Privacy Policy

Effective from: 24.06.2025

1. Personal data controller

The administrator of the personal data is:

“GRAAL” Artur Wnuk
ul. Juliusza Słowackiego 37C, 27-600 Sandomierz
NIP: 8641149964
Contact e-mail: support@sandobike.pl
Online store: https://www.sandobike.pl

The Administrator shall make every effort to ensure an adequate level of protection of personal data in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 (RODO).

2. Purposes and legal basis for data processing

  • Order processing, payment processing and delivery – Article 6(1)(b) of the RODO,
  • Issuance of invoices and fulfillment of tax obligations – Article 6(1)(c) of the DPA,
  • Maintenance of a customer account – Article 6(1)(b) of the DPA,
  • Communication via contact form or email – Article 6(1)(f) RODO (legitimate interest of the administrator),
  • Direct marketing, including sending commercial information (SMS, e-mail) – Article 6(1)(a) or (f) RODO,
  • Website traffic analysis (Google Analytics) – Article 6(1)(f) RODO (legitimate interest of the administrator),
  • Logging in via Google account – Article 6(1)(a) RODO (user consent).

3 Scope of data processed

The following data may be processed as part of your use of the site:

  • Name,
  • delivery address,
  • email address,
  • phone number,
  • invoice data (company name, tax ID),
  • login data (login, Google ID),
  • order and payment history,
  • IP address and website activity data (Google Analytics).

4. Data recipients

Personal data may be shared with entities cooperating with the Administrator only to the extent necessary to achieve the purposes of processing:

  • WooCommerce – an e-commerce platform,
  • SMSAPI – sending SMS notifications,
  • Google Analytics / Google LLC – analysis of traffic and user behavior,
  • Fakturownia.pl – issuance of accounting documents,
  • eService Sp. z o.o. – online payment processing,
  • Courier and postal service providers – delivery performance,
  • Google – external login (Google account).

All entities process data under appropriate data entrustment agreements or act as independent controllers.

5. Data storage time

  • For the time necessary for the execution of the contract and the period resulting from tax and accounting regulations,
  • Marketing data – until you withdraw your consent or object,
  • Data related to the customer account – until it is deleted.

6. Rights of the data subject

  • The right to access your data,
  • Right to rectify data,
  • The right to erasure of data (“right to be forgotten”),
  • The right to restrict processing,
  • Right to data portability,
  • The right to object to processing,
  • The right to withdraw consent at any time (if processing is based on it),
  • The right to file a complaint with the President of the DPA.

7. Cookies and analytical tools

The website uses cookies, including third-party cookies (Google Analytics), to improve store operations, analyze traffic and conduct marketing activities.

Users can manage their cookie settings through their web browser.

8. Voluntariness of providing data

Provision of personal data is voluntary, but failure to do so may prevent you from placing an order, using the contact form or other features of the store.

9. Safeguards

The controller shall apply technical and organizational measures to ensure the protection of the processed personal data appropriate to the risks and categories of data.

If you have any questions about the processing of your personal data , please contact us at: support@sandobike.pl.