Privacy Policy

I. Data of the Personal Data Administrator

Uniq Fight Club Sp. z o.o., ul. VI Poprzeczna 23, 04-620 Warsaw, NIP: 0000873965.

II. Data Protection Inspector

The administrator has not appointed the Personal Data Protection Inspector.

III. Purposes and grounds for processing personal data

The administrator sells sports equipment. The recipient of the offer and a party to the sales contract may be both private individuals and companies – personal trainers, gyms, fitness clubs, martial arts clubs, wholesalers. Therefore, it processes the personal data of the recipients of the offer.

The administrator processes personal data, in accordance with the law, for the following purposes:

a) selling products:

● name,
● surname,
● company name
● e-mail address,
● home address or registered office address
● delivery address
● telephone number
● tax identification number

The legal basis for such data processing is Art. 6 sec. 1 lit. b GDPR, which allows the processing of personal data if they are necessary to perform the contract or take steps to conclude a contract.

b) considering the complaint or return:

● name,
● surname,
● company name
● e-mail address,
● home address or registered office address
● delivery address
● telephone number
● bank account number (in the case of a refund for the product ordered with the ‘cash on delivery’ option)
● tax identification number

The legal basis for such data processing is Art. 6 sec. 1 lit. b GDPR, which allows the processing of personal data if they are necessary to perform the contract or take steps to conclude a contract.

c) sending e-mail notifications for communication:

● e-mail address

The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator carries out its legitimate interest. The interest of the Administrator is to inform the client about activities related to the services provided.

d) issuing an invoice and fulfilling other obligations resulting from the provisions of tax law,
such as, for example, keeping accounting records for 5 years:

● name and surname,
● company name,
● home address or registered office address,
● tax identification number

The legal basis for such data processing is Art. 6 sec. 1 lit. c GDPR, which allows the processing of personal data if such processing is necessary for the Personal Data Administrator to fulfill its obligations under the law.

f) creating registers and records related to the GDPR, e.g., the register of customers who objected in accordance with the GDPR:

● name,
● e-mail address

The provisions of the GDPR impose certain documentation obligations on us to demonstrate compliance and accountability. Moreover, if you object, for example, to the processing of your personal data for marketing purposes, we need to know who not to use direct marketing because you do not wish to do so.

The legal basis for such data processing is, firstly, Art. 6 sec. 1 lit. c GDPR, which allows the processing of personal data if such processing is necessary for the Personal Data Administrator to fulfill its obligations under the law. Second, Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator implements its legitimate interest (in this case, the interest of the Company is to have knowledge about people who exercise their rights under the GDPR);

g) establishing, investigating or defending against claims:

● name and surname or possibly the name of the company,
● residential address (if provided),
● tax identification number (if provided),
● e-mail address,
● IP.

The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator implements its legitimate interest (in this case, the interest of the Company is to have personal data that will allow to establish, pursue or defend against claims, including customers and third parties);

h) archival and evidential:

● name and surname (if provided),
● e-mail address.

– for the purposes of securing information that may be used to demonstrate facts of legal significance. The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator implements its legitimate interest (in this case, the interest of the Company is to have personal data that will prove certain facts related to the provision of services, e.g., when a state authority requests it);

i) analytical, i.e., research and analysis of activity on the uniq.sport website and all subdomains of this website:

● date and time of visiting the website,
● type of operating system,
● approximate location,
● type of web browser used to browse the website,
● time spent on the website,
● visited subpages,
● subpage where the contact form has been completed.

The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator carries out its legitimate interest (in this case, the interest of the Company is to know the activity of customers on the website);

j) using cookies on the website, we process such text information (cookies will be described in a separate section). The legal basis for such processing is Art. 6 sec. 1 lit. a GDPR, which allows the processing of personal data on the basis of a voluntarily granted consent (the first time you enter the website, you are asked for consent to the use of cookies);

k) administering the uniq.sport website:

● IP address,
● server date and time,
● information about the web browser,
● information about the operating system.

– these data are saved automatically in the so-called server logs, each time you use the website belonging to the Company. It would not be possible to administer the website without using the server and without this automatic saving. The legal basis for such data processing is Art. 6 sec. 1 lit. f GDPR, which allows the processing of personal data, if in this way the Personal Data Administrator carries out its legitimate interest (in this case, the interest of the Company is to administer the website);

IV. Cookies

1. The company on its website, like other entities, uses the so-called cookies, i.e. short text information saved on a computer, phone, tablet or other user’s device. They can be read by our system, as well as by systems belonging to other entities whose services we use (e.g. Facebook, Google).

2. Cookies fulfill many functions on the website:

● ensuring security – cookies are used to authenticate users and prevent unauthorized use of the customer panel. Therefore, they are used to protect the user’s personal data against unauthorized access.

● impact on the processes and efficiency of using the website – cookies are used to ensure that the website works efficiently and that you can use the functions available on it, which is possible, among other things, by remembering the settings between subsequent visits to the website. Thanks to them, you can efficiently navigate the website and individual subpages.

● session status – cookie files often contain information on how visitors use the website, e.g. which subpages are displayed most often. They also make it possible to identify errors displayed on some subpages. Cookies used to save the so-called “Session state” therefore help to improve services and increase the browsing experience.

● maintaining the session status – if the client logs into his panel, cookies enable the session to be maintained. This means that after switching to another subpage, you do not have to re-enter your login and password each time, which contributes to the comfort of using the website.

● creating statistics – cookies are used to analyze how users use the website (how many people open the website, how long they stay there, which content is of greatest interest, etc.). Thanks to this, it is possible to constantly improve the website and adapt its operation to the preferences of users. In order to track activity and create statistics, we use Google tools, such as Google Analytics; in addition to reporting website usage statistics, pixel Google Analytics may also be used, together with some of the cookies described above, to help display more relevant content to the user in Google services (e.g. in the Google search engine) and throughout the web;

● using social functions – on the website we have the so-called Facebook pixel, which allows you to like our fanpage on this website while using the website. However, to do this, we must use cookies provided by Facebook.

3. Your web browser allows the use of cookies on your device by default, therefore, during the first visit, please consent to the use of cookies. However, if you do not wish to use cookies when browsing the website, you can change the settings in your web browser – completely block the automatic handling of cookies or request notification each time cookies are placed on the device. The settings can be changed at any time.

4. While respecting the autonomy of all people using the website, we feel obliged to inform you that disabling or limiting the use of cookies may cause quite serious difficulties in using the website, e.g. in the form of having to log in to each subpage, a longer loading period page, restrictions on the use of functionalities, restrictions on liking the page on Facebook, etc.

V. Right to withdraw consent

1. If the processing of personal data is based on consent, you may withdraw this consent at any time – at your discretion.

2. If you would like to withdraw your consent to the processing of personal data, all you need to do is send an e-mail directly to the Administrator at the address: contact@uniq.sport

3. If the processing of your personal data was based on consent, its withdrawal does not make the processing of personal data up to that point illegal. In other words, until the consent is withdrawn, we have the right to process your personal data and its revocation does not affect the lawfulness of the current processing.

VI. The requirement to provide personal data

1. Providing any personal data is voluntary and depends on your decision. However, in some cases, providing certain personal data is necessary to meet your expectations regarding the use of services and products.

2. To order our products, it is necessary to provide:

– first and last name or/ and company name
– home or/ and business address
– product delivery address
– e-mail address
– telephone number
– tax identification number

without it, we are not able to conclude and perform a product sale agreement.

3. In order for you to be able to receive an invoice for services, it is necessary to provide all the data required by tax law, i.e. name and surname or company, address of residence or registered office address, tax identification number – without this we are not able to properly issue an invoice.

4. In order to be able to contact you by phone in matters related to the provision of the service, it is necessary to provide a telephone number – without this we are not able to establish telephone contact.

VII. Automated decision making and profiling

We do not make automated decision-making, including based on profiling.

VIII. Recipients of personal data

1. Like most entrepreneurs, we use the help of other entities in our activities, which often involves the necessity to provide personal data. In connection with the above, if necessary, we transfer your personal data to lawyers cooperating with us, companies servicing quick payments, an accounting company, and a hosting company.

2. In addition, it may happen that, for example, based on an appropriate legal provision or a decision of a competent authority, we will also have to transfer your personal data to other entities, whether public or private. Therefore, it is extremely difficult for us to predict who may request the disclosure of personal data. Nevertheless, we ensure that we analyze each case of a request to provide personal data very carefully and very carefully, so as not to accidentally provide information to an unauthorized person.

IX. Transferring personal data to third countries

Users’ personal data are not transferred to countries outside the European Economic Area (EEA). The administrator provides personal data only to entities that guarantee a high level of personal data protection.

X. The period of personal data processing

1. In accordance with applicable law, we do not process your personal data “indefinitely”, but for the time needed to achieve the set goal. After this period, your personal data will be irretrievably deleted or destroyed.

2. We process personal data for the period of:

● duration of the contract – in relation to personal data processed for the purpose of concluding and performing the contract;

● 3 years (entrepreneurs) + 6 months – in relation to personal data processed for the purpose of establishing, pursuing or defending claims;

● 6 months – in relation to personal data that was collected during the presentation of services, and at the same time the contract was not concluded;

● 5 years – with regard to personal data related to the fulfillment of obligations under tax law;

● until the consent is withdrawn or the purpose of processing is achieved, but not longer than 5 years – in relation to personal data processed on the basis of consent;

● until the objection is effectively raised or the purpose of processing is achieved, but not longer than 5 years – in relation to personal data processed on the basis of the legitimate interest of the Personal Data Administrator or for marketing purposes;

● until they become obsolete or lose their usefulness, but no longer than for 3 years – in relation to personal data processed mainly for analytical purposes, the use of cookies and website administration.

3. We count the periods in years from the end of the year in which we started processing personal data in order to improve the process of deleting or destroying personal data. Separate calculation of the deadline for each concluded contract would entail significant organizational and technical difficulties, as well as a significant financial outlay, therefore establishing one date for the removal or destruction of personal data allows us to manage this process more efficiently. Of course, if you exercise your right to be forgotten, such situations are considered individually

4. The additional 6 months related to the processing of personal data collected for the performance of the contract is dictated by the fact that you can hypothetically submit a claim a moment before the expiry of the limitation period, the request may be delivered with a significant delay or you may incorrectly specify the limitation period your claim.

XI. Data subject rights

1. We kindly inform you that you have the right to:

● access to your personal data;
● rectification of personal data;
● deletion of personal data;
● restrictions on the processing of personal data;
● objection to the processing of personal data;
● portability of personal data.

2. We point out that these rights are not absolute, and therefore we may legally refuse you to comply with them in certain situations. However, if we refuse to accept the request, it is only after careful analysis and only if the refusal to accept the request is necessary.

3. At any time, you have the right to object to the processing of your personal data on the basis of the legitimate interest of the Personal Data Administrator (listed in point III) in connection with your particular situation. However, in accordance with the law, we may refuse to take into account the objection if we prove that:

● there are legitimate grounds for processing that override your interests, rights and freedoms or

● there are grounds for establishing, exercising or defending claims.

4. In addition, you can object to the processing of your personal data for marketing purposes at any time. In such a situation, after receiving the objection, we will stop processing for this purpose.

5. You can exercise your rights by sending an e-mail directly to the Company to the following address: contact@uniq.sport

XII. Right to lodge a complaint

If you believe that your personal data is processed contrary to the applicable law, you may lodge a complaint with the President of the Personal Data Protection Office.

XIII. Final Provisions

1. To the extent not covered by this Privacy Policy, the provisions on the protection of personal data shall apply.

2. You will be notified by e-mail about any changes introduced to this Privacy Policy.

3. This Privacy Policy is valid from. 15.04.2021