Information about the processed personal data

WODARO SP. Z O.O., 48-130 Kietrz, Głubczycka 57, KRS 0000925164, NIP: 7481590414, REGON 520119046,, processes your personal data in a secure, compliant manner and in accordance with the law, including the Regulation of the European Parliament andRegulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”).

I. Data Controller

1. The data controller of your personal datais: WODARO SP. Z O.O., 48-130 Kietrz, Głubczycka 57, KRS 0000925164, NIP: 7481590414, REGON 520119046 (hereinafter: "Administrator").

2. Contact with the personal data administrator is possible via traditional mail at: 48-130 Kietrz, ul. Głubczycka 57 or by email biuro@mojawoda.com or alsoby phone at: +48 505020040

II. Purpose of processing personal data, legal basis, data retention period

1. Personal data obtained from you is processed for the following purpose:

  1. personal data provided when ordering goods or services – for the purpose of fulfilling the contract concluded with the customer, for the duration of the contract withclient,
  2. personal data provided via email or phone - in order to contact the client to provide explanations, answers to questions - for the duration of the contact with the client,
  3. personal data provided when placing an order without registering a customer account - for the purpose of fulfilling the concluded contract, contacting the client - until the execution of the contract concluded with you,
  4. personal data provided during the registration of the ordering account – for the purposes of registering an account in the online store and executing the concluded contract, contacting the customer – for the duration of the ordering account,
  5. personal data provided during the subscription to the newsletter – for the purpose of sending email information of an advertising, commercial, and marketing nature (newsletter) – until the consent is withdrawn.

2. After the expiration of the data retention period specified in paragraph 1 above, customers' personal data may be retained for the purpose of:

- pursuing any claims related to the performance of the contract, debt collection, conducting court, arbitration, or mediation proceedings,

- fulfilling obligations arising from legal regulations, e.g., tax and accounting, regarding warranty,

- preventing abuse and fraud,

- storing for accountability purposes (demonstrating compliance by the Administrator with legal obligations).

3. The legal basis for the Administrator's processing of personal data for the purposes indicated in point 1, letters a)-c) is Article 6(1)(b) of the GDPR, i.e. legitimate interest.The Administrator is responsible for executing the contract concluded with the client and/or taking actions aimed at concluding the contract (contact with the client) as well as building positive relationships with clients.

4. The legal basis for the Administrator's processing of personal data for the purposes indicated in paragraph 1, letters d)-e) is Article 6(1)(a) of the GDPR, i.e., the consent given by the person providing their personal data.

5. The legal basis for the processing of personal data by the Administrator for the purposes indicated in paragraph 2 is Article 6(1)(c) of the GDPR, i.e., the fulfillment of a legal obligation imposed on the personal data Administrator.

6. Providing personal data by the client is voluntary, although necessary for the realization of the purpose for which it is provided by the client. Without providing datathe service will not be able to be performed, e.g., we will not deliver the order.

III. Who is provided with personal data

1. We only share your data with entities specified in the online store's regulations, i.e., companies delivering orders, banks, the company processing payments via electronic payment systems, as well as the entity providing servicesaccounting, legal on behalf of the Administrator.

2. We do not transfer your personal data outside the European Economic Area (EEA).

IV. Your rights

1. You can at any time request from the Administrator access to your processed personal data, their rectification, deletion orrestrictions on processing.

2. Consent given may be withdrawn at any time; however, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

3. You also have the right to request the Administrator to transfer personal data to another data controller.

4. You can exercise all of the above rights by:

4.1 written contact: WODARO SP. Z O.O., 48-140 Kietrz, Głubczycka 57

4.2 email contact: biuro@mojawoda.com

4.3 phone contact at: +48 505020040

V. Lawobjection

1. Regardless of the rights specified in point IV, you have the right to object to the processing of your personal data at any time.

2. Upon receiving your objection, the processing of your personal data will cease.

VI.Complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the law.

VII. Personal Data Protection

1. The Administrator makes every effort to ensure all possible physical, technical, andorganizational protection of personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable regulations, in particular, the Administrator grants individuals with access to customer personal data authorizations for processing personal data and maintains a record of individuals authorized to process data on their behalf.

2. Customer personal dataThe data provided to the Administrator is processed in accordance with the scope of the consent granted by the user and the requirements of the law, including the provisions of the GDPR.