Privacy Policy

Appendix 3 – PRIVACY POLICY

Having regard to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (GDPR), here is to inform that:

Rally-Tech, operating under the business name Rally-Tech sp. z o.o., VAT: PL9372706184, REGON 369377500, ul. Piekarska 50, 43-300 Bielsko-Biała, e-mail: sklep@rally-tech.pl, tel. 603 90 30 50 is the Data Controller for personal data we hold about web service users.

The Data Controller has not appointed a Data Protection Officer (DPO).

In all matters related to the processing of personal data by the Data Controller, please contact the Data Controller either by telephone, via email, by post, or in person at the Data Controller's office (see par. 1 for contact data).

Personal data of web service users is only processed for the purpose of the following:

execution of sales contracts – where a lawful basis for data processing is the contract concluded with the Data Controller; personal data is processed to the extent we believe is necessary to perform a contract (Article 6 (1) (b) of the GDPR); for optional data the lawful basis for processing is the customer consent (Article 6 (1) (a) of the GDPR).

providing Customer Account services – where the lawful basis for the processing of data is the necessity to perform a contract (Article 6 paragraph 1 (b)) and for the optional data the lawful basis for the processing is consent (art. 6 (1) (a) of the GDPR).

performing sales contracts concluded without registration of customer Account – where the lawful basis for the processing of data is the necessity to perform a contract (art. 6 par. 1 (b)) of the GDPR).

handling complaints – where the lawful basis for the processing is the necessity to perform a contract (Article 6 (1) (b) of the GDPR)

analytical and statistical purposes as well as marketing activities where the lawful basis of the processing are the Controller’s legitimate interests (Article 6.1.1 (f) of the GDPR), consisting in the optimization of the website and improvement of the services provided and their adjustment to the User's needs.

establishment, exercise or defence of legal claims – where the lawful basis for the processing are legitimate interests of the Controller (art. 6 par. 1 (f)) of GDPR) such defence of the Controller’s rights.

compliance with a legal obligation to which the Controller is subject, resulting, in particular, from tax and accounting regulations – where the processing is based on the lawful basis that the Controller has a legal obligation to perform such processing (art. 6 par. 1 (c) RODO).

The recipients of users' personal data are:

a) entities cooperating with the Data Controller in performance of sales contracts, i.e. suppliers of purchased goods and payment service providers, only to the extent necessary to perform a contract.

b) IT system operators, accountancy firms and legal firms.

The Administrator reserves the right to disclose certain information

concerning the data subject to the competent authorities or third parties requesting such information, based on an appropriate lawful basis and in accordance with the applicable law.

E-Store User’s data will be retained solely for the period necessary to process it, however, not longer than for 10 years.

E-Store User shall have the right to:
a) access to the personal data i.e. obtain information whether the Data Controller processes User’s personal data and if yes, for what purposes,
b) rectify personal data which the User finds inaccurate or incomplete,
c) erase personal data or restrict processing thereof,
d) object to the processing of personal data,
e) data portability;
f) withdraw consent on which the processing is based according to art. 6 par. 1 (a); withdrawal of consent shall not affect compliance of data processing based on such consent prior to such withdrawal.

The User shall have the right to lodge a complaint with a supervisory authority – Inspector General for Personal Data Protection;

Personal data is provided on a voluntary basis, however, failure to provide the data may result in inability to conclude a contract; 

Website service improvement:
a) The Controller's website uses cookies in order to provide services in accordance with the Cookies Policy, constituting an Annex 2 to the Terms & Conditions of the E-Commerce Website. Each user is entitled to specify the conditions for accepting or denying the cookie feature in their browsers.
b) To improve the Website service and adapt it to user needs, the Controller uses the Google Analytics service provided by Google Inc. Google Analytics based on art. 6 par. 1 (f) of GDPR. Google Analytics cookies collect information about the use of the Website, anonymous information about Website visitors and help to improve its readability. The user may refuse to accept our cookies at any time by activating the setting on their browser which allows them to refuse Google Analytics cookies. The Opt-Out Browser Add-on is available through this link:

https://tools.google.com/dlpage/gaoptout
c) In order to implement and improve advertising activities on the Internet, based on art. 6 par. 1 (f) of GDPR, the Controller uses Google AdWords technology, provided by Google Inc. User data that is collected anonymously. The Controller uses Google AdWords for remarketing purposes. This AdWords feature is used to deliver adverts which are more relevant to the user on Google display network. For this purpose, the Controller’s website analyses user behaviour, e.g. what the user was interested in, allowing the website to deliver more targeted and relevant ads to users, even when visiting another website. The collected information is used to identify a web browser on a specific computer, and not to identify a user personally. The user may disable personalized ads by using the following link: https://adssettings.google.com/