Privacy Policy

ATREVE sp. z o. o.

Kolekcje-2

Pursuant to Article 13(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), we hereby inform you that:

The Controller of your personal data is:

ATREVE SP. Z O.O.

63-642 Perzów

Słupia pod Bralinem 74G

NIP 618-215-10-95

hereinafter referred to as the CONTROLLER.

  1. Your personal data will be processed on the basis of Article 6(1)(a)–(c) of the GDPR for the purpose of entering into a contract with the CONTROLLER for the purchase of products offered by the CONTROLLER on the online store website www.atreve.pl, as well as for purchases made through other communication channels such as telephone or e-mail.
  2. Your data will also be processed for the performance of legal obligations incumbent on the CONTROLLER, for detecting and preventing abuse, for establishing, exercising and defending claims, for direct marketing, preparing reports, analyses and statistics, verifying creditworthiness, handling complaints and requests, providing technical support and financial settlements, including issuing accounting documents.
  3. The CONTROLLER is authorised to transfer your personal data to third parties (hereinafter: Processors) and to public institutions in order to comply with tax and other legal obligations.

    In connection with the above, your personal data may be transferred to the CONTROLLER’s Processors (including, without limitation, a courier company, the provider of the online store software, employees of the CONTROLLER – for the proper performance of the sales contract, and the accounting firm servicing the CONTROLLER – for tax purposes). The data will be transferred on the basis of a personal data processing agreement concluded between the CONTROLLER and the Processors.

    Furthermore, the CONTROLLER is obliged to transfer your personal data on the basis of mandatory provisions of law, including at the request of competent courts, authorities and institutions.

  4. The CONTROLLER will transfer to the PROCESSORS only such data as are necessary to perform the specific services.
  5. As a rule, your personal data are not transferred outside the EEA. However, the transfer of your personal data outside the EEA may take place where this is necessary for the provision of services to you, including situations where the performance of the service requires the participation of Processors established outside the EEA.
  6. Your personal data will be stored for the period resulting from applicable provisions of law, in particular for the period specified in tax and accounting regulations and regulations on preventing fraud. The data will also be processed for a period of 10 years (in the case of personal data of persons who have made purchases via registration in the online store), due to the likelihood of repeated purchases in the online store www.atreve.pl and on Allegro platforms operated by the CONTROLLER, bearing in mind the interests of ongoing cooperation.
  7. Subject to the limitations arising from the GDPR and other provisions of law, you have the following rights:
    1. Right of access – the right to obtain confirmation from the CONTROLLER as to whether your personal data are being processed and, if so, the right to access such data and receive information, in particular about: the purposes of processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed; your rights in the field of data protection and how to exercise them; and the right to lodge a complaint with a supervisory authority.
    2. Right to rectification – the right to request that the CONTROLLER promptly rectify your personal data that are inaccurate and to request that incomplete personal data be completed.
    3. Right to erasure (“right to be forgotten”) – the right to request that the CONTROLLER promptly erase your personal data, where one of the following grounds applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; you withdraw consent on which the processing is based and there is no other legal ground for the processing; your personal data have been unlawfully processed; your personal data must be erased for compliance with a legal obligation. This right cannot be exercised where the CONTROLLER is obliged by law to further process your personal data or where such processing is necessary for the establishment, exercise or defence of legal claims.
    4. Right to restriction of processing – the right to request that the CONTROLLER restrict the processing of your personal data in the following situations: you contest the accuracy of your personal data – for a period enabling the CONTROLLER to verify the accuracy of the data; the processing is unlawful and you oppose the erasure of the data and request the restriction of their use instead; the CONTROLLER no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims. Where processing has been restricted, the CONTROLLER may process your personal data, apart from storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.
    5. Right to data portability – the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you which you have provided to the CONTROLLER, and the right to transmit those data to another controller, where this is technically feasible. This right applies where the processing is carried out by automated means and is based on consent or on a contract. The exercise of the right to data portability must not adversely affect the rights and freedoms of others.
    6. Right to object – the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on the legitimate interests pursued by the CONTROLLER. In such a case, the CONTROLLER will no longer process your personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. You also have the right to object at any time to the processing of your personal data for direct marketing purposes. The right to object does not apply where the processing is based on your consent, is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract, or is necessary for compliance with a legal obligation to which the CONTROLLER is subject.

    You may exercise your rights in the following ways:

    1. in writing, to the following address:

      ATREVE SP. Z O.O.

      63-642 Perzów

      Słupia pod Bralinem 74G

      NIP 618-215-10-95

    2. by telephone, at: 515520690
    3. by e-mail, at: biuro@atreve.pl

    Where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

    You may withdraw your consent to the processing of personal data in the following ways:

    1. in writing, to the following address:

      ATREVE SP. Z O.O.

      63-642 Perzów

      Słupia pod Bralinem 74G

      NIP 618-215-10-95

    2. by telephone, at:

      +48 62 590 9500

      +48 62 590 9501

    3. by e-mail, at: biuro@atreve.pl

WHERE CAN YOU LODGE A COMPLAINT ABOUT THE WAY YOUR PERSONAL DATA ARE PROCESSED?

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the provisions of the General Data Protection Regulation of 27 April 2016.

  1. You have the right to lodge a complaint with a supervisory authority within the meaning of the GDPR if you consider that the processing of your personal data infringes the GDPR.
  2. To the extent necessary for the performance of the contract concluded between you and the CONTROLLER for the provision of services offered by the CONTROLLER, and to the extent necessary for the CONTROLLER to take steps at your request prior to entering into such a contract, as well as to the extent necessary for the CONTROLLER to comply with legal obligations incumbent on the CONTROLLER, your personal data are processed on the basis of Article 6(1)(b) and (c) of the GDPR without the need for your separate consent. In all other cases, providing your personal data is voluntary. Where your consent to the processing of personal data has been given solely for marketing purposes, providing your personal data is voluntary, but refusal to give consent or withdrawal of consent will prevent the CONTROLLER from informing you about new offers and promotions.
  3. You may be subject to a decision based solely on automated processing of your personal data, including profiling, if such processing is permitted by applicable law or if you have previously given your consent to it.