Privacy Policy

1. Processing of Personal Data

The responsible data controller for the website https://7pay.pl/ is Piastra Pay sp. z o.o (a company incorporated in the Republic of Poland with company registration number 0000929627) and whose head office is Aleja Powstania Warszawskiego str., nr 15, places. Krakow, code 31539, post office Krakow, Poland, and email [email protected]

The data controller has appointed a data protection officer, whose contact details are: email: [email protected]

2. Types of Processed Personal Data:

  • Name, phone number, and email address;
  • Delivery address of goods;
  • Bank account number;
  • Cost of goods and services, and payment-related data (purchase history);
  • Customer support data.

3. Purposes of Processing Personal Data:

Personal data is used for managing customer orders and delivering goods. Purchase history data (purchase date, goods, quantity, customer data) is used for compiling an overview of purchased goods and services and analyzing customer preferences. The bank account number is used for refunding payments to the customer. Personal data such as email, phone number, and customer name is processed to resolve issues related to the provision of goods and services (customer support). The user's IP address or other network identifiers are processed for providing the website as an information society service and for generating web usage statistics.

4. Legal Basis:

The processing of personal data is carried out for the purpose of fulfilling the contract with the customer. The processing of personal data is carried out to fulfill legal obligations (e.g., accounting and consumer dispute resolution).

Recipients to Whom Personal Data is Disclosed:

Personal data is disclosed to the website's customer support for managing purchases and purchase history and resolving customer issues. Name, phone number, and email address are disclosed to the transport service provider chosen by the customer. If the goods are delivered by a courier, the customer's address is also disclosed in addition to the contact details. If the website's accounting is carried out by a service provider, personal data is disclosed to the service provider for accounting operations. Personal data may be disclosed to information technology service providers if necessary for ensuring the functionality of the website or data hosting.

5. Security and Access to Data:

Personal data is stored on servers of alve.ee (veebimajutus.ee) located in the territory of a European Union member state or a country in the European Economic Area. Data may be transferred to countries whose level of data protection has been assessed as adequate by the European Commission and to US companies that have joined the Privacy Shield framework. Access to personal data is limited to employees of the online store who need to access the data to resolve technical issues related to the use of the online store and to provide customer support. The online store implements appropriate physical, organizational, and information technology security measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized access, and disclosure. The transfer of personal data to authorized processors of the online store (e.g., transport service provider and data hosting) is based on agreements concluded between the online store and authorized processors. Authorized processors are required to implement appropriate protection measures when processing personal data.

6. Access and Correction of Personal Data:

Personal data can be accessed and corrected in the user profile of the online store. If a purchase is made without a user account, personal data can be accessed through customer support.

Withdrawal of Consent:

If the processing of personal data is based on the customer's consent, the customer has the right to withdraw consent by notifying customer support by email.

Retention:

Processing of personal data is carried out in accordance with the purpose of processing:

Purpose of processing – security and safety

  • Maximum retention period for personal data – according to deadlines specified in the law

Purpose of processing – order processing

  • Maximum retention period for personal data – 3 months.

Purpose of processing – ensuring the functioning of e-shop services

  • Maximum retention period for personal data – 3 months

Purpose of processing – customer management

  • Maximum retention period for personal data – 3 months

Purpose of processing – financial activities, accounting

  • Maximum retention period for personal data – according to deadlines specified in the law

Purpose of processing – marketing

  • Maximum retention period for personal data – 12 months

Deletion: To delete personal data, contact customer support by email. The request for deletion will be answered no later than within one month, specifying the period for the deletion of data.

Transfer: For requests for the transfer of personal data submitted by email, a response will be provided within one month. Customer support will verify the identity and inform about the data to be transferred.

Direct Marketing Notices: The email address and phone number are used for sending direct marketing notices if the customer has given the relevant consent. If the customer does not wish to receive direct marketing notices, they must select the corresponding link in the footer of the email or contact customer support. If personal data is processed for the purpose of direct marketing (profiling), the customer has the right to object to the processing of their personal data for both initial and further processing, including profiling related to direct marketing, at any time by notifying customer support by email.

Dispute Resolution: Disputes related to the processing of personal data are resolved through customer support [email protected].

The supervisory authority is the Republic of Poland Data Protection Inspectorate:


The President of the Office for Personal Data Protection.

Office of the President for Personal Data Protection

Urzad Ochrony Danych Osobowych

Stawki 2

00-193 Warsaw

Poland


Tel. +48 22 531 03 00

Fax +48 22 531 03 01

[email protected]


Helpline (in Polish only): phone no. +48 606-950-000 is open from Monday to Friday from 10 am to 2 pm.

The Office of the President is open from Monday to Friday from 8 am to 4 pm.

We’ll be in touch with you as soon as possible!