1. Data Controller
The controller of your personal data is:
Wemaa – Marek Wójcik
ul. National Armed Forces 6
09-400 Płock
NIP: PL7741016914
REGON: 610241875
EORI: 774101691400000
Contact the Administrator:
- Email: wemaa@wemaa.pl
- Phone: +48 577 080 444
2. Purposes and basis of data processing
Your personal data may be processed for the following purposes:
a) Order fulfillment and customer service
- Legal basis: Article 6 paragraph 1 lit. b GDPR (performance of the contract)
b) Creating and managing a customer account in the store
- Art. 6 sec. 1 lit. b GDPR
c) Issuing sales documents and fulfilling accounting and tax obligations
- Art. 6 sec. 1 lit. c GDPR (legal obligations)
d) Handling complaints, service, returns and pursuing claims
- Art. 6 sec. 1 lit. c and f GDPR
e) Direct marketing (newsletter, commercial information)
- Article 6 paragraph 1 lit. a GDPR (consent)
– consent can be withdrawn at any time
f) Analysis of website statistics and performance (Google Analytics, cookies)
- Art. 6, paragraph 1, letter a) a GDPR (consent)
– when the User grants it
g) Contact in matters unrelated to the order (contact form)
- Art. 6 sec. 1 lit. f (legitimate interest of the administrator – providing a response)
3. Data Recipients
Data may be shared with the following categories of entities:
- courier and shipping companies,
- online payment operators,
- accounting offices,
- hosting and IT service providers,
- service providers and subcontractors participating in order fulfillment,
- companies implementing analytical and marketing tools (upon consent).
The Administrator does not sell personal data.
4. Data storage period
- Order data: up to 6 years from the end of the year of purchase upu,
- Accounting data: 5 years (in accordance with the Accounting Act),
- Customer account: until account deletion,
- Newsletter: until consent is withdrawn,
- Complaints and claims: until the statute of limitations for claims expires.
5. Rights of data subjects
You have the right to:
- access to your data,
- rectification of your data,
- deletion of your data,
- restrictions processing,
- data portability,
- objection,
- withdraw consent at any time.
To exercise your rights, contact the Administrator: wemaa@wemaa.pl
You also have the right File a complaint with the President of the Personal Data Protection Office (UODO).
6. Information about the requirement to provide data
- Providing data to conclude a contract is voluntary, but necessary to complete the order.
- For marketing purposes, data is processed only with your consent.
7. Automated Decision-Making and Profiling
Your data is not used for automated decision-making.
Profiling can only occur for marketing purposes and only after you have given consent (e.g., advertising personalization).