Privacy policy

I. Data Administrator

1) The data administrator, within the meaning of the Act of 29 August 1997 (Journal of Laws 1997, No. 133, item 883 as amended), is NIKOS sp. z o.o. sp.k., NIP: 6020094728, KRS: 0000324298, REGON: 180401274. 

2) Address and contact details of the Administrator: Sygneczów 1, 32-020 Wieliczka, POLAND; e-mail: export@horselinepro.org, phone: (+48) 661 011 424. Telephone contact is possible from Monday to Friday between 8:00 a.m. and 3:00 p.m. CEST/CET time. 

II. Purpose of data acquisition and processing

3) Data is recorded and processed for the purpose of creating individual accounts in the HorseLinePRO shop and for the purpose of concluding and executing (including dispatch to the Customer's address) the purchase contract and possible complaint procedure (Article 6(1)(B) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC; hereinafter ‘GDPR’).

4) The Store may use personal data for marketing purposes, i.e. sending information concerning the Store's offer and purchase promotions of the offer, i.e. Newsletter e-mail/SMS when the Customer has consented to it by subscribing his/her address to the Newsletter (the legal basis for processing personal data for marketing purposes is Article 6(1)(f) GDPR). Withdrawal of consent to receive marketing correspondence is possible:
(a) by contacting the Shop at export@horselinepro.org (in the title of the message ‘Newsletter Unsubscribe’) or:
(b) by clicking on the unsubscribe link in the received Newsletter.

5) Consent to receive marketing correspondence in the form of Newsletter emails and/or SMS messages is given:
(a) during the registration of the Account in the Shop by ticking the box ‘I want to receive newsletter and SMS Newsletter’,
b) by providing your address

6) Granting consent to receive the Newsletter and/or SMS messages implies knowledge of and consent to the provisions of the Terms and Conditions and Privacy Policy.

7) The Shop Administrator may use the collected personal data to create Customer Groups and assign accounts to these groups based on the Customer's status and/or purchase history. Based on the groups, the Store may send more tailored messages and communications about goods and services.

8) For the purposes of monitoring, reporting and improving the services and activities provided, as well as in order to comply with a legal obligation or in the name of a legitimate legal interest, Customers' personal data may be processed for purposes other than those listed above (the legal basis for processing personal data for marketing purposes is Article 6(1)(f) GDPR). In other cases, Customers' personal data will be processed only on the basis of the previously granted consent, in the previously specified scope and purpose.

III. Obligation to provide personal data

9) Failure by the Customer to provide all required personal data or the provision of incorrect data, even in part, may constitute an obstacle to the conclusion of the purchase contract.

10) Provision of personal data is voluntary to the extent that such data is collected on the basis of consent.

IV. Information on recipients of Customers' personal data

11) In connection with the processing of Customers' personal data for the purpose of concluding and performing (dispatching to the Customer's address) the purchase contract of sale, Customers' personal data may be made available to the following recipients or categories of recipients:

(a) entities performing the processes necessary for the processing and delivery of orders placed within the online shop,

b) public administration bodies and entities performing public tasks or acting on behalf of public administration bodies, to the extent and for the purposes arising from the provisions of law.

12) To the extent related to the fulfilment of the Order or on the basis of the consent given, User data, including personal data, is processed on the basis of the relevant agreement by:

a) BaseLinker sp. z o.o. with its registered office in Wrocław, Pl. Solny 15, 50-062 Wrocław, POLAND, KRS 0000795513, NIP 8971868567, REGON 383907714 - to the extent related to Order completion.

b) DiffSolutions s.r.o., a company registered and operating under the laws of the Czech Republic, with its registered office at Praha 10 - Dubeč, Nad mlýnským potokem 640/10, PSČ 10700, identification number 24791288 - to the extent connected with Newsletter service provision and personalized offers.

c) The company PayU S.A. with headquarters in Poznań, 60-166 Poznań, Grunwaldzka 186, KRS 0000274399, NIP 779-23-08-495; which is a national payment institution supervised by the Polish Financial Supervision Authority, entered in the Register of Payment Services under no. IP1/2012 - with respect to the electronic payment service.

13) Courier services for the delivery of orders are provided by:

a) Deutsche Post AG (DHL Group), Charles-de-Gaulle-Straße 20, 53113 Bonn, (KRS number) HRB 6792 (Bonn court), NIP DE 169838187.

V. Processing period of personal data

14) Customers' personal data are processed by the Shop for the period necessary for the provision of electronic services in terms of maintaining a user account and for order processing.

15) After the expiry of the period described in point 1, personal data may continue to be processed to the extent required by law or for the Store's legitimate interest of the Data Controller.

16) If personal data are used for marketing purposes, the data may be processed until such consent is withdrawn.

VI. Rights of Customers whose data is obtained and stored

17) Any Customer who has provided the Store Administrator with their personal data has (pursuant to the GDPR):

(a) the full possibility to access their data for the purpose of verification (including the right to obtain a copy of such data),

b) the right to modify their personal data in the event that it is incomplete, incorrect or outdated,

(c) the right to request the erasure of personal data where:

(i) the data are no longer necessary for the purposes for which they were collected,

ii) the data subject has objected to the processing of personal data,

iii) the data subject has withdrawn the consent on which the processing is based and there is no other legal basis for the processing,

iv) the data are processed unlawfully,

v) the data must be erased in order to comply with a legal obligation;

18) Any Customer who has provided the Store Administrator with personal data has the right to request the restriction of personal data in the event that:

(a) the accuracy of the personal data is contested by the data subject,

b) the data are being processed unlawfully and the data subject objects to the erasure of the data, requesting instead that the data be restricted,

(c) the data are no longer used and needed by the controller and the data subject needs the data for the establishment, defence or assertion of claims,

(d) an objection to the processing of the data has been raised by the data subject (until such time as it is established whether the legitimate grounds on the part of the controller override the grounds for the objection)

19) Any Customer who has provided the Store Administrator with his/her personal data has the right to have his/her personal data transferred in the event that:

(a) they are processed on the basis of a contract concluded with the data subject on the basis of consent,

b) the processing of personal data is carried out by automated means

20) Any Customer who has provided the Store Administrator with his/her personal data has the right to object to the Administrator's processing of personal data when:

(a) the data subject is in a special situation,

b) the data subject's data are processed by automated means.

21) The customer also has the possibility to complete or edit his/her data himself/herself by logging in to his/her individual account or by submitting a request to the shop staff.

VII. Withdrawal of consent to the processing of personal data and right to lodge a complaint

22) The customer has the right to withdraw the consent granted for the processing of personal data at any time. The withdrawal of personal data shall not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal.

23) The Customer has the right to lodge a complaint with the supervisory authority (President of the Office for the Protection of Personal Data) when it considers that the controller is in breach of the provisions of the GDPR.

VII. Data security

24) We store your personal data on secure servers. Access to the data is granted to selected employees. The place and manner in which the data is stored is to ensure full security.

25) Each Customer who has provided us with their personal data has full access to their data for the purpose of verifying it, modifying it or requesting its deletion.

26) The Administrator uses SSL encryption in the Store to ensure the security of data transmission between the server and the end device.

VIII. User data and cookies

27) A user using the Shop generates data stored on the Shop's server, including IP number or type of terminal device. This data is processed for technical and statistical purposes.

28) The Shop, like almost all websites, uses cookies - small files saved in the memory of the end device's browser. We use these files for technical purposes (to ensure proper operation of the shop), analytical purposes (to collect anonymous statistical data, enabling evaluation of the shop's functionality and user interaction) and marketing purposes (to enable better adjustment of the offer, evaluation of advertising effectiveness and display of advertisements after leaving the shop's pages).

29) The Shop uses the following cookies:

30) You can accept the storing of the indicated cookies in the memory of your terminal device, change your preferences, delete them manually or set your browser not to accept any cookies. Please note, however, that if you block the storage of all cookies completely, this will negatively affect the functionality of the Shop and other websites.

31) If we include links on our Shop website that lead to other websites not administered by us, we cannot be responsible either for the content or the degree of privacy protection implemented by the administrators of these websites. When deciding to go to such sites, the customer does so at his/her own risk. We encourage you, by the way, to read the privacy policies implemented by these sites before you provide your personal data to them.

Questions? export@horselinepro.org