I. General Provisions

(1) This Privacy Policy sets out the rules for the processing of personal data obtained through the sim-shop.co.uk online store (hereinafter referred to as the Store).

(2) The administrator of the Personal Data is Sim-Center spółka z ograniczoną odpowiedzialnością with its registered office in Poznań, ul. Garbary 100/164 (hereinafter: the Company).

(3) The Personal Data Administrator declares that the personal data collected through the Store are processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: RODO).

4 We have appointed a data protection officer. You can contact them by email: [email protected]

II. Type of data processed

(1) Personal data of customers are collected in case:

a) Registering an account with the Store, in order to create an individual account and manage that account

b) Handling of orders placed in the Store, in order to perform the sales contract;

(c) Provision of newsletter sending services

In particular, these are data:

(a) Name;

(b) Residential address;

(c) Date of birth;

(d) Email address;

(e) Telephone No;

(f) Order history;

(g) Computer IP No;

(h) Details of the contact person

III. Categories of personal data collected

(1) We may process your personal data because it is necessary for the performance of a contract entered into with you in connection with a transaction in the Store without prior registration and account with the Store, including:

§ to enable the provision of electronic services;

§ to make transactions on our trading platform and make payments for goods sold in the Store;

§ provide transaction processing and technical troubleshooting;

§ complaint handling;

§ handling your requests that you address to us (e.g., via a contact form); contacting you, including for purposes related to the provision of services.

(2) In addition, we are required by law to process your data for tax and accounting purposes.

(3) We also process your personal data for the purposes indicated below, based on the Company’s legitimate interest, which is:

§ provision of payment services;

§ ensuring the security of the services we provide to you electronically, including enforcing compliance with the Company’s internal policies

§ and countering fraud and abuse and ensuring traffic safety;

§ Conducting research and analysis of the Store for, among other things, the functionality of this shopping platform, improving the operation of services or estimating the main interests and needs of visitors;

§ handling of your requests communicated, in particular, to the user service department and through the contact form in situations where they are not directly related to the performance of the contract;

§ debt collection; litigation, arbitration and mediation;

§ conducting statistical analysis;

§ storing data for archival purposes, and ensuring accountability (demonstrating our compliance with legal obligations).

4 The Company collects information regarding your interactions with the content and services offered on the Store’s website, including: device and login information, so-called system logs, which include the date, time of visit and IP number of the device from which the connection was made, as well as traffic to and from individual products. The above activities are aimed at customizing the services and products offered to you. The data recorded in the server logs are not associated with specific individuals using the Store and are not used by the Administrator to identify the Customer.

IV. Recipients of data

(1) The Customer’s personal data shall be transferred to the service providers used by the Company in the operation of the Store. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, are either treated as Processors or as independent controllers.

(2) Your personal data will be transferred outside the European Economic Area to Google LLC based on appropriate legal safeguards, which are standard contractual clauses for the protection of personal data approved by the European Commission.

V. Your rights

1. we guarantee the fulfillment of all your rights under the General Data Protection Regulation, i.e. The right to access, rectify and erase your data, to limit its processing, the right to data portability, not to be subject to automated decision-making, including profiling, and the right to object to the processing of your personal data.

(2) You can exercise these powers when:

– Regarding the request for rectification of data: you notice that your data is incorrect or incomplete;

– With regard to your request for erasure: Your data will no longer be necessary for the purposes for which it was collected by the Company; you revoke your consent to data processing; you object to the processing of your data; your data is being processed unlawfully; your data should be deleted in order to comply with an obligation under the law, or your data was collected in connection with the provision of electronic services offered to your child;

– With respect to a request for restriction of data processing: you notice that your data is inaccurate – you may request restriction of the processing of your data for a period allowing us to verify the accuracy of the data; your data is being processed unlawfully, but you do not want it to be deleted; your data is no longer needed by us, but may be needed by you to defend or assert claims; or you object to the processing of your data – until we determine whether the legitimate grounds on our side override the grounds for the objection;

– With regard to the request for data portability: the processing of your data takes place on the basis of your consent or a contract concluded with you, and this processing is carried out by automatic means.

You have the right to file a complaint regarding our processing of your personal data with the supervisory authority, which is the President of the Office for Personal Data Protection.

VI. Period of storage of personal data

(1) The Company shall keep the personal data of customers only for the time necessary to fulfill the purposes for which the data was collected. After this time, the data is deleted or anonymized in such a way that the customer’s identity cannot be determined.

(2) The Company shall have the right to store data until there is an obligation under the law or it is necessary for the Company to defend or assert claims against Customers.

VII. Profiling

1. your personal data will be processed in an automated manner (including in the form of profiling), however, this will not have any legal effect on you or similarly significantly affect you. Profiling of personal data by the Company consists in processing your data (including by automated means), by using it to evaluate certain information about you, in particular to analyze or forecast your personal preferences and interests.