Privacy Policy

Privacy Policy

I. General information

This document sets out the rules for processing your personal data in connection with your use of the website available at www.ttow.pl (the “Website”) and your communication with us. The rules governing the Website, including the rights and obligations of users and the service provider, are set out in the terms and conditions for the provision of electronic services (the “Terms”).

The Website operates in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation, “GDPR”), and other generally applicable laws.

Where your use of the Website involves processing your personal data, the controller is TTOW sp. z o.o., with its registered office in Warsaw at ul. Góralska 3/73, 01-112 Warsaw, Poland, NIP 5272746271, REGON 362667241 (the “Controller”).

You may contact us at any time about this Privacy Policy or the protection of your personal data by using the contact form on the Website; by post at TTOW sp. z o.o., Stare Faszczyce 5D, 05-870 Błonie, Poland; by email at kontakt@ttow.pl; or through the Controller’s Facebook and Instagram profiles linked from the Website.

II. Personal data

1. When you use the Website, we may process the following information about you:
   1. If you place an order for products available on the Website, we may collect, in particular, your first and last name, email address, telephone number and billing details. Providing this information is voluntary, but some of it may be necessary for us to fulfil your order. We may also collect information about your orders, such as which products you order most often.
   2. If you use services available on the Website, including consenting to the use of a type of cookie that collects information about you, we may collect some or all of the information listed above (for example, when you create an account or use the course platform or newsletter), as well as your IP address. Providing this information is voluntary, but some of it may be necessary for us to provide the service.
   3. If you contact us about your use of the Website, for example to make a complaint, ask a question or submit a request, we may process the information you provide, such as your name, username, email address or telephone number. If you contact us through social media, we may also process information you have made available there, such as your account name or image. To respond to your enquiry, we need at least your name and contact details. If your request concerns a legal obligation, we need the information necessary to fulfil it; for example, a notice of withdrawal from a contract must include the information specified in Annex 2 to the Terms.
2. We do not collect personal data about you when you simply browse the content of the Website.
3. Where information we obtain is personal data, we process it:
   • on the basis of Article 6(1)(a) GDPR, your consent, to create and maintain an account. We retain the data until you withdraw your consent or the Controller stops providing the account service, whichever occurs first, on the terms set out in the Terms;
   • on the basis of Article 6(1)(a) GDPR, your consent, to send you an electronic newsletter containing information about the Controller and its activities, including commercial information. We retain the data until you withdraw your consent or the Controller stops providing the newsletter, whichever occurs first;
   • on the basis of Article 6(1)(b) GDPR, to perform a contract to which you are a party or to take steps at your request before entering into a contract. This includes enabling you to place and fulfil an order, communicating with you about contractual rights and obligations, settling accounts and receiving or submitting withdrawal notices. We retain the data until the contract has been performed;
   • on the basis of Article 6(1)(c) GDPR, to comply with the Controller’s legal obligations, in particular tax obligations. We retain the data for the period required by law;
   • on the basis of Article 6(1)(f) GDPR, for the Controller’s legitimate interests, including communicating with you about the Website. We retain data relating to a matter for up to 30 days after the last action taken to resolve it, such as the completion of a complaint procedure or response to a question; and pursuing claims, for which we retain data until the relevant limitation period expires.
4. We ensure that your personal data remains confidential and secure and is not disclosed to third parties contrary to this Privacy Policy.
5. The confidentiality of personal data sent electronically through the Website and newsletter is protected in whole or in part by encryption (SSL or TLS). You can recognise an encrypted connection when the browser address changes from “http://” to “https://” and a padlock icon appears. When SSL or TLS encryption is active, third parties cannot read the data you send us.
6. The Controller may share your personal data with service providers whose work involves processing data, including providers of Website, accounting, legal and IT services. Data may also be shared with entities affiliated with the Controller and with entities authorised to receive it by law.
7. You have the right to access, rectify and erase your personal data, restrict its processing and receive it in a portable format. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal. You may object to processing based on Article 6(1)(f) GDPR, including on grounds relating to your particular situation.
8. The Controller is not required to erase or stop processing your personal data where processing is necessary to pursue claims; necessary for advertising, but only after you consent to processing for that purpose; necessary to investigate unlawful use of the services, to the extent required to establish your responsibility and provided that the Controller records evidence of the unlawful use; or permitted under separate laws or a contract.
9. The Controller will respond to your request without undue delay and, in any event, within one month. Where necessary, this period may be extended by up to two further months because of the complexity or number of requests. Within the first month, the Controller will tell you about the extension and the reasons for it. If you submitted your request electronically, information will also be provided electronically where possible, unless you ask for another form. If the Controller takes no action, it will inform you of the reasons and of your right to lodge a complaint with a supervisory authority and seek a judicial remedy, no later than one month after receiving your request.
10. You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) if you believe that processing of your personal data infringes the GDPR. You may also seek an effective judicial remedy if your GDPR rights have been infringed, and claim compensation from the Controller or another processor for damage suffered.

III. Cookie Policy

The Website uses cookies. Please read the following information before using the Website.

1. What cookies are

Cookies are small text files stored in the browser on the device (such as a phone, laptop or computer) that you use to browse the Website. Depending on their type, cookies contain information about your activity on the Website and serve various purposes, in particular to ensure that the Website works correctly and to provide access to certain functions.

2. Who uses cookies

Cookies are placed on your device and accessed by TTOW sp. z o.o., with its registered office in Warsaw at ul. Góralska 3/73, 01-112 Warsaw, Poland, NIP 5272746271, REGON 362667241.

3. Types of cookies used on the Website

The Website uses only system (technical) cookies necessary for the Website and its functions, such as logging in, registration, the shopping cart and forms, to work correctly. These cookies are anonymous and are not your personal data. Disabling them may prevent you from using some or all Website functions. Depending on their settings, cookies may be stored only until you leave the Website or close your browser, for a specified period, or until you delete them.

The following cookies may be used on the Website:

4. How you can enable or disable cookies

You can decide whether to allow particular cookies by changing the settings in your browser. Before changing those settings, please remember that disabling one or more cookies may adversely affect some functions of the Website or other websites you visit.

IV. Changes and updates

The Controller may change or update this Privacy Policy at any time. The Controller will announce changes or updates on the Website. Where possible or required, the Controller will also notify you individually in another way, for example by email.

V. Other information

The Website may contain links to third-party websites. We do not control those websites and cannot accept responsibility for the protection or privacy of information you provide while visiting them. This Privacy Policy does not govern those websites. Please exercise caution and read the privacy notice that applies to each website.