Purpose of data processing | Legal basis for data processing | Data storage period |
Performance of the Sales Agreement or contract for the provision of Electronic Services or taking action at the request of the data subject, before concluding the above-mentioned contracts | Article 6 sec. 1 lit. b) GDPR Regulations (performance of the contract) - processing is necessary for the performance of the contract to which the data subject is a party, or to take action at the request of the data subject, before concluding the contract | The data is stored for the period necessary to perform, terminate or otherwise terminate the concluded Sales Agreement or contract for the provision of Electronic Services |
Direct marketing | Article 6 (1) 1 lit. f) GDPR Regulations (legitimate interest of the administrator) - processing is necessary for purposes resulting from the legitimate interests of the Administrator - consisting in caring for the interests and good image of the Administrator, its Online Shop and striving to sell Products | The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator's claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular by the Civil Code (the basic limitation period for claims related to running a business is three years, and for a Sales Agreement - two years). The administrator cannot process data for the purpose of direct marketing in the event of an effective objection in this regard by the data subject. |
Marketing | Article 6 (1) 1 lit. a) GDPR Regulations (consent) - the data subject has consented to the processing of his personal data for marketing purposes by the Administrator | The data is stored until the data subject withdraws the consent for further processing of his data for this purpose. |
Expressing the opinion by the Customer on the concluded Sales Agreement | Article 6 (1) 1 lit. a) GDPR Regulations - the data subject has consented to the processing of his personal data in order to express an opinion | The data is stored until the data subject withdraws the consent for further processing of his data for this purpose. |
Keeping tax books | Article 6 (1) 1 lit. c) Regulations of the GDPR in connection with with art. 86 § 1 of the Tax Ordinance, i.e. of January 17, 2017 (Journal of Laws of 2017, item 201) - processing is necessary to fulfill the legal obligation incumbent on the Administrator | The data is stored for the period required by law requiring the Administrator to store tax books (until the tax liability period expires, unless tax laws provide otherwise). |
Determining, investigating or defending claims that may be raised by the Administrator or that may be raised against the Administrator | Article 6 (1) 1 lit. f) GDPR Regulations (legitimate interest of the administrator) - processing is necessary for the purposes of the Administrator's legitimate interests - consisting in establishing, investigating or defending claims that may be raised by the Administrator or which may be raised against the Administrator | The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of claims that may be raised against the Administrator (the basic limitation period for claims against the Administrator is six years). |
Using the website of the Online Shop and ensuring its proper operation | Article 6 (1) 1 lit. f) GDPR Regulations (legitimate interest of the administrator) - processing is necessary for purposes arising from the legitimate interests of the Administrator - consisting in running and maintaining the website of the Online Shop | The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator's claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular by the Civil Code (the basic limitation period for claims related to running a business is three years, and for a Sales Agreement - two years). |
Keeping statistics and analyzing traffic in the Online Shop | Article 6 (1) 1 lit. f) GDPR Regulations (legitimate interest of the administrator) - processing is necessary for purposes resulting from the legitimate interests of the Administrator - consisting in keeping statistics and analyzing traffic in the Online Shop in order to improve the functioning of the Online Shop and increase the sale of Products | The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator's claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular by the Civil Code (the basic limitation period for claims related to running a business is three years, and for a Sales Agreement - two years). |