Privacy policy


Privacy Policy of the Shop DROLL SPORT
https://www.drollsport.com
(“Shop”)

Dear User!

We care about your privacy and want you to feel comfortable while using our services. Therefore, below we present the most important information on the policy for the processing of your personal data and on cookies which are used by our Shop. This information has been prepared with regards to the GDPR, i.e. the general data protection regulation.

PERSONAL DATA CONTROLLER

Tomasz Zalewski, an entrepreneur running a business under the business name DROLL SPORT Tomasz Zalewski, entered into the Central Register and Information on Economic Activity kept by the minister competent for economy and keeping the Central Register and Information on Economic Activity, European Union VAT Identification Number PL8252200576, REGON (National Official Business Register number) 525017445, ul. Adama Antoniego Kryńskiego 20, 21-400 Łuków, Poland.

If you wish to contact us in relation to our processing of your personal data, please email us at: shop@drollsport.com.

YOUR RIGHTS

You have the right to request:

  • access to your personal data, including obtaining a copy of your data (Article 15 of the GDPR or, if applicable, Article 13 sec. 1(f) of the GDPR),
  • their rectification (Article 16 of the GDPR),
  • erasure (Article 17 of the GDPR),
  • restriction of their processing (Article 18 of the GDPR),
  • the transfer of data to another controller (Article 20 of the GDPR),

and the right to:

  • object to the processing of your personal data at any time:
    • on grounds relating to your particular situation - with regard to the processing of your personal data based on Article 6 sec. 1(f) of the GDPR (i.e. the legitimate interests pursued by us);
    • if your personal data is processed for the purposes of direct marketing, to the extent that such processing is related to such direct marketing (Art. 21 sec. 2 of the GDPR).

Contact us if you wish to exercise your rights. You can object to our use of cookies (which you will read about below) in particular by using the appropriate settings on your browser.

If you consider that your data is being processed unlawfully, you can lodge a complaint with the competent data protection authority.

PERSONAL DATA AND PRIVACY

Your data is processed by us for purposes related to the operation of the Shop and the provision of the services offered therein. Below you will find detailed information on the processing of your data depending on your activities.

1. Placing an order in the Shop

For what purpose do we process your data?
to process your order
On what basis do we process your data?
a sales contract (Article 6 sec. 1(b) of the GDPR) a legal obligation, particularly related to accounting and product safety, requiring us to process your personal data (Article 6(1)(c) of the GDPR)
For how long will we process your data?
for the duration of the aforementioned contract until the expiry of our legal obligations
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
you will not be able to place an order

2. Creating an account in the Shop

For what purpose do we process your data?
to execute a contract for the provision of an account in the Shop
On what basis do we process your data?
a contract for provision of services (Article 6 sec. 1(b) of the GDPR)
For how long will we process your data?
for the duration of the aforementioned contract
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
you will not be able to create an account and use its features, such as viewing your order history or checking your order status

3. Contacting us (e.g. to ask a question)

For what purpose do we process your data?
to respond to your inquiries or requests
On what basis do we process your data?
a contract or actions taken at your request prior to entering into a contract (Article 6 sec. 1(b) of the GDPR) - if your enquiry or request relates to a contract to which we are or may be a party our legitimate interest in processing your data for the purpose of communicating with you (Article 6 sec. 1(f) of the GDPR) - if your enquiry or request is not related to a contract
For how long will we process your data?
for the duration of the contract binding us or, if no contract is concluded - until the expiry of the claim period - see the last table of this part until the expiry of the claim period - see the last table in this part or until we have taken account of your objection to the processing*
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
we will not be able to respond to your enquiry or request
*whichever is applicable in a particular case

4. Browser settings or other similar action allowing analytical activities

For what purpose do we process your data?
to analyse how you use and navigate through the Shop in order to improve its functionality
(read more in the "Analytics" and "Cookies" parts of our Privacy Policy)
On what basis do we process your data?
our legitimate interest in processing the data for the purpose stated above
(Article 6 sec. 1(f) of the GDPR)
For how long will we process your data?
until the cookies used for analytical purposes expire or are deleted by you*
What happens if you do not provide the data?
we will not take into account the way you use and navigate through the Shop when working on its development
*whichever is applicable in a particular case

5. Your consent to receive marketing content from us (e.g. information on special offers)

For what purpose do we process your data?
to send marketing information, especially special offers to analyse the effectiveness of the messages we send, in order to establish general principles for effective messaging in our business activity
(read more in the "Analytical activities" part of the Privacy Policy)
On what basis do we process your data?
your consent to our marketing activities (Article 6 sec. 1(a) of the GDPR) our legitimate interest in processing the data for the purpose stated above
(Article 6 sec. 1(f) of the GDPR)
For how long will we process your data?
until you withdraw your consent - remember, you can withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. until we have taken account of your objection to the processing
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
you will not receive our marketing materials, including information about our special offers

6. Signing up for the newsletter

For what purpose do we process your data?
to send you our newsletter to analyse the effectiveness of the messages we send, in order to establish general principles for effective messaging in our business activity
(read more in the "Analytical activities" part of the Privacy Policy)
On what basis do we process your data?
a contract for services of sending a newsletter (Article 6 sec. 1(b) of the GDPR) our legitimate interest in processing the data for the purpose stated above
(Article 6 sec. 1(f) of the GDPR)
For how long will we process your data?
until you unsubscribe from our newsletter until we have taken account of your objection to the processing
in addition, your data will be processed until the expiry of the period during which claims may be asserted - either by you or by us
(see the last table of this part for more information)
What happens if you do not provide the data?
you will not be able to receive information regarding the Shop and our services

7. Any act or omission which may give rise to a claim relating to the Shop or our services

For what purpose do we process your data?
to establish, assert or defend possible claims relating to the contract concluded or the services provided
On what basis do we process your data?
our legitimate interest to process your personal data for the purpose stated above (Article 6 sec. 1(f) of the GDPR)
For how long will we process your data?
until the expiry of the claim period or until we take account of your objection to the data processing*
What happens if you do not provide the data?
inability to establish, assert or defend claims
*whichever is applicable in a particular case

ANALYTICAL ACTIVITIES

As part of the the Shop's website, we perform analytical activities to make it more intuitive and accessible - we will do so if you allow such activities. As part of the analysis, we will take into account the way in which you navigate the Shop, for example, how much time you spend on a particular subpage, or where in the Shop you click. This allows us to optimize the layout, appearance and content of the Shop as we work on its development, in order to improve its functionality.

In addition, if you wish to receive marketing messages or newsletter from us, we may analyze the effectiveness of the mailing we have conducted. For example, we can check whether and how it affected activity in our Shop. Such activities will help us establish general rules for sending such messages - for example, in terms of optimal sending hours or determining how to formulate effective content.

DATA SECURITY

When processing your personal data, we use organisational and technical means in accordance with applicable law, including the encryption of the connection using the SSL/TLS protocol.

COOKIES

Our Shop, like most websites, uses the so-called cookies. These cookies:

  • are saved in the memory of your device (computer, telephone, etc.);
  • do not change the settings of your device.

In our Shop, cookies are used for:

  • saving your session,
  • statistical purposes,
  • marketing purposes,
  • making the Shop functions available.

To learn how to manage cookies, including how to turn them off in your browser, you can use the help file of your browser. You can find out more about this by pressing F1 in your browser. In addition, appropriate tips can be found on the following pages, depending on the browser you are using:

Below you can find information on the functions of the cookies we process and their validity period.

Cookie name Validity period of the cookie Cookie function
"_cmp_a" 1 day Determines whether the user has accepted the cookie consent box.
_tracking_consent 1 year Stores the user's cookie consent state for the current domain
CookieConsent 1 year Stores the user's cookie consent state for the current domain
secure_customer_sig 1 year This cookie is used to store customer credentials securely when processing a purchase on the website - the cookie is essential in making a secure online transaction.
wpm-test-cookie session duration This cookie determines whether the browser accepts cookies.
klaviyoOnsite constant The cookie is used to manage the mailing list, if the visitor has subscribed to any newsletters or blog posts.
localization 1 year Holds the users timezone.
__kla_id 2 years This cookie is used to collect information on the visitor's behavior. This information will be stored for internal use on the website – internal analytics is used to optimize the websites or to register if the visitor has subscribed to a newsletter.
klaviyoPagesVisitCount session duration Stores data on the time spent on the website and its sub-pages, during the current session.
_landing_page 14 days Stores visitors' navigation by registering landing pages - This allows the website to present relevant products and/or measure their advertisement efficiency on other websites.
_orig_referrer 14 days This cookie is used to collect information on a visitor. This information will become an ID string with information on a specific visitor – ID information strings can be used to target groups with similar preferences, or can be used by third-party domains or ad-exchanges.
_shopify_s 1 day Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant.
_shopify_sa_p 1 day Collects data on visitors' behaviour and interaction - This is used to make advertisement on the website more relevant. The cookie also allows the website to detect any referrals from other websites.
_shopify_sa_t 1 day Collects data on visitors' behaviour and interaction - This is used to make advertisement on the website more relevant. The cookie also allows the website to detect any referrals from other websites.
_shopify_y 1 year Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant.
keep_alive 30 minutes The keep_alive cookie is used to maintain a user's session active on a website, preventing automatic logout during periods of inactivity.
cart_currency 14 days Shopify sets this cookie to remember the user’s country of origin and populate the correct transaction currency.
shopify_pay_redirect 60 minutes Shopify sets this cookie to enable secure online payment and checkout.
_pay_session session duration Shopify sets this cookie to enable secure checkout and payment function on the website.
__kla_viewed constant Klaviyo sets this cookie to collect information on the user's website navigation and preferences.
cart 1 month Shopify sets this cookie to provide a connection with the shopping cart.
checkout_session_lookup 21 days Shopify sets this cookie, which is used in conjunction with the payment window.
shop_pay_accelerated 9 hours  The shop_pay_accelerated cookie is designed to enhance and accelerate the checkout experience for users on Shopify-powered stores by enabling faster payment processing.
_ga_*

1 year 1 month 4 days

Google Analytics sets this cookie to store and count page views.
_ga

1 year 1 month 4 days

Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
_fbp 3 months Facebook sets this cookie to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising after visiting the website.
cart_sig 1 month Shopify sets this cookie to be used in connection with store checkout.
cookieconsent_preferences_disabled 1 year This cookie is used to remember a user's consent about cookies on the website. It stores information about which categories of cookies the user has allowed or disallowed to provide a customized browsing experience.

Using appropriate options of your browser, you can at any time:

  • delete cookies,
  • block the use of cookies in the future.

In such cases, we will no longer process them.

EXTERNAL SERVICES / DATA RECIPIENTS

We use external services to help us in our business. We entrust them with the processing of your data - these processors only process data upon our documented request.

Below you will find a list of the recipients of your data:

ACTION DATA RECIPIENTS TRANSFERS OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
any action connected with the Shop hosting provider does not take place
sales software provider does not take place
visiting the Shop with settings that allow marketing activities to be carried out provider of marketing services does not take place
visiting the Shop with settings that allow analytical activities to be carried out entity enabling analytical activities in the Shop does not take place
placing an order in the Shop payment processor does not take place
entity supplying the product to you does not take place
provider of the business facilitation software (e.g. accounting software) does not take place
provider of the standard office software (including email boxes) yes – the USA **
accounting office does not take place
subscribing to the newsletter or consent to marketing entity providing newsletter or marketing messaging services yes – the USA **
contacting us (e.g. to ask a question) provider of the standard office software (including email boxes) yes – the USA **

Additionally:

relevant public authorities to the extent that we are required to provide them with the data.

TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

** As such, your personal data may also be processed by entities outside the European Union. An adequate level of protection of your data, including through the application of appropriate safeguards, is ensured by:

  • the participation of these entities in the Data Privacy Framework, a program established by the implementing decision of the European Commission as a set of principles that guarantee adequate privacy protection - in the case of entities from the United States