The data controller is: BARTŁOMIEJ KALISZ, RENATA BADZIO Zadębie 17, Lublin 20-231, E-Mail: vente@e-goldcar.eu

Thank you for visiting our online shop. Protecting your privacy is very important to us. Below you will find detailed information about how we handle your data.

1. Access data and hosting
You can visit our website without providing any personal information. Each time the website is accessed, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our offer. This serves, in accordance with Art. 6 para. 1 lit. f GDPR, to protect our legitimate interests in a correct presentation of our offer, which are overriding in the context of a balancing of interests.
All access data is deleted no later than seven days after your visit to our website.

Hosting
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected via the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2. Data processing for contract execution and contact initiation
2.1 Data processing for contract execution
For the purpose of contract execution (including enquiries regarding the handling of any warranty rights for defects, as well as any statutory update obligations) in accordance with Art. 6 para. 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, because in these cases we need the data to process the contract and cannot ship the order without it. Which data is collected can be seen from the respective input forms. Further information on the processing of your data, in particular on the transfer of data to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete execution of the contract, your data will be restricted for further processing and deleted after the expiry of the retention periods under tax and commercial law in accordance with Art. 6 para. 1 lit. c GDPR, unless you have expressly consented to the further use of your data in accordance with Art. 6 para. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

Merchandise management system
We use external service providers' merchandise management systems for order and contract processing. We involve our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2.2 Customer account
If you have given your consent in accordance with Art. 6 para. 1 lit. a GDPR by deciding to open a customer account, we will use and store your data for the purpose of opening a customer account and for processing future orders on our website. Deleting your customer account is possible at any time and can be done by sending a message to the contact details described in this privacy policy or by using a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to the further use of your data in accordance with Art. 6 para. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

2.3 Contacting us
As part of customer communication, we collect personal data to process your enquiries in accordance with Art. 6 para. 1 lit. b GDPR, if you voluntarily provide us with such data when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we need the data to process your enquiry. Which data is collected can be seen from the respective input forms. After complete processing of your enquiry, your data will be deleted, unless you have expressly consented to the further use of your data in accordance with Art. 6 para. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

3. Data processing for shipping
We pass on your data to the shipping company to the extent necessary for the delivery of the ordered goods, in accordance with Art. 6 para. 1 lit. b GDPR. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4. Data processing for payments
In the course of payment processing in our online shop, we work together with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction execution
Depending on the chosen payment method, we pass on the data necessary for the execution of the payment transaction to our technical service providers, who act for us as part of processing on our behalf, or to the authorised credit institutions or to the selected payment service provider, insofar as this is necessary to complete the payment process. This serves the purpose of contract execution in accordance with Art. 6 para. 1 lit. b GDPR. In some cases, the payment service providers collect the data necessary for payment processing themselves, e.g. on their own website or via a technical solution within the ordering process. In this respect, the data protection declaration of the respective payment service provider applies. If you have any questions about our partners for payment processing and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4.2 Data processing for fraud prevention and optimisation of our payment processes
We may pass on further data to our service providers, which they use for the purpose of fraud prevention and optimisation of our payment processes (e.g. invoicing, handling disputed payments, accounting support) together with the data necessary for payment processing, as our processors. This serves to protect our legitimate interests in fraud prevention or efficient payment management in accordance with Art. 6 para. 1 lit. f GDPR, which are overriding in the balancing of interests.

5. Contact options and your rights

5.1 Your rights
As a data subject, you have the following rights:
in accordance with Art. 15 GDPR, the right to obtain information about your personal data processed by us, to the extent described therein;
in accordance with Art. 16 GDPR, the right to demand the immediate correction of inaccurate or completion of your personal data stored by us;
in accordance with Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest or for the establishment, exercise or defence of legal claims;
in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, if the accuracy of the data is disputed by you; the processing is unlawful, but you object to its erasure; we no longer need the data, but you need it for the establishment, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to demand its transmission to another controller;
in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Right to object
If we process personal data as described above to protect our legitimate interests, which are overriding in the balancing of interests, you can object to this data processing with effect for the future. If your data is processed for direct marketing purposes, you can exercise this right at any time as described above. If your data is processed for other purposes, you have a right to object only on grounds relating to your particular situation. Following the exercise of your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. In this case, we will no longer process your personal data for such purposes.

5.2 Contact options
For questions about the collection, processing or use of your personal data, for information, correction, restriction or deletion of data, as well as for the revocation of granted consents or objection to a specific data use, please contact:
Bartłomiej Kalisz
Zadębie 17
20-231 Lublin, Poland
vente@e-goldcar.eu