PRIVACY POLICY OF
THE SHOP-PORTHOLE.COM AND PORTHOLE-SHOP.CO.UK ONLINE STORES
TABLE OF CONTENTS:
Purpose of data processing |
Legal basis for processing and the period of data storage |
Scope of data processing |
The performance of the Contract of Sale or a contract for the provision of an E-Service, or taking actions to the request of the data subject, prior to entering into the above contracts. |
Article 6, par. 1, point b) of the GDPR Regulation (contract performance) The data shall be stored for the period necessary for the performance, termination or expiry of a contract entered into in a different manner. |
Maximum scope: name and surname; e-mail address; phone no.; delivery address (street, flat no., office no., zip code, town, country), address of residence/running a business/registered office, if different than the delivery address). In the case of Service Users or Customers who are not consumers, the Controller may also process the company name and tax ID no. (NIP) of the Service User or the Customer. The above constitutes the maximum scope – in the case of e.g. collecting a product personally, one does not have to specify the delivery address. |
Direct marketing |
Article 6, par. 1, point f) of the GDPR Regulation (legitimate interest of the controller) The data shall be stored for the period of the legitimate interest of the Controller, however no longer than the period of limitation of claims as regards the data subject under the business activity of the Controller. The period of limitation shall be specified by legal provisions, in particular the Civil Code (the basic period of limitation in the case of claims related to business activity amounts to three years, and for a Contract of Sale two years). The Controller may not process the data for the needs of direct marketing in the case of expressing clear objection in this field by the data subject. |
E-mail address |
Marketing |
Article 6, par. 1, point a) of the GDPR Regulation (consent) The data are stored until the data subject withdraws the consent to further process their data to that end. |
Name, e-mail address |
The Customer expressing opinion on the concluded Contract of Sale |
Article 6, par. 1, point a) of the GDPR Regulation The data are stored until the data subject withdraws the consent to further process their data to that end. |
E-mail address |
Keeping tax books |
Article 6, par. 1, point c) of the GDPR Regulation in relation with Article 86 §1 of Tax Ordinance Act, consolidated text of 17 January 2017 (Journal of Laws of 2017 item 201) The data shall be stored for the legally required period, requesting the Controller to store tax books (till the lapse of the period of limitation of a tax obligation, unless Acts on Tax stipulate otherwise) |
Name and surname: address of residence/running a business/registered office (if other than the delivery address), business name and tax ID no. (NIP) of the Service User or the Customer. |
Determining, pursuing or defence of claims on the side of the Controller, or ones that may arise as regards the Controller. |
Article 6, par. 1, point f) of the GDPR Regulation The data shall be stored for the period of the legitimate interest of the Controller, however no longer than the period of limitation of claims as regards the data subject under the business activity of the Controller. The period of limitation shall be specified by legal provisions, in particular the Civil Code (the basic period of limitation in the case of claims related to business activity amounts to three years, and for a Contract of Sale two years). |
Name and surname; phone no.; e-mail address; delivery address (street, flat no., office no., zip code, town, country), address of residence/running a business/registered office (if different than the delivery address). In the case of Service Users or Customers who are not consumers, the Controller may also process the company name and tax ID no. (NIP) of the Service User or the Customer. |