Effective from October 11, 2024
1. General Provisions
1.1 This Privacy Policy outlines the principles governing the processing of personal data on the online store www.alphasport.eu (hereinafter referred to as the “Online Store”), including the basis, purposes, and scope of personal data processing, and the rights of individuals whose data is processed (hereinafter referred to as “Users”). It also includes information on the use of cookies and analytical tools in the Online Store.
1.2 The Online Store, accessible at alphasport.eu, is operated by Alpha Sp. z o.o., with its registered office in Warsaw, address: 02-532 Warsaw, Rakowiecka 36, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court in Warsaw, 13th Commercial Division of the National Court Register under KRS number 0000963028, REGON 521633147, NIP 5213962576, BDO (application submitted on September 14, 2024), with share capital of PLN 10,000.00 (in words: ten thousand zlotys 00/100) (hereinafter referred to as “Alphasport”).
1.3 The administrator of personal data provided via the Online Store is Alphasport. Contact with Alphasport can be made via email: alpha@alphasport.eu, phone: +48 668 804 300, or postal mail at Rakowiecka 36/318, 02-532 Warsaw.
1.4 Personal data is processed by Alphasport in compliance with applicable legal provisions, including the General Data Protection Regulation (EU) 2016/679 of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as “GDPR”).
1.5 Alphasport has implemented necessary measures to maintain the required level of security in line with the nature of the processed personal data and the circumstances of processing to minimize, as far as possible, any unauthorized changes, loss, access, or processing, in accordance with the current state of technology.
1.6 The information contained in the Privacy Policy may be subject to changes. In the event of any changes, Alphasport will notify Users on the Online Store’s website.
2. Categories of Collected Data
2.1 When Users access the Online Store, the following data may be automatically collected:
2.1.1 IP address,
2.1.2 previously visited website address from which the User connected to the Online Store,
2.1.3 information about the computer, mobile phone, or other device used by the User to access the Online Store, including the Internet connection method, browser type and version, operating system, and device,
2.1.4 full uniform resource locator (URL) sequence, including date and time,
2.1.5 browsing history,
2.1.6 data from cookies.
2.2 Other data is collected voluntarily through User input, e.g., registration forms, order forms, newsletter subscription forms, or questionnaires (as defined in the Terms and Conditions), only when the User voluntarily chooses to provide such data, e.g., to place an order.
2.3 Providing personal data is always voluntary; however, failing to provide it may prevent the User from accessing certain functionalities of the Online Store.
3. Purposes, Types, Legal Bases, and Processing Periods
3.1 Below is an overview of the categories of personal data processed in connection with the use of the Online Store, with a breakdown of the purposes of their processing, legal bases, and storage periods:
| Purpose | Types of Data | Legal Basis | Retention Period |
|---|---|---|---|
| Account registration and management | User login, password, name, email, phone, billing address, delivery address (if different), questionnaire content, order history, IP address | Art. 6(1)(b) GDPR | Until the account management service is terminated |
| Filling out the Questionnaire and Product composition preparation | Age, gender, weight, height, health data, dietary habits, lifestyle data, IP address | Art. 6(1)(a) and Art. 9(2)(a) GDPR | Until the account management service is terminated or, if the User does not have an account but has ordered a Product, until the expiration of claim limitation periods under applicable law; for Users who completed the Questionnaire but did not place an order or create an account, for 90 days |
| Executing a sales or delivery agreement and fulfilling orders | User login, name, email, phone, billing address, delivery address (if different), questionnaire content, product details, payment data, IP address | Art. 6(1)(b) GDPR | Until the expiration of claim limitation periods under applicable law |
4. Profiling
4.1 For marketing purposes, Alphasport may use profiling in some cases. This involves automated data processing to assess selected factors about the User to analyze behavior or predict future actions. However, such profiling does not result in legal effects or similarly significant impacts on the User.
5. User Rights
5.1 Users may inquire about the processing of their data and obtain information specified in Art. 15 GDPR.
5.2 Users may request immediate correction or completion of any incorrect or incomplete data (Art. 16 GDPR).
5.3 Users may request the immediate deletion of their personal data under circumstances outlined in Art. 17 GDPR.
5.4 Users may request restriction of data processing in accordance with Art. 18 GDPR.
5.5 Users have the right to data portability. They can request that all their data be provided in a structured, commonly used, and machine-readable format to another data controller (Art. 20 GDPR), provided this is technically feasible.
5.6 Users have the right to object to the processing of their personal data (Art. 21 GDPR). In cases where data is processed based on Alphasport’s legitimate interests, especially when Alphasport demonstrates overriding legitimate grounds for processing, such as for establishing, pursuing, or defending legal claims, data may still be processed despite the objection.
5.7 Users may object at any time to the processing of their data for direct marketing purposes, including profiling related to such marketing activities.
5.8 Users can exercise the aforementioned rights by contacting Alphasport as specified in Section 1.3 of this Privacy Policy.
5.9 Users have the right to lodge a complaint with the President of the Office for Personal Data Protection: Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw, phone: +48 22 531 03 00, kancelaria@uodo.gov.pl, https://uodo.gov.pl/pl/p/skargi.
5.10 Users may withdraw their consent for marketing activities at any time. Deleting an account in the Online Store does not automatically mean withdrawal of consent to receive commercial information or objection to data processing.
6. Data Sharing
6.1 Personal data provided by Users to Alphasport may be shared with the following third parties:
6.1.1 entities managing IT systems (e.g., hosting providers, IT service providers),
6.1.2 entities providing marketing services,
6.1.3 entities providing delivery services for Products,
6.1.4 entities processing electronic or card payments,
6.1.5 entities providing legal, accounting, tax, or advisory services,
6.1.6 entities supporting the management of websites,
6.1.7 entities providing analytical services.
6.2 Alphasport only uses processors that provide sufficient guarantees to implement appropriate technical and organizational measures to ensure that processing complies with GDPR requirements and protects the rights of data subjects.
6.3 As a rule, Users’ personal data is not transferred outside the European Economic Area (EEA). If Alphasport decides to transfer data outside the EEA, it will only transfer data to entities ensuring an adequate level of protection.
7. Cookies
7.1 Cookies are text files sent by the server and stored on the side of the visitor’s device when accessing the Online Store. They enable the use of all functionalities of the Online Store.
7.2 Cookies are used, among other things, to recognize Users of the Online Store, remember Products added to the cart for placing orders, enhance the User’s experience, tailor displayed advertisements, and for analytical purposes.
7.3 Users can define the conditions for using cookies through browser settings. It is possible to limit or disable cookies, but such actions may affect the functionality of the Online Store.
7.4 The Online Store uses third-party cookies:
7.4.1 Google Analytics: A tool provided by Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland, used for creating statistics and analysis to improve the Online Store’s operation. More information: https://support.google.com/analytics/answer/6004245.
7.4.2 Facebook: Tools provided by Meta Platforms Ireland, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These tools are used to deliver personalized ads based on behavior in the Online Store. The Online Store also uses Facebook and Instagram Pixel for collecting browsing data. More information: https://www.facebook.com/privacy.