Privacy policy
1. General information
The Privacy Policy of the Online Shop does not constitute a source of obligations for a natural person browsing the resources of the Online Shop (hereinafter: Visitor) or a Customer of the Online Shop. It is informational in nature and is neither an agreement nor a set of regulations.
All expressions and words written with a capital letter (e.g. Online Shop, Customer, etc.) should be understood in accordance with the content of the Online Shop's Terms and Conditions.
In the event of any discrepancies between this Privacy Policy and the consents to the processing of personal data granted by a natural person, the legal basis for determining the scope of the Administrator's activities shall be the voluntarily given consents or the provisions of law applicable to the given factual situation.
2. Personal data controller
The controller of your personal data is MyBasic Sp. z o.o. with its registered office in Izabelin B at ul. Rzędziana 11, 05-080 Izabelin B, registered with the District Court for the Capital City of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number: 0000776465, NIP: 1182190916, REGON: 382808588, BDO: 000540511 (hereinafter: Administrator).
For any matters related to personal data protection, we encourage you to contact us at the address indicated above or via email: [email protected].
You may also send a request to the above address to obtain information about what personal data concerning you we hold and for what purposes we process it.
The Administrator informs that it stores correspondence for statistical purposes and to improve the support system in the field of GDPR, as well as in the scope of complaint resolutions and decisions made based on reports regarding possible administrative interventions in the indicated Customer Account. Addresses and data collected in this way will not be used for communication purposes other than handling the given request, in particular they will not be used for marketing purposes or transferred to third parties.
In the case of contact with the Administrator to carry out specific actions (e.g. submitting a complaint, making a return), the Administrator may again ask a given person to provide data, including personal data, e.g. in the form of first name, surname, address of residence, email address, in order to confirm their identity and enable a return contact regarding the matter as well as to carry out the requested action. Providing this data is not obligatory, but may be necessary to carry out the action or obtain the information the person is interested in.
If you have given additional consent to our use of cookies, the controllers of data obtained on the basis of your online activity may also include our trusted partners.
3. Data collection and purpose of processing
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR) and other currently applicable data protection laws in force at the time of processing specific data.
In accordance with the content of the indicated legal acts, personal data is considered to be information about an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
We ensure that the data obtained from you is confidential, secure and processed only when necessary or when we have appropriate consent to do so. We process data in accordance with the law, in a fair and transparent manner towards the data subject. We process only such data, and only content thereof, that is necessary due to a legally justified purpose, i.e. the reason for processing. Personal data is collected with due diligence and appropriately protected against access by unauthorised persons. We apply appropriate and adequate security measures and technical know-how to protect personal data against accidental loss and unauthorised access, use, alteration or disclosure. We store personal data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed.
The Administrator obtains information about personal data in the following ways:
by making a purchase in the Shop (online shop) by the Customer;
by registering a Customer Account;
by voluntarily subscribing to the newsletter service;
by voluntarily providing information in an email message or in the chat;
by submitting a complaint, request, enquiry or letter of another nature;
by voluntarily providing information in an email message sent in connection with a wish to establish cooperation;
by posting a review of a product;
by voluntarily sending a message via the contact form;
by cookies, pixels or similar internet technologies.
We inform you that the purpose and scope of the data processed by the Administrator results from the consent of the Website Visitor or Customer, or from legal provisions, and in selected cases is specified in more detail as a result of actions taken by these persons in the Online Shop or within other communication channels.
Providing personal data by the Visitor or Customer of the Online Shop is voluntary, but necessary in order to use specific functionalities of the Online Shop (e.g. placing an Order by the Customer and settling it, registering a Customer Account or using contact forms).
The scope of data required to conclude the relevant agreement is indicated in advance in the Online Shop (we mark the data that is necessary to conclude the agreement/use a given functionality), within other communication channels with the Visitor or Customer, or in the Terms and Conditions. The consequence of not providing personal data may be the inability to effectively use the functionality of the Website, e.g. the inability to place an order.
Your personal data is obtained by the Administrator for the following purposes:
Processing purpose Legal basis Legitimate interest, if applicable Keeping statistics Art. 6(1)(f) GDPR. Having information about statistics of our activities, which allows us to improve our business operations. Conducting marketing activities for our own products and services without using electronic communication means Art. 6(1)(f) GDPR. Conducting marketing activities promoting the business. Conducting marketing activities for our own products and services using electronic communication means, including profiling Art. 6(1)(f) GDPR, whereby, due to other applicable provisions, in particular the Telecommunications Law and the Act on the Provision of Electronic Services, these activities are carried out only on the basis of consents held (Art. 6(1)(a) GDPR). Conducting marketing activities promoting the business using email addresses. Presenting advertisements, tailoring discounts and promotions. Posting reviews in the Online Shop Art. 6(1)(a) GDPR. Researching satisfaction with products. Handling requests submitted via the contact form, email messages, complaints, other applications Art. 6(1)(a) GDPR; Art. 6(1)(c) GDPR. Responding to reports and enquiries submitted via chat or in another form, including storing sensitive requests and responses provided in order to maintain the principle of accountability. Handling requests, responding to consumer complaints. Pursuing claims, including against third parties, and defending against them. Managing the Customer Account Art. 6(1)(a) GDPR. Conclusion and performance of the Service Agreement (Account) or taking action at the request of a prospective Customer prior to its conclusion. Conclusion and performance of the Sales Agreement Art. 6(1)(b) GDPR. Conclusion and performance of the Sales Agreement or taking action at the request of a prospective Customer prior to its conclusion. Archiving sales documents Art. 6(1)(c) GDPR. Fulfilment of legal obligations arising from regulations, e.g. tax and accounting regulations, especially in the case of paid agreements. In the case of an adult Customer or an adult Website Visitor, subject to their additional consent, personal data may also be processed for the purpose of presenting, creating, granting and delivering advertisements, offers or promotions (discounts) dedicated to a given Customer, concerning products or services of the Administrator and its partners, adapted as closely as possible to their preferences (profiling), as a result of automated decision-making, which may produce legal effects concerning them or similarly significantly affect them, e.g. through a short-term discount dedicated exclusively to such a person on a specific product they recently viewed in our Online Shop (this option is not available to persons who are not of legal age or are of legal age but have not consented to such an action).
Newsletter. If you would like to subscribe to our newsletter, you must provide us with your email address or phone number via the newsletter subscription form. Providing the data is voluntary but necessary to use the newsletter service. Subscribing to the newsletter is also possible at the stage of creating a Customer Account or while placing an Order. The data provided to us when subscribing to the newsletter is used to send you the newsletter, in which we inform you about the company's activities, current collection, promotions and discounts. The legal basis for processing in this situation is your voluntary consent given when subscribing to the newsletter. In this case, your data is processed for the purpose of the regular sending of the newsletter, and the basis for processing is Art. 6(1)(a) GDPR, i.e. your consent resulting from your wish to receive the service. The data will be processed for as long as the newsletter operates, unless you unsubscribe earlier, which will result in the permanent deletion of your data from the database. In addition, you may at any time correct your data stored in the newsletter database, as well as request its deletion by unsubscribing from the newsletter. You also have the right to data portability under Art. 20 GDPR. The newsletter database is appropriately secured by the Administrator. The newsletter, as a database, is operated by an external entity. The emails sent contain links to hidden images (so-called tracking pixel). Apart from its basic function of counting email openings, it is also optionally used to identify the Customer and carry out marketing activities.
Email contact. By contacting us via email, you provide us with your email address as the sender's address. In addition, you may include other personal data in the content of the message. Providing the data is voluntary but necessary to establish contact with us. In this case, your data is processed for the purpose of contacting you, and the basis for processing is Art. 6(1)(a) GDPR, i.e. your consent resulting from your wish to contact us. The legal basis for processing after the contact has ended is a justified purpose in the form of archiving correspondence for internal purposes (Art. 6(1)(c) GDPR). The content of correspondence may be subject to archiving, and we are not able to clearly determine when it will be deleted, however this will be no longer than 5 years. You have the right to request a summary of the correspondence you have had with us (if it has been archived), as well as to request its deletion, unless its archiving is justified due to our overriding interests.
Reviews. If you want to add your review of a product or our post, please fill in the form. In this case, your data is processed to enable the posting of reviews, and the basis for processing is Art. 6(1)(a) GDPR, i.e. your consent resulting from your wish to post your entry on our website. The data will be processed for as long as the review functions on the website, unless you request its deletion earlier, which will result in the deletion of your data related to the review from the database. You may correct your data in the review at any time, as well as request its deletion. You also have the right to data portability under Art. 20 GDPR.
Customer Account. By creating a Customer Account on our Website, you provide us with your email address, first name and surname. This is voluntary but necessary to successfully register a Customer Account. Subsequently, in the Customer Panel, you may also provide address details and, e.g., a tax identification number. In this case, your data is processed for the purpose of maintaining the Customer Account, and the basis for processing is Art. 6(1)(b) GDPR, i.e. the necessity of processing personal data in connection with the necessity to perform the agreement for the provision of the Customer Account service in our shop. The data will be processed for as long as you hold the Customer Account, unless you request its deletion earlier, which will result in the deletion of your data from the database. You may correct your data assigned to the Customer Account at any time, as well as request its deletion. You also have the right to data portability under Art. 20 GDPR. As part of creating a Customer Account, you may – but do not have to – consent to subscribing to the newsletter service.
4. Categories of personal data
The personal data controller may process the following categories of personal data:
personal data provided in the form when registering a Customer Account, placing Orders in the Online Shop, in particular: email address, first name and surname, phone number;
personal data supplemented by the user while using the Customer Account, in particular: first name and surname; email address; residential address [street, house number, flat number, postcode, city, country], and in the case of Customers who are not consumers, additionally the company name and tax identification number [NIP];
personal data necessary to place an order, in particular: first name and surname; email address; contact phone number; residential address [street, house number, flat number, postcode, city, country], and in the case of Customers who are not consumers, additionally the company name and tax identification number [NIP];
personal data provided in order to use the newsletter, provided while using the chat, posting reviews and sent via email or the contact form; or provided when submitting complaints, grievances or requests, in particular: first name and surname; email address; contact phone number; address [street, house number, flat number, postcode, city, country], bank account number;
personal data provided in order to participate in competitions/promotional campaigns: first name and surname; email address; contact phone number; residential address [street, house number, flat number, postcode, city, country];
other data, in particular obtained on the basis of the Customer's online activity, including obtained via the Online Shop or other communication channels with the Customer, using cookies and similar technologies.
5. Recipients of personal data
Your personal data may be processed by our partners and subcontractors, i.e. entities whose services we use in processing data and providing services to you. To our knowledge, all entities to whom we entrust the processing of personal data guarantee the application of appropriate personal data protection and security measures required by law.
The Administrator may transfer your personal data to:
state authorities or other entities authorised under the law, in order to fulfil the obligations incumbent on us;
partners of the Administrator may take part, to a limited extent, in the processing of personal data, in particular those who technically help us to run the Online Shop smoothly (e.g. support us in sending emails, and in the case of advertising activities – also in marketing campaigns), hosting or ICT service providers, carriers or intermediaries delivering Order shipments, entities handling electronic payments or card payments in the Online Shop, companies that service software, support the Administrator in marketing campaigns, as well as providers of legal and advisory services and external accounting;
furthermore, we may share fully anonymised data (data that cannot identify you) with entities with whom we cooperate.
As part of its marketing (advertising) activities, the Administrator uses the services of third parties who apply cookies, pixels or marketing functions similar to cookies within the Online Shop. The list of these entities is set out in detail in §8 of this Policy.
6. Archiving of personal data
The Administrator will store your personal data only for as long as is necessary for the purposes set out in this Privacy Policy and/or to comply with legal and regulatory requirements. After this period, the Administrator will safely delete your personal data.
We store data for the periods indicated below:
Data related to the sales procedure. 8 years Data for marketing purposes. Where data is processed on the basis of consent – until it is withdrawn. Where data is processed on the basis of a legitimate interest – until an objection is raised. Data transmitted via chat, email. For a period of 3 years in order to maintain the principle of accountability. Data contained in reviews. Where data is processed on the basis of consent – until it is withdrawn. Where data is processed on the basis of a legitimate interest – until an objection is raised. Personal data related to cookies and similar functions. Until these files are deleted using website / browser / device settings (although deleting the files is not always the same as deleting the personal data obtained via these files – in that case, the personal data will be deleted until an objection is raised). Data provided during the complaint procedure and other procedures related to Customer claims. 6 years Remaining category of data (except for data from cookies, more on which can be found in our Cookie Policy). 5 years In any case, personal data will also be stored when legal provisions (e.g. accounting or tax regulations) require the Administrator to process it; we will store personal data for longer in case the Customer has any claims against the Administrator, in order to pursue claims by the Administrator, or in order to pursue or defend against claims by third parties, for the period of their limitation set out by law, in particular the Civil Code.
Depending on the scope of personal data and the purposes of its processing, it may therefore be stored for different periods. In each case, the longer storage period for personal data shall apply.
7. Rights, obtaining access to and updating personal data, complaints
Pursuant to Art. 15 GDPR, you have the right to obtain from the Administrator information as to whether your personal data is being processed.
If the Administrator processes your personal data, you have the right to:
access your personal data;
obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of that data, the envisaged period for which your data will be stored or the criteria used to determine that period, the rights available to you under the GDPR and the right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;
obtain a copy of your personal data.
In addition, you may request the rectification of personal data (Art. 16 GDPR), the erasure of personal data (Art. 17 GDPR), object to the processing of personal data (Art. 21 GDPR) and, to the extent technically feasible, request that the shared personal data be transferred to another organisation (Art. 20 GDPR).
In connection with the right to be forgotten, the Administrator will update or delete your data, unless it is under a legal obligation to retain it for business or legal compliance purposes. In some cases, you have the right to request restriction of the processing of personal data (Art. 18 GDPR). You may also contact the Administrator if you have any reservations regarding the manner of collecting, storing or using personal data.
The Administrator endeavours to promptly handle all requests concerning the above-mentioned operations on your personal data, no later, however, than within 30 days of receipt of the request. Due to the complex nature of the request, the Administrator has the right to handle your request within a period exceeding 30 days, of which it will inform the User in advance.
The Administrator strives to resolve complaints conclusively, but if you remain dissatisfied with the response received, you may lodge a complaint with the supervisory authority responsible for personal data protection or the local data protection authority. In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office.
8. Automated processing of personal data, cookie policy
Our Website, like almost all other websites, uses cookies. The Cookie Policy applies both to Customers of the Online Shop and Visitors to the Online Shop, i.e. users who browse the content of the Shop but do not make purchases.
The Cookie Policy is a document that constitutes an integral part of this Privacy Policy. The content of the Cookie Policy can be found here.
The Website also uses functionalities similar to cookies. Accordingly, the individual provisions of the Cookie Policy should also be applied to these technologies where relevant.
Selected cookies process your personal data. The processing of personal data derived from cookies or similar technologies on our Website takes place for the purposes of ensuring the Website's functioning, tailoring the Website to the preferences of the Visitor and Customer, or for analytical purposes. The processing takes place on the basis of our legitimate interest. The legal basis for processing personal data for advertising purposes will be your additional consent, expressed by making a choice and ticking the checkbox during the cookie consent process.
When a Visitor uses the Online Shop, cookies are used that enable the identification of their browser or device – cookies collect various types of information, which generally does not constitute personal data. However, some information, depending on its content and how it is used, may be linked to a specific person – assigning certain behaviours to a specific Visitor or Customer, e.g. by linking them to the data provided when registering an Account in the Online Shop, or to a specific email address – and thus be considered personal data.
With regard to information collected by cookies that may be linked to a specific person, the provisions of the Online Shop's Privacy Policy relating to personal data apply, in particular those concerning the rights of the data subject.
The Website uses profiling. Thanks to the cookies used in the Online Shop, the Administrator is able to learn about the preferences of the Visitor/Customer – e.g. by analysing how often they visit the Online Shop and whether and which products they buy. Analysing online behaviour helps us better understand the habits and expectations of Customers and Visitors and adapt to their needs and interests. This technology makes it possible to present Visitors with advertisements tailored to their needs and interests and to prepare better promotions and surprises for adult Visitors who have consented to this.
9. Changes to the privacy policy
These rules of the Privacy Policy 3.0 have been in effect since 7 October 2024.
The Administrator declares that it has the right to amend this document for important reasons, including:
changes to applicable legal provisions, in particular in the field of the GDPR, telecommunications law, electronic services and consumer rights regulations, affecting the rights and obligations of the Administrator or the rights and obligations of the data subject;
development of functionalities or electronic services caused by advances in internet technology, including the implementation of new IT, technological or technical solutions on the Website, affecting the scope of this Privacy Policy.
The Administrator undertakes to inform Users of any changes with sufficient advance notice to allow them to familiarise themselves with the content of the amended document, e.g. by publishing the consolidated text of the Privacy Policy on the main page of the Online Service.
In the case of users using the newsletter function, if the Administrator makes significant changes to the content of the Privacy Policy, it will inform Users of them by email. In the event of any objections to the change in the Policy, the User has the right to stop using the newsletter by sending a request to unsubscribe from the newsletter or by requesting the deletion of their personal data.
Privacy Policy version 3.0 has been in effect since 7 October 2024.
Privacy Policy version 2.0 was in effect from 5 August 2024 to 6 October 2024. You can find it here.
Privacy Policy version 1.0 was in effect from 1 April 2019 to 4 August 2024. You can find it here.