OUR COMMITMENT

The trust of our customers is extremely important to us, which is why we approach the Users' data entrusted to us with great commitment. We also want to provide clear and transparent information about what data we collect and for which purpose.

This Privacy Policy fairly and transparently sets out the rules regarding the collection, use, disclosure and storage of personal data obtained from our clients and defines the actions we take to protect them.

All data are collected and processed in compliance with applicable data protection legislation, ensuring their appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures. The data is collected for specific, explicit and legitimate purposes, to the extent limited to what is necessary to achieve them. They are stored in a form that allows identification of the person who they relate to and for as long as required by the purpose they have been collected for. 

PERSONAL DATA CONTROLLER

The Personal Data Controller within the meaning of the Regulation of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of personal data of natural persons in connection with the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (commonly known as "GDPR"), in relation to personal data of users who are natural persons is:

Marba-Sport Marcin Mocarski spółka komandytowa with its registered office in Miszewko, ul. Gdyńska 69A, postcode: 80-209, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Gdańsk-Północ, VII Commercial Division of the National Court Register under the KRS number: 0000630315, NIP (VAT number): 589-202-76-42, REGON number: 365045787.

The Data Controller is also the owner of the Warehouse.

CONTACT TO THE CONTROLLER

Should you have any questions related to the processing of your data, you can contact our data protection officer, using the following contact methods:

• via e-mail: ochronadanych@marba-sport.pl
• in writing to the address: ul. Gdyńska 69A, 80-209 Miszewko.

WHO HAS ACCESS TO THE PERSONAL DATA?

Only the authorized employees of our company have access to your data. These persons were trained by the Controller in the proper data handling and undertook to process them in a way that guarantees the highest level of data security.

We never transfer, sell or exchange the data of our Users for marketing purposes with other entities not associated with us.

The data may, however, be transferred to some third-parties which are necessary for the provision of our services. Possible recipients of personal data:

• entities providing shipping services,
• trusted service providers used by us to conduct our business: accounting office, e-marketing services, IT services, software and cloud providers as well as providers of tools and scripts used on the website.

If required by law, we can also share your personal data with authorized entities, including relevant judicial authorities. If necessary, we may also transfer your personal data to public authorities for the purposes of combating fraud and abuse.

WILL THE DATA BE TRANSFERRED TO THIRD COUNTRIES?

Your personal data may be transferred to third countries, i.e. outside the European Economic Area (EEA) or to international organizations, but only to entities that provide appropriate safeguards and guarantee the rights of data subjects and effective legal protection measures. In particular, this includes the use of services provided by Google by the Controller, to the extent that is necessary to achieve the objectives set out in this Privacy Policy.

The transfer takes place on the basis of a decision of the European Commission (the so-called Privacy Shield) confirming that entrepreneurs based in the United States of America who have joined the Privacy Shield program have an adequate level of personal data protection. You have the right to obtain from the Controller a copy of personal data transferred to a third country.

WHAT DATA WE COLLECT AND WHERE WE GET IT FROM? 

The data held by Marba-Sport Marcin Mocarski spółka komandytowa comes from the persons who they relate to, so directly from you or your authorized employees, as well as from publicly available websites and registers, in particular from search engine of the National Court Register and the Central Register and Information on Economic Activity. We also received your data when you contacted us or subscribed to the newsletter.

We collect the following categories of information:

• company name, registered office address, tax identification number,
• name and surname of the person acting on behalf of the Client, phone number, e-mail address,
• purchase history,
• account (logins, consents) and correspondence history (via contact form, email, social media or telephone),
• information saved in cookies (about the use of our website),
• location (IP).

WHY DO WE PROCESS YOUR DATA?

Your personal data are processed for the purpose of implementing sales contracts, taking steps at the request of the data subject prior to entering into a contract, as well as for marketing or administrative purposes, including:

• handling of inquiries and requests, including responses to inquiries sent via online contact form,
• registration and maintenance of the User account - the ability to monitor the status of the order and purchase history,
• order processing - contacting for purposes related to the implementation of the order, payment processing, delivery, sending notifications about the order status,
• consideration of complaints,
• carrying out settlements and invoicing,
• archival purposes - to ensure accountability of the performance of obligations arising from legal provisions (storage of accounting documents) and storage of information regarding   the customers served,
• marketing purposes - statistical and marketing analysis, sending commercial information requested by the User by an e-mail message (newsletter),
• creating lists, analyses and statistics for the internal needs of the Controller (reporting, planning development of services),
• making and storing database backup copies to ensure confidentiality, integrity, availability of data processing systems and ensuring the ability to quickly  restore and/or access to data in the event of sudden, unavoidable failures. 

LEGAL BASIS FOR DATA PROCESSING 

Data processing is lawful only when at least one of the legal grounds listed in the GDPR applies. As far as our Store is concerned, we process personal data on the following legal basis: 

• the necessity of processing to conclude or perform a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of the GDPR), 
• performance of legal obligations to which the Controller is subject (Article 6, paragraph 1, letter c of the GDPR),
• the necessity of processing for purposes resulting from legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. (Article 6, paragraph 1, letter f of the GDPR), 
• User's voluntary consent to the processing of his/her personal data  (Article 6, paragraph 1, letter a of the GDPR). 

DATA RETENTION PERIOD 

The User's personal data will not be stored for a longer period than is necessary for the achievement of purposes for which they were collected, that is:

• for the order completion time, as well as for the time during which the Controller is required to store sales documents. We are obliged to store personal data that we process for tax and accounting purposes for a period of 5 years after the end of the tax year in which the sale takes place,
• until the end of the limitation period for claims under the provisions or based on contract - in the case of processing for the purposes of performing the contract, exercising or defending against claims,
• until the User unregisters from the Online Warehouse – as far as the processing for the purposes of registering and maintaining the User account is concerned,
• for an indefinite period, but no longer than until the data subject objects to their processing or withdraws his/her consent - for marketing purposes (newsletters),
• for a period of 13 months when it comes to collecting data for a purpose of creating personalized campaigns (profiling, tracking website traffic based on cookies),
• until resignation from receiving an answer (withdrawal of consent) - in the case of enquiries sent via the online contact form.

After the indicated periods of time, the personal data will be securely erased, destroyed or made anonymous (encrypted in a way that prevents identification of the data subject). In the latter case, the data will still be stored (processed) but solely for statistical and historical purposes.

REGISTRATION IN THE STORE

Access to the offer presented on the website is given only to the registered Users who have been positively verified as far as their business profile is concerned.

Creating an account requires providing such Client's identifying information as: company name, registered office address, tax identification number, e-mail address (all data marked in the registration form with an asterisk). Additionally, our Clients are required to deliver an extract from a register of entrepreneurs they are registered in, REGON and VAT number certificates and a confirmation of registration for VAT purposes. 
In the absence of mandatory data or documents when registering, the Customer will not be allowed to assess the website.

All data collected upon registration (and positive verification) will be processed in accordance with this Privacy Policy. In the event that we process the User's personal data on the basis of his/her consent, the User has the right to its withdrawal or to data erasure at any time (how this can be done is described in the 'Rights of the data subjects' section). 

Personal information saved in the account is stored as long as the User has the account. We would like to inform you kindly that a different storage (retention) period may apply to all personal data that have been collected in order to conclude the contract with the User – order placement, its implementation, and because of the legal obligation to process such data.

COOKIES AND WEBSITE TRACKING

What are cookies?

Cookies are small text files containing IT data that allow the server pages to function properly. They are stored in the end-users' devices (computer or laptop hard drive, smartphone or tablet memory card). These files allow the User device to be recognized so that the website appearance adjusts to his/her individual needs or preferences. Cookies perform a very important function. They make using of the Internet better, faster, safer - more convenient, efficient and user-friendly. Cookies are needed to log the User in and to optimise the web pages.

What are cookies used for?

Cookies can provide very important information about the User's activity, about the content he browsed, what he searched for, what he was interested in, how he adapted the page to his own needs. However, they are not used to identify the User. They provide information about computer data and web browsers by creating small text files that are stored on the User's terminal equipment. Therefore, cookies can be used for:

• adapting the content of websites to user's preferences (e.g. regarding colours, font size, page layout) and optimising the usage of website,
• creating anonymous statistics that help to understand how the website users use it, which allows better website adjustments to meet its users' needs,
• remembering log-in data and maintaining the session on the website, so that the User does not have to re-enter the login and password on each visited subpage of the website,
• remembering products selected and added to the basket so that they can be bought later,
• providing the User with advertising content that is well-tailored to his/her needs (remarketing – a study of the store visitors' behaviour).

Types of cookies

We use cookies technology on our website in order to tailor our website functionalities and content to your individual needs. You can agree that the data you enter will be remembered and that you can use it without entering it again the next time you visit our website. These data will be saved in a form of cookies. This means that your computer will remember them, but it will share them only as part of our service. Owners of other websites will not have any access to these data.

We use the following types of cookies:

• strictly necessary cookies - which enable the use of services available  within the online store, for example authentication cookies used for services that require authentication with the store,
• secure cookies - used to ensure security, for instance to detect fraud in the field of authentication with the store,
• performance cookies, which collect information about how the visitors use the website,
• functionality cookies, which allow the website to remember choices the visitor makes – his personal, customised settings such as: language or region his/she is located in, user name, password, font, text size and provide enhanced, more personal features,
• targeting/advertising cookies - used to deliver to Users personalised, more relevant adverts. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign.

Cookie management

If you have any problems using our website or you do not agree to the website personalisation, we suggest disabling cookies in your web browser options.
How to change cookie settings in different browsers?
Below you will find links to information on how to change the settings of specific browsers to limit or disable cookies and how to remove such files from your device:

• Mozilla Firefox - click here
• Microsoft Internet Explorer - click here
• Google Chrome - click here
• Opera - click here
• Apple Safari - click here
• on mobile phones, tablets and other mobile devices - we encourage you to familiarise yourself with the privacy options available on your mobile device manufacturer's website.

It should be remembered, however, that the proper functioning of the user accounts as well as the convenience of use and certain functionalities on our website depend on cookies which have been enabled.

Internet analysis

In order to optimise and constantly improve our offer, we use so-called tracking technologies. For these purposes, we use Google Analytics and Google Tag Manager.

Google Analytics

This tool uses data from our website to web statistics analysis - Google (Universal) Analytics from Google Inc. (www.google.pl). Google (Universal) Analytics uses methods that enable the analysis of the User's behaviour on the website, for example uses cookies, which are small text files saved on the User's computer hard drive. Information about a visit on a web which is generated in such way  is transferred to a Google server located in the USA and saved there. If the IP anonymization function is activated, the User's IP address is shortened by Google before it is transferred within the territory of the European Union Member States or to other member countries of the European Economic Area (EEA). Only in exceptional cases, the full IP address is transmitted to a Google server located in the USA and shortened there. The anonymized IP address sent by the User's browser as a part of the Google Analytics service is not combined with other Google data.

The User can avoid sending to Google any data generated by the cookie related to his /her usage of the website (including the IP address) and processing of this data by Google. This can be done by downloading and installing the browser plug-in available here (link).

Alternatively, you can also click this link to avoid data being saved on this website by Google Analytics in the future. An opt-out cookie is then saved on the User's device. After each clearing cookies from the browser installed on the device, you should click the link again.

PROFILING 

Please, be advised that your personal data may processed by automated means. This means you can be subject to automated individual decision-making, including profiling only insofar as this is necessary to provide advertising and marketing services. As part of profiling, primarily your previous purchasing decisions may be analysed. Based on that, we will try to adjust our future offer. Automated processing or profiling will not have any legal effect or have any significant impact on User's situation.

CONSEQUENCES OF FAILURE TO PROVIDE DATA 

Please, be advised that you have no statutory obligation to provide personal data, however this obligation may arise from specific provisions. The consequence of not providing personal data is our inability to provide services to you, in particular the inability to provide details of the offer published on the site and conclude a contract for the sale of goods.

If required by law, we may require providing other data, for instance necessary for accounting or tax purposes. In all other respects, providing your personal data is voluntary.

RIGHTS OF THE DATA SUBJECTS

Your rights regarding processing of your data

Please, be assured that you can exercise all your rights under applicable law. You can request  access to, rectification or even erasure of your data. The User can also restrict or object to their processing as well as has the right to data portability and to not being subject to automated decision-making, including profiling.

You can exercise your rights (listed below) where one of the following grounds applies:

• data rectification requests - in the event that you notice that your data are incorrect or incomplete,
• requests for deletion of personal data - in the event that your data is no longer necessary in relation to the purposes for which they were lawfully collected or otherwise processed by the Controller; you withdraw your consent on which the processing is based and there is no other legal grounds for the processing; you object to the processing of your personal data  and there are no other overriding legitimate grounds for their processing; your data have been unlawfully processed; data should be erased in order to comply with the obligation arising from the provisions of law which the Controller is subject to; when data have been collected in relation to the offer of information society service,
• requests for restriction of data processing – in the event that you notice that your data are incorrect - for a period that allows the Controller to verify the correctness of that data; your data are processed unlawfully but you do not want them to be erased; your data is no longer needed by the Controller for the purposes of processing, but they are necessary for you to establish, exercise and defend legal claims; when you object to data processing – pending the verification whether the legitimate grounds of the Controller override those of the data subject,
• requests for data portability - in the event that the processing of your data is based on your consent or the contract concluded with you or when the processing is carried out by automated means.

Right to object to the processing of your data

You have the right to object to the processing of your personal data when:

• the processing of personal data is based on a legitimate interest or for statistical purposes, and the objection is justified by the particular situation you find yourself in. In such case the Controller will no longer process the personal data unless he/she demonstrates compelling legitimate grounds for the processing which override interests, rights and freedoms of yours or for the establishment, exercise or defence of legal claims,
• The Controller intends to process data for direct marketing purposes - in such event the objection may also be raised to profiling to the extent that is related to such direct marketing. 

Right to lodge a complaint

You have the right to lodge a complaint against the processing of your personal data by the Controller (Marba-Sport Marcin Mocarski spółka komandytowa) with the President of the  Personal Data Protection Office (address: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).

Executions of rights 

To exercise your rights regarding personal data protection, you should contact the Controller by sending a relevant message in writing or by e-mail, using contact details provided in this Privacy Policy.

Your consent can be withdrawn at any time by sending an appropriate statement. An example of such message: 'Acting on behalf of (entity name) with its registered office in (address of the registered office) as its (function of the person submitting the  statement with a proof of an authorization to represent the entity)/ or I (name and surname, address) - hereby withdraw my consent for processing of my personal data by Marba-Sport Marcin Mocarski spółka komandytowa with headquarters in Miszewko.'

DATA SAFETY AND DATA SECURITY

The Controller declares that processes User's personal data using computer systems and software which ensure the highest level of data security and confidentiality, such as: encryption with the SSL (Secure Socket Layer) coding system, anonymization and regular changes of security passwords to access the system. Marba-Sport Marcin Mocarski spółka komandytowa processes  the  personal data outside the IT system using technical and organisational measures to ensure the highest level of security of personal data processing.