I. General provisions
This Privacy Policy defines the rules of collecting, processing, using and storing personal data of Users using the website available at www.parcelsuitcase.com (hereinafter: the "Service").
The Service is informational and product-related — connected with presenting suitcases, the option to join a waitlist, registering purchased suitcases via NFC technology and direct contact with the Administrator. The Service does not currently process payments or online purchases directly.
Personal data collected via the Service is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR) and the Polish Personal Data Protection Act of 10 May 2018.
II. Personal data administrator
The administrator of personal data collected via the Service is:
III. Purposes and legal grounds for data processing
The Administrator may process Users' personal data for the following purposes and on the following legal grounds (Article 6(1) GDPR):
- Joining the waitlist for products or a new stock batch.
- Sending the newsletter and conducting marketing and informational activities electronically.
- Handling the contact form — to respond to messages and inquiries sent by the User.
- Registering and operating the suitcase via the built-in NFC module — to identify the product and provide related e-services.
- Analyzing traffic on the Service, optimizing its operation and maintaining statistics.
- Establishment, exercise or defense of potential civil-law claims.
IV. Types of personal data processed
The Service collects only minimal data necessary to deliver the functionalities listed above. Depending on the User's activity, the Administrator may process:
- First and last name,
- Email address,
- Phone number,
- Identifiers linked to the suitcase's NFC module (in case of registration),
- IP address and analytical data regarding the user session.
V. Data retention period
Users' personal data will be stored and processed for a period strictly related to the purpose of its collection:
- Data processed based on consent (waitlist, newsletter) — until consent is withdrawn by the User.
- Data processed to handle inquiries and NFC registration — for the time necessary to handle the request / provide the service, and after its completion until the limitation period for potential claims expires (the general period is 6 years, and for claims related to business activity — 3 years).
VI. Sharing personal data (Data recipients)
Users' personal data may be shared with third parties cooperating with the Administrator only to the extent necessary for the technical and development support of the Service (e.g. hosting providers, CRM / mailing system providers).
Users' personal data will not be transferred outside the European Economic Area (EEA), and if such transfer becomes necessary due to global IT technology providers, it will only take place with appropriate safeguards in place (e.g. Standard Contractual Clauses).
VII. User rights
The User has the full right to: access their data, rectify it, erase it ("right to be forgotten"), restrict processing, transfer data, object to processing based on legitimate interest, and withdraw consent at any time.
Please send requests regarding the exercise of rights to: [email protected]. The Administrator processes requests without undue delay, no later than within one month.
The User also has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
VIII. Cookies
The Service uses session and persistent cookies to optimize the display of the website and to collect anonymous traffic statistics.
The User may at any time restrict or block the installation of cookies in their browser settings, which however may negatively affect selected functionalities of the Service.
IX. Profiling and automated decisions
Users' personal data is not subject to automated decision-making, including profiling resulting in any legal effects or significant modifications to the User's legal situation without their explicit consent.
X. Final provisions
The Administrator reserves the right to introduce changes to this Privacy Policy without limiting rights acquired by Users. Information about changes will be communicated on the Service.
In matters not regulated herein, the provisions of GDPR and generally applicable Polish law shall apply.