GDPR information obligation

Who administers your personal data?

The administrator, i.e. the entity managing your personal data, is the GOFREX Maciej Kowalski, Magdalena Mościcka-Kowalska civil law partnership with its registered office in Ostrowiec 10, 05-651 Chynów, hereinafter referred to as the “Company”, running an online store available at www.gofrex.com, referred to as hereinafter referred to as “We” or “ESshop”).

Would you like to contact us for more information about the processing of your personal data?
Write to biuro@gofrex.com or contact us by post (GOFREX Maciej Kowalski, Magdalena Mościcka-Kowalska civil law partnership with its registered office in Ostrowiec 10, 05-651 Chynów)

How did we come into possession of your personal data?
You provided them to us when setting up an account, subscribing to the newsletter, and later when placing orders and making transactions in our E-Shop or physically on the occasion of gastronomic fairs.

What is the purpose and legal basis for the processing of your personal data by GOFREX Maciej Kowalski, Magdalena Mościcka-Kowalska spółka jawna

We process your personal data because it is necessary to perform the contract concluded with you, including:

• enabling the provision of electronic services and full use of the E-Shop, including the execution of orders and payments for products purchased in the E-Store;
• creating and managing your account or accounts, as well as enabling the handling of your account, transactions and solving any technical problems;
• implementation of sales contracts concluded in the E-Shop;
• handling complaints if you submit such a complaint;
• handling inquiries you send to us (e.g. via the contact form); contacting you for purposes related to the provision of services or the sale of our products;
• ensuring the correct handling and implementation of payment services.

In addition, we are obliged by law to process your data for tax and accounting purposes.

Upon your consent, we also process your personal data for the following purposes:

• conducting marketing activities, including direct marketing;
• contacting you via e-mail, including for purposes related to permitted marketing activities;
• organization of competitions and promotional campaigns in which you can take part;
• saving data in cookies.

Importantly, you can withdraw your consent to the processing of personal data at any time. You will do it the same way you expressed it. Until you withdraw your consent, your personal data will be processed by us.

We also process your personal data for the purposes indicated below, based on the legitimate interest of GOFREX, which is:

• conducting research and analysis of the E-Shop, for example in order to control the functionality of our online store, improve the quality of services or learn about the basic interests and needs of visitors;
• handling your requests and questions, primarily submitted to the customer service department and via the contact form in cases where they are not directly related to the performance of our contract;
• preparing loyalty programs, competitions and other promotional campaigns in which you can participate;
• collection of debts; conducting court, arbitration and mediation proceedings;
• conducting statistical research;
• storing data for archiving purposes and ensuring accountability (the possibility of presenting the fulfillment of our obligations under the law).

Are you obliged to provide us with your personal data?

To be able to conclude and perform the contract concluded between us and provide you with the maintenance service
account in the E-Shop, we require the following personal data:

• name, email address, password, address and telephone number (for natural persons);
• email address, password, phone number and information about the company and its address (for a business account).

In the event that – for some reason – you do not provide the above-mentioned personal data, unfortunately we will not be able to conclude a contract with you. As a consequence, you will not be able to make a purchase or create an account in the E-Shop.

If required by law, we may ask you to provide other necessary data. This may be for accounting or tax reasons. Apart from these cases, providing data is voluntary.

What rights do you have towards our company regarding the processed data?

We guarantee compliance with all your rights under the General Data Protection Regulation, i.e. the right to access, rectify and delete data, limit their processing, the right to transfer data, not to be subject to automated decision-making, including profiling, as well as the right to object to the processing of your personal data.

You can exercise the above-mentioned rights:

• regarding the request to rectify the data: when you notice that your data is incorrect or incomplete;
• with regard to the request to delete data: when your data will no longer be necessary to achieve the purposes for which it was collected by our company; when you withdraw your consent to the processing of your data; when you object to the processing of your data; when your data is processed unlawfully; when the data should be deleted in order to fulfill the obligation resulting from the law or the data has been collected in connection with the provision of electronic services addressed to the child;
• regarding the request to limit data processing: when you notice that your data is incorrect – you can request the restriction of data processing for a period that will allow us to verify the correctness of this data; when your data is processed unlawfully, but you do not want it to be completely deleted; when we no longer need your data, but they may become useful to you, for example to defend or pursue your claims; or when you object to the processing of your data – until it is determined whether the legitimate grounds on our part override the grounds for objection;
• with regard to the request to transfer data: when the processing of your data is carried out on the basis of your consent or the contract concluded with you and when the processing is carried out in an automated manner.

You have the right to lodge a complaint regarding the processing of your personal data by us to the supervisory body, which is the Inspector General for Personal Data Protection (address: General Inspector for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw).

In what situations can you object to the processing of your data?

You have the right to object to the processing of your personal data when:

• the processing of your personal data is based on a legitimate interest or for statistical purposes, and the objection is justified by the particular situation in which you have found yourself,
• Your personal data is used for direct marketing, including profiling for this purpose. Please note that you can exercise your right to object from May 25, 2018.

Who do we share your personal data with?

We share your personal data with entities that support us in offering electronic services and online sales, i.e. those that provide: postal and courier services, payment, consulting or auditing, accounting, legal services that support the service of users and customers of the E-Shop, they help in the promotion of offers, they support us in marketing campaigns. We may also transfer your personal data to public authorities that prevent fraud and abuse.

How long do we store your personal data?

We store your personal data during the term of the contract concluded between us and after its completion, for the purposes of:

• pursuing claims related to the performance of the contract;
• implementation of obligations arising from legal provisions, including primarily tax and accounting;
• preventing abuse and fraud; statistical and archiving;
• for a maximum of 10 years from the completion of our contract.

With your consent, we store personal data for marketing purposes. This happens until you withdraw your consent or object to processing.

During the organization and duration of loyalty programs, competitions and other promotional campaigns in which you can take part – we will process your data only for the duration of their duration and the time of settlement of prizes by us.

For the purpose of accountability, i.e. to prove our compliance with the provisions on the processing of personal data, we will store data for the time in which the company is obliged to store data or documents containing data. This is dictated by the need to document the fulfillment of legal requirements and enable inspection by public authorities.

Do we transfer your data to centers outside the European Economic Area?

Outside the European Economic Area, your personal data will be transferred to Google LLC.
This will be done on the basis of appropriate legal safeguards, which are standard contractual clauses for the protection of personal data, approved by the European Commission.

Do we process your personal data automatically (including through profiling) in a way that affects your rights?

Your personal data will be processed in an automated manner (including in the form of profiling).
However, it should be clarified that this will not have any legal effect on you or similarly significantly affect your situation.
Profiling of personal data by our company consists in processing your data (also in an automated manner), by using them to evaluate certain information about you, in particular for analytical and prognostic purposes, aimed at determining your preferences and interests.