Privacy Policy (GDPR)
Data Controller
The controller of your personal data is RATEBO sp. z o.o. based in Poland.
Purpose of Processing
We process data solely for: order fulfillment, invoicing, complaints handling, commercial contact (with consent). For logged-in accounts we also store the in-store search history (query, clicked result, date) for analytical purposes: assortment planning and assessing customer activity (legitimate interest, Art. 6(1)(f) GDPR). Guest searches are anonymous.
Legal Basis
Art. 6(1)(b) GDPR (contract performance) and (c) (legal obligation - invoices, accounting records).
Scope of Data
We collect: first name, last name, email, phone, VAT ID, delivery address. For logged-in accounts additionally: in-store search history. Providing data is voluntary but necessary for order processing.
Retention Period
We retain data: account - until deletion. Orders and invoices - 5 years (accounting obligation). Search history - 12 months.
Data Recipients
Data may be shared with: courier companies (for delivery), payment operators, accounting office. We do not sell data to third parties.
Your Rights
You have the right to: access, rectification, erasure (right to be forgotten), restriction, portability, objection, withdrawal of consent. Contact: [email protected].
Cookies
The shop uses essential cookies (session, basket, login, remembering your choice, bot protection) - without consent, based on performance of the service and legitimate interest (security). With your consent we also store functional data (preferences, local price cache). Analytics and marketing cookies are not currently used. Full list and consent management: Cookie policy and Cookie settings.