Privacy policy

§ 1 Glossary of Terms

Administrator - QRP Automotive SP. Z O.O., which is the entity that decides on the purposes and means of processing your personal data.
Service - the website we operate at turbochargers-shop.com along with all its subpages and subdomains, within which services are provided.
User - any natural person, legal entity, or organizational unit without legal personality that uses the Service or the services offered by the Administrator.
User Account - an individual administrative panel available to the User after registration and login to the Service, used for managing personal data, order history, and utilising additional functionalities.
RODO (GDPR) - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
All references to RODO (GDPR) in this Privacy Policy also mean UK GDPR (United Kingdom General Data Protection Regulation) in relation to Customers and personal data processed in connection with sales in the territory of the United Kingdom, in accordance with national UK law.

§ 2 General Provisions

The Administrator of personal data is QRP Automotive SP. Z O.O., with its registered office at Bratnia 8, PL-56-400 Oleśnica, with NIP number: 9112055005, REGON number: 529935630.
The Administrator can be contacted in writing at the address indicated above, via the contact form available on the Service, or by e-mail at the address: info@turbochargers-shop.com.
Pursuant to Art. 37 of the GDPR, the Administrator has not appointed a Data Protection Officer.
This Privacy Policy defines the principles, purposes, and methods of processing and protecting your personal data, and also informs about the rules for the use of cookies on the Service.
The Administrator adheres to the principles of personal data protection provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and in the relevant national provisions of the EU member states. In relation to Users from the United Kingdom (UK), the Administrator applies the provisions of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This document does not regulate the process of concluding sales contracts, complaint rules, and returns - these issues are described in a separate document available on the Service: https://uk.turbochargers-shop.com/regulations.
The rules for using the Service are described in a separate document available on the Service: https://uk.turbochargers-shop.com/conditions-of-use.

§ 3 Principles and Legal Basis for Data Processing

We respect your privacy. We use personal data in a fair manner and only to the extent necessary to provide services. We take all reasonable steps to protect your data against uncontrolled use.
The legal basis for the processing of your personal data is:

Art. 6 section 1 letter b of the GDPR - processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract (e.g., order fulfilment, contact regarding its status, delivery),
Art. 6 section 1 letter c of the GDPR - processing is necessary for compliance with a legal obligation to which the administrator is subject (e.g., tax and accounting obligations),
Art. 6 section 1 letter f of the GDPR - processing is necessary for the purposes of the legitimate interests pursued by the administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (e.g., defence against claims),
Art. 6 section 1 letter a of the GDPR - the data subject has given consent to the processing of his or her personal data for one or more specific purposes. This applies, for example, to marketing by phone or electronic means, as well as collecting data for profiling for analytical and marketing purposes.

Your personal data related to the conclusion and performance of the contract will be processed for the period of its performance, as well as for a period not longer than provided for by law, i.e., until the order or service is completed, for the purpose of fulfilling legal obligations, and until the claims become time-barred or expire.
We have the right, and in cases specified by law, also a statutory obligation, to transfer your personal data to public authorities or third parties who submit such a request based on applicable law.
The User has the right to:

access to data (Art. 15 GDPR),
rectification of data (Art. 16 GDPR),
erasure of data (Art. 17 GDPR),
restriction of processing in cases indicated in Art. 18 GDPR,
data portability of the data provided, processed by automated means (Art. 20 GDPR),
object to processing (Art. 21 GDPR),
withdraw consent at any time.

If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with:

the supervisory authority competent for your habitual residence, place of work or place of the alleged infringement; the lead authority for the Administrator is the President of the Personal Data Protection Office (PUODO) in Poland (applies to Users residing in the European Union),
the UK supervisory authority - Information Commissioner's Office (ICO) (applies to Users residing in the United Kingdom).

§ 4 Scope and Purpose of Data Collection

We collect, process, and store the following User data:

first and last name,
residence address (and delivery address),
tax identification number (NIP) - applies to entrepreneurs/companies,
e-mail address,
phone number,
information collected automatically (e.g., IP address, information about the browser used, data about the device and time of visit) for technical, statistical, and analytical purposes,
information about the selected form of payment and form of delivery,
other personal data voluntarily provided to us.

Providing the above data is entirely voluntary, but at the same time necessary for the full provision of services (e.g., placing an order, making payment, and delivery of goods).
We process your personal data mainly within the European Economic Area (EEA). In some cases (e.g., Google Analytics), we use tools provided by companies outside the EEA (e.g., Google LLC from the USA). We ensure that if your data is transferred outside the EEA, it is done solely on the basis of appropriate legal safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, which guarantee an adequate level of protection for your data.
The Service uses analytical and marketing tools (e.g., Google Analytics with the User-ID function) that involve automated data processing, including profiling. Profiling involves analysing your behaviour, interests, or preferences (e.g., based on the products viewed) in order to optimize the operation of the Service and adapt the displayed content and marketing offers to your needs. The legal basis for these activities is your voluntary consent (Art. 6 section 1 letter a of the GDPR), expressed via the cookie management panel. This processing does not lead to automated decisions that would produce legal effects concerning you or similarly significantly affect you (e.g., it does not affect decisions about entering into a contract).
Access to your data may be held by entities providing us with services necessary to run the Service, including:

shipping / courier / postal companies,
accounting firms / accounting offices,
companies intermediating online payments or banks,
IT solution providers / hosting companies / service and IT support companies,
authorized state authorities (in the event of a breach of law).

§ 5 User Account

Setting up a User Account in the Service is voluntary.
The processing of your data for the purpose of creating and maintaining a User Account (e.g., for handling order history, data management) is carried out on the basis of Art. 6 section 1 letter b of the GDPR.
The User has the right to request the deletion of the User Account at any time. Restoring such an account will not be possible; the User will have to set it up again and enter all the data.
A request for account deletion should be sent to the e-mail address info@turbochargers-shop.com.
Account deletion does not mean automatic deletion of data related to your fulfilled orders (invoices, accounting documentation), which must be stored by the Administrator due to legal obligations (Art. 6 section 1 letter c of the GDPR) or for the purpose of defence against claims (Art. 6 section 1 letter f of the GDPR).

§ 6 Cookies

We use cookies or similar technologies (hereinafter collectively referred to as: cookies), which are understood as IT data, in particular text files, stored on the end devices of Users. They are used to adjust services and content to individual preferences and to compile general statistics.
Types of cookies based on origin and storage time:

internal cookies - placed and read by the Service's ICT system.
external cookies - placed and read by the ICT systems of external Services (e.g., Google).
session cookies - temporary files remaining on the device until logging out or turning off the browser.
persistent cookies - files remaining on the device for the period set in the browser settings or until they are manually deleted.

Types of cookies based on purpose:

essential cookies (excluded from the consent requirement) - enabling the use of basic functionalities of the Service (e.g., maintaining a session after logging in),
functional cookies - enabling access to the full functionalities of the website,
analytical cookies - enabling the collection of statistics and information on how the website is used,
marketing cookies - enabling the delivery of advertising content tailored to the User's interests.

Data processing using cookies other than essential ones (i.e., analytical, functional, and marketing) is based on the active and voluntary consent of the User, expressed via the consent management panel (cookie banner) displayed during the first visit to the Service. The User can change their cookie preferences at any time by re-invoking the consent management panel.
A User browsing the website can independently and at any time change the settings regarding cookies in their web browser, defining the conditions for their storage or complete blocking. Detailed information on handling cookies can be found in the settings of your software (web browser).

§ 7 Policy Changes

The Privacy Policy may be subject to change in the event of:

the need to adapt it to applicable law (in particular the GDPR/UK GDPR),
the introduction of new or changes to existing methods of personal data processing by the Administrator,
changes in the technology of the Service's operation.

Users who have a User Account will be informed about changes to the Privacy Policy by e-mail sent to the address indicated during registration, with at least 14 days' notice. In the message, the Administrator will indicate the changed content of the Privacy Policy.
The effective date of the changes is 14 days from the date of notification.
During the notification period, a User who does not accept the new content of the Privacy Policy has the right to delete the Account or contact the Administrator (via e-mail: info@turbochargers-shop.com) and object to further data processing under the changed rules.
Failure to delete the Account or failure to submit an objection by the end of the 14-day period means acceptance of the new Privacy Policy and continuation of data processing based on it.
The Privacy Policy for unregistered Users (Users using the Service without creating an Account) comes into force upon its publication on the Service's website and applies to the processing of personal data collected from that moment.

§ 8 Final Provisions

For additional questions, please contact us:

via e-mail: info@turbochargers-shop.com,
via the contact form available on the Service,
by post to the address: QRP Automotive SP. Z O.O., Bratnia 8, PL-56-400 Oleśnica.