Privacy policy

1. The administrator of personal data of Clients is the Seller, referred to in this paragraph as the Data Protection Officer (ADO).

2. For matters related to the protection of personal data, clients can contact via email: hello@stripes-co.com or by postal mail at: Stripes & Co. sp. z o.o., Al. Wojska Polskiego 11, 01-524 Warsaw.

3. We process personal data for the purpose of:
- Executing the concluded agreement, as well as for the purposes of fulfilling legal obligations incumbent on the ADO based on universally applicable legal provisions, including tax and accounting regulations – i.e., based on Article 6(1)(b) and (c) of the General Data Protection Regulation (GDPR) or Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
- Realizing the legally justified interest of the ADO based on Article 6(1)(f) of the GDPR, which interest consists of:
- Pursuing or defending against claims – our legally justified interest is the potential establishment or pursuit of claims or defense against claims;
- Ensuring the security of the provided sales services – our legally justified interest is to ensure the security of services provided electronically;
- Marketing and promoting ADO's own products or services consisting of directing email notifications about interesting offers or content, which in some cases include commercial information, and conducting other types of activities related to direct marketing of goods and services (sending commercial information electronically) – the legally justified interest lies in the direct marketing of own products and services;
- Analyzing customer satisfaction – our legally justified interest is to ensure the highest quality of customer service and product quality.
- Sending commercial information and telephone communication for direct marketing purposes – if separate consent is given – Article 6(1)(a) of the GDPR.
- In order to carry out marketing activities, the ADO in some cases utilizes profiling. This means that thanks to the automated processing of data, the ADO assesses selected factors concerning individuals in order to analyze their behavior or create a forecast of personal preferences and interests related to the ADO's offer.

5. Personal data processed for the above purposes will be stored until the expiry of the limitation period for claims arising from the concluded contract, including tax-related claims – but no longer than 6 years. To the extent that data is processed for directing marketing content, they will be processed until the withdrawal of consent or objection to such processing.

6. The data will not be transferred to other entities except: suppliers responsible for operating the IT systems used to provide services, entities such as postal operators, couriers, banks, and payment operators, marketing agencies (in the scope of marketing services), our collaborators, including subcontractors, entities providing legal services to the ADO.

7. Every subject whose personal data is processed by the ADO has the right to:
- Access the content of their personal data, including requesting a copy;
- The right to request rectification;
- The right to request the deletion of personal data (the right to be forgotten);
- The right to restrict the processing of personal data;
- The right to transfer personal data to another administrator;
- The right to withdraw consent – withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

8. Every subject whose personal data is processed by the ADO has the right to lodge a complaint with the President of the Office for Personal Data Protection.

9. Every subject whose personal data is processed by the ADO has the right to object to the processing of personal data for the purpose of directing marketing content to them. Additionally, regarding the processing of personal data for purposes arising from the legally justified interests of the ADO – described above, there is the right to object for reasons related to a particular situation.

10. Providing personal data is voluntary but necessary for the realization of the sales contract.

11. Providing personal data for marketing purposes is voluntary.

12. Information allowing the identification of the Client, such as username and password, is personal and confidential. This information can only be modified at the initiative of the Client or the Seller, especially in case of a forgotten password. Every order placed using the Client's username and password is considered to have been placed by the Client. The Client bears sole responsibility for the use of their informational data and is obliged to keep it secret. The Seller is not responsible for the disclosure of data by the Client or as a result of any action by them.