Privacy and Cookies Policy
1. General Information
This Privacy Policy sets out the rules for the processing of personal data and the use of cookies in the online store operated by:
IOT SOLUTION Sp. z o.o.
39A Tomasza Zana Street
20-634 Lublin, Poland
Tax Identification Number (NIP): 7123416813
National Business Registry Number (REGON): 388504524
National Court Register Number (KRS): 0000891157
Contact details for matters relating to personal data protection
E-mail: sklep@iotsolution.pl
Telephone: +48 735 976 468
The controller of personal data is IOT SOLUTION Sp. z o.o. (hereinafter referred to as the “Controller”).
Use of the website constitutes acceptance of the rules set out in this Privacy Policy.
2. What Is Personal Data?
Personal data means any information relating to an identified or identifiable natural person, either directly or indirectly.
The Controller processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
3. Scope of Data Processed
The Controller may process the following data:
- first name and surname,
- delivery address,
- e-mail address,
- telephone number,
- order details,
- data required to process payments,
- data relating to a user account created in the store,
- IP address,
- information about the user’s activity on the website,
- information stored in cookies.
The scope of the data processed is always limited to the information necessary to achieve a specific purpose.
4. Purposes and Legal Bases for Data Processing
Personal data is processed for the following purposes:
Order Fulfilment
Data is processed for the purpose of:
- handling the purchasing process,
- preparing and shipping the order,
- contacting the customer,
- processing payments.
Legal basis:
Article 6(1)(b) GDPR – performance of a contract.
Customer Account Management
If a customer creates an account in the store, the data is processed for the purpose of:
- enabling the use of the account,
- providing access to order history,
- managing the user’s data.
Legal basis:
Article 6(1)(b) GDPR.
Handling Complaints and Enquiries
Data may be used for the purpose of:
- handling complaints,
- answering questions,
- conducting correspondence.
Legal basis:
Article 6(1)(f) GDPR – the Controller’s legitimate interest.
5. Recipients of Personal Data
Personal data may be disclosed to entities cooperating with the Controller only to the extent necessary to provide the relevant services.
Recipients of the data may include:
ING Pay
An electronic payment system operated by:
ING Bank Śląski S.A., with its registered office in Katowice.
Data is transferred for the purpose of processing payments for orders.
DHL
The courier company responsible for delivering shipments.
Data is transferred for the purpose of delivering ordered products.
Google Analytics and Google Ads
The Controller uses analytics and marketing tools provided by Google.
These tools may use cookies and similar technologies for the purpose of:
- analysing website traffic,
- creating statistics relating to the use of the store,
- measuring advertising effectiveness,
- personalising marketing communications.
In connection with the use of Google services, technical data concerning the use of the website may be processed by Google in accordance with Google’s privacy policies.
6. Data Retention Period
Personal data is retained for:
- the duration of order fulfilment,
- the period for which the customer account remains active,
- the period required by tax and accounting laws,
- the period necessary to establish, pursue or defend legal claims.
Data processed on the basis of consent is retained until the consent is withdrawn.
7. User Rights
Every data subject has the right to:
- access their data,
- rectify their data,
- erase their data,
- restrict processing,
- object to processing,
- data portability,
- withdraw consent at any time.
Requests concerning personal data may be sent to:
8. Right to Lodge a Complaint
Every person has the right to lodge a complaint with the supervisory authority responsible for personal data protection.
The supervisory authority in Poland is:
the President of the Personal Data Protection Office (UODO).
9. Cookies
The store uses cookies.
Cookies are small files stored on the user’s device while the website is being used.
They are used for the purpose of:
- ensuring the proper operation of the store,
- remembering user settings,
- operating the shopping cart,
- analysing website traffic,
- conducting marketing activities.
10. Types of Cookies Used
Essential Cookies
These cookies are required for the proper operation of the store, including for:
- operating the shopping cart,
- user login,
- order processing.
Analytics Cookies
These cookies are used to analyse how the website is used.
The Controller uses, among other tools:
Google Analytics.
Marketing Cookies
These cookies are used to measure the effectiveness of advertisements and marketing activities.
The Controller uses, among other tools:
Google Ads.
11. Managing Cookies
The user may change the cookie settings in their web browser at any time.
Disabling certain cookies may affect the operation of some store functions.
12. Profiling
The Controller uses analytics and advertising tools that may enable the analysis of user behaviour and the personalisation of advertising content.
Profiling is carried out in particular through the use of Google Analytics and Google Ads.
The user may manage consent to the use of cookies through the settings available on the store’s website.
13. Changes to the Privacy Policy
The Controller reserves the right to update this Privacy Policy in the event of technological, legal or organisational changes.
The current version of the document is always available on the store’s website.