Privacy Policy and GDPR

Courtesy translation. The Polish version is the binding one and prevails in case of any discrepancy.

1. Controller and contact

The controller of your personal data is Oliwer Laskowski, running a business under the name GAMMA PIU POLSKA Oliwer Laskowski (Gamma+ Polska), tax ID (NIP) 5882494514, REGON 524642750, ul. Budowlanych 4, Hala C, 84-200 Wejherowo. For personal data matters, write to biuro@gammapiu-polska.pl, call 533 819 893or send a letter to the address above. We have not appointed a data protection officer.

2. Why we process data, on what legal basis and for how long

• Order and delivery. First and last name, address, e-mail, phone number, contents of the order and, for an invoice, company name and tax ID (NIP). Legal basis: contract (Art. 6(1)(b) GDPR). We keep it until the limitation period for claims arising from the contract expires.
• Invoices, receipts and accounting. Data from the sales document. Legal basis: legal obligation (Art. 6(1)(c) GDPR, tax and accounting regulations). We keep it for 5 years from the end of the year in which the tax payment deadline passed.
• Payment and instalments. We pass the amount, the order number and the data needed for payment to Tpay or Comfino. We do not see or store your card number or BLIK code. Legal basis: contract.
• Complaints, returns, buy-back, service and equipment registration. Contact details, content of the report, serial number, photos of the defect and of proof of purchase. Legal basis: contract and legal obligation (statutory warranty, guarantee), and for maintenance reminders - our legitimate interest (Art. 6(1)(f) GDPR). We keep it until the end of the guarantee and the limitation of claims.
• Customer account. E-mail, password (encrypted, we do not know it), first name, phone number, address, company details, orders, equipment, favourites and saved cart. Legal basis: account agreement. We keep it until the account is deleted; a saved cart is deleted after 30 days without changes.
• Questions, contact form, advisor chat window. Content of the message, e-mail or phone number. Legal basis: our legitimate interest in replying to your message (Art. 6(1)(f) GDPR). We keep it until the matter is resolved and any claims are time-barred.
• Availability notification and a cart saved “for later”. E-mail and selected products. Legal basis: your request (consent, Art. 6(1)(a) GDPR). We keep it until the notification is sent or until you withdraw consent.
• Newsletter. E-mail address in the Resend contact list. Legal basis: consent. We immediately send a confirmation with a discount code. You unsubscribe by replying to any newsletter or by writing to us. Resend does not send the newsletter to people who have unsubscribed.
• Store security. IP address and technical data of the request, to block bots and abuse (rate limits, Cloudflare Turnstile). Legal basis: legitimate interest. We delete counters with IP addresses after 1 day; the hosting provider keeps server logs for a short time.
• Push notifications. When you enable them, we save the subscription address of your browser (a technical identifier from Apple, Google, Mozilla or Microsoft, without name or phone number) together with the numbers of the reports you want to be notified about, and, if you are logged in, your e-mail. We send only status changes of reports and orders, not advertising. Legal basis: your request (Art. 6(1)(b) GDPR) and our legitimate interest in informing you about fulfilment (point (f)). Turning notifications off in the store or in your device settings removes the subscription; we delete an inactive one ourselves when the browser reports that it has expired.
• Statistics and advertising. Only with your consent in the cookie window (Art. 6(1)(a) GDPR). Details in section 6.

Providing data is voluntary, but without the order data we cannot fulfil the order, and without the data from the sales document we cannot issue an invoice. We do not make decisions about you based solely on automated processing. If you consent to advertising cookies, Google and Meta may tailor ads to your interests (marketing profiling).

3. Who technically runs the store

The store is built, maintained and developed by Ofertownik Sp. z o.o. (brand Silniki Biznesowe), ul. Wejherowska 31, 84-106 Domatówko, tax ID (NIP) 5871750557, as a processor acting on our behalf (Art. 28 GDPR). Silniki Biznesowe manage the server and the service accounts on which the store runs (hosting, database, login, file storage, e-mail sending), and have access to data only when technical work, bug fixing or support that we ask for requires it. They do not use this data for their own purposes.

4. Who we connect with - providers and recipients of data

Each of them receives only the data it needs for its task. We do not sell data.

• Vercel Inc. (USA) - servers on which the website and its functions run (checkout, forms, panel). Additionally Vercel Speed Insights: anonymous measurements of page loading speed (Core Web Vitals), without storing anything in your browser and without tracking you across pages.
• Neon (USA, servers in Frankfurt) - database of orders, accounts and reports, customer account login (Neon Auth) and file storage (photos from service reports).
• Resend (Plus Five Five, Inc., USA) - sending e-mails (confirmations, statuses, password recovery) and the newsletter contact list.
• Tpay (Krajowy Integrator Płatności S.A.) - online payments. Comfino (Comperia.pl S.A.) - instalments and deferred payments; on the product page and at checkout we show their calculator loaded from the Comfino server.
• InPost sp. z o.o. - parcel lockers and courier; the parcel locker selection map loads from the InPost server. DPD Polska sp. z o.o. - courier and cash on delivery. Both carriers also collect parcels from you (a courier collects the parcel for returns, service and buy-back). The carrier receives first and last name, address, phone number and e-mail.
• wFirma - issuing invoices and receipts.
• Browser notification services (Apple, Google, Mozilla, Microsoft) - only when you enable push notifications; they receive the content of the notification in order to deliver it to your device.
• Cloudflare, Inc. (USA) - Turnstile, i.e. a check that a form is submitted by a human and not a bot.
• Google (Google Ireland Ltd and Google LLC) - notifications for our team in Google Chat about a new order, question or report; and, with your consent, also Google Tag Manager, Google Analytics and Google Ads (section 6).
• Meta Platforms Ireland Ltd - Meta pixel (Facebook, Instagram), only with marketing consent.
• YouTube (Google) - video thumbnails on product pages; the player itself (youtube-nocookie.com) loads only after you click.
• Ofertownik Sp. z o.o. (Silniki Biznesowe) - maintenance of the store (section 3).
• Accounting office, law firm, as well as courts and public authorities - where required by law or to defend our rights.

When you connect to the website, your browser downloads files from our servers and from the servers of the providers listed, so they see your IP address and browser data. We do this only where a given function requires it (e.g. the parcel locker map, payment, instalment calculator).

5. Transfers of data outside the European Economic Area

Some providers (Vercel, Neon, Resend, Cloudflare, Google, Meta) are companies from the USA or use servers in the USA. The transfer takes place on the basis of a European Commission decision on an adequate level of protection (EU-US Data Privacy Framework) or standard contractual clauses (Art. 46 GDPR). You can get a copy of the safeguards by writing to us.

6. Cookies and browser storage

On your first visit we ask for consent. We divide the files and entries in the browser into three groups:

• Necessary (without consent, Art. 399(3) of the Polish Electronic Communications Law). In the browser storage (localStorage) we save your consent choice (12 months), light or dark theme, language, cart (2 days), favourites, comparison and the selected parcel locker. Campaign parameters from the address (UTM) are kept in sessionStorage until the end of the session and added to the order so that we know where the purchase came from. After you log in to your account the browser keeps the login session (Neon Auth) until you log out. The service worker keeps a copy of the page so that it opens offline; it does not keep order or panel data. After you enable push notifications, the numbers of your reports remain (to link them to notifications), and after you close the app installation prompt - a flag so that it is not shown again. Tpay, Comfino and Cloudflare may save their own files needed for payments and protection against bots.
• Analytics (only with consent). Google Analytics 4 launched by Google Tag Manager: page views, traffic source, scrolling, clicks on outbound links, search phrases, viewed products and purchases. Provider: Google Ireland Ltd. The _ga and _ga_* files last up to 2 years.
• Marketing (only with consent). Measuring ad effectiveness and tailoring ads to you: Google Ads (_gcl_* files, up to 90 days) and the Meta pixel (_fbp and _fbc files, up to 90 days). After a purchase we send them conversion information (order number, value, products). Google Ads may also read your e-mail, phone number or address from the form in encrypted form (SHA-256 hash) to attribute the purchase to an ad (enhanced conversions).

Without consent we do not load Google Tag Manager, the Meta pixel or any advertising scripts. You can change or withdraw consent at any time: Cookie settings (the link is also in the footer of every page). Withdrawing consent removes analytics and advertising files from our domain. You can also delete or block files in your browser settings.

7. Footer click counter

We count how many people click the links to the store's developer (Silniki Biznesowe) in the footer. We then save: which link, from which subpage, campaign parameters (UTM) from the visit to the site, the page you came from, device and browser type, language and the country determined from the IP address. We do not save the IP address itself, we do not use cookies or any identifier, so we do not know who clicked. The link leads to the Silniki Biznesowe website with UTM parameters, thanks to which the developer sees in its statistics that the visit came from our store.

8. Your rights

You have the right of access to your data, to rectification, erasure, restriction of processing and portability, as well as to object to processing based on legitimate interest. You can withdraw consent at any time - this does not affect the lawfulness of processing carried out before its withdrawal. Send your request to biuro@gammapiu-polska.pl; we reply within one month. You can also lodge a complaint with the President of the Personal Data Protection Office (UODO, the Polish Data Protection Authority; ul. Stawki 2, 00-193 Warszawa).

9. Changes

We publish a new version on this page with the date at the top. Orders placed earlier are settled according to the rules in force on the day of purchase. Details of purchases are in the terms and conditions.