Privacy Policy
PRIVACY POLICY
1. This Privacy Policy sets forth the rules for processing personal data collected through the online store rk-tronik.pl (hereinafter referred to as the “Online Store”).
2. The owner of the Store and, at the same time, the data controller is Konrad Ratajczyk, conducting business under the name RK-TRONIK KONRAD RATAJCZYK, with its registered office in Czermin (39-304), Czermin 163/2a, registered in the Central Register and Information on Economic Activity maintained by the Minister of Development and Technology, Tax Identification Number (NIP): 8291723456, REGON: 381572592, hereinafter referred to as RK-TRONIK.
3. Personal data collected by RK-TRONIK through the Online Store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as the GDPR.
4. RK-TRONIK takes special care to respect the privacy of Customers visiting the Online Store.
§ 1 Type of Data Processed, Purposes, and Legal Basis
1. RK-TRONIK collects information regarding natural persons performing legal acts not directly related to their business activities, natural persons conducting business or professional activities on their own behalf, and natural persons representing legal entities or organizational units that are not legal entities but are granted legal capacity by law, hereinafter collectively referred to as “Customers.”
2. Customers’ personal data is collected in the following cases:
a) registering an account in the Online Store, for the purpose of creating and managing an individual account. Legal basis: necessity for the performance of the contract for the provision of the Account service (Article 6(1)(b) of the GDPR);
b) placing an order in the Online Store, for the purpose of performing the sales contract. Legal basis: necessity for the performance of the sales contract (Article 6(1)(b) of the GDPR);
c) subscribing to the newsletter, for the purpose of performing a contract for the provision of an electronic service. Legal basis: consent of the data subject to the performance of the contract for the provision of the newsletter service (Article 6(1)(a) of the GDPR);
d) use of the product availability notification service, for the purpose of performing a contract for the provision of an electronic service. Legal basis: necessity for the performance of the contract for the provision of the product availability notification service (Article 6(1)(b) of the GDPR).
e) using the contact form service in the Online Store for the purpose of performing a contract provided electronically. Legal basis: necessity for the performance of the contract for the provision of the contact form service (Article 6(1)(b) of the GDPR);
f) using the “Leave a Review” service to perform a contract for the provision of an electronically delivered service. Legal basis: necessary for the performance of the contract for the provision of the “Leave a Review” service (Article 6(1)(b) of the GDPR).
3. When registering an account in the Online Store, the Customer provides:
a) an email address;
b) first and last name.
4. When registering an account in the Online Store, the Customer independently sets a personal password to access their account. The Customer may change the password at a later time, in accordance with the rules described in §5.
5. When placing an order in the Online Store, the Customer provides the following information:
a) email address;
b) shipping address:
a. ZIP code and city;
b. country;
c. street and house/apartment number;
c) first and last name;
d) phone number.
6. For business entities, the above scope of data is further expanded to include:
a) the business name;
b) tax identification number (NIP).
7. When using the contact form, the Customer provides only their email address.
8. When using the newsletter service, the Customer provides only their email address.
9. When using the “Notify Me When Available” service, the Customer provides only their email address.
10. When using the “Post a Review” service, the Customer provides only their username, nickname, or first name.
11. While using the Store’s Website, additional information may be collected, including, in particular: the IP address assigned to the Customer’s computer or the external IP address of the Internet service provider, domain name, browser type, access time, and operating system type.
12. Navigation data may also be collected from Customers, including information about links and hyperlinks they choose to click on or other actions taken on the Online Store. Legal basis—legitimate interest (Article 6(1)(f) of the GDPR), consisting of facilitating the use of services provided electronically and improving the functionality of those services.
13. For the purpose of establishing, pursuing, and enforcing claims, certain personal data provided by the Customer while using the Online Store’s features may be processed, such as: first name, last name, data regarding the use of services (if the claims arise from the manner in which the Customer uses the services), and other data necessary to prove the existence of a claim, including the extent of the damage incurred. Legal basis—legitimate interest (Article 6(1)(f) of the GDPR), consisting of the establishment, investigation, and enforcement of claims, as well as the defense against claims in proceedings before courts and other state authorities.
14. The provision of personal data to RK-TRONIK is voluntary, in connection with sales contracts or the provision of services via the Store’s Website, with the proviso, however, that failure to provide the data specified in the forms during the Registration process prevents Registration and the creation of a Customer Account, and in the case of placing an order without registering a Customer Account, prevents the placement and fulfillment of the Customer’s order.
§ 2 To whom is the data disclosed or entrusted, and how long is it stored?
1. The Customer’s personal data is transferred to service providers used by RK-TRONIK in the operation of the Online Store. The service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either follow RK-TRONIK’s instructions regarding the purposes and methods of processing such data (processors), or they independently determine the purposes and means of processing such data (data controllers).
a) Data processors. RK-TRONIK uses service providers who process personal data exclusively on the instructions of RK-TRONIK. These include, among others, providers of hosting services, accounting services, marketing systems, systems for analyzing traffic in the Online Store, and systems for analyzing the effectiveness of marketing campaigns;
b) Controllers. RK-TRONIK uses service providers who do not act solely on RK-TRONIK’s instructions and who themselves determine the purposes and means of using Customers’ personal data. They provide electronic payment and banking services.
2. Location. Service providers are based in Poland and in other countries of the European Economic Area (EEA).
3. Customers’ personal data is stored:
a) If the basis for processing personal data is consent, then the Customer’s personal data is processed by RK-TRONIK until such consent is revoked, and after revocation, for a period corresponding to the statute of limitations for claims that RK-TRONIK may assert and that may be asserted against it. Unless otherwise provided by a specific provision, the statute of limitations is six years, and for claims for periodic payments and claims related to the conduct of business activities—three years.
b) If the basis for data processing is the performance of a contract, then the Customer’s personal data is processed by RK-TRONIK for as long as necessary to perform the contract, and thereafter for a period corresponding to the statute of limitations for claims. Unless otherwise provided by a specific provision, the statute of limitations is six years, and for claims regarding periodic benefits and claims related to the conduct of business—three years.
4. When making a purchase in the Online Store, personal data may be transferred, depending on the Customer’s choice, to the following entities for the purpose of delivering the ordered goods:
a) a courier company;
b) InPost Paczkomaty Sp. z o.o., with its registered office in Kraków, which provides delivery services and operates a network of parcel lockers (Paczkomaty);
c) Poczta Polska S.A., with its registered office in Warsaw.
5. Browsing data may be used to provide Customers with better service, analyze statistical data, and tailor the Online Store to Customer preferences, as well as to administer the Online Store.
6. If a Customer chooses to pay via the InPost Pay system, their personal data is transferred to the extent necessary to process the payment to InPost sp. z o.o., with its registered office in Kraków (30-727), at ul. Pana Tadeusza 4, entered in the Register of Entrepreneurs maintained by the District Court for Kraków–Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number 0000543759, Tax ID (NIP): 6793108059 and Statistical Identification Number (REGON): 360781085.
7. If the Customer chooses to pay via the paypo.pl system, their personal data is transferred to the extent necessary to process the payment to PayPo Sp. z o.o., with its registered office in Warsaw (37 Domaniewska St., 02-672 Warsaw), entered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under KRS No. 0000575158, Tax ID (NIP): 5213705997, REGON 362485126.
8. If the Customer chooses to pay via the Paynow system, their personal data is transferred to mBank S.A., with its registered office in Warsaw (00-950 Warsaw, 18 Senatorska St.), entered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000025237.
9. If the Customer subscribes to the newsletter via their email address, RK-TRONIK will send electronic messages containing commercial information about promotions and new products available in the Online Store.
10. Upon receiving a request, RK-TRONIK will disclose personal data to authorized state authorities, in particular to organizational units of the Public Prosecutor’s Office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.
§ 3 Cookies and IP Addresses
1. The Online Store uses small files called cookies. These are stored by RK-TRONIK on the end device of a person visiting the Online Store, provided the web browser allows it. A cookie typically contains the name of the domain from which it originates, its “expiration time,” and a unique, randomly generated number that identifies the file. The information collected through these files helps tailor the products offered by RK-TRONIK to the individual preferences and actual needs of visitors to the Online Store. They also enable the compilation of general statistics on visits to products featured in the Online Store.
2. RK-TRONIK uses two types of cookies:
a) Session cookies: Once the browser session ends or the computer is turned off, the stored information is deleted from the device’s memory. The mechanism of session cookies does not allow for the collection of any personal data or confidential information from customers’ computers.
b) Persistent cookies: These are stored in the memory of the Customer’s device and remain there until they are deleted or expire. The mechanism of persistent cookies does not allow for the collection of any personal data or confidential information from Customers’ computers.
3. RK-TRONIK uses first-party cookies for the following purposes:
a) authenticate the Customer in the Online Store and maintain the Customer’s session in the Online Store (after logging in), so that the Customer does not have to re-enter their username and password on every subpage of the Online Store;
b) conducting analyses, research, and audience audits, and in particular to generate anonymous statistics that help us understand how Customers use the Online Store’s Website, thereby enabling us to improve its structure and content.
4. RK-TRONIK uses third-party cookies for the following purposes:
a) collect general and anonymous statistical data via Google Analytics (third-party cookie controller: Google LLC, headquartered in the U.S.);
b) display the “Rzetelny Regulamin” Certificate via the rzetelnyregulamin.pl website (third-party cookie controller: Rzetelna Grupa sp. z o.o., headquartered in Warsaw).
5. The use of cookies is safe for the computers of the Online Store’s customers. In particular, it is not possible for viruses, other unwanted software, or malware to enter customers’ computers through this method. However, customers can restrict or disable cookies in their browsers. If this option is selected, the Online Store will remain accessible, except for features that inherently require cookies.
6. Below, we explain how to change the cookie settings in popular web browsers:
a) Chrome and Chrome Mobile;
b) Facebook in-app browser;
c) Internet Explorer;
d) Microsoft Edge;
e) Mozilla Firefox;
f) Opera;
g) Safari and Safari Mobile;
h) Samsung Browser.
7. RK-TRONIK may collect Customers’ IP addresses. An IP address is a number assigned to a visitor’s computer by an Internet service provider when accessing the Online Store. An IP address enables access to the Internet. In most cases, it is assigned to a computer dynamically, meaning it changes with each Internet connection. RK-TRONIK uses IP addresses to diagnose technical problems with the server, generate statistical analyses (e.g., to determine which regions account for the most visits), as information useful for administering and improving the Online Store, as well as for security purposes and the potential identification of unwanted automated programs that overload the server while browsing the Online Store’s content.
8. The Online Store contains links and references to other websites. RK-TRONIK is not responsible for the privacy policies in effect on those sites.
§ 4 Rights of Data Subjects
1. Right to withdraw consent—legal basis: Article 7(3) of the GDPR.
a) The customer has the right to withdraw any consent granted to RK-TRONIK.
b) The withdrawal of consent takes effect from the moment the consent is withdrawn.
c) Withdrawal of consent does not affect processing carried out by RK-TRONIK in accordance with the law prior to such withdrawal.
d) Withdrawal of consent does not entail any negative consequences for the Customer; however, it may prevent the Customer from continuing to use services or features that RK-TRONIK is legally permitted to provide only with the Customer’s consent.
2. Right to object to data processing—legal basis: Article 21 of the GDPR.
a) The Customer has the right at any time to object—for reasons related to their specific situation—to the processing of their personal data, including profiling, if RK-TRONIK processes their data based on a legitimate interest, such as marketing RK-TRONIK’s products and services, compiling statistics on the use of specific features of the Online Store, facilitating the use of the Online Store, and conducting satisfaction surveys.
b) Opting out via email of receiving marketing communications regarding products or services shall constitute the Customer’s objection to the processing of their personal data, including profiling, for these purposes.
c) If the Customer’s objection is deemed valid and K-TRONIK has no other legal basis for processing personal data, the Customer’s personal data to which the Customer objected will be deleted.
3. Right to erasure (“right to be forgotten”)—legal basis: Article 17 of the GDPR.
a) The Customer has the right to request the erasure of all or some of their personal data.
b) The Customer has the right to request the erasure of personal data if:
a. the personal data is no longer necessary for the purposes for which it was collected or processed;
b. the customer has withdrawn specific consent, to the extent that the personal data was processed based on that consent;
c. the Customer has objected to the use of their data for marketing purposes;
d. the personal data is being processed unlawfully;
e. the personal data must be erased to comply with a legal obligation under Union law or the law of a Member State to which RK-TRONIK is subject;
f. the personal data was collected in connection with the provision of information society services;
c) Notwithstanding a request to erase personal data, in connection with the filing of an objection or the withdrawal of consent, RK-TRONIK may retain certain personal data to the extent that processing is necessary to establish, assert, pursue, or defend legal claims, as well as to comply with a legal obligation requiring processing under Union law or the law of the Member State to which RK-TRONIK is subject. This applies in particular to personal data including: first name, last name, and email address—which are retained for the purpose of handling complaints and claims related to the use of RK-TRONIK’s services—as well as, additionally, the residential address/mailing address and and order number, which are retained for the purpose of handling complaints and claims related to concluded sales contracts or the provision of services.
4. Right to restrict data processing—legal basis: Article 18 of the GDPR.
a) The customer has the right to request the restriction of the processing of their personal data. Submitting such a request, until it is processed, prevents the use of certain features or services whose use would involve the processing of the data covered by the request. RK-TRONIK will also not send any communications, including marketing communications.
b) The customer has the right to request the restriction of the use of personal data in the following cases:
a. when the Customer disputes the accuracy of their personal data—in such cases, RK-TRONIK will restrict the use of such data for the time necessary to verify its accuracy, but for no longer than 7 days;
b. when the processing of the data is unlawful, and instead of erasing the data, the Customer requests that its use be restricted;
c. when the personal data is no longer necessary for the purposes for which it was collected or used, but the Customer needs it to establish, exercise, or defend legal claims;
d. when the Customer has objected to the use of their data—in which case the restriction applies for the time necessary to assess whether, due to a specific situation, the protection of the Customer’s interests, rights, and freedoms outweighs the interests pursued by the Controller in processing the Customer’s personal data.
5. Right of access to data—legal basis: Article 15 of the GDPR.
a) The Customer has the right to obtain confirmation from the Controller as to whether personal data is being processed, and if so, the Customer has the right to:
a. access their personal data;
b. obtain information about the purposes of processing, the categories of personal data being processed, the recipients or categories of recipients of such data, the planned retention period for the Customer’s data, or the criteria for determining that period (when it is not possible to specify the planned data processing period), about the rights to which the Customer is entitled under the GDPR and the right to lodge a complaint with a supervisory authority, about the source of such data, about automated decision-making, including profiling, and about the safeguards applied in connection with the transfer of such data outside the European Union;
c. obtain a copy of their personal data.
6. Right to rectification—legal basis: Article 16 of the GDPR.
a) The Customer has the right to request that the Controller immediately rectify any of their personal data that is inaccurate. Taking into account the purposes of the processing, the data subject has the right to request that incomplete personal data be completed, including by submitting an additional statement, by sending a request to the email address specified in §6 of the Privacy Policy.
7. Right to data portability—legal basis: Article 20 of the GDPR.
a) The Customer has the right to receive the personal data they have provided to the Controller and then transfer it to another data controller of their choice. The Customer also has the right to request that the Controller transfer the personal data directly to such a controller, provided that this is technically feasible. In such a case, the Controller will send the Customer’s personal data in the form of a CSV file, which is a commonly used, machine-readable format that allows the received data to be transferred to another data controller.
8. If the Customer exercises a right arising from the provisions above, RK-TRONIK will comply with the request or refuse to comply with it immediately, but no later than within one month of receiving it. However, if—due to the complex nature of the request or the number of requests — RK-TRONIK is unable to comply with the request within one month, it will comply within the following two months, having previously informed the Customer—within one month of receiving the request—of the intended extension of the deadline and the reasons for it.
9. The Customer may submit complaints, inquiries, and requests to the Controller regarding the processing of their personal data and the exercise of their rights.
10. The Customer has the right to request that K-TRONIK provide a copy of the standard contractual clauses by submitting a request in the manner specified in §6 of the Privacy Policy.
11. The Customer has the right to file a complaint with the President of the Personal Data Protection Office regarding any violation of their rights to personal data protection or other rights granted under the GDPR.
§ 5 Security Management – Password
1. RK-TRONIK provides Customers with a secure and encrypted connection when transmitting personal data and when logging into the Customer Account on the Website. RK-TRONIK uses an SSL certificate issued by one of the world’s leading companies in the field of security and encryption of data transmitted over the Internet.
2. If a Customer with an account in the Online Store loses their password in any way, the Online Store allows them to generate a new password. RK-TRONIK does not send password reminders. Passwords are stored in encrypted form, making them unreadable. To generate a new password, enter your email address in the form available via the “Forgot your password?” link, which is located next to the login form for your Online Store account. The Customer will receive an email at the address provided during registration or saved in the most recent update to their account profile, containing a link to a dedicated form available on the Online Store’s website, where the Customer will be able to set a new password.
3. RK-TRONIK never sends any correspondence, including email, requesting login information, and in particular the password for the Customer’s account.
§ 6 Changes to the Privacy Policy
1. The Privacy Policy is subject to change; RK-TRONIK will notify Customers of any changes 7 days in advance.
2. Please direct any questions regarding the Privacy Policy to: biuro@rk-tronik.pl
3. Date of last modification: September 6, 2026.
