PRIVACY POLICY
document effective from 22 April 2024.
This document (hereinafter referred to as the “Privacy Policy”) contains information regarding our processing of your personal data in connection with the use of the globalboxing.com website (hereinafter referred to as the “Store”) and the provision of services by us. It is not a source of obligations (it is not a contract or regulations) – the purpose of the Privacy Policy is to clearly present the rules of the globalboxing.com website, as well as the rules of handling and processing your personal data. In connection with the use of the globalboxing.com website, we collect and process for the shortest possible time only the necessary personal data.
The IT system of the globalboxing.com website and in-house procedures meet all standards for their protection. Any natural person, acting under the authority of the data administrator, who has access to personal data, processes them only on his/her instructions, unless required to do so by law. Access to personal data, is only granted to persons authorised and trained in its protection. We use modern organisational and technical safeguards to ensure the best possible protection of personal data.
We guarantee that we process your personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: “RODO / GDPR”), the Act of 10 May 2018 on the protection of personal data (in its current version) and any other regulations imposing data protection obligations on us.
Therefore, on the basis of Articles 13(1) and 13(2) of the RODO / GDPR, we inform you that:
- The administrator of your personal data is:
GLOBAL BOXING sp. z o.o. with its registered office in Warsaw / Warszawa ul. Ludwika Nabielaka 6/4, 00-743 Warsaw, entered in the Register of Entrepreneurs of the National Court Register, kept by the District Court for the City of Warsaw in Warsaw, XIII Economic Division of the National Court Register under KRS: 0001094625, NIP: 5214061786, REGON: 528100738, share capital: PLN 20,000.00 (hereinafter: “Administrator”).
You can contact us as follows:
a) by letter, to the following address: Global Boxing sp. z o.o., ul. Ludwika Nabielaka 6/4, 00-743 Warszawa,
b) via e-mail: contact@globalboxing.com
c) via tel.: 500-115-900
- The personal data you provide is processed for the following purposes:
1) Conclusion and performance of the sales contract
type of personal data processed: first name, last name, company, NIP (tax identification number), correspondence address, address of residence or registered office (if different from the correspondence address), e-mail address, telephone number, bank account number;
basis for processing: basis for processing: Article 6(1)(b) of the RODO / GDPR, i.e. processing for the purpose of taking action at your request, prior to entering into a contract and processing necessary for the performance of a contract to which you are party (in particular, confirming an order or shipment of a product, contacting you about it);
data retention period: the period of performance of the sales contract, as well as the period required by law (in particular for tax or accounting reasons), unless a longer period results from their retention in the event of possible claims for the period of limitation prescribed by law or for other purposes resulting from the fulfilment of the Administrator’s legitimate interests. In each case, the longer retention period for Personal Data shall be decisive.
2) Service registration and account maintenance
type of personal data processed: first name, last name, company, VAT (value added tax number), correspondence address, address of residence or registered office (if different from the correspondence address), e-mail address, telephone number;
basis for processing: Article 6(1)(b) RODO / GDPR, i.e. processing for the purpose of providing services in respect of the maintenance and operation of your account in the Shop (in particular, to enable you to use the services available in the Shop), to take action at your request prior to the conclusion of a contract and the processing necessary for the performance of a contract to which you are a party and Article 6(1)(f) RODO / GDPR, i.e. processing for the purposes of the administrator’s legitimate interests, which are technical and administrative activities related to the management of the Shop;
data retention period: the period of use of your account in the Shop, unless the Administrator is obliged by law to process this data for a longer period or to keep it longer in case of potential claims (i.e. for the period of limitation prescribed by law); personal data may be deleted two years after your last activity in the Shop. In any case, the longer retention period of your personal data will be decisive.
3) General contact form
type of personal data processed: first and last name or company name, email address, telephone number;
basis for processing: Article 6(1)(f) RODO / GDPR, i.e. processing for the purpose of our legitimate interest in enabling you to contact us and provide an answer to your question;
and
Article 6(1)(b) of the RODO / GDPR, i.e. to take possible action prior to the conclusion of the sales contract (depending on the content of the communication);
data retention period: until the communication initiated by means of the contact form has been completed, unless the Administrator is obliged by law to process the data for a longer period or the Administrator keeps the data for a longer period in case of potential claims (i.e. for the period of limitation prescribed by law) or for other purposes arising from the fulfilment of the Administrator’s legitimate interests. In each case, the longer retention period of the personal data will be decisive.
4) Contact form for franchisees
type of personal data processed: first and last name, company, NIP (tax identification number), e-mail address, telephone number;
basis for processing: Article 6(1)(f) RODO / GDPR, i.e. processing for the purposes of our legitimate interest in enabling you to contact us and provide an answer to the question you have asked, and Article 6(1)(b) RODO / GDPR, i.e. taking possible steps prior to the conclusion of a cooperation agreement (depending on the content of the communication);
data retention period: until the communication initiated by means of the contact form has been completed, unless the Administrator is obliged by law to process the data for a longer period or the Administrator keeps the data for longer in case of potential claims (i.e. for the period of limitation prescribed by law) or for other purposes arising from the fulfilment of the Administrator’s legitimate interests. In each case, the longer retention period of the personal data will be decisive.
5) “Ask a question about a product” form
type of personal data processed: first and last name, e-mail address, telephone number;
basis for processing: article 6(1)(f) RODO / GDPR, i.e. processing for the purposes of our legitimate interest in enabling you to contact us and provide an answer to your question
and
article 6(1)(b) RODO / GDPR, i.e. to take possible actions prior to the conclusion of a sales contract (depending on the content of the communication);
data retention period: until the end of the communication initiated by means of the ” Ask a question about a product” form, unless the law obliges the Administrator to process this data for a longer period of time or the Administrator will keep the data longer in case of potential claims (i.e. for the period of their limitation period defined by the law) or for other purposes resulting from the fulfilment of the Administrator’s legitimate interests. In each case, the longer retention period of the personal data will be decisive.
6) Newsletter
type of personal data processed: e-mail address;
basis for processing: article 6(1)(b) RODO / GDPR, i.e. processing necessary for the provision of newsletter services, i.e. performance of a contract to which you are a party;
data retention period: until you object to the processing of your personal data,
7) Provision of marketing services
type of personal data processed: e-mail address, telephone number;
basis for processing: article 6(1)(b) of the RODO / GDPR, i.e. processing necessary for the provision of marketing services, consisting of sending information regarding the current offer,
i.e. performance of a contract to which you are a party;
period of data retention: until you object to the processing of your personal data,
8) Adding opinions
type of personal data processed: nickname, account name, first name or nickname;
basis for processing: article 6(1)(f) RODO / GDPR, i.e. processing for the purpose of our legitimate interest in adding and presenting opinions on goods sold in the Shop;
data retention period: until you object to the processing of your personal data, but for no longer than 5 years,
9) Use of the Shop’s social media profiles
type of personal data processed: first and last name, nickname, account name or alias;
basis for processing: Article 6(1)(f) of the RODO / GDPR, i.e. processing for the purposes of our legitimate interest in running our social media profiles effectively by providing information on our initiatives and other activities and in connection with promoting various events, services, products and carrying out other marketing activities and enabling you to become active on your profile;
data retention period: the period necessary for the fulfilment of the aforementioned purposes, unless the Administrator is obliged by law to process the data for a longer period or the Administrator keeps the data for a longer period in case of potential claims (i.e. for the period of their limitation period established by law) or for other purposes resulting from the fulfilment of the Administrator’s legitimate interests. In each case, the longer retention period of the personal data will be decisive.
10) Establishing, asserting and enforcing claims and defending against claims in proceedings before courts and other state authorities
type of personal data processed: first and last name, company name, NIP (tax identification number), correspondence address, address of residence or registered office (if different from correspondence address), e-mail address, telephone number;
basis for processing: Article 6(1)(f) RODO / GDPR, i.e. processing for the purpose of pursuing our legitimate interest in establishing, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities;
retention period: until the expiry of the limitation period for claims concerning the performance of the contract or until the end of initiated and pending proceedings before courts and state authorities. In each case, the longer retention period for personal data is decisive.
11) Fulfilment of legal obligations arising from legislation, in particular tax and accounting legislation
type of personal data processed: first and last name, company name, NIP (tax identification number) address of correspondence, address of residence or registered office (if different from the address of correspondence), e-mail address, telephone number, bank account number;
basis for processing: Article 6(1)(c) of the RODO / GDPR, i.e. the processing is necessary for the fulfilment of the Administrator’s legal obligations under the law, in particular tax and accounting legislation;
data retention period: until the expiry of the legal obligations incumbent on the Administrator which justify the processing of personal data.
- Voluntary provision of personal data
The provision of personal data by you in the cases referred to in point 2 is voluntary, but is a condition for the conclusion of a contract or the provision of services by us, in particular electronically supplied services.
- Your rights in relation to our processing of your personal data
At any time you have the right to:
a) to object to the processing of your personal data carried out for the purposes of the legitimate interests of the Administrator (where there are no other valid legitimate bases for processing overriding your interests),
b) to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place where the alleged infringement was committed; in Poland, the supervisory authority is the President of the Office for Personal Data Protection / Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warszawa),
c) to access your personal data (including, in particular, information on which personal data are processed or a copy thereof, the purposes of the processing, the categories of personal data concerned, information on the recipients or categories of recipients to whom the data have been or will be disclosed, the intended period of retention of personal data or the criteria for determining that period, information on the right to request from the Administrator a rectification, erasure, restriction of processing of personal data and to lodge an objection, information on the right to lodge a complaint with a supervisory authority and, if the data have not been collected from you, information on their source),
d) request the rectification of personal data,
e) request the restriction of the processing of personal data, in the cases referred to in Article 18 RODO / GDPR;
f) request the erasure of personal data in the circumstances referred to in Article 17 RODO / GDPR;
g) the portability of personal data under the principles set out in Article 20 of the RODO / GDPR,
h) withdraw any consent given to the Administrator at any time (whereby the withdrawal of consent shall not affect the lawfulness of the processing carried out by the Administrator before its withdrawal).
If you make any of the above-mentioned requests, we will inform you without undue delay – and in any case within one month of receipt of the request – of the action taken in relation to your request.
If it is necessary to extend the one-month period by a further two months due to the complexity of the request or the number of requests, we will inform you of this within one month from the date of receipt of the request , stating the reasons for the delay.
- Recipients of personal data
Each catalogue of recipients of personal data processed by the Administrator derives primarily from the scope of the services you use.
The catalogue of data recipients also results from the consent you have given or from legal provisions and is further specified as a result of the actions you take in the Store.
To a limited extent, the Administrator’s partners may be involved in the processing of your personal data, in particular, entities that technically support the running of the Shop, providers of hosting or ICT services, carriers or couriers handling shipments of orders, entities that process electronic payments or card payments in the Shop, companies that maintain the software, as well as providers of legal, accounting and advisory services.
- Automated decision-making, profiling
We do not make automated decisions about you and we do not use profiling.
We may display marketing content to you that is tailored to your preferences as determined by your online behaviour, pages visited or clicks. However, we only use the anonymous information stored in the cookies you have consented to the use of for this purpose. By changing the cookies settings in your browser or revoking the consent you have given, you can opt out of having content selected for you displayed to you. You can find more information about this in the Cookies Usage Policy.
- Cookies files
When you use our online shop, we use cookies files, which are small text files that are stored on your Data Terminal Equipment (e.g. computer, smartphone or tablet).
These cookies are divided into own cookies (i.e. those read by our ICT system) and third-party cookies (i.e. those read by the third-party ICT system). Their use is aimed at the correct functioning of the shop’s websites by providing information to the ICT systems for specific purposes (which we will describe below).
The storage time depends on the type of cookies:
1) session cookies are stored until the end of your browser session,
2) permanent cookies are stored for longer on your device and allow us to recognise your browser on your next visit to our shop.
We use cookies on the basis of your consent. Exceptions are cookies which enable us to properly provide services to you (so-called proprietary cookies). You can disable all other cookies at any time via your browser settings.
Cookies declaration
You can withdraw or change your consent to the use of cookies at any time using the cookie declaration.
You will also verify which consents have been given and when they were given.
Purposes for the use of cookies
We use our proprietary cookies in order to properly provide electronic services to you. They make it possible to recognise your device and optimise the use of the website by adapting it to your preferences.
We use third party cookies for the following purposes:
- creating statistics and measuring traffic to our shop website. We use the Google Analytics tool provided by Google Ireland Ltd. for this purpose. You can read Google’s privacy policy at the following link: https://policies.google.com/privacy?fg=1,
- the use of Google Ads online advertising tools (including YouTube Ads) and remarketing activities. This tool is provided by Google Ireland Ltd. You can read Google’s privacy policy at the following link: https://policies.google.com/privacy?fg=1,
- provision of electronic services related to the handling of, inter alia, purchase of subscriptions, entry to trainings, user registration for selected trainings, events and workshops with the use of online tools, for which we use the Fitssey application, the administrator of which is Grzegorz Tomasiak running a sole proprietorship under the business name lightenbody™ with registered office in Gdynia, NIP 7532294721, providing the aforementioned software.
You can read:
1) Fitssey’s cookies policy at the following link:
https://fitssey.com/pl/legal/cookies-policy
2) Fitssey’s privacy policy at the following link:
https://fitssey.com/pl/legal/privacy-policy
3) Fitssey’s terms and conditions of service at the following link:
https://fitssey.com/pl/legal/terms-and-conditions
For our marketing and remarketing activities we use tools provided by Meta (Facebook, Instagram, Messenger, Meta Pixel) whose administrator is Meta Platforms Ireland Limited and which may collect information about your IP address. You can read Meta’s privacy policy at the following link:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
- For marketing and remarketing activities, we use tools provided by LinkedIn, which is administered by LinkedIn Ireland Unlimited Company. You can read LinkedIn’s privacy policy at the following link: https://pl.linkedin.com/legal/privacy-policy
- For marketing and remarketing activities, we use tools provided by TikTok (including TikTok Pixel) which is administered by TikTok Technology Limited and TikTok Information Technologies UK Limited and which may collect data about your IP address. You can read TikTok’s privacy policy at the following link:
https://www.tiktok.com/legal/page/eea/privacy-policy/pl
- For marketing and remarketing activities, we use tools provided by X (formerly Twitter), whose administrator is Twitter International Unlimited Company. You can read X’s privacy policy at the following link:
https://twitter.com/pl/privacy#x-privacy-10
- Server logs
The use of the web pages of our website involves sending requests to the server on which the website is stored. Each such query which is directed to the server is recorded in the server logs.
The data stored in the server logs are not linked to specific users of our service and are not used by us to identify you.
The logs include, among other things, the IP address, date and time of the server, information about the web browser and the operating system you are using.
The server logs are only ancillary material for the administration of the website, saved for an indefinite period of time, in particular for analytical purposes. The content of the logs is not disclosed to anyone except those authorised to administer the server.
- Transfer of data outside the European Economic Area or to an international organisation
We use Google’s services to analyse the traffic on our shop website and to build statistics about it. Google, in order to provide us with these services, may collect IP data and store it on Google LLC servers located in the USA.
Google LLC is listed among the entities participating in the Privacy Shield programme (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), and also applies the model contractual clauses on data security approved by the European Commission.
- Amendment of this Privacy Policy
The Administrator may change the Privacy Policy in the future.
In the event of a change to the Privacy Policy, the Administrator shall each time place a notice of such a change on the Shop’s website by publishing the new version of the Privacy Policy with an appropriate date.
If you have any questions or doubts as to the principles of personal data processing on our Store’s website, please contact us. Our contact details can be found in point 1 of the Privacy Policy.