Privacy Policy

This document is an annex to the Terms and Conditions of Sale of the online shop tempomaty.pl. It explains what personal data we collect, why we collect them, who we share them with, how long we keep them and what rights you have. It also sets out the rules on cookies.

• § 1 General provisions

1. The controller of your personal data is GTS Sp. z o.o., ul. Meblowa 7 lok. 104, 04-460 Warsaw, Poland, entered in the Register of Entrepreneurs of the Polish National Court Register under KRS number 0000974302, NIP 9522228528, REGON 522173179 (the “Controller”, “we”, “us”).
2. You can contact us in all matters concerning personal data:
   • by e-mail: biuro@tempomaty.pl,
   • by telephone: +48 515 601 431, +48 609 941 207,
   • by post: GTS Sp. z o.o., ul. Meblowa 7 lok. 104, 04-460 Warsaw, Poland.
3. We have not appointed a data protection officer. All requests concerning personal data should be sent to the addresses given above.
4. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation, “GDPR”), and with the Polish provisions on the protection of personal data.
5. We apply technical and organisational measures appropriate to the risk, in particular encryption of the connection with the shop (SSL/TLS), access control, limiting access to personal data to authorised persons only, and written confidentiality obligations and data processing agreements with the entities that process data on our behalf.
6. You always have the right to ask us how we use your personal data. We answer such questions fully and without undue delay.

• § 2 Our privacy principles and your rights

1. We take privacy seriously. We use personal data only to the extent needed for the purpose for which they were collected, and we do not sell personal data.
2. We tell you clearly what data we collect, why we collect them and who we share them with, and we give you the contact details you need if you have any doubts.
3. Providing personal data is voluntary, but the data marked in the order form are necessary to conclude and perform the sales contract. Without them we cannot process an order.
4. Under the GDPR you have the right to:
   • access your personal data and obtain a copy of them (Article 15 GDPR),
   • have inaccurate data rectified and incomplete data completed (Article 16 GDPR),
   • have your data erased, the “right to be forgotten”, in the circumstances set out in Article 17 GDPR,
   • restrict processing in the cases set out in Article 18 GDPR,
   • data portability for data processed by automated means on the basis of consent or a contract (Article 20 GDPR),
   • object to processing based on our legitimate interest (Article 21 GDPR); where data are processed for direct marketing purposes, you may object at any time and we will stop that processing,
   • withdraw your consent at any time, where processing is based on consent; withdrawal does not affect the lawfulness of processing carried out before the withdrawal (Article 7(3) GDPR).
5. To exercise any of these rights, contact us using the details given in § 1. We respond without undue delay and in any event within one month of receiving the request; where a request is complex, that period may be extended by a further two months, and we will inform you if that happens.
6. If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, telephone +48 22 531 03 00, uodo.gov.pl. If you are resident in another European Union Member State, you may also lodge a complaint with the supervisory authority of that State or of the place of the alleged infringement.
7. We keep personal data within the European Economic Area (EEA). Some of the tools we use, in particular analytics and marketing tools, may involve transfers of data to countries outside the EEA. Any such transfer is made only on the basis of a mechanism permitted by Chapter V of the GDPR, that is an adequacy decision of the European Commission or standard contractual clauses adopted by the European Commission, together with supplementary measures where these are required. You may ask us for information about the safeguards applied.
8. We do not use personal data to take decisions that produce legal effects concerning you or similarly significantly affect you and that are based solely on automated processing.
9. You may tell us at any time that you:
   • no longer wish to receive any information or messages from us,
   • would like a copy of the personal data we hold about you,
   • would like your personal data corrected, updated or erased,
   • wish to report a breach or the improper use of your personal data.

   To help us answer, please give your name and as much detail as possible.

• § 3 Scope and purpose of the collection of personal data

1. We collect, process and store the following categories of personal data:
   • first name and surname,
   • delivery address and, where an invoice is requested, the billing address,
   • e-mail address,
   • telephone number,
   • order data: the goods ordered, the order value, the delivery method, the payment method, the order and payment history,
   • company name and tax identification number, where the purchase is made by a business,
   • the content of correspondence with us,
   • IP address, information about the browser and device, and data collected by cookies and similar technologies,
   • any other data you choose to give us voluntarily.
2. We do not collect national identification numbers, dates of birth, or any special categories of personal data within the meaning of Article 9 GDPR.
3. We process personal data for the following purposes and on the following legal bases:
   • concluding and performing the sales contract, processing and delivering the order, and contacting you about the order – Article 6(1)(b) GDPR,
   • handling complaints, returns and withdrawals from the contract – Article 6(1)(b) and (c) GDPR,
   • issuing and keeping invoices and other accounting documents and meeting our tax obligations – Article 6(1)(c) GDPR,
   • establishing, exercising or defending legal claims – Article 6(1)(f) GDPR, our legitimate interest being the protection of our rights,
   • ensuring the security of the website and preventing abuse – Article 6(1)(f) GDPR,
   • measuring traffic and compiling statistics on how the website is used – Article 6(1)(a) GDPR, on the basis of your consent given in the cookie banner,
   • marketing, including the newsletter, remarketing and personalised advertising – Article 6(1)(a) GDPR, on the basis of your consent,
   • direct marketing of our own products to existing customers – Article 6(1)(f) GDPR, subject to your right to object.
4. We disclose personal data only to the extent necessary, and only to the following categories of recipients:
   • carriers and operators of collection points, in particular Packeta / Zásilkovna and the broker Apaczka.pl, for the purpose of delivering the parcel,
   • payment service providers, for the purpose of processing the payment,
   • our hosting provider and IT service providers, who maintain the shop and its infrastructure,
   • our accounting office, for the purpose of accounting and tax settlement,
   • providers of analytics and marketing tools, in particular Google and Meta, within the scope of the consent you have given,
   • legal advisers and debt recovery service providers, where this is necessary to pursue claims,
   • public authorities, where we are required by law to disclose the data.
5. Entities that process personal data on our behalf do so only on our documented instructions, under data processing agreements concluded in accordance with Article 28 GDPR.
6. We retain personal data for the following periods:
   • data connected with the performance of the contract – for the duration of the contract and afterwards until the claims arising from it become time-barred,
   • data contained in accounting documents – for 5 years from the end of the calendar year in which the tax became payable, as required by tax and accounting law,
   • data processed on the basis of consent – until the consent is withdrawn,
   • data processed on the basis of our legitimate interest – until you effectively object, or until that interest ceases to exist,
   • data connected with complaints and withdrawals – for the period needed to handle the matter and afterwards until the related claims become time-barred.
7. Once these periods expire, personal data are erased or irreversibly anonymised.

• § 4 Cookies

1. A cookie is a small text file sent to your browser and stored on your device; the browser sends it back to the website on later visits. We use cookies and similar technologies, such as local storage and tracking pixels.
2. We use:
   • session cookies, stored on your device until you log out, leave the website or close the browser,
   • persistent cookies, stored for the period specified in the cookie’s parameters or until you delete them.
3. According to their purpose we use:
   • strictly necessary cookies – needed for the website to function, in particular to maintain the session, remember the contents of the basket and complete the checkout, and to ensure security. These do not require consent,
   • functional cookies – which remember your choices, such as the language version and the data entered in forms,
   • analytics cookies – which let us count visitors, see how the website is used and which content is viewed most often; we use Google Analytics for this,
   • marketing cookies – which let us build remarketing audiences and display advertising matched to your interests in Google Ads and Meta Ads, and measure the effectiveness of that advertising.
4. Cookies other than strictly necessary ones are used only after you give consent in the cookie banner. Consent may be withdrawn or changed at any time using the cookie settings available on the website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
5. The use of cookies and similar technologies is governed by the GDPR and by Directive 2002/58/EC on privacy and electronic communications, as implemented in Poland by the Electronic Communications Law (Prawo komunikacji elektronicznej) of 12 July 2024.
6. You can block or delete cookies at any time in your browser settings. Blocking cookies may prevent some functions of the shop from working, in particular the basket and the checkout.
7. Detailed instructions on managing cookies are available in the help section of each browser. This applies to the browsers most commonly used on computers, such as Google Chrome, Mozilla Firefox, Microsoft Edge, Safari and Opera, and to those used on mobile devices running Android and iOS.

• § 5 Rights and obligations, profiling and disputes

1. Where the law requires it, we may be obliged to disclose selected personal data to public authorities. We disclose data only on a valid legal basis and only to the extent required.
2. We process the personal data of our customers on the basis of:
   • the performance of the contract concluded with them,
   • our legal obligations, in particular under tax and accounting law,
   • our legitimate interest, in particular direct marketing of our own products, analytics, and securing documentation for the purpose of pursuing or defending against claims,
   • consent, in particular consent to e-mail marketing.
3. We process the personal data of potential customers on the basis of our legitimate interest and, for marketing communication, on the basis of consent.
4. A request to erase personal data or to stop processing them may make it impossible for us to provide our services, or may seriously limit them.
5. Where we profile, we do so as follows:
   • we use typical data for this purpose: the e-mail address, the IP address and data from cookies,
   • we profile in order to analyse or predict the preferences and interests of the people who use our website, and to match the content of the website to those preferences,
   • we profile for marketing purposes, that is to match advertising to those preferences,
   • profiling is carried out only within the scope of the consent given in the cookie banner and does not produce legal effects for you.
6. Out-of-court resolution of consumer disputes: a consumer may apply to the provincial inspector of the Polish Trade Inspection (Wojewódzki Inspektorat Inspekcji Handlowej) for mediation, or to a permanent consumer arbitration court operating alongside the Trade Inspection. The register of authorised entities is kept by the Polish Office of Competition and Consumer Protection at polubowne.uokik.gov.pl. A consumer resident in another European Union Member State, or in Norway or Iceland, may obtain free assistance in a cross-border dispute from the European Consumer Centres Network (ECC-Net), eccnet.eu; the European Consumer Centre in Poland operates at Plac Powstańców Warszawy 1, 00-950 Warsaw, Poland, konsument.gov.pl.

• § 6 Basic security principles

1. We protect the data entrusted to us, but the security of your own device also matters. We recommend the following.
2. Use antivirus software with an up-to-date virus database, a current version of your browser and an active firewall. Keep your operating system and installed programs updated, because attacks exploit known flaws in outdated software.
3. Keep your access credentials, such as logins, passwords, PINs and electronic certificates, in a place that is not accessible to others, and do not store them on your device in a form that allows unauthorised access.
4. Be careful with unexpected attachments and links in e-mail messages, in particular messages from unknown senders or messages found in the spam folder. We never ask by e-mail for your password or for full payment card details.
5. Consider enabling anti-phishing filters in your browser; these check whether the page displayed is genuine.
6. Download files only from trusted sources, and do not install software from unverified publishers. This applies to mobile devices as well.
7. On your home Wi-Fi network, set a strong password that is not easy to guess, and use the strongest encryption standard your equipment supports.

• § 7 Social media plugins

1. Our website may contain plugins and links to social networks, in particular Facebook and Instagram, operated for users in the European Economic Area by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
2. A plugin passes to its provider information about which of our pages you visited and when. If you are logged in to your account with that provider while browsing our website, the provider may link that visit to your account, and may combine it with information obtained, for example, when you click a “like” button or leave a comment. That information is sent by your browser directly to the provider.
3. Where a plugin is used on the basis of your consent, you may withdraw that consent at any time in the cookie settings; the plugin will then no longer be loaded.
4. Information on how Meta collects and uses data is available in the Meta privacy policy at facebook.com/privacy/policy.
5. If you do not want a social network to record your visit to our website while you are logged in, log out of your account before browsing our pages.
6. These providers are separate controllers of the data they process for their own purposes. We are not responsible for the processing they carry out under their own privacy policies.

This Privacy Policy is in force from 7 September 2026.