This Privacy Policy describes the rules for processing personal data of Customers of the catura.pl online store.
§1 Data Controller
The controller of personal data collected through the catura.pl online store is Aktro sp. z o.o. with its registered office in Białystok (15-124 Białystok), ul. Gen. Władysława Andersa 7 lok. 4, entered into the register of entrepreneurs of the National Court Register (KRS) under number 0001023946, NIP (Tax ID) 1251626720, REGON 147305079 (the „Controller”). The Controller can be contacted regarding personal data matters at miau@catura.pl.
§2 Purposes and Legal Bases for Processing
Customers’ personal data is processed for the following purposes and on the following legal bases:
- concluding and performing the sales contract (processing Orders) – Article 6(1)(b) GDPR,
- maintaining the Customer’s account in the Store – Article 6(1)(b) GDPR,
- handling complaints and returns – Article 6(1)(b) and (c) GDPR,
- issuing accounting documents (including invoices) and fulfilling tax obligations – Article 6(1)(c) GDPR,
- direct marketing of the Controller’s own products, including newsletters – Article 6(1)(a) GDPR (with consent) or (f) GDPR (the Controller’s legitimate interest),
- establishing, pursuing, or defending against claims – Article 6(1)(f) GDPR.
§3 Scope of Data Processed
Depending on the purpose of processing, the Controller may process: first and last name, delivery address, e-mail address, phone number, and, when a VAT invoice is requested, additionally the company name, NIP, and registered office address.
§4 Recipients of Data
Personal data may be shared, to the extent necessary, with entities that support the Store’s operation, including: courier companies handling delivery, payment service providers, hosting and IT service providers, and the Controller’s accounting office – solely for the purpose and to the extent necessary to fulfil the Order or legal obligations.
§5 Data Retention Period
Data related to the fulfilment of an Order is stored for the period necessary to perform the contract, and subsequently for the period required by law (including tax law – generally 5 years counted from the end of the year in which the tax obligation arose). Data processed on the basis of consent (e.g. newsletter) is stored until the consent is withdrawn.
§6 Rights of Data Subjects
The Customer has the right to access their data, to rectify it, to erase it, to restrict its processing, to data portability, to object to processing, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal. The Customer also has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
§7 Cookies
The Store uses cookies to ensure the website functions correctly (necessary cookies) and to remember the contents of the shopping cart, and, with the Customer’s consent, also for statistical and marketing purposes. The Customer may change their cookie settings in their web browser at any time.
§8 Voluntary Provision of Data
Providing personal data is voluntary, but necessary to conclude and perform the sales contract and to manage the Customer’s account in the Store.
§9 Final Provisions
The Controller reserves the right to introduce changes to this Privacy Policy, of which it will inform Customers by publishing the new content on this page.