GENERAL DATA PROTECTION REGULATION

The administrator of personal data is WIPERAPP EP sp. z o.o. sp.j. with headquarters in Wrocław at ul. Kominiarska 42B, 51-180 Wrocław (hereinafter also referred to as the "Company").

Personal data will be processed by the Company in order to carry out the purchase transaction in the online store (ie pursuant to Article 6 (1) b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter: "GDPR"), then fulfilling the legal obligations incumbent on the Administrator (ie pursuant to Article 6 (1) c) ) GDPR) and legally justified purposes of the Administrator, including direct marketing concerning own products and services carried out in a traditional, paper form (ie pursuant to Article 6 (1) (f) of the GDPR).

After expressing separate consents, pursuant to art. 6 par. 1 lit. a) GDPR and art. 10 para. 2 of the Act of 18 July 2002 on the provision of electronic services or art. 172 para. 1 of the Act of 16 July 2004 Telecommunications Law, the data may also be processed for marketing purposes, ie sending commercial information by electronic means or using telecommunications terminal equipment and automatic calling systems for communication, including also after executing the sale agreement by the Company.

If it is necessary to deliver the order, personal data may be made available to postal operators or carriers in order to deliver the order.

Personal data will not be transferred to third countries.

Personal data will be processed:

1) for the period necessary to execute the transaction, after which the data subject to archiving will be stored for the period appropriate for the expiry of the period of limitation of claims of the buyer being a consumer from the contract of sale, i.e. 10 years from the date of the contract of sale and in the case of entrepreneurs entered into CEIDG (Central Registration and Information on Business)- 5 years counting from the end of the calendar year in which the tax payment deadline expired, pursuant to art. 70 § 1 of the Tax Ordinance.

2) in connection with the complaint procedure - for a period of 1 year after the warranty expiration or settlement of the complaint;

3) for marketing purposes subject to consent - pending withdrawal of consent. The data subject has the right to access their personal data and the right to rectify, delete, limit processing, the right to data transfer, the right to object to the processing, including profiling, the right to withdraw consent at any time without affecting the compliance with the right of processing, which was made on the basis of consent before its withdrawal.

Providing personal data is voluntary, but necessary to carry out the order of products in the store and conclude a sales contract.

If it is found that the processing of personal data violates the provisions of the GDPR, the data subject has the right to lodge a complaint with the supervisory authority.

Personal data will be used for automated decision making, including profiling. The consequence of profiling will be the possibility for the Administrator to submit an offer to purchase products or services to the best extent suited to the preferences of the client, but binding decisions will not be automated.