Privacy Policy

This Privacy Policy describes how personal data of users of the SNUSOWO online store is processed and protected.

Data controller and contact details

The controller of personal data is:

Tijara Essence s.r.o.
IČO / DIČ: CZ23592087
Registered address: Soukenická 877/9, Moravská Ostrava, 702 00 Ostrava
Czech Republic

Data protection enquiries: contact@snusowo.pl

Categories and sources of personal data

We may process the following categories of personal data: identification, contact and address details; User Account data; Order data, including payment identifiers; logistics data, including tracking numbers and delivery statuses; statements and consents, including acceptance of the Terms & Conditions; technical logs such as IP addresses, device identifiers and timestamps; and data obtained through cookies and similar technologies.

Personal data may be collected directly from the Customer, from payment systems, from Carriers and logistics providers, and from the Customer's device through cookies, local storage and similar technologies.

Purposes and legal bases for processing

• Performance of a contract, including registration, processing Orders, payments, deliveries, returns and complaints – Article 6(1)(b) GDPR.
• Compliance with legal obligations, including accounting, tax settlements, the OSS procedure, record keeping, product safety obligations and cooperation with competent authorities – Article 6(1)(c) GDPR.
• Age verification, fraud prevention and the establishment, exercise or defence of legal claims – Article 6(1)(c) and/or (f) GDPR, depending on the circumstances.
• Communication relating to Order fulfilment and applicable legal obligations – Article 6(1)(b) and (c) GDPR.
• Analytics and personalisation – based on consent (Article 6(1)(a) GDPR) or the Controller's legitimate interests (Article 6(1)(f) GDPR), depending on the type of processing.
• Maintenance and security of the Service, including technical logs, fraud prevention and testing – Article 6(1)(f) GDPR.

Recipients of personal data

Personal data may be disclosed to payment service providers, logistics operators and Carriers, hosting and IT service providers, CRM and customer service system providers, accounting firms, legal advisers, analytics providers and competent public authorities where disclosure is required by law, including tax and customs authorities.

Transfers outside the European Economic Area (EEA)

Where our service providers are located outside the European Economic Area, we ensure that an appropriate legal basis for the transfer is in place, including, where applicable, the European Commission's Standard Contractual Clauses, together with appropriate security measures.

Information about the safeguards applied to international data transfers may be obtained by contacting us at: contact@snusowo.pl.

Data retention periods

• Account data and purchase history – for the duration of the Account and subsequently for the period required by applicable law and until the expiry of applicable limitation periods.
• Tax data and documentation relating to the OSS procedure – for the period required by applicable law, generally up to 10 years from the end of the relevant tax year.
• Data processed on the basis of consent – until consent is withdrawn or the purpose of processing otherwise ceases, unless further storage is required by law.

Rights of data subjects

You have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing, as well as to withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You also have the right to lodge a complaint with the competent supervisory authority, including the Polish President of the Personal Data Protection Office where applicable, or the supervisory authority competent for your habitual residence, place of work or place of the alleged infringement.

Automated decision-making and profiling

We do not make decisions concerning Users that produce legal effects or similarly significantly affect them solely on the basis of automated processing of personal data.

We may use profiling for analytics and for personalising content and offers, subject to applicable law and an appropriate legal basis.

Where provided by law, you have the right to object to such processing.

Cookies and similar technologies

The Service uses cookies and similar technologies, such as local storage, to ensure the proper functioning of the online store, remember settings and analyse traffic.

We use a consent management mechanism that allows Users to select relevant categories of cookies, including necessary and analytics cookies.

Cookie preferences may be changed using the consent management mechanism available through the Service.

Data collected through cookies may be linked to a User's Account after login only where an appropriate legal basis exists, in particular where the User has provided the required consent.

Security and data breach notification

We apply appropriate technical and organisational measures designed to protect personal data, including encryption, access controls, restrictions on access to personal data and security testing.

In the event of a personal data breach, we act in accordance with the requirements of the GDPR. Where a breach is likely to result in a high risk to the rights and freedoms of individuals, affected persons will be informed in accordance with applicable law.

Updates to this Privacy Policy and contact

We reserve the right to update this Privacy Policy, in particular where required by changes in applicable law, the operation of the Service or the technologies we use.

We may notify Users of material changes through the Service or, where appropriate and practicable, by e-mail.

If you have any questions regarding the protection of personal data, please contact us at: contact@snusowo.pl.