Privacy Policy
To ensure transparency in personal data processing, we present the personal data protection rules applicable at Circular Clothing sp. z o. o., established under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter "GDPR").
The Controller, i.e., the entity determining the purposes and means of personal data processing, is the company Circular Clothing sp. z o. o. with its registered office in Inowrocław (88-100), ul. Orłowska 43 (KRS: 0000973585). You can also contact us regarding personal data processing via email at: officethetribbe@gmail.com
The Controller has appointed a Data Protection Officer in the person of Konrad Lewandowicz, who can be contacted at: officethetribbe@gmail.com. The Controller encourages you to contact the DPO with any concerns regarding the processing of your personal data.
The Controller has appointed a Data Protection Officer in the person of Konrad Lewandowicz, who can be contacted at: officethetribbe@gmail.com. The Controller encourages you to contact the DPO with any concerns regarding the processing of your personal data.
II. DATA ACQUISITION AND PURPOSE OF PROCESSING
In fulfilling its business functions, we process personal data for various purposes and scopes, including:
Newsletter Subscription
Purpose of processing:
– Sending newsletters using electronic communication means
Legal basis for processing:
– Art. 6 para. 1 lit. f GDPR, i.e., the legitimate interest of the Controller, which is the marketing of its own products and services
– Art. 6 para. 1 lit. a GDPR, i.e., consent, in the case of marketing via telecommunications terminal equipment or sending commercial information electronically until consent is withdrawn or an objection is raised, i.e., indicating in any way that you do not wish to receive information about our activities
– Art. 6 para. 1 lit. a GDPR, i.e., consent, in the case of marketing via telecommunications terminal equipment or sending commercial information electronically until consent is withdrawn or an objection is raised, i.e., indicating in any way that you do not wish to receive information about our activities
Data retention period:
– After withdrawal of consent or expression of objection, personal data may be stored for the purpose of demonstrating the proper fulfillment of legal obligations incumbent on the Controller and related claims (statutory limitation periods for claims calculated from the withdrawal of consent or filing of an objection)
Account registration in the online store without making a purchase – potential customers
Purpose of processing:
– Account registration in the online store by filling out a form on the website.
Legal basis for processing:
– Art. 6 para. 1 lit. b GDPR, i.e., the necessity of processing for the provision of the service in the form of maintaining an account in the online store
Data retention period:
– Until an objection is raised, i.e., a request to delete the account is submitted
Account registration in the online store with a purchase – customers
Purpose of processing:
– Performance of the contract with the customer
– Assertion and defense of claims
– Assertion and defense of claims
Legal basis for processing:
– Art. 6 para. 1 lit. b GDPR, i.e., the necessity of processing for the performance of the contract
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of asserting and defending claims
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interest, which is the ability to gain knowledge about the quality of offered products, as well as enabling other buyers to view the posted review
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of asserting and defending claims
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interest, which is the ability to gain knowledge about the quality of offered products, as well as enabling other buyers to view the posted review
Data retention period:
– For the duration of the contract, and after its termination – until the expiration of claims arising from it
Submitting inquiries, complaints, and claims via email and website
Purpose of processing:
Handling complaints and claims and responding to notifications and inquiries sent via email and website.
Legal basis for processing:
– Art. 6 para. 1 lit. b GDPR, i.e., the necessity of processing for the performance of the contract
– Art. 6 para. 1 lit. c GDPR, i.e., legal obligation related to handling complaints and claims
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of providing all information related to the achievement of its business goals
– Art. 6 para. 1 lit. c GDPR, i.e., legal obligation related to handling complaints and claims
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of providing all information related to the achievement of its business goals
Data retention period:
– For 1 year after the warranty period expires or the claim is settled
– For 1 year after responding to an inquiry not related to a warranty or claim
– For 1 year after responding to an inquiry not related to a warranty or claim
Negotiating and performing contracts with contractors (applies to employees and collaborators of the contractor, as well as contractors who are natural persons)
Purpose of processing:
– Concluding and performing a contract with a contractor
Legal basis for processing:
– Art. 6 para. 1 lit. b GDPR, i.e., the necessity of processing for the performance of the contract – in the case of contractors who are natural persons
– Art. 6 para. 1 lit. c GDPR, i.e., a legal obligation incumbent on the Controller in connection with the performance of the contract, in particular regarding accounting and tax settlements
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of enabling the conclusion and performance of a contract with a contractor – applies to employees and collaborators of the contractor
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of asserting and defending claims arising from the concluded contract
– Art. 6 para. 1 lit. c GDPR, i.e., a legal obligation incumbent on the Controller in connection with the performance of the contract, in particular regarding accounting and tax settlements
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of enabling the conclusion and performance of a contract with a contractor – applies to employees and collaborators of the contractor
– Art. 6 para. 1 lit. f GDPR, i.e., the pursuit of the Controller's legitimate interests in the form of asserting and defending claims arising from the concluded contract
Data retention period:
– Until the expiration of claims arising from the contract
– Until the expiration of data retention periods specified in legal provisions
– Until a successful objection is raised (when processing is based on the Controller's legitimate interest)
– Until the expiration of data retention periods specified in legal provisions
– Until a successful objection is raised (when processing is based on the Controller's legitimate interest)
III. RECIPIENTS OF DATA
In connection with its activities, Circular Clothing sp. z o. o. will disclose your personal data to the following entities:
a) state authorities or other entities authorized by law – if necessary to fulfill legal obligations,
b) entities supporting us in our activities on our behalf, in particular: providers of external ICT systems supporting our activities, subcontractors, entities auditing our activities, appraisers, or entities cooperating with the Controller in marketing campaigns, provided that such entities will process data based on an agreement with the Controller and solely according to its instructions,
c) banks – in case of the need for settlements,
d) an entity providing accounting or legal services – to the extent necessary to ensure the fulfillment of legal obligations or to establish, assert, and defend claims,
e) companies disposing of or archiving documents and other media – to the extent that data is stored in paper form or on these media.
b) entities supporting us in our activities on our behalf, in particular: providers of external ICT systems supporting our activities, subcontractors, entities auditing our activities, appraisers, or entities cooperating with the Controller in marketing campaigns, provided that such entities will process data based on an agreement with the Controller and solely according to its instructions,
c) banks – in case of the need for settlements,
d) an entity providing accounting or legal services – to the extent necessary to ensure the fulfillment of legal obligations or to establish, assert, and defend claims,
e) companies disposing of or archiving documents and other media – to the extent that data is stored in paper form or on these media.
IV. RIGHTS OF DATA SUBJECTS
Every person whose data is processed by the Controller has the right to:
a) access their personal data,
b) rectify their personal data,
c) erase their personal data,
d) restrict the processing of their personal data,
e) object to the processing of their personal data,
f) data portability,
g) if processing is based on consent – withdraw it at any time without affecting the legality of processing carried out on the basis of consent before its withdrawal.
b) rectify their personal data,
c) erase their personal data,
d) restrict the processing of their personal data,
e) object to the processing of their personal data,
f) data portability,
g) if processing is based on consent – withdraw it at any time without affecting the legality of processing carried out on the basis of consent before its withdrawal.
Furthermore, the data subject has the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.
V. DO YOU HAVE TO PROVIDE YOUR PERSONAL DATA?
Providing data is necessary for concluding and performing sales contracts and settling business activities, as well as for the Controller to fulfill legal obligations. This means that if you want to use the offer of Circular Clothing sp. z o. o., you must provide your personal data.
In other respects (in particular as part of processing for marketing purposes), providing data is voluntary.
VI. TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
Data will be processed within the European Economic Area, which means that generally, we do not transfer data to third countries. Any transfer may occur in the context of the IT infrastructure used by the Controller. In such a case, the transfer will only take place on condition that appropriate safeguards, as specified in the GDPR, are ensured.
VII. AUTOMATED PROCESSING OF PERSONAL DATA
Personal data will not be processed in a way that leads to automated decision-making, which produces legal effects or similarly significantly affects the individuals whose data we process.
VIII. COOKIES
During your visit to our website, data such as IP address, domain name, browser type are automatically collected. Cookies are used to create statistics, allow automatic recognition of the computer's IP address on the next visit, and enable maintaining the session of a logged-in user. They are also used for advertising purposes to provide users with advertising content tailored to their interests. If you do not wish to receive cookies, please configure your web browser to delete such files, block them, or warn you each time before saving them.
IX. AMENDMENT OF THE PRIVACY POLICY
The data controller reserves the right to introduce changes to the Privacy Policy, after prior notification of the introduced changes and after specifying an appropriate time from which the changes in the Privacy Policy of Circular Clothing sp. z o. o. will apply.
