Privacy Policy

DATA CONTROLLER

The data administrator is Entire M sp. z o.o. with its registered office in Wrocław at Radomska 34, 54-032 Wrocław, entered into the register of entrepreneurs kept by the District Court for Wrocław Fabryczna in Wrocław, VI Commercial Department of the National Court Register under KRS number 0000410970, NIP: 8943037908, REGON: 021820847, share capital 100,000.00, being the owner of the eu.directactiongear.com store, hereinafter referred to as the "Administrator".

CONTACT DETAILS OF THE ADMINISTRATOR

The Administrator has appointed a Data Protection Officer - Mateusz Heinrich, whom you can contact in all matters related to the processing of personal data, using the e-mail address - by sending an e-mail to the following address: iod@entirem.com, or in the form of traditional correspondence addressed to: Zachodnia 9, Błonie 55-330 Miękinia.

In matters concerning personal data, you can contact the Administrator at: Zachodnia 9, Błonie 55-330 Miękinia. You can also write us an e-mail to: ado@entirem.com.

PURPOSES OF PERSONAL DATA PROCESSING AND BASIS FOR DATA PROCESSING

Your personal data, including name, surname, address, email, are processed for the following purposes and on the following grounds:

1. Sending requests for an opinion – based on your consent – Article 6(1)(a) of the GDPR,
2. In order to take steps at the request of the data subject prior to entering into a contract, including inquiries about the availability of individual products – Article 6(1)(b) of the GDPR,
3. Execution of orders placed by you, including consideration of possible complaints or proceeding with withdrawals from the contract (returns) – Article 6(1)(b) of the GDPR,
4. Maintain Accounts in which you can check the history of your orders and the status of current orders – Article 6(1)(b) of the GDPR,
5. Implementation of legal requirements in the field of tax and accounting regulations, in particular specified by the provisions of the Act of 11 March 2004 on the tax on goods and services (VAT), the Act of 15 February 1992 on corporate income tax and the Act of 29 September 1994 on accounting - Article 6 paragraph 1 letter c of the GDPR,
6. Direct marketing of the Administrator's services, including sending the newsletter and running social media of the DirectAction® brand – Article 6 paragraph 1 letter f) of the GDPR,
7. Possible determination or pursuit of claims or defense against claims - the legal basis for processing is the legitimate interest of the Administrator - Article 6 paragraph 1 letter f) of the GDPR; the legitimate interest consists in enabling the Administrator to investigate or defend against claims.

PERIOD OF DATA PROCESSING

Due to the specificity of our business, including the type of products offered and your rights (complaints), and the obligations imposed on the Administrator as a business entity, including tax law, your data will be stored and processed, as a rule, for the duration of conducting service or order or accounting or until the consent is withdrawn or an effective objection to data processing is raised in cases in which the legal basis for data processing is the legitimate interest of the Administrator.

The time of data processing may be extended if the processing is necessary to establish, pursue or defend against possible claims, and after that time only in the case and to the extent required by law. After the end of the processing period, the data is irreversibly deleted or anonymized.

YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA

You have the right at any time to:

1. withdraw your consent (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal)
2. Request access to your personal data,
3. Rectify, delete, or restrict processing,
4. Object to the processing, and,
5. Data portability,
6. Lodge a complaint with the supervisory authority.

If you have an account in our online store, you can update your data by logging in to your account and making appropriate changes to it. Providing personal data is voluntary, but necessary to fulfill orders and conduct services. At the stage of placing orders, your data is processed by the entities through which the payment is made, and at the delivery stage – by the companies through which the delivery is made.

DATA RECIPIENTS

The recipients of your personal data are entities to which the Administrator commissions the performance of activities involving the need to process personal data, in particular in the scope of obtaining opinions about the Administrator's activities and products, handling your inquiries, marketing, courier services, payment handling, ICT services, hosting, IT, analytical services, administrative services, legal or advisory services. The recipients of your personal data may also be entities and bodies authorized to receive your data, but only in justified cases and on the basis of generally applicable law.

The administrator may transfer personal data to third countries, i.e. countries located outside the European Economic Area. Your data may only be transferred to third countries or entities in relation to which an adequate level of data protection has been established by the decision of the European Commission. The list of countries for which the European Commission has issued a decision confirming that a third country provides an adequate level of protection can be found at this link.

The United States, as a third country, is currently recognized by the European Commission as a country ensuring an adequate level of protection of personal data provided by the so-called "EU-US Data Privacy Framework". Entities that have joined the EU-US Data Protection Framework ensure an adequate level of personal data protection by applying compliance mechanisms provided for by the GDPR. The list of entities participating in the program can be found at this link.

In the absence of an adequacy decision of the European Commission as set out in Article 45(3) of the GDPR, your personal data may only be transferred to a third country on the basis of: binding corporate rules, standard data protection clauses adopted by the European Commission, standard data protection clauses adopted by Polish supervisory authority and approved by the Commission, an approved code of conduct or an approved mechanism certification (Article 46 of the GDPR).

In the absence of an adequacy decision of the European Commission as defined in Article 45(3) of the GDPR, or in the absence of appropriate safeguards as set out in Article 46 of the GDPR, including binding corporate rules, we will ask you for your explicit consent to such transfer to a third country or an international organisation, informing you of the previous risks associated with such a transfer pursuant to Article 49(1)(a) of the GDPR.

In connection with the transfer of data outside the EEA, you can request information about the safeguards applied in this respect, obtain a copy of these safeguards or information about the place where they are made available by contacting us at the address indicated above.

COOKIES

The website of the eu.directactiongear.com store uses cookies to, among other things, monitor website traffic, for analytical purposes, and prepare product recommendations for you.

In addition, we advertise our products to you using Google Ads and Facebook Ads. For these purposes, the eu.directactiongear.com website collects information about the products viewed, what is added to the basket, product prices, and information about the order placed and its final price. As part of the above activities, no identification data of the customer such as name or surname is transmitted directly, only the ID number of the products / orders.

We use the following cookies on the eu.directactiongear.com website:

Consent to the use of cookies may be expressed by appropriate configuration of the browser or selection of appropriate settings directly in the pop-up, which appears on the website, and may also be withdrawn at any time, in particular by clearing the history of cookies and disabling cookies in the browser settings or by clicking on "Privacy settings" available in the footer of the page and withdrawing consent in the appropriate window (pop-up).

More detailed information about the cookies used is available in the footer of the page in the "Privacy settings" tab.

SOCIAL MEDIA

The DirectAction® brand has its own social media accounts (Facebook, Instagram, Twitter, YouTube), which we hope you already follow. If so, we kindly inform you that your data is processed by the Administrator in order to maintain those social media accounts, including for the purpose of informing you about brand activities and promoting various types of events, services and products, as well as for communication with you through functionalities available in social media and for analytical purposes. The legal basis for the processing of personal data by the Administrator for these purposes is his legitimate interest (Article 6 (1) (f) of the GDPR) consisting in promoting his own brand and building and maintaining a community related to the brand.