Privacy Policy

Online Store Numoco.sklep.pl GDPR

§ 1 General Provisions

1. This Privacy Policy defines the principles of processing personal data obtained through the online store www.numoco.sklep.pl (hereinafter referred to as the "Online Store").

2. The owner of the Online Store and simultaneously the data controller is DONACO LIMITED LIABILITY COMPANY based in Racibórz (47-400), ul. Bartka Lasoty 19, registered in the register of entrepreneurs of the National Court Register maintained by the District Court in Gliwice, X Commercial Division of the National Court Register under number KRS 0000334643, with share capital of 10,000 PLN, Tax ID: 5252459775, REGON: 141960446, hereinafter referred to as DONACO LTD.

3. Personal data collected by DONACO LTD. through the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.

4. DONACO LTD. exercises particular care in respecting the privacy of Customers visiting the Online Store.

§ 2 Types of processed data, purposes and legal basis

1. DONACO LTD. collects information regarding natural persons performing legal acts not directly related to their business activity, natural persons conducting business or professional activity in their own name, and natural persons representing legal entities or organizational units without legal personality that are granted legal capacity by law, collectively referred to as Customers.

Personal data of Customers is collected in case of:

account registration in the Online Store, for the purpose of creating an individual account and managing this account. Legal basis: necessity for the performance of the Account service contract (Art. 6 para. 1 lit. b GDPR)
placing an order in the Online Store, for the purpose of performing the sales contract. Legal basis: necessity for the performance of the sales contract (Art. 6 para. 1 lit. b GDPR)
subscribing to the newsletter, for the purpose of performing a contract for electronic services. Legal basis - consent of the data subject for the performance of the Newsletter service contract (Art. 6 para. 1 lit. a GDPR)
using the contact form service in the Online Store for the purpose of performing an electronically provided contract. Legal basis: necessity for the performance of the contact form service contract (Art. 6 para. 1 lit. b GDPR)

Scope of collected data:

In case of account registration in the Online Store, the Customer provides:

email address
first and last name
phone number

In case of placing an order in the Online Store, the Customer provides the following data:

email address
address data: postal code and city, country (state), street with house/apartment number
first and last name

In case of Entrepreneurs, the above scope of data is additionally extended with:

Entrepreneur's company name
Tax ID number

Technical data: When using the Online Store Website, additional information may be collected, in particular: IP address assigned to the Customer's computer or external IP address of the Internet provider, domain name, browser type, access time, operating system type.

§ 3 To whom data is disclosed or entrusted and how long is it stored?

1. Customer's personal data is transferred to service providers used by DONACO LTD. in operating the Online Store.

Processing entities:

DONACO LTD. uses suppliers who process personal data exclusively on the instruction of DONACO LTD. These include, among others, providers offering hosting services, accounting services, providing marketing systems, systems for analyzing traffic in the Online Store, systems for analyzing the effectiveness of marketing campaigns.

Controllers:

DONACO LTD. uses suppliers who themselves determine the purposes and methods of using Customers' personal data. They provide electronic payment and banking services.

Data retention periods:

Data based on consent: until consent is withdrawn, and then for the limitation period of claims (6 years, for business activity - 3 years)
Data based on contract: until contract performance, and then for the limitation period of claims

Przelewy24 Payments: In case the Customer chooses payment through the przelewy24.pl system, their personal data is transferred to the extent necessary for payment processing to PayPro S.A. based in Poznań.

§ 4 Cookies mechanism, IP address

1. The Online Store uses small files called cookies. They are saved by DONACO LTD. on the end device of the person visiting the Online Store, if the web browser allows it.

Types of cookies files:

Session cookies: deleted after the browser session ends
Persistent cookies: stored until they are deleted or expire

Own cookies used for:

Customer authentication in the Online Store
analysis and research and audience auditing

External cookies used for:

promoting the Online Store through Instagram service
promoting the Online Store through Facebook service
collecting statistical data through Google Analytics

Cookies management: Customers have the option to limit or disable access to cookies files in their browsers. In case of disabling cookies, using the Online Store will be possible, except for functions that by their nature require cookies files.

§ 5 Rights of data subjects

Your rights:

Right to withdraw consent - at any time
Right to object to data processing
Right to data erasure ("right to be forgotten")
Right to restriction of processing of data
Right of access to data - receiving a copy of data
Right to rectification of data - correction of incorrect data
Right to data portability - receiving data in CSV format

Request fulfillment time: DONACO LTD. fulfills requests without delay, but no later than within one month of receiving it. In case of complicated requests, the deadline may be extended by another two months.

Complaints: The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office regarding violations of their personal data protection rights.

§ 6 Security management - password

1. DONACO LTD. provides Customers with secure and encrypted connection when transmitting personal data and when logging into the Customer Account. DONACO LTD. uses SSL certificate.

2. In case of losing the access password, the Online Store enables generating a new password. DONACO LTD. does not send password reminders - the password is stored in encrypted form.

Important: DONACO LTD. never sends any correspondence requesting login data, especially the access password to the Customer's account.

§ 7 Privacy Policy Changes

1. The Privacy Policy may be subject to changes, which DONACO LTD. will inform Customers about 7 days in advance.

2. Last modification date: July 8, 2025

Currency

Polityka prywatności