Language
Country/Region
OF THE SHOP.PLEXIWIRE.COM ONLINE STORE
1.1. This Privacy Policy of the Online Store is of an informational nature, which means that it does not constitute a source of obligations for the Service Recipients or Customers of the Online Store. The Privacy Policy sets out, in particular, the principles governing the processing of personal data by the Data Controller within the Online Store, including the legal basis, purposes and periods of personal data processing, the rights of data subjects, as well as information regarding the use of Cookies and analytical tools in the Online Store.
1.2. The controller of the personal data collected through the Online Store is FLEXIPLEX SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office in Warsaw (registered office address: ul. Legionowa 31A, 01-343 Warsaw; correspondence address: ul. Bruzdowa 94, 02-991 Warsaw), entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000660670, whose registration files are maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, with a share capital of PLN 5,000.00, NIP: 5223082428, REGON: 366435579, e-mail address: shop@plexiwire.com, hereinafter referred to as the "Data Controller", who is also the Service Provider of the Online Store and the Seller.
1.3. Personal data within the Online Store are processed by the Data Controller in accordance with the applicable legal provisions, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the "GDPR" or the "GDPR Regulation". Official text of the GDPR: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679
1.4. Use of the Online Store, including making purchases, is voluntary. Likewise, the provision of personal data by the Service Recipient or Customer using the Online Store is voluntary, subject to two exceptions: (1) concluding agreements with the Data Controller – failure to provide the personal data required to conclude and perform the Sales Agreement or the agreement for the provision of Electronic Services with the Data Controller, in the cases and to the extent indicated on the Online Store website, in the Terms and Conditions of the Online Store and in this Privacy Policy, will result in the inability to conclude such an agreement. In such a case, providing personal data constitutes a contractual requirement, and if the data subject wishes to conclude a given agreement with the Data Controller, they are obliged to provide the required data. The scope of the data required to conclude the agreement is always specified in advance on the Online Store website and in the Terms and Conditions of the Online Store; (2) statutory obligations of the Data Controller – providing personal data constitutes a statutory requirement arising from generally applicable legal provisions imposing an obligation on the Data Controller to process personal data (for example, processing data for tax or accounting purposes), and failure to provide such data will prevent the Data Controller from fulfilling these obligations.
1.5. The Data Controller exercises particular care to protect the interests of the persons whose personal data are processed and, in particular, is responsible for and ensures that the data collected are: (1) processed lawfully; (2) collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes; (3) factually correct and adequate in relation to the purposes for which they are processed; (4) stored in a form that permits identification of the data subjects for no longer than is necessary for the purposes for which the data are processed; and (5) processed in a manner ensuring appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organizational measures.
1.6. Taking into account the nature, scope, context and purposes of processing, as well as the risk of infringement of the rights or freedoms of natural persons of varying likelihood and severity, the Data Controller implements appropriate technical and organizational measures to ensure that processing is carried out in accordance with the GDPR and to be able to demonstrate such compliance. These measures are reviewed and updated where necessary. The Data Controller applies technical measures to prevent unauthorized persons from obtaining or modifying personal data transmitted electronically.
1.7. All words, expressions and acronyms used in this Privacy Policy and beginning with a capital letter (e.g. Seller, Online Store, Electronic Service) shall have the meaning assigned to them in the Terms and Conditions of the Online Store available on the Online Store website.
2.1. The Data Controller is entitled to process personal data where – and to the extent that – at least one of the following conditions is met: (1) the data subject has given consent to the processing of their personal data for one or more specific purposes; (2) processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract; (3) processing is necessary for compliance with a legal obligation to which the Data Controller is subject; or (4) processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data, in particular where the data subject is a child.
2.2. The processing of personal data by the Data Controller always requires the existence of at least one of the legal bases indicated in section 2.1 of this Privacy Policy. The specific legal bases for the processing of the personal data of the Service Recipients and Customers of the Online Store by the Data Controller are indicated in the following section of this Privacy Policy in relation to the particular purpose of personal data processing carried out by the Data Controller.
3.1. In each case, the purpose, legal basis, retention period and recipients of the personal data processed by the Data Controller result from the activities undertaken by the respective Service Recipient or Customer within the Online Store or by the Data Controller. For example, if a Customer decides to make a purchase in the Online Store and chooses to collect the purchased Product in person instead of using courier delivery, their personal data will be processed for the purpose of performing the concluded Sales Agreement, but will not be disclosed to the carrier responsible for delivering shipments on behalf of the Data Controller.
3.2. The Data Controller may process personal data within the Online Store for the purposes, on the legal bases and for the periods specified in the table below:
| Purpose of data processing | Legal basis for data processing | Data retention period |
|---|---|---|
| Performance of the Sales Agreement or the agreement for the provision of Electronic Services, or taking steps at the request of the data subject prior to concluding the above agreements | Article 6(1)(b) GDPR (performance of a contract) – processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract. | The data are retained for the period necessary to perform, terminate or otherwise expire the concluded Sales Agreement or the agreement for the provision of Electronic Services. |
| Sending commercial information, including direct marketing, by means of terminal telecommunications equipment (e.g. e-mail, telephone) or automated calling systems | Article 6(1)(f) GDPR (legitimate interest of the Data Controller) – processing is necessary for the purposes of the legitimate interests pursued by the Data Controller, consisting in direct marketing aimed at protecting the interests and reputation of the Data Controller and its Online Store, as well as promoting the sale of Products, for example where the data subject has previously consented (e.g. by subscribing to the Newsletter) to receive commercial information by means of terminal telecommunications equipment such as e-mail or telephone, depending on the scope of the consent granted. | The data are retained for the duration of the legitimate interest pursued by the Data Controller, but no longer than until the limitation period for claims of the Data Controller against the data subject arising from the Data Controller's business activity expires. The limitation period is determined by applicable law, in particular the Civil Code (the basic limitation period for claims related to business activity is three years, and for claims arising from a Sales Agreement – two years). The Data Controller may not process the data for direct marketing purposes if the data subject has effectively objected to such processing. Furthermore, where the legal basis for processing is consent, the data are retained until the data subject withdraws their consent for further processing of their data for the purpose covered by that consent, without affecting the lawfulness of processing carried out on the basis of the consent before its withdrawal. |
| Enabling the Customer to submit an opinion regarding the concluded Sales Agreement | Article 6(1)(a) GDPR – the data subject has given consent to the processing of their personal data for the purpose of submitting an opinion. | The data are retained until the data subject withdraws their consent for further processing of their personal data for this purpose. |
| Keeping accounting records | Article 6(1)(c) GDPR in conjunction with Article 74(2) of the Polish Accounting Act of 30 January 2018 (Journal of Laws of 2018, item 395, as amended) – processing is necessary for compliance with a legal obligation to which the Data Controller is subject. | The data are retained for the period required by law obliging the Data Controller to keep accounting records (5 years, calculated from the beginning of the year following the financial year to which the data relate). |
| Establishing, pursuing or defending claims that may be asserted by the Data Controller or against the Data Controller | Article 6(1)(f) GDPR (legitimate interest of the Data Controller) – processing is necessary for the purposes of the legitimate interests pursued by the Data Controller consisting in establishing, pursuing or defending claims that may be asserted by or against the Data Controller. | The data are retained for the duration of the legitimate interest pursued by the Data Controller, but no longer than until the limitation period for claims that may be asserted against the Data Controller expires (the general limitation period for claims against the Data Controller is six years). |
| Operating the Online Store website and ensuring its proper functioning | Article 6(1)(f) GDPR (legitimate interest of the Data Controller) – processing is necessary for the purposes of the legitimate interests pursued by the Data Controller consisting in operating and maintaining the Online Store website. | The data are retained for the duration of the legitimate interest pursued by the Data Controller, but no longer than until the limitation period for claims of the Data Controller against the data subject arising from the Data Controller's business activity expires. The limitation period is determined by applicable law, in particular the Civil Code (the general limitation period for claims related to business activity is three years, and for claims arising from a Sales Agreement – two years). |
| Keeping statistics and analysing traffic within the Online Store | Article 6(1)(f) GDPR (legitimate interest of the Data Controller) – processing is necessary for the purposes of the legitimate interests pursued by the Data Controller consisting in keeping statistics and analysing traffic within the Online Store in order to improve the operation of the Online Store and increase the sale of Products. | The data are retained for the duration of the legitimate interest pursued by the Data Controller, but no longer than until the limitation period for claims of the Data Controller against the data subject arising from the Data Controller's business activity expires. The limitation period is determined by applicable law, in particular the Civil Code (the general limitation period for claims related to business activity is three years, and for claims arising from a Sales Agreement – two years). |
4.1. For the proper operation of the Online Store, including the performance of concluded Sales Agreements, it is necessary for the Data Controller to use the services of external entities (such as software providers, courier companies or payment service providers). The Data Controller uses only the services of such processors that provide sufficient guarantees of implementing appropriate technical and organisational measures to ensure that the processing complies with the requirements of the GDPR and protects the rights of data subjects.
4.2. As a rule, the personal data of Service Recipients and Customers are processed within the European Economic Area (EEA). However, the transfer of personal data outside the EEA may occur where it is necessary for the purposes set out in this Privacy Policy, in particular in connection with the Data Controller's use of tools and services provided by entities established or processing data outside the EEA (e.g. providers of analytics, marketing, cloud or communication services, including Google Ireland Ltd. and Meta Platforms Ireland Ltd. together with their affiliated entities in the United States). The Data Controller transfers personal data outside the EEA only where necessary and while ensuring an adequate level of protection, in particular by: (1) transferring the data to an entity located in a country for which the European Commission has adopted an adequacy decision (e.g. an entity in the United States certified under the EU-U.S. Data Privacy Framework); (2) applying the Standard Contractual Clauses adopted by the European Commission; or (3) relying on another transfer mechanism compliant with Chapter V of the GDPR. The data subject may obtain a copy of the data transferred to a third country and information on the safeguards applied by contacting the Data Controller in the manner specified in this Privacy Policy. Transfers outside the EEA may also take place to countries for which the European Commission has not adopted an adequacy decision. In such cases, the Data Controller transfers personal data only where permitted by law and in accordance with applicable legal requirements.
4.3. The Data Controller does not transfer personal data in every case or to all recipients or categories of recipients indicated in this Privacy Policy. Personal data are transferred only where necessary to achieve the specific purpose of processing and only to the extent necessary for that purpose. For example, if a Customer chooses in-store collection, their personal data will not be transferred to the carrier cooperating with the Data Controller.
4.4. The personal data of the Service Recipients and Customers of the Online Store may be transferred to the following recipients or categories of recipients:
4.4.1. Carriers / freight forwarders / courier brokers / entities operating warehouses and/or the shipment fulfilment process – where the Customer chooses delivery of the Product by postal service or courier service in the Online Store, the Data Controller makes the Customer's collected personal data available to the selected carrier, freight forwarder or intermediary responsible for deliveries on behalf of the Data Controller, and where the shipment is dispatched from an external warehouse – to the entity operating the warehouse and/or shipment fulfilment process – to the extent necessary to deliver the Product to the Customer.
4.4.2. Electronic payment or payment card service providers – where the Customer uses electronic payment methods or payment by card in the Online Store, the Data Controller makes the Customer's collected personal data available to the selected payment service provider operating such payments in the Online Store on behalf of the Data Controller, to the extent necessary to process the payment made by the Customer.
4.4.3. Credit institutions / leasing companies – where the Customer uses instalment payment or leasing payment methods in the Online Store, the Data Controller makes the Customer's collected personal data available to the selected credit institution or leasing company handling such payments in the Online Store on behalf of the Data Controller, to the extent necessary to process the Customer's payment.
4.4.4. Providers of customer review survey systems – where the Customer has agreed to submit an opinion regarding the concluded Sales Agreement, the Data Controller makes the Customer's collected personal data available to the selected entity providing the customer review survey system for Sales Agreements concluded in the Online Store on behalf of the Data Controller, to the extent necessary for the Customer to submit an opinion through the review survey system.
4.4.5. Providers of technical, IT and organisational solutions enabling the Data Controller to conduct its business activity, including the operation of the Online Store and the Electronic Services provided through it (in particular providers of software for operating the Online Store, e-mail and hosting providers, and providers of business management software and technical support services) – the Data Controller makes the Customer's collected personal data available to the selected provider acting on its behalf only where and to the extent necessary to achieve the relevant purpose of data processing in accordance with this Privacy Policy.
4.4.6. Providers of accounting, legal and advisory services supporting the Data Controller in accounting, legal or advisory matters (in particular accounting firms, law firms or debt collection agencies) – the Data Controller makes the Customer's collected personal data available to the selected provider acting on its behalf only where and to the extent necessary to achieve the relevant purpose of data processing in accordance with this Privacy Policy.
4.4.7. Providers of social media plug-ins, scripts and other similar tools embedded on the Online Store website, enabling the browser of a visitor to the Online Store website to download content from the providers of such plug-ins (e.g. logging in using social media credentials) and, for this purpose, transferring the visitor's personal data to those providers, including in particular:
4.4.7.1. Meta Platforms Ireland Ltd. – the Data Controller uses Facebook social plug-ins (e.g. the Like, Share buttons or Facebook Login) and Instagram on the Online Store website and therefore collects and transfers the personal data of the Service Recipient using the Online Store website to Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, D04 X2K5, Ireland) to the extent and in accordance with the privacy policies available – for Facebook – at: https://www.facebook.com/about/privacy/ and – for Instagram – at: https://help.instagram.com/519522125107875/?helpref=hc_fnav. Such data include information about activities carried out on the Online Store website, including information about the device used, visited websites, purchases, displayed advertisements and the manner of using the services, regardless of whether the Service Recipient has a Facebook or Instagram account or is logged in to Facebook or Instagram.
4.4.7.2. Shoper S.A. – the Data Controller uses the Shoper One login service on the Online Store website (enabling fast registration and login to multiple online stores within the Shoper ecosystem using one account) and therefore collects and transfers the personal data of the Service Recipient using the Online Store website to Shoper S.A. (ul. Pawia 9, 31-154 Kraków) to the extent and in accordance with the privacy policy available at: https://shoper.one/privacy-policy. Such data include information necessary for identification and login, such as the e-mail address, as well as data collected while using the Online Store, including data from registration and transaction forms and information concerning shopping preferences, in order to provide Shoper One functionalities such as automatic form completion and service personalisation.
5.1. The GDPR imposes an obligation on the Data Controller to provide information about automated decision-making, including profiling referred to in Article 22(1) and (4) of the GDPR, and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. With this in mind, the Data Controller provides information regarding possible profiling in this section of the Privacy Policy.
5.2. The Data Controller may use profiling within the Online Store for direct marketing purposes; however, decisions made on its basis by the Data Controller do not concern the conclusion or refusal to conclude a Sales Agreement or the possibility of using the Electronic Services available in the Online Store. As a result of profiling in the Online Store, a person may, for example, receive a discount, a discount code, a reminder about an abandoned shopping cart, a proposal for a Product corresponding to that person's interests or preferences, or more favourable conditions compared to the standard offer of the Online Store. Despite profiling, it is always the individual who freely decides whether to use the received discount, preferential conditions or make a purchase in the Online Store.
5.3. Profiling in the Online Store consists of the automatic analysis or prediction of a person's behaviour on the Online Store website, for example by adding a specific Product to the shopping cart, browsing the page of a specific Product, or analysing the history of previous purchases made in the Online Store. A prerequisite for such profiling is that the Data Controller possesses the personal data of the person concerned so that it may subsequently send, for example, a discount code.
5.4. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning that person or similarly significantly affects that person.
6.1. Right of access, rectification, restriction, erasure or data portability – the data subject has the right to request from the Data Controller access to their personal data, rectification, erasure ("the right to be forgotten") or restriction of processing, and has the right to object to processing as well as the right to data portability. Detailed conditions governing the exercise of the above rights are set out in Articles 15–21 of the GDPR.
6.2. Right to withdraw consent at any time – where personal data are processed by the Data Controller on the basis of the data subject's consent (pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR), the data subject has the right to withdraw such consent at any time without affecting the lawfulness of processing carried out on the basis of the consent before its withdrawal.
6.3. Right to lodge a complaint with a supervisory authority – the data subject whose personal data are processed by the Data Controller has the right to lodge a complaint with a supervisory authority in accordance with the procedure specified in the GDPR and the applicable provisions of Polish law, in particular the Personal Data Protection Act. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
6.4. Right to object – the data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them based on Article 6(1)(e) (public interest or official authority) or Article 6(1)(f) (legitimate interests of the Data Controller) of the GDPR, including profiling based on those provisions. In such a case, the Data Controller may no longer process those personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims.
6.5. Right to object to direct marketing – where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.
6.6. In order to exercise the rights referred to in this section of the Privacy Policy, the Data Controller may be contacted by sending an appropriate request in writing or by e-mail to the address indicated at the beginning of this Privacy Policy, or by using the contact form available on the Online Store website.
7.1. Cookies are small text files sent by a server and stored on the device of the person visiting the Online Store website (e.g. on the hard drive of a computer, laptop or on the memory card of a smartphone, depending on the device used to access the Online Store). Detailed information about Cookies, including their history, is available, among others, at: https://pl.wikipedia.org/wiki/HTTP_cookie.
7.2. The Data Controller may make available on the Online Store website a tool for easy and active management of Cookies, which is displayed upon the first visit to the Online Store website and is subsequently available in the footer of the website. This tool allows, among other things, verification of which Cookies are or may be stored while using the Online Store website, as well as selecting and subsequently modifying the scope and purposes of the use of Cookies in relation to the visitor and their device. Upon the first visit to the Online Store website, the visitor will be asked to select Cookie preferences. These settings may be changed at any time by using the Cookie management tool available on the Online Store website.
7.3. In this Privacy Policy, the Data Controller provides detailed information regarding the use of Cookies on the Online Store website, including their types, purposes and methods of management using, for example, browser settings and/or the Cookie management tool available on the Online Store website. The Data Controller encourages visitors to use the Cookie management tool available on the Online Store website, which allows easy and active management of Cookies while using the website. If such tool is unavailable, visitors are encouraged to read the information below regarding, among other things, managing Cookies through browser settings.
7.4. Cookies that may be sent by the Online Store website can be divided into the following categories according to the criteria below:
| By provider: | By storage period on the visitor's device: | By purpose of use: |
|---|---|---|
|
|
|
7.5. The Data Controller may process the data contained in Cookies while visitors use the Online Store website for the following specific purposes:
| Purpose of using Cookies in the Data Controller's Online Store | Description of the purpose |
|---|---|
| Purposes of using Cookies in the Data Controller's Online Store | Identifying Service Recipients as logged into the Online Store and indicating that they are logged in (strictly necessary Cookies). |
| Remembering Products added to the shopping cart for the purpose of placing an Order (strictly necessary Cookies). | |
| Remembering data entered into Order Forms, surveys or login details for the Online Store (strictly necessary and/or functional/preference Cookies). | |
| Customising the content of the Online Store website according to the individual preferences of the Service Recipient (e.g. colours, font size, page layout) and optimising the use of the Online Store website (functional/preference Cookies). | |
| Compiling anonymous statistics showing how the Online Store website is used (analytics and performance Cookies). | |
| Displaying and rendering advertisements, limiting the number of times advertisements are displayed, preventing the display of advertisements that the Service Recipient does not wish to see, measuring the effectiveness of advertisements, and personalising advertisements by analysing, on an anonymous basis, the behaviour of visitors to the Online Store (e.g. repeated visits to specific pages, keywords, etc.) in order to create user profiles and deliver advertisements tailored to their anticipated interests, including when they visit other websites within the advertising networks of Google Ireland Ltd. and Facebook (Meta Platforms Ireland Ltd.) (marketing, advertising and social media Cookies). |
7.6. It is possible to check which Cookies are currently being sent by the Online Store website, regardless of the web browser used, by means of tools available, for example, at: https://www.cookiemetrix.com or https://www.cookie-checker.com.
7.7. By default, most web browsers available on the market accept the storage of Cookies. Everyone has the possibility to define the conditions for the use of Cookies by changing the settings of their web browser. This means that it is possible, for example, to partially restrict (e.g. temporarily) or completely disable the storage of Cookies. However, in the latter case this may affect certain functionalities of the Online Store (for example, it may become impossible to complete the Order process through the Order Form because the Products added to the shopping cart will not be remembered during subsequent steps of the ordering process).
7.8. Web browser settings concerning Cookies are important with regard to consent to the use of Cookies by our Online Store – in accordance with applicable regulations, such consent may also be expressed through the browser settings. Detailed information on changing Cookie settings and deleting Cookies independently in the most popular web browsers is available in the help section of the relevant browser and on the following websites (simply click the relevant link):
7.9. The Data Controller may use Google Analytics and GA4 services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). These services help the Data Controller compile statistics and analyse traffic within the Online Store. The collected data are processed within these services to generate statistics useful for administering the Online Store and analysing traffic on the Online Store website. These data are aggregated in nature. By using the above services within the Online Store, the Data Controller collects data such as the sources and channels through which visitors reach the Online Store, their behaviour on the website, information about the devices and browsers they use, IP address and domain, geographical data, demographic data (age and gender) and interests.
7.10. It is possible for an individual to easily prevent information regarding their activity on the Online Store website from being made available to Google Analytics, for example by installing the browser add-on provided by Google Ireland Ltd., available at: https://tools.google.com/dlpage/gaoptout?hl=pl.
7.11. Due to the possibility that the Data Controller uses advertising and analytics services provided by Google Ireland Ltd. within the Online Store, the Data Controller indicates that complete information regarding the principles of processing data of visitors to the Online Store (including information stored in Cookies) by Google Ireland Ltd. is available in Google's Privacy Policy at: https://policies.google.com/technologies/partner-sites.
7.12. The Data Controller may use the Meta Pixel service provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) within the Online Store. This service helps the Data Controller measure the effectiveness of advertisements, understand what actions visitors perform on the Online Store website and display personalised advertisements to those visitors. Detailed information about how Meta Pixel works is available at: https://www.facebook.com/business/help/742478679120153?helpref=page_content.
7.13. The operation of Meta Pixel can be managed through the advertising settings in the Meta Accounts Center available at: https://accountscenter.facebook.com/ad_preferences/. Detailed information regarding advertising preference management is also available in the Meta Help Center at: https://www.facebook.com/help/247395082112892.
8.1. The Online Store website may contain links to other websites. The Data Controller encourages users, after leaving the Online Store website, to read the privacy policy established for those websites. This Privacy Policy applies exclusively to the Online Store operated by the Data Controller.
