§1. General Information
This document defines the rules for processing personal data of users of the website https://stronabezwirusow.pl, operated by Nutrigen Sp. z o.o., located at ul. Tadeusza Kościuszki 25/5, 50-011 Wrocław, NIP: 8971881125, KRS: 0000851334, REGON: 386589960 (hereinafter: "Administrator").
The Administrator ensures that data is processed in accordance with applicable laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR").
§2. Administrator's Contact Information
- Correspondence address: Nutrigen Sp. z o.o., ul. Tadeusza Kościuszki 25/5, 50-011 Wrocław
- E-mail: [email protected]
- Phone: +48 690 265 181
§3. Scope of Processed Data
The Administrator may process the following personal data:
- full name,
- e-mail address,
- phone number,
- data regarding the order and Customer's website,
- IP address,
- information contained in correspondence,
- data necessary for issuing an invoice (if applicable).
Data is collected during:
- filling out the order form on the website,
- e-mail or phone contact,
- registration/login to the customer panel,
- browsing the website (cookies and server logs).
§4. Purposes of Data Processing
The Administrator processes personal data for the following purposes:
- Provision of website cleaning and security services.
- Order and payment handling.
- Communication with the user, including responses to inquiries.
- Maintaining user account and order history.
- Sending order status notifications.
- Issuing accounting documents.
- Fulfillment of legal and tax obligations.
- Direct marketing (only with consent).
§5. Legal Basis for Data Processing
Personal data is processed on the basis of:
- Article 6(1)(b) GDPR – for the performance of a contract (e.g., service order),
- Article 6(1)(c) GDPR – legal obligation of the Administrator (e.g., invoicing),
- Article 6(1)(f) GDPR – legitimate interests of the Administrator (e.g., defense against claims),
- Article 6(1)(a) GDPR – consent of the data subject (e.g., for marketing purposes).
§6. Data Recipients
Personal data may be transferred to:
- hosting and IT companies maintaining the website,
- payment operator (Tpay),
- accounting or legal service providers,
- entities authorized by law (e.g., tax office).
Data is not transferred outside the European Economic Area (EEA), unless the user orders domain services from outside the EEA – in such case, the transfer is secured in accordance with GDPR.
§7. Data Retention Period
Personal data is stored for:
- the period necessary to fulfill the contract and handle the report,
- time resulting from tax and accounting obligations (up to 6 years),
- until consent is withdrawn – for data processed on the basis of consent,
- until potential claims become time-barred.
§8. Rights of the Data Subject
The user has the following rights:
- right to access their data,
- right to rectification,
- right to erasure ("right to be forgotten"),
- right to restriction of processing,
- right to data portability,
- right to object to processing,
- right to withdraw consent at any time,
- right to lodge a complaint with the President of the Personal Data Protection Office.
§9. Cookies
- The service uses cookies to ensure proper website operation, statistics, and potential advertising campaigns.
- The user can change cookie settings in their browser.
- Detailed Cookie Policy is available in a separate document or section of the website.
§10. Security Measures
The Administrator implements organizational and technical measures to protect personal data against loss, unauthorized access, modification, or disclosure.
§11. Privacy Policy Changes
The Administrator reserves the right to make changes to this Policy. The current version is always available at https://stronabezwirusow.pl.