Who we are and how to find us

My name is Daniel Dziedzic, I run a business under the name: Compsoul Daniel Dziedzic, I identify myself with NIP: 8691939510 and REGON: 380660756 and I am the administrator of your personal data. My office is located in Wojakowa 230 (32-862 Wojakowa). You can also contact me via e-mail at: daniel@compsoul.pl or by phone at +48 732 846 416.

How and why we process your personal data

If you are a customer of ours (including a customer of our online store), we process your personal data in order to perform the contract with you and for the purposes of fulfilling our accounting, tax and consumer law obligations.

Thus, the legal basis for the processing of your personal data is Article 6(1)(b) RODO (processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract), and Article 6(1)(c) RODO (processing is necessary for the fulfillment of a legal obligation incumbent on the controller).

In addition, the legal basis for our processing of your personal data is Article 6(1)(f) of the RODO (processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child). This legitimate interest is to ensure that, in the event of a dispute with you, we are able to prove the content of the contract between us and that we have performed properly.

With your separate consent, we may also process your personal data for marketing purposes (i.e. to invite you by e-mail to take advantage of organized promotions and send you other marketing information, and possibly to invite you to express your opinion about our store in online feedback services).

The legal basis for the processing of your personal data for these purposes is therefore Article 6(1)(a) of the RODO (the data subject has consented to the processing of his/her personal data for one or more specified purposes).

If you are the person designated as the recipient of goods purchased by customers of the online store (sometimes the customer designates a family member, neighbor, doorman, employee, etc. as the person who will pick up the goods ordered by the customer), the processing of your personal data is based on the legal premise of Article 6(1)(f) of the RODO, i.e. the premise of the legitimate interest of the controller.

This legitimate interest is our desire to perform a contract with a customer who has indicated you as the recipient of the purchased goods. We assume in good faith that the customer has agreed with you before giving us your data, or that receiving shipments is part of your job duties. We conclude from this that when we process your data in the manner described here, we do not do so for purposes other than those for which it was obtained from you by our customer.

If you are a subscriber to our newsletter, we process your personal data in order to send it to you, with your consent.

Thus, the legal basis for the processing of your personal data is Article 6(1)(a) of the RODO (the data subject has consented to the processing of his/her personal data for one or more specified purposes).

You can withdraw your consent at any time (without affecting the legality of the processing carried out on the basis of consent before its withdrawal) by unchecking the appropriate checkbox in your account settings.

In addition, we process the data of each user of the website characterizing his/her use of our website (this is so-called exploitation data). This processing includes the automatic reading of a unique identifier identifying the telecommunications network termination or data communications system you are using (i.e. your IP address), as well as the date and time of the server, information about the technical parameters of the software and the device you are using (e.g. whether you are using a laptop or a phone when browsing our site), as well as the location from which you connect to our server. We may use this information for market research purposes and to improve the performance of the site. The data recorded in the server logs are not associated with specific individuals using the site. The server logs are only auxiliary material used to administer the site.

The legal basis for the operation of exploitation data processing is Article 6(1)(f) RODO (the processing is necessary for the purposes of legitimate interests pursued by the controller). This legitimate interest is to enable diagnostics of errors in the service and improve its quality.

Like almost all other websites, we use cookies. Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone) that can be read by our data communications system.

Cookies allow us to:

  • ensure the proper functioning of the site,
  • improve the speed and security of using the site,
  • use analytical tools,
  • use marketing tools, including those that involve profiling within the meaning of the RODO.

Here, too, the legal basis for our action is Article 6(1)(f) of the RODO (processing is necessary for the purposes of legitimate interests pursued by the administrator). This legitimate interest is the better performance of the service and our marketing.

Cookie Consent. When you visit our site for the first time, you will be shown a notice about the use of cookies. Accepting and closing this notice means that you consent to the use of cookies in accordance with the provisions of this privacy policy. You can always withdraw your consent by deleting cookies and changing the cookie settings on your browser. Remember, however, that disabling cookies may cause difficulties in using the site, as well as many other websites that use cookies.

Cookies can be divided into own and third-party cookies.

Proprietary cookies - we use them to improve the performance of the website.

Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of such cookies looks like the following on our site:
Analytics and Statistics. We use cookies to track site statistics, such as the number of visitors, the type of operating system and browser used to browse the site, time spent on the site, pages visited, etc.

What personal data we process

We process the following personal data of customers of the online store:

  1. first and last name,
  2. entrepreneur's company,
  3. login,
  4. phone number,
  5. email address,
  6. residence address,
  7. business address,
  8. the address where the goods are to be shipped,
  9. shopping history,
  10. the unique identification number of the web browser,
  11. in the case of billing - the data necessary for billing,
  12. in the case of issuing a VAT invoice - in addition - the necessary data for issuing an invoice,
  13. birth date,
  14. country of delivery,
  15. and sometimes also: data related to the exercise of your rights under the warranty or guarantee, as well as complaints about services provided electronically (maintaining an account in the online store and access to it).

We process the following recipients' personal data:

  1. first and last name;
  2. delivery address;
  3. phone number.

We process the following personal data of newsletter subscribers:

  1. email address,
  2. information about how the newsletter sent was responded to (including whether the newsletter email was read).

We process the following personal data of all users of the site:

  1. IP address,
  2. server date and time,
  3. the location of the terminal device from which the user connects to the service,
  4. technical parameters of the device and software used by the user,
  5. data about the content viewed on the site (how to navigate between sub-pages of the online store).

To whom we disclose your personal information

We disclose your personal data to the required extent to government authorities authorized by law (such as tax authorities).

Your personal data is processed in an IT system, located in part in the so-called public cloud provided by third parties. We have guaranteed in our contracts with these entities that they will not be transferred to so-called third countries (outside the European Economic Area), where the RODO does not apply

You also need to know that in our business we use the support of specialized external entities that may or must have access to some of your data - these are entities that provide us with services in the field:

  • accounting services,
  • operation of the information system,
  • delivery (couriers, mail),
  • internet payment processing,
  • opinion service (e.g. Opineo).

In the relevant agreements with these entities, we have guaranteed that your data entrusted to them is to be protected in accordance with the RODO and will not be transferred to third countries.

How long we will process your personal data

We will process your personal data only for as long as necessary for tax purposes, that is, according to current Polish law, for five years after the tax obligation arises. You are probably well aware that five tax years can mean six and sometimes almost seven calendar years.

If we cooperate with you on an ongoing basis (e.g., by maintaining an account for you in our online store), we will, of course, process some of your data, necessary for this purpose, throughout the period of cooperation.

Also, if you are entitled to any after-sales rights (e.g., under warranty or guarantee) under the law or contract, we must process your personal data for the entire period of their duration in order to be able to assist you in this regard if necessary.

The processing of your data based on consent, as a legal premise, continues until you withdraw your consent.

How we enable you to exercise your rights

We make every effort to ensure that you are satisfied with your cooperation with us. Remember, however, that you have a number of rights that will allow you to influence how we process your personal data and, in some cases, cause us to stop such processing. These rights are:

Right of access to personal data (regulated in Article 15 of the RODO)

Article 15
Right of access to the data subject.

  1. The data subject is entitled to obtain confirmation from the controller as to whether personal data concerning him or her is being processed, and if this is the case, he or she is entitled to access it and the following information:
    1. processing purposes;
    2. categories of relevant personal data;
    3. information about the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
    4. as far as possible, the planned period of storage of personal data, and when this is not possible, the criteria for determining this period;
    5. information on the right to request from the controller rectification, erasure or restriction of the processing of personal data concerning the data subject, and to object to such processing;
    6. information about the right to file a complaint with the supervisory authority;
    7. if the personal data was not collected from the data subject - any available information about its source;
    8. information on automated decision-making, including profiling as referred to in Article 22 (1) and (4), and, at least in these cases, relevant information on the principles of decision-making, as well as the significance and anticipated consequences of such processing for the data subject.
  2. if personal data is transferred to a third country or international organization, the data subject has the right to be informed of the appropriate safeguards referred to in Article 46 related to the transfer.
  3. the controller shall provide the data subject with a copy of the personal data being processed. For any subsequent copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. If the data subject requests a copy electronically, and unless he or she indicates otherwise, the information shall be provided by common electronic means.
  4. the right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

Right to rectification of data (regulated in Article 16 of the RODO)

Article 16
Right to rectification of data

The data subject has the right to request from the controller the prompt rectification of personal data concerning him/her that is inaccurate. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by providing an additional statement.

The right to erasure (regulated in Article 17 of the RODO)

Article 17
Right to erasure ("right to be forgotten")

  1. The data subject has the right to request from the controller the immediate erasure of personal data concerning him/her, and the controller is obliged to erase the personal data without undue delay if one of the following circumstances applies:
    1. personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    2. the data subject has withdrawn the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a), and there is no other legal basis for the processing;
    3. the data subject objects under Article 21(1) to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects under Article 21(2) to the processing;
    4. personal data were processed illegally;
    5. personal data must be deleted in order to comply with a legal obligation under Union or Member State law to which the controller is subject;
    6. the personal data was collected in connection with the offering of information society services referred to in Article 8 (1).
  2. if a controller has made personal data public, and is required to delete such personal data under paragraph 1, the controller shall, taking into account available technology and the cost of implementation, take reasonable measures, including technical measures, to inform controllers processing such personal data that the data subject requests that such controllers delete any links to such data, copies of such personal data, or replications thereof.
  3. Paragraphs 1 and 2 do not apply to the extent that processing is necessary:
    1. to exercise the right to freedom of expression and information;
    2. to comply with a legal obligation requiring processing under Union law or the law of a Member State to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of public authority vested in the controller;
    3. for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3);
    4. for archival purposes in the public interest, for purposes of scientific or historical research, or for statistical purposes in accordance with Article 89(1), insofar as the right referred to in paragraph 1 is likely to prevent or seriously impede the purposes of such processing; or
    5. to establish, assert or defend claims.

The right to restrict processing (regulated in Article 18 of the RODO)

Article 18
Right to limit processing

  1. The data subject has the right to request the controller to restrict processing in the following cases:
    1. the data subject questions the accuracy of the personal data - for a period that allows the controller to verify the accuracy of the data;
    2. processing is unlawful and the data subject objects to the erasure of the personal data, requesting instead a restriction on its use;
    3. the controller no longer needs the personal data for the purposes of processing, but they are needed by the data subject to establish, assert or defend claims;
    4. the data subject has objected under Article 21(1) to the processing - until it is determined whether the legitimate grounds on the part of the controller override the grounds for the data subject's objection.
  2. If processing has been restricted pursuant to paragraph 1, such personal data may be processed, with the exception of storage, only with the consent of the data subject, or to establish, assert or defend claims, or to protect the rights of another natural or legal person, or for compelling reasons of public interest of the Union or a Member State.
  3. Before lifting a restriction on processing, the controller shall inform the data subject who requested the restriction under paragraph 1.

The right to object to processing (regulated in Article 21 of the RODO)

Article 21
Right to object

  1. The data subject has the right to object at any time - on grounds relating to his or her particular situation - to the processing of personal data concerning him or her based on Article 6(1)(e) or (f), including profiling under these provisions. The controller shall no longer be allowed to process such personal data unless the controller demonstrates the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for establishing, asserting or defending claims.
  2. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling, to the extent that the processing is related to such direct marketing.
  3. If the data subject objects to processing for direct marketing purposes, the personal data may no longer be processed for such purposes.
  4. At the latest on the occasion of the first communication with the data subject, the data subject shall be clearly informed of the right referred to in paragraphs 1 and 2, and shall be presented clearly and separately from any other information.
  5. In connection with the use of information society services and without prejudice to Directive 2002/58/EC, the data subject may exercise the right to object through automated means using technical specifications.
  6. If personal data are processed for scientific or historical research or statistical purposes under Article 89(1), the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out in the public interest.

The right to data portability (regulated in Article 20 of the RODO)

Article 20
Right to data portability

  1. The data subject shall have the right to receive in a structured, commonly used machine-readable format the personal data concerning him or her that he or she has provided to the controller, and shall have the right to send such personal data to another controller without hindrance from the controller to whom the personal data was provided, if:
    1. processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on contract pursuant to Article 6(1)(b); and
    2. processing is carried out by automated means.
  2. In exercising the right to data portability under paragraph 1, the data subject has the right to request that the personal data be sent by the controller directly to another controller, insofar as this is technically possible.
  3. The exercise of the right referred to in paragraph 1 of this Article is without prejudice to Article 17. This right shall not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the controller.
  4. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

To exercise any of the rights described, please contact us by e-mail, at the address through which we have contacted you, or at daniel@compsoul.pl . You can also contact us for this purpose by phone at +48 732 846 416.

Complaint to the supervisory authority

Under Article 77 of the RODO, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place where the alleged violation was committed, if you believe that the processing of personal data concerning you violates the provisions of the RODO. In Poland, the supervisory authority is the President of the Office for the Protection of Personal Data - you can file a complaint, among others, by regular mail at 2 Stawki Street, 00-913 Warsaw, or by e-mail at kancelaria@uodo.gov.pl, or you can obtain more detailed information (including current telephone numbers) on the website: https://uodo.gov.pl/ .

Is the provision of data necessary to enter into a contract with us

We collect your personal data primarily to the extent necessary to enter into and perform the contract. Some of the data is also necessary for us to fulfill our obligations under the law (tax regulations, accounting regulations, after-sales obligations). Failure to provide your personal data will unfortunately make it impossible to conclude and perform the contract.

Where we got your personal information from

If you are a customer of ours, including an online store customer and a newsletter subscriber, we obtain your personal information exclusively from you.

We obtain personal data of recipients only from customers of the online store who have designated certain persons as recipients of purchased goods.

We obtain exploitation data and data related to the use of cookies by automatic means.

Automated processing and profiling

Exploitation data and data related to the use of cookies are processed by automated means and subjected to profiling as defined by the RODO. Other personal data, on the other hand, is not processed in this way.