1. The privacy policy determines how personal data of users necessary for the provision of electronic services through the website www.shopbox.pl (hereinafter referred to as the Website) are collected, processed, and stored.

2. The Website collects only personal data necessary for the provision and development of services offered on it.

3. Personal data collected through the Website are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR) and the Act on the Protection of Personal Data of 10 May 2018.

The data controller for personal data collected through the Website is SHOPBOX SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, address: Aleja Powstania Warszawskiego 15, KRS: 0000881197, NIP: 6751744626, REGON: 38806165300000, email address: biuro@shopbox.pl (hereinafter referred to as the Data Controller).

1. Personal data are used for the following purposes:
- registration of an account and verification of the User's identity,
- enabling logging in to the Website,
- performance of a contract for services and e-services,
- communication with the User (contact form, etc.),
- running the comment system,
- providing social services,
- promoting the Data Controller's offer,
- marketing, remarketing, affiliation,
- personalizing the Website for Users,
- analytical and statistical activities,
- debt collection,
- establishment and defense against claims.

2. Providing personal data is voluntary, but necessary for the conclusion of a contract or the use of other functionalities of the Website.

The Data Controller may process the User's personal data: name and surname, date of birth, address of residence, email address, telephone number, and tax identification number.

User's personal data will be processed for the period:

- when the processing basis is the performance of a contract - until the expiry of claims after its performance,
- when the processing basis is consent - until its revocation, and after revocation of consent until the expiry of claims.

In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to conducting business activity - 3 years (unless a specific provision provides otherwise).

1. User's personal data may be transferred to: entities related to the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. companies handling e-payments, companies providing courier/postal services, law firms.

2. User's personal data will not be/ will be transferred outside the European Economic Area (EEA).

1. The User of the Service has the right to: access to the content of their personal data, their rectification, erasure, restriction of processing, transfer, objection to processing, withdrawal of consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).

2. A request regarding the exercise of the above rights by the User should be sent to the email address biuro@shopbox.pl.

3. The Administrator fulfills or refuses to fulfill the request immediately - within one month of its receipt.

4. The User has the right to lodge a complaint with the President of the Office for Personal Data Protection, if they consider that the processing violates their rights and freedoms (GDPR).

1. The Service collects information using cookies - session, permanent, and third-party cookies.

2. Collecting cookies supports the proper provision of services on the Service and serves statistical purposes.

3. The User can specify the scope of access to cookies on their device in the browser settings.

1. User's data cannot be processed in an automated way that could lead to any decisions being made against them.

2. User's data may be profiled in order to adjust the content and personalize the offer after obtaining their consent.

1. The Administrator has the right to introduce changes to the Privacy Policy, but the User's rights will not be limited.

1. The Administrator has the right to make changes to the Privacy Policy, provided that the rights of Users are not limited.

2. Information about the introduced changes will appear in the form of a message available on the Website.

3. In matters not regulated in this Privacy Policy, the provisions of the GDPR and Polish law shall apply.