Kovalite Privacy Policy

This policy explains how we process the personal data of people who use the online store at www.kovalite.com, place orders, contact us, or subscribe to marketing communications.

1. Data controller

The data controller is Kovalite sp. z o.o., ul. Czereśniowa 12, 80-126 Gdańsk, Poland, tax identification number (NIP) 5833424927, National Court Register number (KRS) 0000892487. For matters concerning personal data, contact us at contact@kovalite.com or at the postal address above.

2. Data we process

The data we process depends on how you use the store. It may include:

• identity and contact details such as your first and last name, email address, telephone number, delivery address, and billing details;
• information about orders, payments, deliveries, returns, complaints, and communications with customer service;
• customer account data and communication preferences;
• technical and usage data such as your IP address, cookie identifiers, device and browser information, pages viewed, and actions in the store, according to your privacy settings.

We receive data primarily from you and automatically when you use the website. Information on payment or delivery status may come from the payment provider or carrier.

3. Purposes and legal bases

• Managing your account, order, payment, and delivery: performance of a contract or steps taken at your request before entering into a contract, Article 6(1)(b) of the GDPR.
• Invoices, accounting, and other statutory obligations: compliance with a legal obligation, Article 6(1)(c) of the GDPR.
• Contact, questions, complaints, and returns: performance of a contract or pre-contractual steps, Article 6(1)(b) of the GDPR; in other cases, our legitimate interest in responding to and handling the matter, Article 6(1)(f) of the GDPR.
• Store security, fraud prevention, and establishing, exercising, or defending legal claims: our legitimate interest, Article 6(1)(f) of the GDPR.
• Newsletter and other marketing messages following a subscription: your consent, Article 6(1)(a) of the GDPR. We confirm newsletter subscriptions through double opt-in. You may withdraw consent at any time using the link in a message or by contacting us.
• Analytics, personalization, and advertising based on technologies that require consent: your consent, Article 6(1)(a) of the GDPR. The relevant technologies should operate according to your choices in the cookie settings.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Where processing is based on our legitimate interest, you may object under the conditions set out in the GDPR.

4. Whether you must provide data

Data needed to accept and fulfil an order is necessary to enter into and perform a sales contract. Without it, we may be unable to accept or deliver an order. Newsletter subscription and consent to optional cookies are voluntary.

5. Who receives data

We share data only as needed for the purposes described above. Recipients or processors may include Shopify, the store platform provider; payment providers; carriers and collection-point providers; order and invoicing system providers; email, newsletter, and customer service providers; IT service providers; and, according to your consent settings, analytics and advertising providers. Authorized public bodies may also receive data where the law requires it.

We do not share data with every entity listed above in every case. The scope depends on your order, chosen payment and delivery methods, and privacy settings.

6. Transfers outside the European Economic Area

Some service providers may process data outside the European Economic Area. In such cases, transfers are based on a mechanism provided for by the GDPR, in particular an adequacy decision or standard contractual clauses, with supplementary safeguards where required. You can contact us to ask which mechanism applies in a particular case.

7. How long we keep data

We retain order data for as long as necessary to perform the contract and handle returns and complaints, and then for the period required under accounting and tax laws or necessary to establish, exercise, or defend legal claims. We retain correspondence for the time needed to handle the matter and, where justified, for a period connected with potential claims. We process data used to send the newsletter until you withdraw consent; we may retain limited information about the withdrawal to honor your choice. Cookie lifetimes depend on their type and the settings of the relevant services.

8. Cookies and similar technologies

The store uses technologies necessary for the website, cart, customer account, payments, and remembering privacy settings to work. It may also use analytics, personalization, and advertising technologies. Where consent is required by law, we use them in accordance with your choice in the cookie settings panel.

You can change your choices concerning optional technologies through the privacy settings available in the store or through browser settings. Blocking necessary technologies may limit the operation of the cart or other website functions.

9. Profiling and automated decisions

With your consent, we may analyze how you use the store to measure effectiveness and tailor advertising. We do not make decisions about you based solely on automated processing that would have legal effects or similarly significant effects on you.

10. Your rights

You have the right to request access to, rectification or erasure of your data, or restriction of processing. In the cases provided for by the GDPR, you also have the right to data portability and the right to object. If processing is based on consent, you may withdraw it at any time. The scope and exercise of these rights depend on the legal basis and circumstances of processing; for example, an obligation to retain accounting records may limit the erasure of some data.

To exercise your rights or ask a question, email contact@kovalite.com. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office at uodo.gov.pl.

11. Changes to this policy

We may update this policy when our services, data processing practices, or the law change. The current version is available in the store.