Privacy Policy

Table of contents

o-shop.com online shop privacy policy

Information concerning rules of personal data processing

Who is the administrator of your personal data?

The administrator, standing for the entity deciding about how your personal data will be used here, is Glaser Group Sp. z o.o. with the legal site in Warsaw, at Plac Trzech Krzyży 18, 00-499 Warszawa, NIP: 7010393453, REGON: 146854128 (further referred to as „the Administrator”)

How can you contact us to receive more information about processing your personal data?

Write us at:

e-mail address: shop@o-shop.com,

postal address: Glaser Group Sp. z o.o., Plac Trzech Krzyży 18, 00-499 Warszawa.

How did we obtain your data?

We obtained it from you during the process of setting up your account as well as further on related to sale of goods and/or providing services and/or transactions carried out by you.

What is the purpose and the legal basis for processing of your personal data by the Administrator?

We process your personal data because it is necessary to carry out the contract we entered in with you, including:

enabling us to provide services via electronic means and/or selling goods via an online shop and/or full use of the functionalities of the online shop run by the Administrator, including carrying out transactions and payments for goods and/or services;
setting up and managing your account or accounts as well as assuring proper handling of your account, transactions and solving technical issues;
carrying out sales contracts in the Administrator’s online shop;
carrying out other contracts entered into within programmes available to the customers, provided that you participate in such programmes;
handling claims, when you submit them;
handling requests you direct to us (e.g. via our contact form);
contacting you, including the purposes connected with providing our services;

Additionally, regulations of the law require us to process your data for tax and settlement purposes.

We also process your personal data for the below mentioned purposes, based on Administrator’s legally justified interest, which is:

running marketing activities directed towards you, including direct marketing of Administrator’s own services, goods offered by the Administrator in the online shop or services or goods offered by third parties;
contacting you, including contacting for the purposes of permitted marketing activities, via available communication channels, especially and with your permission – via email and/or phone;
support for crediting services as well as insuring the purchased goods;
providing payment services;
ensuring security of the services we provide via electronic means, including executing compliance to the internal rules of the Administrator’s online shop as well as counteracting against fraud and abuse and providing security;
running research and analyses, among others, ones pertaining to the online shop functionalities, improvement of services or evaluating main interests and needs of the visitors;
handling your requests, especially those delivered to the customer service department, and those delivered via our contact form in a situation when they are not related to direct execution of the contract;
organising loyalty programmes, contests, and promotion campaigns in which you may participate;
debt collecting, handling lawsuits, arbitration and mediation procedures;
running statistical analyses;
storing data for archiving purposes as well as handling settlements (demonstrating our fulfilment of duties stemming from the regulations of the law).

If you express your consent, we process your personal data for the purpose of:

writing data in cookie files, gathering data from the www site of our online shop;
organising contests, competitions and promotion campaigns in which you may participate;
customizing offers and services according to your precedent activity;

You can withdraw your permission for processing of your personal data at any moment by sending an email to: shop@o-shop.com with the content stating, “I am withdrawing my permission for processing of my personal data” and indicating the data needed for identification of your customer account. We are going to process your personal data as long as you do not withdraw your permission.

Are you required to provide us with your personal data?

We require you to submit the following personal data in order to enter into and execute the agreement with you, and what follows, provide our service to you:

your email address, login, password, phone number (in case of a regular account) or
your email address, login, password, phone number and the information about your company and its address (in case of a company account).

If the regulations of the law demand it, we may require of you to submit to us other necessary data, e.g. due to accounting or tax requirements. Apart from those instances submitting your data is voluntary.

What are your rights regarding our Company within the scope of the processed data?

We guarantee satisfying all your right stemming from the General Data Protection Regulation, i.e. the right to access, correction or deletion of your data, limiting of their processing, the right to move them, not being the subject to automated decision making within this profile, as well as the right to express your veto against processing of your personal data.

You may use your rights when:

in respect to a request to correct the data: you notice that your data are incorrect or incomplete;
in respect to a request to delete the data: your data is not necessary for the purposes for which they were acquired by the Administrator; you withdraw your permission for processing of the data; you submit a veto against processing of your data; your data are not processed according to the law; the data should be deleted in order to fulfil the duty resulting from the obligation imposed by the law or the data were gathered in regard to providing services via electronic means offered to a minor;
in respect to a request to limit the processing scope of the data: you notice that your data are incorrect – you can request to limit the scope of processing of your data for the period allowing us to verify the correctness of the data; your data are not processed according to the law, but you do not wish for them to be deleted; your data are no longer needed by us, but may be needed by you for the purpose of defending or redressing; or when you submit a veto against processing of the data – until the time of settlement whether legally justified grounds on our end are precedent over the grounds of the veto;
in respect to a request of moving of the data: processing of your data is carried out based on your permission or agreement entered into with you as well as when the processing is carried out in an automated way.

In regard to processing your personal data by us you have the right to submit a complaint to a supervising organ who is the Inspector General for Personal Data Protection (address: Generalny Inspektor Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

When can you issue a veto to oppose processing of your personal data?

You have the right to issue a veto against processing of your personal data when:

processing of your personal data is carried out based on a legally justified interest or for statistical purposes, and your veto is justified by a special case situation you find yourself in.
your personal data are processed for the purpose of direct marketing, including profiling for that purpose.

Remember that you have been able to use your right to veto since May 2018.

Whom do we share your data with?

We share your personal data with our suppliers for the purpose of carrying out your entitlements, e.g. the ones resulting from warranty or guarantee and/or to the entities supporting us in providing services via electronic means, i.e. the ones that provide payment crediting and insurance services.

How long do we store your personal data?

We store your personal data throughout the whole time of the contract we entered into with you, as well as after it ends for the purpose of redressing within execution of the contract,
performing our obligations resulting from the regulations of the law, especially including the tax and accounting regulations,
preventing abuses and frauds,
statistical and archival,
maximum for the period of 10 years from the day of the day of the expiry of the contract.

We store your personal data for the purpose of marketing throughout the time of the validity of this contract or until you submit an objection against such processing, depending on which event takes place earlier. In case of organising loyalty programmes, contests in which you can take place – we are going to process your data throughout the duration of such actions and/or throughout the duration period of evaluation of giving such awards. For the purpose of accountability, i.e. proving to be observing the regulations about personal data processing, we will store the data for the period in which the Administrator is obligated to keep the data or documents containing it to be able to support by evidence meeting legal requirements and thus enable to be controlled by public organs in relation to this aspect.

Do we share your data with entities in the countries outside European Economic Area?

Your personal data will not be shared outside the European Economic Area.

Do we process your personal data automatically (by profiling) in a way that impacts your rights?

Your data will not be processed in an automated way.