RODO information obligation

Who administers your personal information?

The administrator, i.e. the entity that manages your personal data, is the company GOFREX Maciej Kowalski, Magdalena Mościcka-Kowalska spółka cywilna with its registered office in Ostrowiec 10, 05-651 Chynów, hereinafter referred to as the “Company” operating an online store available at www.gofrex.com, hereinafter referred to as “We” or “E-Shop”).

Would you like to contact us for more information about the processing of your personal data?
Write to biuro@gofrex.com or contact us by mail (GOFREX Maciej Kowalski, Magdalena Mościcka-Kowalska spółka cywilna based in Ostrowiec 10, 05-651 Chynów).

How did we come into possession of your personal data?
You gave them to us when you created your account, signed up for our newsletter, and later, by placing orders and making transactions in our ESstore or physically at a food fair.

What is the purpose and legal basis for the processing of your personal data by GOFREX Maciej Kowalski, Magdalena Mościcka-Kowalska civil partnership

We process your personal data as it is necessary for the performance of the contract concluded with you, including:

enable the provision of the service electronically and the full use of the E-Shop, including the processing of orders and payments for products purchased from the E-Shop;
to create and manage your account or accounts, as well as to enable the handling of your account, transactions and to resolve any technical problems;
Executing sales contracts concluded in E-Shop;
handle claims in situations where you make such a claim;
handling inquiries you direct to us (e.g. via the contact form);
contacting you, for purposes related to providing services or selling our products;
ensuring proper handling and execution of payment services.

In addition, we are obliged by law to process your data for tax and accounting purposes.

Once you have given your consent, we also process your personal data for the following purposes:

conducting marketing activities, including direct marketing;
contacting you via e-mail, including for purposes related to permitted marketing activities;
organizing contests and promotional activities in which you may participate;
storing data in cookies.

Importantly, consent to the processing of personal data, you can withdraw at any time. You will do this in the same way you gave it. As long as you do not withdraw your consent, your personal data will be processed by us.

We also process your personal data for the purposes indicated below, based on GOFREX’s legitimate interests, which are:

conducting research and analysis of E-Shop, for example to control the functionality of our online store, to improve the quality of our services or to learn about our visitors’ basic interests and needs;
handling your requests and questions, communicated primarily to the customer service department and via the contact form in cases where they are not directly related to the performance of our contract;
preparing loyalty programs, contests and other promotional activities in which you may participate;
debt collection; conducting litigation, arbitration and mediation;
conducting statistical surveys;
storing data for archiving purposes and ensuring accountability (the ability to demonstrate our compliance with legal obligations).

Are you required to provide us with your personal information?

In order to be able to conclude and perform the contract concluded between us and provide you with the service of maintaining an E-Shop account, we require the following personal data:

name, email address, password, address and phone number (for individuals);
email address, password, telephone number, and information about the company and its address (for an account for companies).

In the event that – for some reason – you do not provide the above-mentioned personal data, unfortunately we will not be able to conclude a contract with you. Consequently, you will not be able to make a purchase or create an account on E-Shop.

If required by law, we may ask you to provide other necessary data. These may be for accounting or tax reasons. Apart from these cases, providing data is voluntary.

What rights do you have against our company regarding the data we process?

We guarantee compliance with all your rights under the General Data Protection Regulation, i.e. the right of access, rectification and deletion, restriction of data processing, the right to data portability, not to be subject to automated decision-making, including profiling, and the right to object to the processing of your personal data.

You can exercise the above-mentioned rights:

with regard to the request for rectification of data: when you notice that your data is incorrect or incomplete;
with regard to a request for deletion: when your data are no longer necessary for the purposes for which they were collected by our company; when you withdraw your consent to the processing of your data;
when you object to the processing of your data; when your data are processed unlawfully; when your data should be deleted in order to comply with an obligation under the law or your data were collected in connection with the provision of electronic services directed to your child;
with regard to a request for restriction of data processing: when you notice that your data is incorrect – you can request a restriction of data processing for a period that will allow us to verify the correctness of the data; when your data is processed unlawfully, but you do not want it to be completely deleted; when we no longer need your data, but it may become useful to you, for example, to defend or assert your claims;
or when you object to the processing of your data – until we determine whether the legitimate grounds on our side override the grounds for the objection;
with regard to a request for data portability: when the processing of your data is carried out on the basis of your consent or a contract concluded with you, and when the processing is carried out by automated means.

You have the right to lodge a complaint regarding our processing of your personal data to the supervisory authority, which is the Inspector General for Personal Data Protection (address: General Inspector of Personal Data Protection, 2 Stawki Street, 00-193 Warsaw).

In what situations can you object to the processing of your data?

You have the right to object to the processing of your personal data when:

the processing of your personal data is based on a legitimate interest or
for statistical purposes, and the objection is based on the particular situation in which you find yourself,
Your personal data is used for direct marketing purposes, including
are profiled for this purpose.

Keep in mind that you can exercise your right to object as of May 25, 2018.

Who do we share your personal information with?

We share your personal data with entities that support us in offering services provided electronically and online sales, i.e. those that provide: postal and courier services, payment services, perform consulting or auditing services, accounting services, legal services that support the service of users and customers of E-Shop, help promote offers, support us in marketing campaigns. We may also provide your personal information to public authorities that counter fraud and abuse.

How long do we keep your personal information?

We store your personal data during the term of the contract between us and after its termination, for the purposes of:

asserting claims related to the performance of the contract;
fulfilling legal obligations, including primarily tax and accounting obligations;
counteracting fraud and abuse;
statistical and archiving purposes;
for a maximum of 10 years after completion of our contract.

With your consent, we store your personal data for marketing purposes. This happens until you withdraw your consent or object to the processing.

In the course of the organization and duration of loyalty programs, contests and other promotional activities in which you may participate – we will process your data only for the duration of their duration and the time of accounting by us for the presentation of prizes.

For the purpose of accountability, i.e. to prove our compliance with the regulations on the processing of personal data, we will keep your data for the time during which the company is obliged to keep the data or documents containing the data. This is dictated by the need to document compliance with legal requirements and to allow inspection by public authorities.

Do we transfer your data to centers outside the European Economic Area?

Outside the European Economic Area, your personal data will be transferred to Google LLC.
This will be based on appropriate legal safeguards, which are the standard contractual clauses for the protection of personal data approved by the European Commission.

Do we process your personal data automatically (including through profiling) in a way affecting your rights?

Your personal data will be processed by automated means (including profiling).
However, it is important to clarify that this will not have any legal effect on you or similarly materially affect you.
Profiling of personal data by our company consists in processing your data (including by automated means) by using it to evaluate certain information about you, in particular for analytical and predictive purposes aimed at determining your preferences and interests.