Information Clause

In connection with the application, as of May 25, 2018, of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – hereinafter referred to as GDPR, I inform you that:

• The Data Controller is Jakub Tomczyk conducting business under the name CRONIC Jakub Tomczyk, with its registered office near Toruń at ul. Włocławska 91 B-C, NIP 5842522954.
• You can contact the Data Controller at the above address, by e-mail at: sklep@rallyshop.pl, or by phone: (+48) 56 652-12-12.
• The Controller has appointed a Data Protection Officer, who can be contacted regarding the protection of your personal data at: dane.osobowe@cronic.pl, by phone: 56 652-12-12, or in person at the Controller’s registered office.
• We process your personal data for the following purposes:
  • to take steps aimed at entering into a contract such as submitting an offer, correspondence regarding agreement terms, etc. (legal basis: Art. 6(1)(b) GDPR);
  • to perform contracts concluded with us, which includes, among others, telephone and e-mail contact, dispatch of ordered products, etc. (legal basis: Art. 6(1)(b) GDPR);
  • to comply with our legal obligations, e.g., issuing invoices, responding to complaints, keeping accounting records, etc.;
  • to directly offer our products and services (direct marketing), including tailoring them to your needs (legal basis: Art. 6(1)(f) GDPR);
  • to directly offer (direct marketing) products and services of companies cooperating with us (our partners), which constitutes the realization of our legitimate interest and that of our partners (legal basis: Art. 6(1)(f) GDPR);
  • to conduct customer satisfaction surveys, which constitutes our legitimate interest in assessing service quality and the level of customer satisfaction with our products and services (legal basis: Art. 6(1)(f) GDPR);
  • for internal administrative purposes, including analytical and statistical purposes (better adjustment of services to customer needs, general service optimization, process optimization, building customer knowledge, financial analysis, etc.), which constitutes our legitimate interest (legal basis: Art. 6(1)(f) GDPR);
  • for the possible establishment, exercise, or defense of legal claims, which constitutes our legitimate interest, e.g., sending payment demands, pursuing payment through legal proceedings (legal basis: Art. 6(1)(f) GDPR);
  • for archival (evidentiary) purposes, which constitutes our legitimate interest in securing information in case of a legal need to demonstrate facts (legal basis: Art. 6(1)(f) GDPR).
• Your personal data will be processed for the period necessary to achieve the processing purposes listed in point 4:
  • with regard to contract conclusion and performance, establishment, pursuit, or defense of claims – until its completion, and thereafter for the period required by law or for the securing of possible claims (i.e., the longest possible limitation period + 1 year from the end of the year in which the contract expired – the additional 1 year is introduced in case claims are made just before the limitation period and to unify the data deletion date for contracts expiring in the same year);
  • if no contract is concluded based on your offer within 6 months, the personal data related to that offer will be immediately deleted, except for data necessary for direct marketing purposes;
  • with regard to data processed to fulfill legal obligations – for as long as the law requires us to store data, but no shorter than the period during which we may bear legal liability for failing to fulfill a legal obligation;
  • with regard to data processed for direct marketing purposes – until an objection to such processing is raised or until it is determined that the data has become outdated;
  • with regard to internal administrative purposes, archival purposes, and customer satisfaction surveys – until our legitimate interests forming the basis of processing are fulfilled, or until you object to such processing.
• If data processing is based on your consent, you have the right to withdraw your consent at any time, but processing carried out before withdrawal will remain lawful. Consent may be withdrawn by phone, e-mail, or post at the address indicated in point 2.
• You have the right at any time to object to the processing of your data for the purposes indicated in point 4(e–i). We will stop processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, e.g., when your data is necessary for the establishment, exercise, or defense of claims.
• You have the right at any time to object to the processing of your data for direct marketing purposes (point 4(d and e)). If you exercise this right – we will stop processing your data for this purpose.
• In connection with the processing of your personal data, you have the right to:
  • access the data and receive a copy thereof
  • rectify the data
  • erase the data ("right to be forgotten"), in cases specified in Art. 17 GDPR
  • restrict the processing of data
  • object to the processing of data
  • data portability
• Your personal data may also be accessed by our subcontractors (processors), e.g., entities operating our IT systems, entities servicing and maintaining our IT infrastructure, entities providing us with advisory, consulting, legal, tax, accounting assistance, entities providing postal and/or courier services, banks.
• If you believe that our processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
• Depending on the nature and context, the provision of your personal data may be mandatory. Providing data is voluntary, but certain actions, including the provision of services and/or performance of contracts with us, may require the provision of necessary data to the extent needed to perform the contract or comply with legal obligations.