We would like to thank toy for your interest in our Web Service. The protection of your privacy is very important to us. This Privacy Policy contains detailed information with regard to the data handling procedure.
Your Personal Data Controller is: HPP Group Spółka z ograniczoną odpowiedzialnością Spółka komandytowa with its registered office in Bydgoszcz at ul. Cieszkowskiego 22/1 85-052 Bydgoszcz, Poland.
1.  Access data and hosting.
The web pages of our Web Service may be accessed without providing personal data. In the event of each call of the Web Service website the server automatically saves only the so-called server logs, such as e.g. name of the demanded file, your IP address, date and time of the call, amount of data sent and the Interne service provider placing an inquiry (access data) and documents each call of the website.
Such data are analysed only for the purpose of ensuring correct operation of our website and improvement of our offer. The above-mentioned measure is used – within the assessment of the interests – to secure our legitimate interest, consisting in the correct presentation of our offer. All the access data are deleted within seven days from the moment of termination of your visit on the website.
 Hosting services provided by an external service provider
Within the scope of entrusting us with data processing – external service provider (Webio Grzegorz Wołoszyn), solicited by us, performs services in our favour within the scope of hosting and website presentation. All the data – collected in a manner specified in this Privacy Policy – within the scope of use of our website or in forms available on the Web Service intended for such purposes, are stored on WEBIO servers. Data processing on other servers takes place exclusively in the scope specified in this Privacy Policy. This service provider has his registered office on the territory of the country belonging to the EU or EEA.
 2.    Data collection and processing for the purpose of performance of the contract and setting up a customer account.
We collect personal data only when you submit it voluntarily to us when you place your order, contact us (e.g. using a contact form or e-mail) or set up a User account. The mandatory fields are designated as such ones, because we need the data contained therein to preform a contract or consider a matter about which you contacted us to set up a customer account. Without provision of such data you may not use the Services or set up a User account or contact us. The type of the data collected results from the forms to which the data are entered. We use the data that you submit in order to perform the contract and to answer your questions. After performance of the contract or deletion of your User account the processing of your data will be restricted, and after expiry of storage periods specified in tax regulations and the accounting act such data will be deleted, unless you give us your explicit consent to further use of such data for other purposes. Your customer account may be deleted at any time. For this purpose you should send a message to the address of the Personal Data Controller or use proper function in your customer account.
 3.    Data portability.
For the purpose of performance of the contract we transmit your data to a courier service responsible for the delivery, if necessary for the supply of the ordered goods. Depending on the provider of payment services that you select in the course of the ordering process we transmit the payment data collected for this purpose to implement the payment to a credit institution handling the payment ad possibly to a provider of payment services selected by us or by you. Some providers of payment services collect data independently, if you have accounts set up with them. In such situations it is necessary within the order to log into the provider of payment services selected in the course of the process of placing an order by providing your access data. In such cases the Privacy Policy of the given provider of payment services also applies.
4.    E-Mail Newsletter.
If you subscribe to our newsletter then we will use your e-mail address for regular sending of our newsletter by electronic means based on the consent that you granted.
You may resign from receiving our newsletter at any time, by sending us a message with relevant information or using a proper link in a newsletter. After having received such a message we will delete your e-mail address, unless you give us your consent to further use of such data for other purposes.
5.    Cookies and Internet analytics.
We use the so-called cookies on our websites to make them more attractive and to enable the use of the specific functions to display certain products or for market research purposes. The above-mentioned measure – for the analysis and assessment of the interests – is used to secure our legitimate interest, consisting in the correct presentation of our offer. Cookies are small text files that are saved automatically on your terminal equipment. Some cookies that we use are deleted after termination of a web browser session, i.e. after closing it (the so-called session cookies). Other cookies are saved on your terminal equipment and enable us to recognise your web browser during any subsequent visit on our website (permanent cookies). Storage time is specified in cookies settings of your web browser. The web browser may be configured so as to receive information about using cookies and to have the possibility of making decisions about their acceptance or rejection in specified cases or entirely. Web browsers manage cookies setting in different ways. Explanations with regard to changing the cookies settings may be found in the auxiliary menu of the web browser. They are available under the following links:
Internet Explorer™:
Where permission is not given to use cookies the functionality of our website may become restricted.
Use of Google (Universal) Analytics for Internet analytics
Our website uses Google (Universal) Analytics, a tool for Internet analytics owned by Google Inc. ( The above-mentioned measure is used to protect or legitimate interest, consisting in the optimum presentation of our offer. Google (Universal) Analytics uses the methods that allow for the analysis of your use of the website – for example by cookies. Information collected automatically regarding your use of our website is generally transmitted to the Google server in the USA and stored there. Due to IP anonymisation activated on our website, your IP address is shortened before being transmitted any further within the EU Member States or within other countries being a party to the Agreement of the European Economic Area. Only in exceptional cases the full IP address is transmitted to the Google server in the USA and shortened there. As a general rule, the anonymised IP address submitted by your web browser within the Google Analytics is not connected with any Google data.
Google LLC has its headquarters in the USA and holds EU-US-Privacy Shield certificate. The actual certificate is available under the link. In compliance with the contract between the USA and the European Commission, the last one stated a proper level of data protection in case of enterprises holding Privacy Shield certificate.
You may prevent registration of the data collected by cookies regarding your use of our website (including your IP address) by Google, as well as processing of such data by Google, if you download and install a browser plugin under the link:
6.    Our contact data and your rights.
For enquiries regarding collection, processing and use of your personal data, its rectification, blockage or deletion, as well as withdrawal of any consents or objecting to the use of data for purposes specified in this Privacy Policy, please contact our Personal Data Controller:
You are entitled to the following rights:
1.    the right to obtain information on the processing of your data to the extent specified in art. 15 GDPR;
2.    pursuant to art. 16 GDPR – the right to rectify any inaccurate or incomplete personal data when you are the data subject;
3.    pursuant to art. 17 GDPR – right to erasure (“right to be forgotten”) your personal data saved by us, as far as further processing is no longer necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest;
- for the establishment, exercise or defence of legal claims;
4.    pursuant to art. 18 GDPR – right to restriction of processing of your personal data, if
- you contest the accuracy of your personal data;
- the processing is unlawful and you object to data erasure;
- we no longer need your personal data, but you need them to establish, exercise or defend a legal claim;
- you objected to the processing pursuant to art. 21 against processing;
5.    pursuant to art. 20 GDPR – right to receive the personal data that you submitted to us in a structured, commonly used and machine-readable format and the right to transmit such data to any other controller (“right to data portability”);
6.     pursuant to art. 77 GDPR – right to lodge a complaint with a supervisory authority. In general, you may address a supervisory authority regarding this matter at the place of your habitual residence, place of work or the registered office of our enterprise.

The right to object
If we process personal data in the manner described in this Privacy Policy to protect our legitimate interests, then you may object to the processing of your data for such a purpose – with the effect for the future. In case of data processing for direct marketing purposes you may exercise your right to object at any time. If the processing takes place for any other purposes, you are entitled to object only due to reasons resulting from your specific situation.
After exercising the right to object we will not continue to process your personal data, unless we indicate essential, legally valid grounds for processing and they will prevail over your interests and rights or when the data processing is aimed at establishment, exercise or defence of legal claims.
The above-mentioned does not apply when data processing is for direct marketing purposes. In such a case we will not continue to process your personal data for the above-mentioned purpose.