PRIVACY POLICY

version valid from 09/10/2024

WHAT IS A PRIVACY POLICY?

We would like to familiarize you with the details of our processing of your personal data to give you full knowledge and comfort in using our website.

Since we operate in the internet industry ourselves, we know how important it is to protect your personal data. That is why we take special care to protect your privacy and the information you provide to us.

We carefully select and apply appropriate technical measures, especially those of a programming and organizational nature, ensuring the protection of processed personal data. Our website uses encrypted data transmission (SSL), which ensures the protection of data identifying you.

In our Privacy Policy you will find all the most important information regarding our processing of your personal data. We ask you to read it and we promise that it will not take you more than a few minutes.

Who is the administrator of the website www.golden-group.eu?

The administrator of the website is Robert Bąk, conducting business activity under the name AUTO-PROJEKT SR / GOLDEN SPORT ROBERT BĄK, entered into the register of entrepreneurs of the Central Registration and Information on Business kept by the minister responsible for economy at ul. Marcinkowskiego nr 9a, 62-050 Mosina, NIP 7771527714, REGON 634196890, BDO 000441403 (i.e.: we).

PERSONAL DATA

What legal act regulates the processing of your personal data?

Your personal data are collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), commonly referred to as: GDPR. To the extent not regulated by the GDPR, the processing of personal data is regulated by the Personal Data Protection Act of 10 May 2018.

Who is the administrator of your personal data?

The administrator of your personal data is Robert Bąk, conducting business activity under the name of AUTO-PROJEKT SR / GOLDEN SPORT ROBERT BĄK, entered into the register of entrepreneurs of the Central Registration and Information on Business kept by the minister responsible for economy at ul. Marcinkowskiego nr 9a, 62-050 Mosina, NIP 7771527714, REGON 634196890, BDO 000441403, email: sklep@golden-group.eu, phone: +48 501349023.

You can contact us regarding your personal data by:

• e-mail: sklep@golden-group.eu,
• traditional mail: ul. Marcinkowskiego 9a, 62-050 Mosina,
• contact telephone number: +48 501349023.

HOW DO WE PROCESS THE PERSONAL DATA YOU PROVIDE US?

What personal data do we process and for what purposes do we process it?

On our website we offer you many different services for which we process different personal data based on different legal bases.

Objective	Personal data	Legal basis for processing	Data storage time
conclusion and performance of the contract	name, surname, correspondence address, tax identification number, e-mail address, telephone number	Article 6, paragraph 1, letter b) of the GDPR, i.e. processing for the purpose of taking action at your request, prior to entering into a contract and processing necessary for the performance of a contract to which you are a party	until the expiry of the limitation period for claims relating to the performance of the contract
creating an account	name, surname, e-mail address, telephone number, mailing address	Article 6, paragraph 1, letter b) of the GDPR, i.e. processing for the purpose of taking action at your request, prior to entering into a contract and processing necessary for the performance of a contract to which you are a party	until the expiry of the limitation period for claims relating to the performance of the contract
adding opinions	name, surname, email address	Article 6, paragraph 1, letter f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in presenting opinions on the goods and the course of the transaction on the online store website	until you object to the processing of your personal data
newsletter	email address, name	Article 6, paragraph 1, letter a) of the GDPR, i.e. processing based on your consent to the processing of your personal data	until the consent to the processing of personal data is withdrawn
organization of competitions	name, surname, e-mail address	Article 6, paragraph 1, letter a) of the GDPR, i.e. processing based on your consent to the processing of your personal data	until the consent to the processing of personal data is withdrawn
contact form	name, nickname, e-mail address, phone number	Article 6, paragraph 1, letter f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in maintaining continuity of communication and enabling contact with us in matters related to our business activities	until you object to the processing of your personal data
analysis of traffic on the online store website	IP address, browser data	Art. 6 sec. 1 letter f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in analysing customer traffic on the store website	until you object to the processing of your personal data
direct marketing of own goods and services, including remarketing	IP address, browser data	Art. 6 sec. 1 letter f) GDPR, i.e. processing for the purpose of pursuing our legitimate interest in direct marketing of our own services, including remarketing	until you object to the processing of your personal data
establishing, pursuing and enforcing claims and defending against claims in proceedings before courts and other state bodies	name, surname, address, PESEL, NIP, REGON, e-mail address, telephone number, IP number, bank account number, payment card number	Article 6, paragraph 1, letter f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities	until the expiry of the limitation period for claims relating to the performance of the contract
fulfillment of legal obligations resulting from legal regulations, in particular tax and accounting regulations	name, surname, company, PESEL, NIP or REGON number, e-mail address, telephone number, correspondence address, payment card number	Art. 6 sec. 1 letter c) GDPR, i.e. processing is necessary to fulfil our legal obligations resulting from legal regulations, in particular tax and accounting regulations	until the legal obligations incumbent on the Administrator that justified the processing of personal data expire

 

Voluntary provision of personal data

Providing the required personal data is voluntary but is a condition for us to provide services to you (e.g. sending a newsletter or setting up an account).

Recipients of personal data

The current list of entities to which we disclose your personal data can be found here.

Automated decision-making (including profiling)

We do not make automated decisions about you, nor do we use profiling.

Will we transfer your personal data outside the EEA or to an international organisation?

In order to use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located.

Google LLC is listed in the Data Privacy Framework (link: https://www.dataprivacyframework.gov/s/participant-search), therefore the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of protection of personal data under the EU-USA Data Privacy Framework (link: https://eur-lex.europa.eu/legal-content/PL/TXT/PDF/?uri=CELEX:32023D1795&qid=1710923455391).

In order to use Mailpoet Cost Rev tools, your personal data may be transferred to the United States. In accordance with the privacy policy of the indicated tool, Mailpoet Cost Rev has taken appropriate safeguards to ensure that your personal data remains protected and requires that external service providers and partners also have appropriate safeguards. For more information, see the Mailpoet Cost Rev Privacy Policy at the following link: https://automattic.com/privacy/.

WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?

Under the GDPR you have the right to:

• request access to your personal data,
• request the rectification of your personal data,
• request the deletion of your personal data,
• requesting restriction of the processing of personal data,
• object to the processing of personal data,
• request the transfer of personal data.

If you make any of the above requests to us, we will provide you with information on the action taken in relation to your request without undue delay – and in any case within one month of receiving the request.

If necessary, we may extend the monthly period by a further two months due to the complex nature of the request or the number of requests.

In any case, we will inform you within one month of receiving the request about the extension and provide you with the reasons for the delay.

The right to access personal data (Article 15 of the GDPR)

You have the right to obtain information about whether we process your personal data. If we process your personal data, you have the right to:

• access to personal data,
• obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of this data, the planned period for which your data will be stored or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the President of the Personal Data Protection Office, the source of this data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union;
• obtain a copy of your personal data.

If you wish to request access to your personal data, please submit your request to the following address: sklep@golden-group.eu.

The right to rectify personal data (Article 16 of the GDPR)

If your personal data is incorrect, you have the right to demand that we rectify your personal data immediately. You also have the right to demand that we supplement your personal data. If you want to request the correction or supplementation of your personal data, submit your request to the following address: sklep@golden-group.eu.

The right to have your personal data deleted, the so-called "right to be forgotten" (Article 17 of the GDPR)

You have the right to request the deletion of your personal data when:

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• you have withdrawn specific consent to the extent that personal data were processed based on your consent;
• Your personal data was processed unlawfully;
• you have objected to the processing of your personal data for the purposes of direct marketing, including profiling, to the extent that the processing of personal data is related to direct marketing;
• you have objected to the processing of your personal data in connection with the processing necessary for the performance of a task carried out in the public interest or the processing necessary for the purposes of legitimate interests pursued by us or a third party.

Despite the request to delete personal data, we may continue to process your data for the purpose of establishing, pursuing or defending claims, about which you will be informed.

If you wish to request the deletion of your personal data, please submit your request to the following address: sklep@golden-group.eu.

The right to request the restriction of the processing of personal data (Article 18 of the GDPR)

You have the right to request the restriction of the processing of your personal data when:

• you question the accuracy of your personal data – in such a case we will limit the processing of your personal data for a period allowing us to verify the accuracy of such data;
• the processing of your data is unlawful and instead of deleting your personal data, you request the restriction of the processing of your personal data;
• Your personal data are no longer necessary for the purposes of processing, but they are needed for the establishment, exercise or defence of your legal claims;
• you have objected to the processing of your personal data – until it is determined whether our legitimate interests override the grounds indicated in your objection.

If you wish to request the restriction of the processing of your personal data, please submit your request to the following address: sklep@golden-group.eu.

The right to object to the processing of personal data (Article 21 of the GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

• processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Personal Data Controller or a third party;
• processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please submit your request to the following address: sklep@golden-group.eu.

The right to request the portability of personal data (Article 20 of the GDPR)

You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to transmit it to another personal data controller.

By default, we will provide you with your personal data in CSV format. If you would prefer to have your data provided to you in a different format, please indicate your preferred format in your request. Where possible, we will try to provide you with your data in your preferred format.

You can also request that we transmit your personal data directly to another controller (if technically possible).

If you wish to request the transfer of your personal data, please submit your request to the following address: sklep@golden-group.eu.

Can you withdraw your consent to the processing of personal data?

You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, please submit your request to the following address: sklep@golden-group.eu.

If you wish to withdraw your consent to the processing of your personal data for the purpose of providing the "Newsletter" service, you may unsubscribe from it. here.

Complaint to the supervisory authority

If you believe that the processing of your personal data violates personal data protection provisions, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection, who replaced GIODO on 25 May 2018.

You can find more information here.

Cookies

General information

When browsing the Internet pages of the Online Store, "cookies" files are used, hereinafter referred to as Cookies, i.e. small text information that is saved on your end device in connection with the use of the Online Store. Their use is aimed at the correct operation of the Internet pages of the Online Store.

These files allow us to identify the software you use and tailor the Online Store to your individual needs.

Cookies usually contain the name of the domain from which they originate, the time they are stored on the device and an assigned value.

Security

The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to get to your devices via Cookies.

Types of Cookies

We use two types of cookies:

• Session Cookies: are stored on your device and remain there until the end of the browser session. The stored information is then permanently deleted from your device's memory. The Session Cookies mechanism does not allow for the collection of any personal data or any confidential information from your device.
• Persistent Cookies: They are stored on your device and remain there until you delete them. Ending a browser session or turning off your device does not delete them from your device. The Persistent Cookies mechanism does not allow for the collection of any personal data or any confidential information from your device.

Goals

We also use third-party cookies for the following purposes:

• configuration of the Online Store;
• creating statistics that help understand how users of the Online Store use websites, which allows improving their structure and content through Google Analytics analytical tools, which are administered by Google Ireland Ltd. based in Ireland. The Google Privacy Policy is available at the following link: https://policies.google.com/privacy?fg=1;
• determining the Client's profile in order to display tailored materials in advertising networks, using the Google Ads online advertising tool, which is administered by Google Ireland Ltd. with its registered office in Ireland, the Google Privacy Policy is available at the following link: https://policies.google.com/privacy?fg=1;
• sending messages, using the Mailpoet Cost Rev tool, which is administered by Automattic Inc. based in the United States, the Automattic Inc. Privacy Policy is available at the following link: https://automattic.com/privacy/.

To learn about the principles of using Cookies, we recommend that you read the privacy policies of the companies indicated above.

Cookies can be used by advertising networks, in particular the Google network, to display advertisements tailored to your preferences. For this purpose, information about how you navigate the network or the time of use of a website may be stored.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at https://www.google.com/ads/preferences/.

Using the web browser settings or service configuration, you can independently and at any time change the settings for Cookies, specifying the conditions for their storage and access by Cookies to your device. You can change these settings to block automatic handling of Cookies in the web browser settings or to inform each time they are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in the settings of your software (web browser).

---