1. Who is the controller of your personal data?
The controller, meaning the entity that decides how your personal data will be used, is Motionmusic, based in Bielsko-Biała at ul. Towarowa 22, the owner of the online store available at www.sklep.mayday.pl.
2. Where do we get your data from?
We received your data from you when you created an account, and later in connection with transactions made through our online store.
3. What is the purpose and legal basis for processing your personal data in our online store?
We process your personal data because it is necessary to perform the contract concluded with you, including to:
- enable you to make purchases electronically in our store;
- create and manage your account(s), and provide support for your account, transactions, and technical issues;
- handle inquiries you send us (e.g., via the contact form);
- contact you for service-related purposes.
We also process your personal data for the following purposes, based on our legitimate interest:
- monitoring your activity and the activity of other users;
- conducting marketing activities, including direct marketing;
- contacting you for permitted marketing purposes through available communication channels, in particular—with your consent—via email and telephone;
- providing payment services;
- ensuring the security of the services we provide electronically;
- conducting research and analysis regarding the functionality of our online store, improving services, and estimating the main interests and needs of visitors;
- handling your requests sent by email, when they are not directly related to the performance of the contract;
- storing data for archiving purposes.
4. Are you required to provide your personal data?
We require the following personal data from you to conclude and perform the contract and to provide you with our services:
- first and last name,
- address (street, building number, postal code, city, province),
- phone number,
- email address,
- password,
- company name and VAT ID number (if you want a VAT invoice).
If you do not provide this data, unfortunately, we will not be able to conclude a contract with you and you will not be able to use our services. Providing your data is voluntary.
5. What rights do you have regarding your personal data?
We guarantee all your rights under the General Data Protection Regulation (GDPR), including the right to access, correct, delete, or restrict the processing of your data, the right to data portability, and the right to object to the processing of your personal data.
You may exercise these rights in the following situations:
- Right to rectification: when you notice your data is incorrect or incomplete.
- Right to erasure: when your data is no longer necessary for the purposes for which it was collected; you withdraw your consent; you object to the processing; your data is being processed unlawfully; or data must be erased to comply with a legal obligation or was collected in relation to services offered to a child.
- Right to restrict processing: when you contest the accuracy of your data—we will restrict processing while verifying it; if your data is processed unlawfully but you do not want it erased; if we no longer need your data but you need it to establish or defend legal claims; or you object to processing—until we verify whether our legitimate grounds override your objection.
- Right to data portability: when the processing is based on your consent or a contract and is carried out by automated means.
You also have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority—currently the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
6. When can you object to the processing of your data?
You have the right to object to the processing of your personal data when:
- the processing is based on a legitimate interest or for statistical purposes, and your objection is justified by your particular situation;
- your data is being processed for direct marketing purposes.
Note: You may exercise your right to object as of May 25, 2018.
7. Who do we share your personal data with?
We share your personal data with entities that support us in providing electronic services—such as those providing payment, postal, or courier services.
8. How long do we store your personal data?
We store your personal data for the duration of the contract concluded with you and after its termination, for:
- statistical and archiving purposes,
- for a maximum of 10 years from the date the contract is completed.
We store your data for marketing purposes for the duration of the contract or until you object to such processing, whichever occurs first.