Privacy and Cookies Policy
1. Personal Data Controller
The controller of the personal data of users of the online store at www.marten.pl is MARTEN TRADE sp. z o.o., with its registered office at ul. Nowowiejska 1, 57-160 Borek Strzeliński, Poland, Tax Identification Number (NIP): 9141578237, National Business Registry Number (REGON): 541168924, National Court Register Number (KRS): 0001161521 (“Controller” or “Marten”).
For matters concerning personal data, you may contact the Controller by e-mail at lp.netram@oruib or by telephone at +48 71 393 02 14.
2. Scope of Personal Data Processed
Depending on how the Store is used, the Controller may process, in particular:
- first name and surname, delivery address and billing address;
- e-mail address and telephone number;
- information relating to orders, purchased products, payments, returns and complaints;
- Tax Identification Number (NIP) and company details, if required to issue a sales document;
- the content of correspondence and data provided through contact forms;
- IP address, online identifiers, information about the device, browser and activity in the Store, to the extent resulting from the technologies used and the cookie consents granted.
The Controller does not receive or store the full payment card details used for payments processed by Przelewy24.
3. Purposes and Legal Bases for Processing
3.1. Order Fulfilment and Performance of the Sales Contract
Personal data is processed for the purposes of accepting and fulfilling an order, processing payments and delivery, contacting the customer regarding the order and performing the contract, pursuant to Article 6(1)(b) of the GDPR.
3.2. Legal, Accounting and Tax Obligations
Personal data is processed to the extent required by law, including tax and accounting regulations, pursuant to Article 6(1)(c) of the GDPR.
3.3. Returns, Complaints and Claims
Personal data is processed to handle withdrawals from contracts and complaints, as well as to establish, pursue or defend claims, as applicable, pursuant to Article 6(1)(b), (c) or (f) of the GDPR. The Controller’s legitimate interest is to protect its rights and maintain records of relevant cases.
3.4. Contact with the User
Personal data provided in an e-mail or through a contact form is processed for the purpose of responding to the enquiry. The legal basis is Article 6(1)(b) of the GDPR where the enquiry concerns the conclusion or performance of a contract, or Article 6(1)(f) of the GDPR, namely the Controller’s legitimate interest in handling correspondence.
3.5. Analytics and Advertising
After obtaining the required consent, the Controller may use Google Analytics and Google Ads for statistical purposes, campaign performance measurement and, if the relevant features are enabled, remarketing or ad personalisation. The legal basis for the processing of personal data in this regard is Article 6(1)(a) of the GDPR.
4. Recipients of Personal Data
Personal data may be disclosed only to the extent necessary to provide specific services, in particular to:
- PayPro S.A., the operator of the Przelewy24 payment system, for payment processing purposes;
- General Logistics Systems Poland sp. z o.o. (GLS Poland), for delivery fulfilment purposes;
- Google group companies, in connection with Google Analytics and Google Ads, according to the user’s consent settings;
- Wix and its group companies, for hosting, infrastructure and technical website support purposes, if the Store uses Wix services;
- entities providing the Controller with IT, hosting, accounting, legal or maintenance services, to the extent necessary to provide such services.
The Controller does not sell users’ personal data.
5. Transfers of Personal Data Outside the European Economic Area
Some technology providers used by the Store may process personal data outside the European Economic Area. Where such a transfer takes place, it is carried out on the basis of and subject to the safeguards required by the GDPR, in particular an applicable European Commission adequacy decision, standard contractual clauses or other legally permitted mechanisms.
6. Personal Data Retention Periods
- data relating to an order: for the duration of the contract and subsequently for the period required by law and until the expiry of the applicable limitation periods for claims;
- accounting and tax records: for the period required by the applicable regulations;
- data relating to a complaint or return: for the duration of the case and subsequently for the period necessary to protect against claims;
- data processed on the basis of consent: until the consent is withdrawn, the purpose of processing ceases to apply or the retention period configured for the relevant tool expires.
7. Rights of Data Subjects
In the circumstances provided for by the GDPR, users have the right to:
- access their personal data and obtain a copy thereof;
- rectify their personal data;
- erase their personal data;
- restrict the processing of their personal data;
- data portability;
- object to processing based on a legitimate interest;
- withdraw their consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
- lodge a complaint with the President of the Personal Data Protection Office in Poland.
Requests concerning the exercise of these rights may be sent to lp.netram@oruib.
8. Voluntary Provision of Personal Data
Providing personal data is voluntary. However, data marked as required is necessary to place and fulfil an order, process a payment or complete a delivery. Failure to provide such data may make it impossible to conclude or perform the contract.
9. Cookies and Similar Technologies
The Store uses cookies and similar technologies. They may be used in the following categories:
- essential cookies: necessary for the operation of the website, security, the shopping cart and the purchasing process;
- analytics cookies: used for statistics and analysing how the Store is used, including Google Analytics;
- marketing cookies: used, among other purposes, to measure conversions and the effectiveness of Google Ads, and, if the relevant feature is enabled, for remarketing or personalisation.
Cookies other than essential cookies are activated only after obtaining the user’s appropriate consent. Users may change or withdraw their consent at any time through the cookie settings panel available in the Store. They may also manage cookies through their browser settings.
10. Google Analytics and Google Ads
Google tools may process, among other information, device and browser information, IP addresses, online identifiers, traffic sources, visited pages and events performed in the Store. The scope of their operation depends on the website configuration and the user’s consent choices. The Controller should configure the consent management mechanism so that consent signals are respected before any optional technologies are activated.
11. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, disclosure or access by unauthorised persons.
12. Amendments to the Policy
This Policy may be updated in the event of changes