Privacy Policy
1. The Privacy Policy contains the principles of processing personal data originating from the website www.gymglori.com (hereinafter referred to as the "Website").
2. The owner of the website and at the same time the data controller is DENE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ , registered under KRS number 0001152675, with its registered office at Jaworska 10, 42-164 Kleśniska. The company's tax identification number (NIP) is 5742084590, and its statistical identification number (REGON) is 540771469. DENE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is a limited liability company registered on January 30, 2025 with the share capital of PLN 25,000. 3. Personal data collected by DENE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ , registered under KRS number 0001152675, with its registered office at Jaworska 10, 42-164 Kleśniska. The company's tax identification number (NIP) is 5742084590, and its statistical identification number (REGON) is 540771469. DENE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is a limited liability company registered on January 30, 2025 with the share capital of PLN 25,000. via the Internet are used in accordance with the provisions of public law and Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the use of personal data and on the free access to such data and use of services 95/46/EC (General Data Protection Regulation), also referred to as GDPR.
4. D ENE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ takes particular care to respect the privacy of Users visiting the Website.
I. Type of data processed, purposes and legal basis
1. D ENE SPÓŁKA Z OGRANICZONĄ ODPOWIELNOŚCIĄ collects information about natural persons performing services not directly related to their business activity, persons conducting them, who are their own legal entities or organizational units that are not members, whose act is transferred by the user, hereinafter referred to as users.
2. Users’ personal data are collected in the event of:
a) placing orders on the Website in order to execute the sales contract. Legal basis: necessity to execute the sales contract (Article 6, paragraph 1, letter b of the GDPR);
b) contains a newsletter (Newsletter) for the purpose of performing the contract, the service of which is available electronically. Legal basis - consent of the data subject to the performance of the contract for the provision of Newsletter services (Article 6 paragraph 1 letter a of the GDPR);
c) use of contact services on the Website for the purpose of performing the contract electronically. Legal basis: necessity for the performance of the contract for the provision of services resulting from the contact contract (Article 6, paragraph 1, letter b of the GDPR);
d) use of services place use, for the purpose of performing a contract, the service of which is available electronically. Legal basis - necessity to perform a contract for the provision of services place leave (Article 6 paragraph 1 letter b of the GDPR).
3. In the case of an order on the Website, the User provides additional data:
a) email address;
b) address details:
a. postal code and location;
B. country (state)
approx. street name and house/apartment number.
c) name and surname;
d) telephone number.
In the case of Entrepreneurs, the above scope of data is additionally extended to include:
a) the Entrepreneur's company name;
b) Tax Identification Number.
4. When using the Newsletter service, the user provides their e-mail address.
5. In the case of providing contact services, the User provides the following data:
a) email address;
b) name and surname.
6. In case of using the "Post User" service, the user provides the following data:
a) email address;
b) name.
7.When using the Website, additional information may be downloaded, including: the IP address assigned to the user's computer or the external IP address of the Internet provider, domain name, device type, access time, type of Internet system.
8. Navigation data may also be collected from users, including information about links and access, which they decide to send or other actions, which are placed on the Website. Legal basis - legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in facilitating the use of services by electronic means and improving the use of these services.
9. In order to establish, pursue and enforce the law, some personal data provided by the user as part of the use of the Website may be processed, such as: first and last name, data regarding the use of services, which result from the way in which the user uses the services, other data necessary to confirm the existence, including the extent of the damage suffered. Legal basis - legally justified interests (Article 6, paragraph 1, letter f of the GDPR), consisting in establishing, making and enforcing the law and defending against the appearance in proceedings before courts and other state authorities.
10. Transfer of personal data to Dene limited liability company is a necessity.
II. To whom is the public or entrusted data and how long is it used?
1. The User's personal data are transferred to service providers used by Dene spółka z ograniczoną odpowiedzialnością when running the Website. Service providers to whom personal data is transferred, depending on the contractual arrangements and circumstances, or are subject to the instructions of Dene spółka z ograniczoną odpowiedzialnością as to the purposes and methods of processing these data (processors) or independently determine the purposes and methods of their processing (controllers).
a) Processing entities. Dene limited liability company uses suppliers who process personal data only on the instructions of Dene spółka z ograniczoną odpowiedzialnością. These include, among others, suppliers of hosting services, accounting services, marketing systems, systems for analyzing traffic on the Website, systems for analyzing the effectiveness of marketing campaigns;
b) Dene limited liability company uses suppliers who do not act solely on instructions and determine the purposes and methods of using Users' personal data themselves. They provide electronic payment and banking services.
2. Location. Service providers are based mainly in Poland and other countries of the European Economic Area (EEA). Some of the providers are based outside the EEA. In connection with the transfer of data outside the EEA, the Administrator has ensured that the providers provide guarantees of a high level of personal data protection. These guarantees result in particular from the obligation to use standard contractual clauses adopted by the Commission (EU) or participation in the "Privacy Shield" program established by Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of the protection provided by the EU-US Privacy Shield.
3. Users' personal data are stored:
a) If the basis for the processing of personal data is consent, then the User's personal data are processed by Dene spółka z ograniczoną odpowiedzialnością as long as the consent is not withdrawn and after the consent is withdrawn for a period of time corresponding to the limitation period for claims that may be brought by Dene spółka z ograniczoną odpowiedzialnością and what may be raised against him. Unless a special provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.
b) If the basis for data processing is the performance of a contract, the User's personal data are processed by Dene spółka z ograniczoną odpowiedzialnością for as long as necessary to perform the contract, and after that time for a period corresponding to the limitation period for claims. Unless a special provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.
4. In the event of a purchase on the Website, personal data may be transferred, depending on the User's choice, to the following entities for the purpose of delivering the ordered goods:
a) Sellers, a full list of whom is available on the Website.
b) a courier company;
c) Poczta Polska SA with its registered office in Warsaw.
5. If the User chooses to pay via the PayU system, their personal data are transferred to the extent necessary to process the payment to PayU SA with its registered office in Poznań (60-166), at ul. Grunwaldzka 182, entered into the register of entrepreneurs maintained by the District Court of Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000274399.
6. Navigation data may be used to provide Users with better service, to analyse statistical data and to adapt the Website to Users’ preferences, as well as to administer the Website.
7. If the User subscribes to an information ticket (Newsletter) to his/her e-mail address , Dene spółka z ograniczoną odpowiedzialnością will send electronic messages containing commercial information about promotions and new products available on the Website.
8. In the event of a request being submitted to Dene spółka z ograniczoną odpowiedzialnością provides personal data to authorized state authorities, in particular organizational units of the Public Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.
III. Cookie mechanism, IP address
1. The website uses small files called cookies. They are saved by Dene spółka z ograniczoną odpowiedzialnością on the end device of the person visiting the Website, if the Internet browser allows it. A cookie file usually contains the name of the domain from which it comes, its "expiration time" and an individual, randomly selected number identifying this file. Information collected using files of this type helps to customize the services offered by Dene spółka z ograniczoną odpowiedzialnością products to the individual preferences and actual needs of people visiting the Website. They also provide the opportunity to develop general statistics of visits to the products presented on the Website.
2. Dene limited liability company uses two types of cookies:
a) Session cookies: after the end of a given browser session or when the computer is turned off, the saved information is deleted from the device's memory. The session cookie mechanism does not allow for the collection of any personal data or any confidential information from Users' computers.
b) Persistent cookies: they are stored in the memory of the User's end device and remain there until they are deleted or expire. The persistent cookie mechanism does not allow for the collection of any personal data or any confidential information from the Users' computer.
3. Dene limited liability company uses its own cookies to:
a) analyses, research and audience audits, in particular to create anonymous statistics that help understand how Users use the Website, which enables the improvement of its structure and content.
4. Dene limited liability company uses external cookies to:
a) popularising the Website using the social networking site facebook.com (external cookie administrator: Facebook Inc. based in the USA or Facebook Ireland based in Ireland);
b) collecting general and anonymous statistical data via Google Analytics analytical tools (external cookie administrator: Google Inc. based in the USA);
5. The cookie mechanism is safe for the computers of the Website Users. In particular, it is not possible for viruses or other unwanted software or malware to get into the computers of the Users in this way. Nevertheless, in their browsers, the Users have the option of limiting or disabling the access of cookie files to computers. In the case of using this option, the use of the Website will be possible, except for the functions that by their nature require cookies.
6. Below we present how you can change the settings of popular web browsers regarding the use of cookies:
a) Chrome and Chrome Mobile browsers;
b) Facebook in-app Browser;
c) Internet Explorer browser;
d) Microsoft EDGE browser;
e) Mozilla Firefox browser;
f) Opera browser.
g) Safari and Safari Mobile browsers;
h) Samsung Browser.
7. Dene limited liability company may collect IP addresses of Users. An IP address is a number assigned to the computer of a person visiting the Website by the Internet service provider. The IP number enables access to the Internet. In most cases, it is assigned to the computer dynamically, i.e. it changes with each connection to the Internet. The IP address is used by Dene spółka z ograniczoną odpowiedzialnością when diagnosing technical problems with the server, creating statistical analyses (e.g. determining from which regions we record the most visits), as information useful in administering and improving the Website, as well as for security purposes and possible identification of unwanted automatic programs for browsing the content of the Website that burden the server.
8. The Website contains links and references to other websites. Dene spółka z ograniczoną odpowiedzialnością is not responsible for the privacy policies applicable therein.
IV. Rights of data subjects
1.The right to withdraw consent - legal basis: Article 7, paragraph 3 of the GDPR.
a) The User has the right to withdraw any consent given to Dene spółka z ograniczoną odpowiedzialnością
b) Withdrawal of consent takes effect from the moment of withdrawal of consent.
c) Withdrawal of consent does not affect the processing carried out by Dene spółka z ograniczoną odpowiedzialnością in accordance with the law before its withdrawal.
d) Withdrawal of consent does not entail any negative consequences for the User, but may prevent further use of services or functionalities which, in accordance with the law, Dene spółka z ograniczoną odpowiedzialnością may only provide with consent.
2. The right to object to data processing - legal basis: Article 21 of the GDPR.
a) The User has the right to object at any time - for reasons related to his/her particular situation - to the processing of his/her personal data, including profiling, if Dene spółka z ograniczoną odpowiedzialnością processes his/her data based on a legitimate interest, e.g. marketing of Dene spółka z ograniczoną odpowiedzialnością's products and services, maintaining statistics on the use of individual functionalities of the Website and facilitating the use of the Website, as well as satisfaction surveys.
b) Resignation from receiving marketing communications regarding products or services via e-mail will mean the User's objection to the processing of his or her personal data, including profiling for these purposes.
c) If the User's objection proves to be justified and Dene spółka z ograniczoną odpowiedzialnością has no other legal basis for the processing of personal data, the User's personal data will be deleted to the processing of which the User has objected.
3. The right to delete data ("the right to be forgotten") - legal basis: Art. 17 GDPR.
a) The User has the right to request the deletion of all or some of their personal data.
b) The User has the right to request the deletion of personal data if:
a. the personal data are no longer necessary in relation to the purposes for which they were collected or processed;
b. has withdrawn specific consent to the extent that personal data were processed based on his or her consent;
c. has objected to the use of his or her data for marketing purposes;
d. personal data are processed unlawfully;
e, personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State to which Dene spółka z ograniczoną odpowiedzialnością is subject
f. the personal data have been collected in connection with the provision of information society services.
c) Despite the request to delete personal data in connection with the filing of an objection or withdrawal of consent,
Dene spółka z ograniczoną odpowiedzialnością may retain certain personal data to the extent that processing is necessary for the establishment, exercise or defence of legal claims, as well as for compliance with a legal obligation requiring processing under Union law or the law of the Member States to which Dene spółka z ograniczoną odpowiedzialnością is subject. This applies in particular to personal data including: first name, last name, e-mail address, which data are retained for the purpose of handling complaints and claims related to the use of Dene spółka z ograniczoną odpowiedzialnością's services, or additionally the address of residence/mailing address, order number, which data are retained for the purpose of handling complaints and claims related to concluded sales contracts or the provision of services.
4. Right to restrict data processing - legal basis: Article 18 of the GDPR.
a) The User has the right to request the restriction of the processing of his/her personal data. Submitting a request, until it is considered, prevents the use of certain functionalities or services, the use of which will be associated with the processing of the data covered by the request. Dene spółka z ograniczoną odpowiedzialnością will also not send any messages, including marketing ones.
b) The User has the right to request the restriction of the use of personal data in the following cases:
a. when he/she questions the accuracy of his/her personal data – then Dene spółka z ograniczoną odpowiedzialnością limits their use for the time needed to verify the accuracy of the data, but no longer than for 7 days
b. when the data processing is unlawful and instead of deleting the data, the User requests the restriction of their use
c. when personal data are no longer necessary for the purposes for which they were collected or used but are needed by the User to establish, pursue or defend legal claims;
d. when he has objected to the use of his data – then the restriction takes place for the time needed to consider whether – due to the special situation – the protection of the User's interests, rights and freedoms outweighs the interests pursued by the Administrator in processing the User's personal data.
5. Right of access to data - legal basis: Article 15 of the GDPR.
a) The User has the right to obtain from the Administrator confirmation as to whether he processes personal data, and if so, the User has the right to:
a. access your personal data;
b. obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the planned period for which the User's data will be stored or the criteria for determining this period (when it is not possible to determine the planned period for which the data will be processed), the rights of the User under the GDPR and the right to lodge a complaint with the supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
c. obtain a copy of your personal data.
6. The right to rectification of data - legal basis: Art. 16 GDPR.
a) The User has the right to request the Administrator to immediately rectify their personal data that is incorrect. Taking into account the purposes of processing, the User whose data is being processed has the right to request that incomplete personal data be supplemented, including by submitting an additional statement, by sending a request to the e-mail address in accordance with §5 of the Privacy Policy.
7. Right to data portability - legal basis: Article 20 of the GDPR.
a) The User has the right to receive their personal data that they have provided to the Administrator and then send them to another personal data controller of their choice. The User also has the right to request that the personal data be sent by the Administrator directly to such controller, if technically possible. In such a case, the Administrator will send the User's personal data in the form of a file in the csv format, which is a commonly used, machine-readable format that allows the received data to be sent to another personal data controller.
8. In the event that the User exercises the right resulting from the above rights, Dene spółka z ograniczoną odpowiedzialnością shall comply with the request or refuse to comply with it immediately, but no later than within one month of receiving it. However, if - due to the complex nature of the request or the number of requests - Dene spółka z ograniczoną odpowiedzialnością is unable to comply with the request within one month, it shall comply with it within the next two months, informing the User in advance within one month of receiving the request - of the intended extension of the deadline and the reasons for it.
9. The User may submit complaints, inquiries and requests to the Administrator regarding the processing of his or her personal data and the exercise of his or her rights.
10. The User has the right to request that Dene spółka z ograniczoną odpowiedzialnością provide a copy of the standard contractual clauses by sending an inquiry in the manner indicated in §5 of the Privacy Policy.
11. The User has the right to lodge a complaint with the President of the Personal Data Protection Office regarding a violation of his or her rights to personal data protection or other rights granted under the GDPR.
V. Changes to the Privacy Policy
1. The Privacy Policy may change by amendment, about which Dene spółka z ograniczoną odpowiedzialnością will provide the user with 7 days notice.
2. Please send any questions regarding the Privacy Policy to: kontaktgymglori@gmail.com