Privacy Policy ENG

Privacy Policy

This Privacy Policy contains information about the processing of personal data by Gasela Karol Nowiszewski Company.

Data Controller

The controller of your personal data will be Gasela Karol Nowiszewski Company based in Warsaw, NIP 5272623203 (hereinafter referred to as “we”). You can contact us in the following ways:

By mail at: Rondo Daszyńskiego 2B, 00-843 Warsaw
By email: biuro@gasela.pl
By phone: (+48) 739 699 466

As part of the implementation of personal data protection in our organization, we have decided not to appoint a data protection officer as it is not mandatory in our case. For matters related to personal data protection and privacy, you can contact us via email.

Purposes of Processing Your Personal Data

We process your personal data for the following purposes:

Order processing – Article 6(1)(b) of the GDPR
Sending newsletters – Article 6(1)(a) of the GDPR
Handling correspondence – Article 6(1)(f) of the GDPR
Fulfilling tax and accounting obligations – Article 6(1)(c) of the GDPR
Creating an archive for potential defense, establishment, or pursuing claims, as well as for identifying returning customers – Article 6(1)(f) of the GDPR.

Orders

When placing an order, you must provide the information necessary for order fulfillment. Depending on the specifics of the order, the data catalog may vary. If you request a VAT invoice for a company, we need to know the NIP number and the business address. Providing this data is voluntary but necessary to place an order.

Each order is saved in our database, meaning that your personal data associated with the order is accompanied by information regarding the order, such as ordered products, selected payment method, selected delivery method, and payment deadline. Data collected in connection with the order is processed for the purpose of executing the contract entered into by placing the order (Article 6(1)(b) of the GDPR), issuing an invoice (Article 6(1)(c) of the GDPR in connection with regulations governing invoicing), accounting documentation, and fulfilling other tax and accounting obligations (Article 6(1)(c) of the GDPR in connection with regulations governing tax and accounting obligations) as well as for archival purposes for potential defense, establishment, or pursuing claims, as well as identifying returning customers, which constitutes our legitimate interest (Article 6(1)(f) of the GDPR). Order data will be processed for the time necessary to fulfill the order, and then until the expiration of the limitation period for claims under the concluded contract. Furthermore, after this period, the data may still be processed for archival purposes for potential defense, establishment, or pursuing claims, as well as for identifying returning customers. Please also remember that we are obliged to keep accounting documentation, which may contain your personal data, for the period required by law.

By subscribing to the newsletter, you provide us with your name and email address. Providing this data is voluntary but necessary to subscribe to the newsletter. Within the system we use to manage the newsletter, audience segmentation is carried out. We create audience groups based on information about where and when you subscribed to our newsletter. Your assignment to a specific audience group will affect the content we send you in the newsletter. We have implemented audience segmentation in the newsletter to ensure you receive information that is as relevant as possible to you. The data you provide us in connection with subscribing to the newsletter is used to send you the newsletter, and the legal basis for processing it is your consent (Article 6(1)(a) of the GDPR) expressed at the time of subscribing to the newsletter. Regarding the processing of information not provided by you but automatically collected by our mailing system, we rely on our legitimate interest (Article 6(1)(f) of the GDPR) in analyzing subscriber behavior to optimize mailing actions.

You can unsubscribe from the newsletter at any time by clicking the dedicated link in each newsletter message or simply by contacting us. Despite unsubscribing from the newsletter, your data will still be stored in our database for the purpose of identifying returning subscribers and potential defense of claims related to sending you the newsletter, particularly for the purpose of proving the fact of your consent to receive the newsletter and the moment of its withdrawal, which constitutes our legitimate interest as mentioned in Article 6(1)(f) of the GDPR. You can also modify your data provided for receiving the newsletter at any time by clicking the appropriate link visible in each newsletter message or simply by contacting us.

Handling Correspondence

When you contact us, you naturally provide us with your personal data contained in the correspondence, particularly your email address and name. Providing this data is voluntary but necessary to establish contact. Your data is processed in this case for the purpose of contacting you, and the legal basis for processing is Article 6(1)(f) of the GDPR, which refers to our legitimate interest. The legal basis for processing after the contact has ended is also our justified purpose of archiving correspondence to ensure we can demonstrate certain facts in the future (Article 6(1)(f) of the GDPR). The content of the correspondence may be archived, and we cannot definitively determine when it will be deleted. You have the right to request a history of correspondence you have had with us (if it has been archived) and to request its deletion unless the archiving is justified due to our overriding interests, such as defense against potential claims from you.

Tax and Accounting Obligations

If we issue an invoice to you, it will be part of the accounting documentation, which will be stored for the period required by law. Your personal data is processed in this situation to fulfill our tax and accounting obligations (Article 6(1)(c) of the GDPR in connection with regulations governing tax and accounting obligations).

Cookies

Our website, like almost all other websites, uses cookies. Cookies are small text files stored on your end device (e.g., computer, tablet, smartphone) that can be read by our IT system (first-party cookies) or the IT systems of third parties (third-party cookies). Cookies can store specific information that IT systems can access for certain purposes. Some cookies we use are deleted after the browser session ends (session cookies), while others remain on your end device and allow us to recognize your browser on your next visit to the site (persistent cookies). We use cookies based on your consent, except in cases where cookies are necessary for the proper provision of services electronically. Cookies that are not necessary for the proper provision of electronic services remain blocked until you consent to our use of cookies. During your first visit to our site, we display a message asking for your consent along with the ability to manage cookies, i.e., deciding which cookies you agree to and which you want to block.

Please remember that disabling or limiting cookie handling may prevent you from using certain features available on our site and may cause difficulties in using our site, as well as many other websites that use cookies. For example, if you block cookies from social media plugins, buttons, widgets, and social features implemented on our site may be unavailable to you. You can manage cookie settings within your web browser. You can block all or selected cookies. You can also block cookies from specific sites. At any time, you can also delete previously saved cookies and other site and plugin data. Web browsers also offer the option to use incognito mode. You can use this if you do not want information about visited sites and downloaded files to be saved in your browsing and download history. Cookies created in incognito mode are deleted when all incognito windows are closed. First-party cookies are used to ensure the proper functioning of specific mechanisms on the site, such as maintaining a session after logging into your account, remembering recently viewed products, and products added to the cart. First-party cookies also store information about the cookie settings you defined using the cookie management mechanism.

Retention Period of Your Personal Data

We will process your personal data until you object, unless the purpose of processing ceases earlier.

Recipients of Your Personal Data

We will share your personal data with:

Our suppliers to whom we outsource services related to the processing of personal data, e.g., IT service providers. Such entities process data based on a contract with us and only in accordance with our instructions.

Your Rights Related to Personal Data Processing

You have the following rights related to the processing of personal data:

The right to object to the processing of your data based on your particular situation – in cases where we process your data based on our legitimate interest.
The right to access your personal data.
The right to request rectification of your personal data.
The right to request deletion of your personal data.
The right to request restriction of the processing of your personal data.

To exercise the above rights, please contact us (contact details are provided above).

Right to Object

To the extent that your data is processed based on our legitimate interest, you have the right to object to the processing of data due to your particular situation.

Right to Lodge a Complaint with a Supervisory Authority

You also have the right to lodge a complaint with the supervisory authority responsible for personal data protection, i.e., the President of the Office for Personal Data Protection.