April 27, 2016. on the protection of individuals about the processing of personal data and the free movement of such data and the repeal of Directive 95/46/EC (hereinafter: “GDPR”).

 

§1. General Information

(1) The administrator of the personal data is Sulima Sp. z o. o., 01-049 Warsaw, 14A/26 Esperanto St.

2 The Administrator can be contacted:

– in writing, to the address: Sulima Sp. z o. o. Kaliska 143, 87-840 Lubien Kujawski
– via e-mail to: sulima@sulima.pl or sklep@sulima.pl
– by phone at: +48 24 355 87 50

3 The Administrator has not appointed a Data Protection Officer.

(4) The administrator informs that there is no statutory obligation to provide personal data, however, the obligation may arise from special regulations. The consequence of not providing personal data may be the inability to provide services, in particular the inability to conclude a contract for the sale of goods in the online store.

§2. Detailed information

(1) Personal data shall be processed to provide the service electronically, in particular, maintaining the customer’s account in the store, as well as concluding and executing sales contracts, including payment for purchased goods and granting discounts, delivery of goods, sending notifications about the execution of orders, implementing the complaint process and providing proper customer service, tailoring the advertising offer to the needs of customers, presenting advertisements and sending commercial information, handling requests and complaints, expressing public opinion about purchased goods, enabling contact between buyers and seller.

(2) The legal basis for the processing of personal data may be the acceptance of the rules and regulations of the online store www.sklep.sulima.pl, the need to take action at the request of a person (Article 6(1)(b) RODO), or purposes related to a legitimate interest pursued by the controller or by a third party (Article 6(1)(F) GDPR). The administrator’s legitimate interest is the need to offer customers the best possible service, to match the offer of goods to the needs and expectations of buyers, as well as to conduct marketing, promotional, and advertising activities.

(3) Recipients of personal data may be entities cooperating with the Administrator, in particular, companies providing services in the field of delivery of goods (couriers), handling the processes necessary for sending notifications about the implementation of orders, service providers providing advertising and marketing services, as well as in the field of settlement of receivables.

(4) Personal data will be processed by the Administrator for the period necessary for the provision of services or other purposes indicated in point 2, paragraph. 1.

§3. Viewing/changing/deleting personal data

(1) The owner of personal data at any time has the right to request from the Administrator:

– access to their personal data,
– rectify their data,
– remove or limit the processing of their data,
– revoke consent to processing.

(2) To the extent that consent has been given for the processing of personal data, one has the right to revoke it. (2) Withdrawal of consent does not affect the lawfulness of data processing carried out based on consent before its withdrawal.

(3) To exercise the above rights, it is necessary to contact the Administrator.

§4. The right to bring a complaint to the supervisory authority

(1) If you consider that the processing of personal data violates the provisions of the GDPR, you have the right to bring a complaint to the competent supervisory authority, which is the President of the Office for Personal Data Protection.