Privacy Policy

Privacy Policy

In order to ensure transparency in personal data processing, Circular Clothing sp. z o.o. presents the rules for personal data protection, established under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, "GDPR").

I. DATA CONTROLLER

The data controller is Circular Clothing sp. z o.o., based in Inowrocław (88-100), ul. Orłowska 43, Poland (KRS: 0000973585). For matters related to data processing, please contact us at: the100helpme@gmail.com.

The Controller has appointed a Data Protection Officer (DPO), Mr. Konrad Lewandowicz, available at: the100helpme@gmail.com. We encourage you to contact the DPO regarding any questions concerning the processing of your personal data.

II. DATA COLLECTION AND PURPOSE OF PROCESSING

We process personal data for various purposes in connection with our business operations, including:

Newsletter Subscription

  • Purpose: Sending newsletters via electronic communication

  • Legal basis: GDPR Art. 6(1)(f) – legitimate interest (marketing of our own products and services); GDPR Art. 6(1)(a) – consent for electronic marketing

  • Storage period: Until consent is withdrawn or objection is raised. Data may be stored longer for legal compliance and claims.

Account Registration Without Purchase (Potential Customers)

  • Purpose: Account creation via website form

  • Legal basis: GDPR Art. 6(1)(b) – performance of a service (account management)

  • Storage period: Until account deletion is requested

Account Registration With Purchase (Customers)

  • Purpose: Contract execution; handling claims; collecting reviews

  • Legal basis: GDPR Art. 6(1)(b) – contract performance; GDPR Art. 6(1)(f) – legitimate interest (claims, feedback collection)

  • Storage period: Duration of contract and limitation periods thereafter

Inquiries, Complaints, and Claims (via Email or Website)

  • Purpose: Responding to complaints and inquiries

  • Legal basis: GDPR Art. 6(1)(b), (c), and (f)

  • Storage period: 1 year after warranty expiration or response

Contract Negotiation and Execution with Contractors

  • Purpose: Contract conclusion and performance (including employee data)

  • Legal basis: GDPR Art. 6(1)(b), (c), and (f)

  • Storage period: Until the end of limitation periods or legal obligations

III. DATA RECIPIENTS

Personal data may be disclosed to:
a) Public authorities if required by law
b) Service providers and subcontractors (IT systems, audits, marketing partners)
c) Banks (for payment processing)
d) Accounting and legal service providers
e) Document archiving or destruction services

IV. DATA SUBJECT RIGHTS

You have the right to:
a) Access your data
b) Rectify your data
c) Delete your data
d) Restrict processing
e) Object to processing
f) Data portability
g) Withdraw consent at any time (where applicable)

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

V. IS PROVIDING DATA MANDATORY?

Providing personal data is required to conclude and perform sales contracts and fulfill legal obligations. In all other cases (e.g., marketing), data submission is voluntary.

VI. TRANSFER OF DATA OUTSIDE THE EEA

Data is generally processed within the EEA. Any transfer outside the EEA may occur only with appropriate safeguards in accordance with GDPR.

VII. AUTOMATED DECISION-MAKING

Personal data is not subject to automated decision-making that produces legal effects or significantly affects individuals.

VIII. COOKIES

When you visit our website, data such as IP address, browser type, and domain name may be collected automatically. Cookies are used to maintain session state, generate statistics, and deliver targeted advertisements. You can configure your browser to block or delete cookies.

IX. CHANGES TO THE PRIVACY POLICY

The Controller reserves the right to modify this Privacy Policy, with prior notification and sufficient time before the changes take effect.