§1. General Provisions
The data controller is GLOBAL24 sp. z o.o. sp. k., with its registered office at ul. Rakietowa 29a, 54-615 Wrocław, registered in the National Court Register (KRS) under number 0000717810. Data protection is carried out in accordance with the requirements of universally applicable law, and data is stored on secured servers.
For the interpretation of terms, the glossary of the Terms and Conditions applies, or as described in the Privacy Policy (where this follows directly from the description).
For the purposes of better understanding of this Privacy Policy, the following definitions have been adopted:
Personal data – all information about an identified or identifiable natural person through one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, online identifier, and information collected through cookies and other similar technologies.
Policy – this Privacy Policy published at https://global24.com/en/privacy-policy/
GDPR – means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Personal data submitted via forms on the website are treated as confidential and are not visible to unauthorized persons.
§2. Purpose of Data Processing
In connection with the User’s use of the Service, the Administrator collects data to the extent necessary to provide the individual services offered, as well as information about the User’s activity. The detailed rules and purposes of processing personal data collected during the User’s use of the Service are described below.
Personal data of all persons using the Service (including IP addresses or other identifiers and information collected through cookies or other similar technologies) are processed by the Administrator for the purpose of providing electronic services, including making content available to Users, for analytical and statistical purposes, and for marketing purposes of the Administrator and other entities.
The User’s activity in the Service, including personal data, is recorded in the Service’s system logs. Information collected in logs is processed primarily for purposes related to the provision of services.
Processing shipments by the User involves processing their personal data and the personal data of their Customers. Providing data marked as mandatory is required to accept and process an order, and failure to provide it results in the order not being fulfilled.
Personal data is processed for the purpose of:
- fulfilling and handling placed orders,
- fulfilling statutory obligations incumbent on the Administrator,
- analytical and statistical purposes,
- sending email notifications related to logistics services being provided.
§3. Marketing
The Administrator processes Users’ personal data for marketing purposes, which may include:
- displaying marketing content to the User corresponding to their interests (behavioral advertising),
- sending email notifications about interesting offers or content, which in some cases contain commercial information (newsletter service),
- conducting other types of activities related to direct marketing of goods and services.
For the purpose of carrying out marketing activities, the Administrator in some cases uses profiling. This means that through automatic data processing, the Administrator assesses selected factors relating to natural persons in order to analyze their behavior or create future forecasts.
The Administrator processes Users’ personal data for marketing purposes in connection with directing contextual advertising to Users.
The Administrator and its trusted partners process Users’ personal data, including personal data collected through cookies and other similar technologies, for marketing purposes in connection with directing behavioral advertising to Users.
The Administrator provides a newsletter service, in accordance with the terms and conditions, to persons who have provided their email address for this purpose. Providing data is required to provide the newsletter service, and failure to provide it results in the inability to send it.
The User’s personal data may also be used by the Administrator to direct marketing content to them through various channels, i.e. via email, MMS/SMS, or by phone. Such actions are taken by the Administrator only if the User has given their consent, which may be withdrawn at any time.
The Administrator processes personal data of Users visiting the Administrator’s profiles on social media (Facebook, YouTube, Instagram, Twitter). This data is processed solely in connection with maintaining the profile, including to inform Users about the Administrator’s activity and to promote various events, services, and products. The legal basis for the Administrator’s processing of personal data for this purpose is its legitimate interest (Art. 6(1)(f) GDPR) consisting of promoting its own brand.
§4. Cookies
Cookies are small text files installed on the device of a User browsing the Service. Cookies collect information that facilitates the use of the website.
The Administrator uses so-called service cookies primarily to deliver electronic services to the User and to improve the quality of those services. In this regard, the Administrator and other entities providing analytical and statistical services on its behalf use cookies, storing information or gaining access to information already stored on the User’s end device (computer, phone, tablet, etc.).
Cookies used for this purpose include:
- cookies with data entered by the User (session identifier) for the duration of the session,
- authentication cookies used for services requiring authentication for the duration of the session,
- security cookies,
- session cookies of media players,
- persistent cookies used to personalize the User interface for the duration of a session or slightly longer,
- cookies used to monitor website traffic, i.e. data analytics, including Google Analytics cookies (these are files used by Google to analyze how the User uses the Service, to create statistics and reports on the functioning of the Service). Google does not use the collected data to identify the User, nor does it combine this information to enable identification. Detailed information on the scope and principles of data collection in connection with this service can be found at: https://www.google.com/intl/pl/policies/privacy/partners.
The Administrator and its trusted partners also use cookies for marketing purposes, including in connection with directing behavioral advertising to Users. For this purpose, the Administrator and trusted partners store information or gain access to information already stored on the User’s end device (computer, phone, tablet, etc.). The use of cookies and personal data collected through them for marketing purposes, in particular for promoting the services and goods of third parties, requires the User’s consent. This consent may be withdrawn at any time.
§5. Data Retention Period
The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service or the fulfillment of the order, until the withdrawal of the given consent, or until an effective objection to data processing is raised in cases where the legal basis for processing is the Administrator’s legitimate interest.
The data processing period may be extended if processing is necessary to establish and pursue any claims or defend against them, and thereafter only if and to the extent required by law. After the processing period has expired, data is irreversibly deleted or anonymized.
§6. Final Provisions
The User has the right to: access their data and request its rectification, deletion, restriction of processing, the right to data portability, the right to object to data processing, and the right to lodge a complaint with the supervisory authority responsible for personal data protection.
To the extent that the User’s data is processed on the basis of consent, it may be withdrawn at any time by contacting the Administrator by sending an email to: support@global24.com.
The User has the right to object to the processing of data for marketing purposes if the processing is carried out in connection with the legitimate interest of the Administrator, and also — for reasons related to the User’s particular situation — in other cases where the legal basis for processing is the legitimate interest of the Administrator.
In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as banks and payment operators, entities providing accounting services, couriers (in connection with order fulfillment), marketing agencies (in the scope of marketing services), and entities affiliated with the Administrator, including companies within its capital group.
The Administrator reserves the right to disclose selected information about the User to the relevant authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with applicable law.
The level of personal data protection outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers personal data outside the EEA only when necessary, and with an appropriate level of protection ensured.
The Administrator continuously carries out risk analysis to ensure that personal data is processed in a secure manner — ensuring above all that only authorized persons have access to data and only to the extent necessary for the tasks they perform. The Administrator ensures that all personal data operations are recorded and carried out only by authorized employees and associates.
The Administrator takes all necessary steps to ensure that its subcontractors and other cooperating entities also guarantee the application of appropriate security measures whenever they process personal data on behalf of the Administrator.
Contact with the Administrator is possible via email at support@global24.com or by post at: GLOBAL24 sp. z o.o. sp. k., 54-615 Wrocław, ul. Rakietowa 29a.
The Administrator has appointed a Data Protection Officer, who can be contacted via email at support@global24.com on any matter relating to the processing of personal data.
The Policy is regularly reviewed and updated as necessary. The current version of the Policy was adopted and has been in effect since 1 February 2019.
