• Off-road
    Off-road
  • SUV
    SUV
  • ATV / Quad
    ATV / Quad
  • Industrial
    Industrial
  • Van
    Van
  • Passenger
    Passenger
Privacy policy

Privacy and Cookies Policy of Opony4x4.eu

§ 1. GENERAL PROVISIONS

1. This Privacy Policy sets out the rules for the processing and protection of personal data of users of the website https://opony4x4.eu.

2. This document is for information purposes and fulfills the obligations resulting from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

3. The Administrator takes special care to protect the interests of data subjects, in particular ensuring that the collected data is processed in accordance with the law.

§ 2. DATA ADMINISTRATOR

The personal data administrator is KERAM Dariusz Marek with its registered office in Kraków (31-464), ul. Wiejska 16a, NIP: 9451914942, REGON: 356841330. Contact: [email protected].

§ 3. PURPOSE AND BASIS OF DATA PROCESSING

Personal data is processed for the following purposes:

  • Order fulfillment: Processing is necessary for the performance of the sales contract (Art. 6(1)(b) GDPR).
  • Tax obligations: Issuing invoices and bookkeeping (Art. 6(1)(c) GDPR).
  • Complaint handling: Implementation of rights under warranty and guarantee.
  • Contact: Responding to inquiries via form or e-mail (legitimate interest).
  • Marketing: Sending the newsletter after obtaining the user's voluntary consent.

§ 4. SCOPE OF COLLECTED DATA

The Administrator processes the following scope of data: Name and surname, residential/delivery address, NIP number (for companies), e-mail address, telephone number, order history, and technical data collected via cookies (including IP address, device identifier), provided that the user has given consent.

§ 5. DATA RECIPIENTS

In order to fulfill the order, data is shared with the following entities:

  • Payment service providers: mElements S.A. (operator of the Paynow system) and PayPro S.A. (operator of the Przelewy24 system), for the purpose of processing electronic payments.
  • Courier and logistics companies: InPost, DPD, DHL, or other operators fulfilling the delivery.
  • Accounting service: The accounting office serving the Administrator.
  • IT system providers: Companies providing hosting and store software.
  • Analytical and marketing service providers: Google Ireland Ltd. (operator of Google Analytics and Google Ads services) – in the scope of data collected via cookies, after obtaining the User's consent.

§ 6. DATA RETENTION PERIOD

1. Data necessary for the performance of the contract – for the period necessary for its performance and completion of customer service.

2. Accounting data – for a period of 5 years in accordance with the requirements of tax regulations.

3. Marketing data – until the user withdraws consent.

§ 7. RIGHTS OF THE DATA SUBJECT

1. Every user has the right to access their data, the right to rectify, delete ("right to be forgotten"), limit processing, the right to data portability, and the right to object.

2. The user has the right to withdraw consent to cookies at any time (via the "Cookie" button in the footer of the page) and to the processing of personal data, which does not affect the lawfulness of processing based on consent before its withdrawal.

3. To exercise their rights, the user can contact the Administrator at the e-mail address: [email protected].

4. The user has the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if they consider that the processing of their data violates the regulations.

§ 8. COOKIES

1. The store uses cookies necessary for the proper functioning of the system, including maintaining the user session and handling the basket and payments (e.g., Paynow). These files are required to complete the order.

2. We use analytical and advertising services from Google Analytics (Google Ireland Ltd.). This script runs only after the User has given voluntary consent via the cookie banner.

3. The store implements the Google Consent Mode v2 standard, which means that if consent for cookies is not given, the data sent to Google is anonymized and devoid of personal identifiers.

4. The user can change or withdraw their consent at any time using the browser settings or by clicking the "Cookie" button in the footer of the page.

§ 9. SERVER LOGS

Information about certain user behaviors is subject to logging at the server layer (IP address, query time). This data is used exclusively for the purpose of administering the service.

§ 10. SECURITY

The Administrator applies technical and organizational measures to ensure the protection of processed personal data, including encryption of the connection using an SSL certificate.

§ 11. FINAL PROVISIONS

The Administrator reserves the right to change the privacy policy in the event of changes in law or technology. The current version is always available on the store's website.