Privacy Policy

PRIVACY POLICY

To ensure transparency in the processing of personal data, Circular Clothing sp. z o.o. presents its data protection principles established in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

I. DATA CONTROLLER

The personal data controller is Circular Clothing sp. z o.o. with its registered office in Inowrocław (88-100), ul. Orłowska 43, Poland (KRS: 0000973585).

For matters related to personal data processing, you can contact us at the following e-mail address: the100helpme@gmail.com.

The Controller has appointed a Data Protection Officer (DPO), Mr. Konrad Lewandowicz, who can be contacted at: the100helpme@gmail.com.

We encourage you to contact the Data Protection Officer if you have any questions regarding personal data processing.

II. DATA COLLECTION AND PROCESSING PURPOSES

We process personal data for various purposes related to our business activities, in particular:

Newsletter subscription

Purpose: sending newsletters via electronic mail

Legal basis:

  • Article 6(1)(f) of the GDPR – legitimate interest of the controller (marketing of own products and services),
  • Article 6(1)(a) of the GDPR – consent to electronic marketing.

Retention period:
Until consent is withdrawn or an objection is raised. Data may be stored longer to the extent required by law or for the purpose of pursuing claims.

Account registration without purchase (potential customers)

Purpose: creating an account via the form on the website.

Legal basis:

  • Article 6(1)(b) of the GDPR – performance of a service consisting of maintaining a user account.

Retention period:
Until a request to delete the account is submitted.

Account registration with purchase (customers)

Purpose:

  • performance of the sales contract,
  • handling complaints,
  • collecting feedback on products and services.

Legal basis:

  • Article 6(1)(b) of the GDPR – performance of the contract,
  • Article 6(1)(f) of the GDPR – legitimate interest of the controller (handling claims and collecting feedback).

Retention period:
For the duration of the contract and after its termination for the period resulting from the provisions on the statute of limitations for claims.

Inquiries, complaints and claims (e-mail, contact form)

Purpose: answering questions, handling complaints and pursuing claims.

Legal basis:

  • Article 6(1)(b), (c) and (f) of the GDPR.

Retention period:
Up to 1 year after the warranty period expires or after the answer is provided.

Negotiation and performance of contracts with contractors

Purpose: concluding and performing contracts, including processing data of representatives and employees of contractors.

Legal basis:

  • Article 6(1)(b), (c) and (f) of the GDPR.

Retention period:
Until the expiration of the limitation periods for claims or the fulfillment of obligations resulting from legal provisions.

III. DATA RECIPIENTS

Personal data may be disclosed to:

a) public authorities, if required by law,

b) service providers and subcontractors cooperating with the Administrator (IT systems, auditors, marketing partners),

c) banks and payment operators handling transactions,

d) entities providing accounting, tax and legal services,

e) entities providing document archiving or destruction services.

IV. RIGHTS OF DATA SUBJECTS

Every data subject has the right to:

a) access their data,

b) rectify data,

c) erase data,

d) restrict processing,

e) object to processing,

f) data portability,

g) withdraw consent at any time (if processing is based on consent).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

V. IS PROVIDING DATA MANDATORY?

Providing personal data is necessary for the conclusion and performance of a sales contract and the fulfillment of obligations resulting from legal provisions.

In other cases (e.g., marketing activities), providing data is voluntary.

VI. TRANSFER OF DATA OUTSIDE THE EEA

Personal data is generally processed within the European Economic Area (EEA).

Data transfer outside the EEA may only occur with the application of appropriate safeguards provided for by GDPR provisions.

VII. AUTOMATED DECISION-MAKING

Personal data is not subject to automated decision-making that would produce legal effects or similarly significantly affect the data subjects.

VIII. COOKIES

When using our website, information such as IP address, browser type, or domain name may be collected automatically.

Cookies are used for the following purposes:

  • maintaining user session,
  • creating statistics,
  • delivering tailored advertising content.

The user can independently configure their web browser to block or delete cookies.

IX. CHANGES TO THE PRIVACY POLICY

The Administrator reserves the right to make changes to this Privacy Policy.

Users will be informed of any significant changes with appropriate advance notice before the changes come into effect.