1. This Privacy Policy defines the principles of collecting, processing and using personal data obtained from Consumers through the UpToU Internet shop run at www.uptou.pl by UpToU Borowcy S.C., with its registered office in Opypy 05-825 Opypy at the address: ul. Piwoniowa 11, Poland.

The administrator of personal data of Consumers is UpToU Borowscy S.C., with its registered office in Opypy 05-825, at the address: ul. Piwoniowa 11, Poland.

The Administrator’s representative is Kamila Borowska. In case of any questions or intentions to execute the rights to process the personal data of Consumers, please contact us at the address: ul. Piwoniowa 11, 05 – 825 Opypy, Poland or at: biuro@uptou.pl

2. Personal data in the UpToU Internet Shop are processed by the Administrator in accordance with applicable law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

3. UpToU shall make every effort to ensure respect for privacy and protection of personal information provided when using the UpToU Internet Shop and purchasing Products and shall take all necessary measures to this end. Full access to databases is available only to persons duly authorized by the Administrator. The Administrator protects personal data against unauthorized access, as well as against processing them in violation of applicable laws.

4. Personal data in accordance with this Privacy Policy are all information about a physical person identified or identifiable by one or more specific factors, including IP device, location data, Internet identifier and information collected through cookies (Cookies Policy) and other similar technology.

5. The scope of personal data obtained by the Administrator results from the actions taken by the Consumer on the platform of the online store UpToU:

Newsletter – please provide your e-mail address

Placing an order – please provide data: name and surname or company name, stationary address and alternative shipping address (if applicable), telephone number, e-mail address, VAT number (if applicable)

Adding a comment – please provide your name and e-mail address

Providing personal data is voluntary, but it is also a condition for concluding and performing a Sales Agreement , subscribing to the Newsletter, adding comments on the UpToU store website. The consequence of not providing personal data will be the inability to conclude and perform the Sales Agreement and the implementation of services.

6. Personal data is processed for the purpose:

– enable electronic service provision and full use of the functionality of the UpToU online store, including the process of purchasing Products, i.e. concluding and performing the Sales Agreement

– creating and managing a Consumer account or accounts, and ensuring the operation of a Consumer account, transactions and solving technical problems

– providing the service of sending the Newsletter, containing the Administrator’s marketing information

– ensuring the operation of payment services

– handling complaints and notifications, which are directed to the UpToU by the Consumer (min. via the contact form);

– contact with the Consumer, including for purposes related to the provision of services

– the fulfilment of tax and accounting obligations

– analytical and statistical, consisting in conducting analyses of Consumer activity, as well as their preferences in order to improve the applied functionalities and provided services

– to enforce or secure the claims of the UpToU

– organisation of loyalty programmes, competitions and promotional campaigns in which the Consumer may participate

– registration of the Consumer’s activity and personal data in system logs. The information collected in the logs may be processed in connection with the provision of services. The Administrator processes them also for technical purposes, in particular, data may be temporarily stored and processed to ensure security and proper functioning of IT systems, e.g. in connection with making backup copies, tests of changes in IT systems, detection of irregularities or protection against fraud and attacks.

7. Personal data shall, as a rule, be stored for the period of providing a service or performing an order, until the expressed consent is withdrawn or an effective objection to data processing is made in cases where the legal basis for data processing is a legitimate interest of the Administrator. After this period, the data will be stored for the purpose of pursuing claims in connection with the performance of the Agreement, preventing fraud and abuse, fulfilling obligations arising from legal regulations, including in particular tax and accounting, statistical and archiving obligations, for a maximum period of 10 years from the date of expiry of the Agreement.

In the case of organising loyalty programmes, competitions and promotional campaigns in which the Consumer may participate – Consumer data will be processed during their duration and the settlement period for the awarding of prizes. In order to be accountable, i.e. to prove compliance with the regulations concerning the processing of personal data, the data will be stored for the period in which UpToU is obliged to keep the data or documents containing them in order to document the fulfilment of legal requirements and enable the control of their fulfilment by public authorities.

8. In connection with the implementation of services personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting, legal, auditing, consulting, courier services, entities enabling the dispatch of e-mails and adding comments on the website of the UpToU store.

In such a situation, these entities are not entitled to any use of this data. The recipient of the data may use them only for the purposes of the contract, only for the purposes established with UpToU and in accordance with the applicable law.

In addition, the personal data of the Consumer may also be made available to the relevant state authorities at their request on the basis of relevant laws, or other persons and entities – in cases provided for by law.

9. Consumer’s personal data will also be transferred to recipients based in the so-called third countries:

– Google LLC with its registered office in the USA – Google may transfer data (IP address, location) necessary to verify whether the filled in forms are not sent automatically by robots (the so-called reCAPTCHA mechanism).

Google also supports UpToU mailboxes.

– The newsletter is sent to the e-mail address using the MailChimp service, belonging to The Rocket Science Group LLC d/b/a MailChimp based in the USA or UAB MailerLite service based in Vilnius, Paupio g. 28, LT-11341.

10. We announce that the Consumer’s personal data may be profiled, especially for marketing purposes, adjusting services to his expectations and interests, improving internal processes of UpToU, ensuring safety, evaluation of interests and purchasing preferences, including offering and presenting advertisements. The Administrator may use the following categories of data for profiling: information about electronic addresses, information about used devices, information about products and services, information contained in cookies (Cookie Policy).

11. The consumer has the right to access the content of their data, obtain their copies, the right to correct, delete, limit the processing, the right to transfer data, the right to object to the processing of data on the basis of a legitimate interest of the Administrator or the processing for the purpose of direct marketing, the right to withdraw consent at any time without affecting the lawfulness of processing (if processing is based on consent), which was done on the basis of consent before its withdrawal.

The right to correct the data is exercised in relation to the Consumer who has an account in the UpToU online store also by allowing him to edit the data in the section “My account”.

In order to remove the account, a message entitled “Resignation from the account” should be sent to: biuro@uptou.pl The message must be sent from the e-mail address assigned to the account in the UpToU online store. Resignation from the account is not equal to deletion of personal data.

The consumer has the right to lodge a complaint to the body supervising the observance of personal data protection regulations, which is the Inspector General for Personal Data Protection (address: General Inspector of Personal Data Protection, ul. Stawki 2, 00-193 Warsaw).

12. The policy is constantly verified and, if necessary, updated.