What information does this document contain?

The Privacy Policy contains all information regarding the protection of your personal data, including your rights and the purposes for which we process it.

The Policy consists of four parts:

• Part I explains the concepts used in the Policy and provides information about our contact details and your rights;
• Part II contains detailed information about the processing of your personal data; we have provided this information separately for each processing operation;
• Part III contains information about the processing of your data on our Social Media profiles,
• Part IV contains information about cookies.

You can access each part and specific information by clicking on the links in the table of contents provided.

I. GENERAL PROVISIONS

§ 1. Data Controller

• displaying advertisements targeted at you on social media and other websites. These advertisements may be based on your activities in the Service. 575108055. In the remainder of this Privacy Policy, we refer to ourselves in the first person or as the “Data Controller” or “We”. Our details: Tax ID (NIP): 8133723575, Statistical ID (REGON): 364806110.
• You can contact us:
  • by post: ul. Św. Rocha 99, 35-330 Rzeszów,
  • by email at: hello@raccooncycles.com,
  • by phone at: +48 575108055.

§ 2. Concepts used in the Privacy Policy

If you see one of the following terms capitalized later in our Privacy Policy, it has the following meaning:

• “Service” – the online store, whose main page is located at www.velopoint.pl;
• “Policy” – means this document, i.e., the Privacy Policy you are reading;
• “GDPR” – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. You can find the text of the GDPR here;
• “Social Media” – Facebook, YouTube, Instagram, and other social media platforms where we have our profiles.

§ 3. Protection of personal data

• All personal data you provide in the Service or that we collect about you during your use of the Service is processed by us as the Data Controller in accordance with the GDPR.
• We apply technical measures required by current personal data protection regulations to prevent unauthorized access to and modification of personal data transmitted electronically, i.e., within our Service.

§ 4. Your rights regarding personal data

• We process your personal data, therefore:
  • you have the right to access your personal data,
  • you can rectify it,
  • you can request the erasure of your personal data, where permitted by the GDPR,
  • you have the right to restrict processing, to the extent specified in the GDPR.
• In Parts II – IV of the Policy, you will find information about additional rights. In some situations, you will have additional options.
• Do you want to exercise your rights or learn more about them? Contact us. Our contact details can be found in § 1 section 3 of the Policy.

§ 5. Right to object

• If you provide us with your personal data or if we collect it ourselves, you may exercise your right to object. You have the right to object in two situations – when we process your personal data:
  • for direct marketing purposes; you do not need to justify such an objection;
  • based on our other legitimate interests; such an objection requires justification based on your particular situation. Please tell us why we should not process your data.
• Do you want to exercise your right to object? Contact us. Our contact details can be found in § 1 section 3 of the Policy.

§ 6. Complaint to the President of the Personal Data Protection Office

If you believe that we are processing your personal data unlawfully, you may lodge a complaint with the supervisory authority. In Poland, this is the President of the Personal Data Protection Office, and their website is available at: https://uodo.gov.pl/.

§ 7. Questions about the Policy and its publication location

• If you have questions about our Policy, please contact us. Our contact details can be found in § 1 section 3 of the Policy.
• The Policy is available on the website https://velopoint.pl/content/2-polityka-prywatnosci and at our registered office.

II. INFORMATION RELATED TO THE PROCESSING OF YOUR PERSONAL DATA IN INDIVIDUAL PROCESSING OPERATIONS

§ 8. Contacting us via contact form, email, or phone number

If you use these contact options with us, please note the following:

• Why do we need your data, i.e., for what purpose do we process it? To respond to your message and resolve the matter you have presented.
• What are your rights? We have described them in § 4 and 5 of the Policy.
• Do you have to provide us with your data? It is voluntary, but without providing your contact details, we may not be able to resolve the matter you have presented.
• What is the legal basis for processing your data? Art. 6(1)(f) of the GDPR, i.e., our legitimate interest.
• What is our legitimate interest? Resolving the matter you have presented and responding to your message.
• To whom will we transfer your data?
  • To entities dealing with hosting (storage) of the Service or personal data for us;
  • to entities providing tools for handling individual communication channels.
• How long will we process your data? For the time necessary to resolve the matter you have presented. Depending on its nature, also for the time necessary to demonstrate that we have resolved it, i.e., for the limitation period for claims.
• Will your personal data be transferred outside the European Economic Area? No.

§ 9. Account registration in the Service

If you use these options in our Service, please note the following:

• Why do we need your data, i.e., for what purpose do we process it?
  • Performance of the agreement for creating an account in the Service.
  • Performance of services that we provide to you based on the Service’s terms and conditions.
  • Marketing consisting of:
    • sending you newsletters and other marketing information via email, analyzing what content interests you, what you read most often; based on this, we can also tailor our communication to your interests;
    • tailoring the Service, its content, products, services, functionalities, and communication with you to your interests, which we determine based on your behavior in the Service, interactions with emails or notifications sent to you, in applications, on Social Media, and also, for example, based on your location, login information, the device you use;
    • displaying advertisements targeted at you on social media and other websites; these advertisements may be based on your activities in the Service.
• What are your rights? We have described them in § 4 and 5 of the Policy. You also have the right to data portability under the conditions specified in the GDPR.
• Do you have to provide us with your data? It is voluntary. However, without providing them, you cannot create an account in the Service and, as a result, use the services we provide. You will also not be able to subscribe to our newsletter or receive commercial information from us.
• What is the legal basis for processing your data?
  • Art. 6(1)(b) of the GDPR, i.e., the performance of the agreement we conclude with you, and Art. 6(1)(f) of the GDPR, i.e., our legitimate interest.
  • If you consent to receive marketing communications to your email address, the legal basis will also be Art. 10 of the Act on Providing Services by Electronic Means and Art. 172 of the Telecommunications Law. Remember that you can withdraw your consent at any time. If you wish to do so, please contact us.
• What is our legitimate interest? Our legitimate interest is to conduct marketing as described in point 1, sub-point 3 above. Additionally, if you subscribe to our email communication (e.g., newsletter), our legitimate interest will be to improve our communication by analyzing whether you read the content and which messages you are most interested in, and by tailoring this content to your interests.
• To whom will we transfer your data?
  • to bicycle collection points where we deliver the products you ordered,
  • to electronic payment operators,
  • to transport and courier companies,
  • to providers of tools for sending newsletters and marketing automation;
  • to entities dealing with hosting (storage) of the Service or personal data for us;
  • to law firms and debt collection companies
• How long will we process your data? For the duration of:
  1. the agreement for creating an account in the Service and the time necessary to demonstrate that we have performed it correctly; this period corresponds to the limitation period for claims;
  2. our marketing activities
  3. until you object to further processing of data for marketing purposes
  4. withdrawal of consent to send messages to your email address. Your withdrawal of consent does not affect the lawfulness of processing before the withdrawal of consent.
  or or
• Will your personal data be transferred outside the European Economic Area? No.

§ 10. Order fulfillment without creating an account in the Service

If you use these options in our Service, please note the following:

• Why do we need your data, i.e., for what purpose do we process it?
  • Performance of services that we provide to you based on the Service’s terms and conditions.
  • Marketing consisting of:
    • sending you newsletters and other marketing information via email, analyzing what content interests you, what you read most often; based on this, we can also tailor our communication to your interests;
    • tailoring the Service, its content, products, services, functionalities, and communication with you to your interests, which we determine based on your behavior in the Service, interactions with emails or notifications sent to you, in applications, on Social Media, and also, for example, based on your location, login information, the device you use;
    • displaying targeted ads to you on social media platforms and other websites. These ads may be based on your activities on the Service.
• What are your rights? We have described them in § 4 and 5 of the Policy. You also have the right to data portability under the conditions specified in the GDPR.
• Do you have to provide us with your data? It is voluntary. However, without providing them, you cannot place an order through the Service and, as a result, use the services we provide. You will also not be able to subscribe to our newsletter or receive commercial information from us.
• What is the legal basis for processing your data?
  • Art. 6(1)(b) of the GDPR, i.e., the performance of the agreement we conclude with you, and Art. 6(1)(f) of the GDPR, i.e., our legitimate interest.
  • If you consent to receive marketing communications to your email address, the legal basis will also be Art. 10 of the Act on Providing Services by Electronic Means and Art. 172 of the Telecommunications Law. Remember that you can withdraw your consent at any time. If you wish to do so, please contact us.
• What is our legitimate interest? Our legitimate interest is to conduct marketing as described in point 1, sub-point 2 above. Additionally, if you subscribe to our email communication (e.g., newsletter), our legitimate interest will be to improve our communication by analyzing whether you read the content and which messages you are most interested in, and by tailoring this content to your interests.
• To whom will we transfer your data?
  • to bicycle collection points where we deliver the products you ordered,
  • to electronic payment operators,
  • to transport and courier companies,
  • to providers of tools for sending newsletters and marketing automation,
  • to entities dealing with hosting (storage) of the Service or personal data for us,
  • to law firms and debt collection companies.
• How long will we process your data? For the duration of:
  1. our marketing activities
  2. until you object to further processing of data for marketing purposes
  3. withdrawal of consent to send messages to your email address. Your withdrawal of consent does not affect the lawfulness of processing before the withdrawal of consent.
  or or
• Will your personal data be transferred outside the European Economic Area? No.

§ 11. Providing opinions about the Service on Google, Facebook, and the Service’s website, or opinions about products purchased through the Service

If you use these contact options with us, please note the following:

• Why do we need your data, i.e., for what purpose do we process it? To assess customer satisfaction and ensure the highest level of customer service. To achieve this goal, we need your feedback on the quality of our services. For this purpose, we send messages to your email address linking to appropriate forms.
• What are your rights? We have described them in § 4 and 5 of the Policy.
• Do you have to provide us with your data? It is voluntary, but without providing it, we will not know what we can improve.
• What is the legal basis for processing your data? Art. 6(1)(f) of the GDPR, i.e., our legitimate interest.
• What is our legitimate interest? Improving the quality of services provided and delivering products of the highest quality.
• To whom will we transfer your data?
  • To entities dealing with hosting (storage) of the Service or personal data for us;
  • to entities dealing with the administrative support of the Service;
  • to entities collecting and publishing opinions about online stores or products.
• How long will we process your data? For the duration of:
  1. the publication of your opinion about the store or product
  2. until you object to further processing of data for marketing purposes.
  or
• Will your personal data be transferred outside the European Economic Area? No.

§ 12. Newsletter

If you use this option in our Service, please note the following:

• Why do we need your data, i.e., for what purpose do we process it? For marketing purposes, consisting of sending you newsletters and other marketing information via email, and analyzing what content interests you, what you read most often. Based on this, we can also tailor our communication to your interests.
• What are your rights? We have described them in § 4 and 5 of the Policy. You also have the right to data portability under the conditions specified in the GDPR.
• Do you have to provide us with your data? It is voluntary, but without providing it, you cannot receive commercial information from us.
• What is the legal basis for processing your data?
  • Art. 6(1)(b) of the GDPR, i.e., the performance of the agreement we conclude with you, and Art. 6(1)(f) of the GDPR, i.e., our legitimate interest.
  • If you consent to receive marketing communications to your email address, the legal basis will also be Art. 10 of the Act on Providing Services by Electronic Means and Art. 172 of the Telecommunications Law. Remember that you can withdraw your consent at any time. If you wish to do so, please contact us.
• What is our legitimate interest? Our legitimate interest is to improve our communication by analyzing whether you read the content and which messages you are most interested in, and by tailoring this content to your interests.
• To whom will we transfer your data?
  • To providers of tools for sending newsletters and marketing automation;
  • to entities dealing with hosting (storage) of the Service or personal data for us;
  • to entities dealing with the administrative support of the Service.
• How long will we process your data? For the duration of:
  1. our marketing activities
  2. until you object to further processing of data for marketing purposes
  3. withdrawal of consent to send messages to your email address. Your withdrawal of consent does not affect the lawfulness of processing before the withdrawal of consent.
  or or
• Will your personal data be transferred outside the European Economic Area? No.

III. OUR SOCIAL MEDIA PROFILES

§ 13. Using our Social Media profiles

If you use our profile, please note the following:

• Why do we need your data, i.e., for what purpose do we process it?
  • To respond to private messages you send us;
  • to engage in discussions with you in the comments under individual posts;
  • to share our posts with you as a follower of our profile;
  • for marketing purposes, consisting of informing about our services and ourselves through posts we publish on our profile, including sponsored posts that are displayed to a wider audience of Social Media users;
  • for statistical purposes, consisting of entities managing Social Media, such as Facebook Ireland Ltd. or Instagram, presenting us with data on the visibility of our posts, their reach, the number of interactions, and demographic data of our followers; the data presented to us by Social Media entities are statistical data, but they are created based on that company’s observation of your behavior on our profile.
• What are your rights? We have described them in § 4 and 5 of the Policy.
• Do you have to provide us with your data? It is voluntary. However, due to the rules applied by Social Media, we will see your first name, last name (or nickname), and photo if you write to us or comment on our post.
• What is the legal basis for processing your data? Art. 6(1)(f) of the GDPR, i.e., our legitimate interest.
• What is our legitimate interest? Responding to your messages and comments, delivering posts to you, informing about our services and ourselves through them, analyzing statistical data related to our profile.
• To whom will we transfer your data? To entities managing Social Media, such as Facebook Ireland Ltd., Google Ireland Limited, and Instagram Inc.
• How long will we process your data? For the duration of:
  1. the time needed to resolve the matter you have presented. Depending on its nature, also for the time needed to demonstrate that we have resolved it, i.e., for the limitation period for claims;
  2. your following of our profile. Remember that you can always delete your comments under our posts, unfollow us, or deactivate your Social Media account.

IV. INFORMATION ABOUT COOKIES

§ 14. What are cookies and why do we use them

• In the Service, we use cookies (small text files) stored on your end device (e.g., computer, tablet, smartphone). Cookies can be read by the Service and are primarily used to optimize the use of websites and collect statistical data.
• We store cookies on your computer, phone, or tablet, and then access the information contained therein for the purposes of:
  • configuring the Service and ensuring its full functionality, by:
    • customizing the content of the Website pages to your preferences and optimizing your use of the Website. In particular, these files allow us to recognize the basic parameters of your User device and display the website appropriately, tailored to your individual needs;
    • remembering your selected settings and interface personalization, e.g., regarding the chosen language or region you are from, font size, website appearance, etc.;
    • remembering the history of pages visited on the Website for content recommendations;
  • marketing, which involves collecting information about your activities on the Website; this allows us to tailor its content to your interests and needs, for example, by generating personalized content for you; we also adapt the advertisements displayed to you on other services to what you viewed on our Website and to your interests, for example, we can display an advertisement on a news site promoting a service you viewed on our Website;
  • authenticating you on the service by ensuring the correct configuration of selected Website functions, enabling in particular the verification of browser session authenticity;
  • optimizing and increasing the efficiency of services provided by us within the Website;
  • analysis and research by creating anonymous statistics that help understand how you use the Website pages, which allows us to improve their structure and content;
  • ensuring the security and reliability of the Website.

§ 15. Types of cookies

There are several types of cookies on the Website:

• session cookies, which remain in your web browser’s memory until it is closed,
• persistent cookies, which remain in your web browser’s memory until you delete them,
• third-party cookies, which come from providers of analytics tools on our Website. You can read more about third-party cookies in § 18.

§ 16. How to delete cookies

• You can configure your web browser to prevent cookies from being stored on your computer, phone, or tablet.
• You can delete cookies after they have been saved by us. To do this, you can use: appropriate web browser functions, programs designed for this purpose, or appropriate tools available within your operating system.
• You can find information on how to delete cookies in the most popular web browsers at these links:
  • Firefox: http://support.mozilla.org/pl/kb/usuwanie-ciasteczek,
  • Opera: http://help.opera.com/Linux/9.60/pl/cookies.html,
  • Internet Explorer: http://support.microsoft.com/kb/278835/pl,
  • Chrome: http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647,
  • Safari: http://support.apple.com/kb/HT1677?viewlocale=pl_PL

§ 17. Impact of browser settings changes on Website usage

Changing your web browser configuration to one that prevents or limits the storage of cookies may restrict the functionality of the Website. Deleting cookies during service provision may lead to similar consequences. This means that some of our services will not be available without cookies, for example, you will not be able to log in to the Website.

§ 18. Third-party cookies

• Cookies placed on your computer, phone, or tablet may come from other service providers.
• We use the services of:
  • Google Analytics, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA);
    for website traffic analysis. Based on this, we obtain statistics showing how you and other users use the Website.
  • Google Ads, provided by Google Ireland Ltd. | Gordon House, Barrow Street, Dublin 4, Ireland;
    for optimizing ad display, remarketing, and promoting the Website.
  • Facebook.com [cookies administrator: Facebook Inc based in the USA or Facebook Ireland based in Ireland];
• You can block the operation of Google Analytics, as mentioned in paragraph 2a above. To do this, install this browser add-on provided by Google Inc. available here:
  https://tools.google.com/dlpage/gaoptout?hl=pl.
• Due to the use of tools provided by entities based in the United States, your data is transferred to the United States based on the European Commission Implementing Decision of 12.07.2016 introducing the Privacy Shield.