WHAT IS A PRIVACY POLICY?

We would like to inform you about the details of how we process your personal data in order to give you full knowledge and comfort when using our website.

As we operate in the online industry ourselves, we know how important the protection of your personal data is. That is why we make every effort to protect your privacy and the information you provide to us.

We carefully select and apply appropriate technical measures, in particular programming and organizational measures, to ensure the protection of processed personal data. Our website uses encrypted data transmission (SSL), which ensures the protection of data that identifies you.

In our Privacy Policy you will find all the most important information regarding the processing of your personal data by us. We kindly ask you to read it and promise that it will not take more than a few minutes.


Who is the administrator of the website www.sportowemiastogdansk.pl?

The administrator of the website is Kinga Najman, conducting business activity under the name Flamaster Graffiti Shop Kinga Najman, entered into the register of entrepreneurs of the Central Register and Information on Economic Activity maintained by the minister responsible for the economy, with its registered office at ul. Flisykowskiego 1/9, 80-180 Gdańsk, NIP 5833125840, REGON 522009994 (that is: us).


PERSONAL DATA

What legal act regulates the processing of your personal data?

Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

To the extent not regulated by the GDPR, the processing of personal data is governed by the Act on the Protection of Personal Data of 10 May 2018.


Who is the controller of your personal data?

The controller of your personal data is Kinga Najman, conducting business under the name Flamaster Graffiti Shop Kinga Najman, registered in the Central Register and Information on Economic Activity, with its registered office at ul. Flisykowskiego 1/9, 80-180 Gdańsk,
NIP: 5833125840, REGON: 522009994,
email: flamastergrafitti@wp.pl,
phone: +48 507 514 744.

You may contact us regarding your personal data via:


HOW DO WE PROCESS YOUR PERSONAL DATA?

What personal data do we process and for what purposes?

On our website we offer various services, for which we process different categories of personal data based on different legal grounds.

Purpose:
Conclusion and performance of a contract
Personal data:
First name, last name, correspondence address, email address, phone number
Legal basis:
Art. 6(1)(b) GDPR – processing necessary for the performance of a contract
Retention period:
Until the expiration of limitation periods for claims related to contract performance


Purpose:
Creating and maintaining an account
Personal data:
First name, last name, email address, correspondence address, phone number, bank account number, payment card number
Legal basis:
Art. 6(1)(b) GDPR
Retention period:
Until the expiration of limitation periods for claims related to contract performance


Purpose:
Establishing, pursuing, and enforcing claims and defending against claims before courts and other public authorities
Personal data:
First name, last name, address, PESEL number, NIP, REGON, email address, phone number, IP address, bank account number, payment card number
Legal basis:
Art. 6(1)(f) GDPR – legitimate interest of the controller
Retention period:
Until the expiration of limitation periods for claims


Purpose:
Fulfillment of legal obligations, especially tax and accounting obligations
Personal data:
First name, last name, company name, PESEL, NIP or REGON, email address, phone number, correspondence address, payment card number
Legal basis:
Art. 6(1)(c) GDPR
Retention period:
Until the expiration of legal obligations requiring data processing


Voluntary provision of personal data

Providing your personal data is voluntary, but necessary to provide our services (e.g. newsletter subscription or account creation).


Recipients of personal data

An up-to-date list of entities to whom we disclose your personal data can be found here.


Automated decision-making (including profiling)

We do not make automated decisions or use profiling.


Will we transfer your data outside the EEA or to international organizations?

[No data transfer outside the EEA.]


YOUR RIGHTS UNDER GDPR

Under the GDPR, you have the right to:

  • access your personal data

  • rectify your personal data

  • erase your personal data

  • restrict processing

  • object to processing

  • data portability

We will respond to your request without undue delay, no later than within one month of receipt. This period may be extended by two additional months if necessary.


Right of access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether your personal data is being processed and to access it, receive a copy, and obtain information on processing details.

Requests should be sent to: flamastergrafitti@wp.pl


Right to rectification (Art. 16 GDPR)

You have the right to request correction or completion of your personal data.
Requests should be sent to: flamastergrafitti@wp.pl


Right to erasure – “right to be forgotten” (Art. 17 GDPR)

You may request deletion of your data in situations defined by the GDPR.
Requests should be sent to: octagon-gd@wp.pl


Right to restriction of processing (Art. 18 GDPR)

You may request restriction of processing in situations defined by the GDPR.
Requests should be sent to: octagon-gd@wp.pl


Right to object (Art. 21 GDPR)

You may object at any time to processing based on legitimate interest or direct marketing.
Requests should be sent to: octagon-gd@wp.pl


Right to data portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used, machine-readable format (CSV by default) and transmit it to another controller.
Requests should be sent to: octagon-gd@wp.pl


Complaint to the supervisory authority

If you believe your personal data is processed unlawfully, you may lodge a complaint with the supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).


Cookies

General information

Our online store uses cookies, which are small text files stored on your device to ensure proper website functionality and improve user experience.

Cookies identify your software and adapt the website to your needs.


Security

Cookies used by us are safe and do not contain viruses or malicious software.


Types of cookies

We use:

  • Session cookies – deleted after closing the browser

  • Persistent cookies – stored until deleted by the user


Purposes

We also use third-party cookies for:

  • configuration of the online store


You can change cookie settings at any time via your browser settings, including blocking or notifying about cookies. Detailed information is available in your browser’s settings.