Who is the controller of your personal data?

The controller, that is, the entity deciding how your personal data will be used, is Pelletsfarm s.c. Mariusz and Patryk Piekut NIP 8771476992, located at Małe Bałówki 12a, 13-306 Kurzętnik (hereinafter “Pelletsfarm”), the manufacturer, seller, and operator of the online trading platform available at www.pelletsfarm.pl.

How to contact us to get more information about the processing of your personal data?

Write to our designated Data Protection Officer. Here are the contact details: email address: biuro@pelletsfarm.pl, postal address: Data Protection Officer, Pelletsfarm s.c. Mariusz and Patryk Piekut NIP 8771476992, Małe Bałówki 12a, 13-306 Kurzętnik.

Where do we get your data from?

We received them from you when you created an account, as well as later in connection with transactions made by you on www.pelletsfarm.pl.

What is the purpose and legal basis for processing your personal data?

The legal basis for processing your data is Article 23(1)(3) and Article 23(1)(5) of the Act of August 29, 1997, on the Protection of Personal Data, and from May 25, 2018, it will be Article 6(1)(b) and Article 6(1)(f) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

We process your personal data because it is necessary to perform the contract concluded with you, including to:

– enable the provision of electronic services and full use of the store, including making purchase transactions, payments, order fulfillment, and shipping;
– set up and manage your account, and ensure the service of your account, transactions, and resolution of technical issues;
– handle complaints;
– handle requests you send us (e.g., via the contact form);
– contact you for purposes related to the provision of services.

Additionally, the law requires us to process your data for tax and accounting purposes.

We also process your personal data for the purposes listed below, based on the legitimate interest of Pelletsfarm, which includes:

– ensuring payment service support;
– ensuring the security of the services we provide to you electronically, preventing fraud and abuse, and ensuring traffic security;
– handling your requests addressed to customer service and via the contact form, if they are not directly related to the performance of the contract;
– organizing loyalty programs, contests, and promotional campaigns in which you can participate;
– debt collection; conducting legal proceedings, arbitration, and mediation;
– storing data for archival purposes and ensuring accountability (proving compliance with legal obligations).

If you agree, we process your personal data to:

– save data in cookies, collect data from websites and mobile applications;
– organize contests and promotional campaigns in which you can participate.

You can withdraw your consent to the processing of personal data at any time in the same way as you gave it. We will process your personal data until you withdraw your consent.

Do you have to provide us with your personal data?

We require you to provide the following personal data to conclude and execute the contract with you, and thus to provide you with the service:

– email address, first and last name, and address with phone number.

If for some reason you do not provide these personal data, unfortunately, we will not be able to conclude a contract with you, and consequently, you will not be able to use our store. If required by law, we may require you to provide other data necessary, e.g., for accounting or tax reasons (NIP). Other than these cases, providing your data is voluntary.

What are your rights regarding your data processed by Pelletsfarm?

We guarantee the fulfillment of all your rights under the General Data Protection Regulation (GDPR), i.e., the right to access, rectify, and delete your data, limit their processing, the right to data portability, not be subject to automated decision-making, including profiling, and the right to object to the processing of your personal data.

You can exercise these rights when:

– Regarding the request for data rectification: you notice that your data is incorrect or incomplete;
– Regarding the request for data deletion: your data will no longer be necessary for the purposes for which they were collected by the Company; you withdraw your consent to data processing; you object to the processing of your data; your data is processed unlawfully; the data should be deleted to fulfill the legal obligation; or the data was collected in connection with providing electronic services offered to a child;
– Regarding the request for limiting data processing: you notice that your data is incorrect – you can request limiting the processing of your data for a period that allows us to verify their correctness; your data is processed unlawfully, but you do not want it to be deleted; your data is no longer needed by us, but you may need it to defend or pursue claims; or you object to data processing – until it is determined whether our legitimate grounds override the grounds for objection;
– Regarding the request for data portability: the processing of your data is based on your consent or the contract concluded with you, and the processing is carried out by automated means.

You have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority, which is the President of the Personal Data Protection Office (address: Stawki 2, 00-193 Warsaw).

In what situations can you object to the processing of your data?

You have the right to object to the processing of your personal data when:

– the processing of your personal data is based on a legitimate interest or for statistical purposes, and the objection is justified by your particular situation,
– your personal data is processed for direct marketing purposes, including profiling for that purpose.

To whom do we share your personal data?

We share your personal data with entities supporting us in providing electronic services, that is, those that provide payment services, accounting services, consulting, or audit services. We may transfer your personal data to public authorities fighting fraud and abuse.

How long do we store your personal data?

We store your personal data for the duration of the contract concluded with you, and also after its termination for the purposes of:

– pursuing claims in connection with the performance of the contract,
– fulfilling obligations arising from legal regulations, including tax and accounting,
– preventing abuse and fraud,
– statistical and archival purposes,

for a maximum period of 5 years from the date of contract termination.

In the case of organizing loyalty programs, contests, and promotional campaigns in which you can participate, we will process your data for the duration and period of awarding prizes. To ensure accountability, i.e., proving compliance with regulations on personal data processing, we will store data for the period in which Pelletsfarm is obliged to retain data or documents containing them to document compliance with legal requirements and enable control by public authorities.

Do we transfer your data outside the European Economic Area?

Your personal data will be transferred outside the European Economic Area to Google LLC based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data, approved by the European Commission.

Do we process your personal data automatically (including through profiling) in a way that affects your rights?

Your personal data will not be processed in an automated way (including profiling).