PRIVACY POLICY

WEBSITE PRIVACY POLICY
WWW.PLAYROOM.PL
Dear Sir or Madam,
Below we present information describing the principles of processing personal data obtained in connection with the use of our website https://playroom.pl/, hereinafter referred to as the "Website."
I. BASIC INFORMATION
1. The controller of personal data collected via the Website is:
PLAYROOM FRÖHLICH, STRZELECKI SPÓŁKA z o.o.
00-850 Warsaw, ul. Prosta 2/14
NIP: 5272898555, REGON: 383865269, KRS: 0001006865
2. You can contact the Controller by email: logistyka@playroom.pl or by phone: +48 22 101 77 39; +48 534 688 588 (9:00 AM to 4:00 PM)
3. Each entity using the Website is its "User."
4. For the purposes of this Policy, the term "Buyer" means a natural person running a sole proprietorship (entered into the CEIDG) or a legal entity (entered into the National Court Register) that registers a B2B Account on the Website in accordance with the Wholesaler's Terms and Conditions and uses the functionalities available in the account.
5. The personal data of Website Users are processed by the Controller in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the "GDPR."
6. You can contact the Data Protection Officer by email at iod@playroom.com.pl.
7. We guarantee the confidentiality of all personal data provided to us. We use appropriate technical and organizational security measures to ensure that the data is adequately protected against unauthorized access.
II. PERSONAL DATA PROCESSING, PURPOSES, LEGAL BASIS, DATA RETENTION PERIOD
1. Business Account – B2B Account Registration and Order Fulfillment
1.1. When registering an Account, the Buyer provides their personal data and the company details required to set up an account in accordance with the Wholesale Regulations.
1.2. The data of the Buyer, who is a sole proprietor, will be processed on the basis of a contract (Article 6, Section 1, Letter b of the GDPR) for the following purposes:
a. verifying formal requirements, setting up and maintaining a business account, and enabling the use of the account's functionalities;
b. order fulfillment, i.e., the sale of goods from the Commercial Offer and the possible provision of the DROPSHIPPING@PLAYROOM.PL logistics service.
1.3. The personal data of the User who, during the registration of a B2B account, represents a Buyer who is a legal entity (i.e., an authorized employee, proxy, or member of the Buyer's management body) will be processed based on the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR) for the following purposes:
a. verification of formal requirements, setting up and maintaining a business account, and enabling the use of the functionalities available in the account;
b. order fulfillment, i.e., the sale of goods from the Commercial Offer and the possible provision of the DROPSHIPPING@PLAYROOM.PL logistics service;
where the legitimate interest of the Controller is the performance of agreements with the legal entity.
NOTE!!! Please note that with respect to the use of the DROPSHIPPING@PLAYROOM.PL service, the controller of the End Customer's personal data is the Buyer, and Playroom sp. z o.o. acts as a Processor in accordance with the Wholesale Regulations.
1.4. The personal data of the Buyer, who is a natural person, and the personal data of the User representing the Buyer, who is a legal entity, will also be processed for the following purposes:
a. to meet legal requirements related to maintaining appropriate accounting records in accordance with Article 6, paragraph 1, letter c of the GDPR (issuing and storing invoices and accounting settlements);
b. to enable the Controller to pursue potential claims or defend against claims based on the Controller's legitimate interest (Article 6, paragraph 1, letter f of the GDPR) in pursuing and defending against claims.
1.5. Personal data related to the registration and maintenance of a B2B account will be processed for the duration of the account's operation, and then for the limitation period for claims.
1.6. Order data will be processed for the time necessary to fulfill the order, and then until the limitation period for claims under the concluded contract expires. Personal data appearing on invoices will be stored for a period of 5 years from the end of the year in which the invoice was issued.
1.7. Providing personal data marked with an asterisk is required and necessary to fulfill the given processing purpose. Providing other data is voluntary.
2. Profiling and personalization of commercial and marketing information
If the User consents to receiving commercial information, including marketing information (e.g., by subscribing to a newsletter), the Controller may—based on various information—(contractual agreement).
3. In the forms provided on the Website, required fields are marked with an asterisk. Entering other data in the forms is voluntary.
VI. INFORMATION ABOUT PROFILING AND DATA TRANSFER OUTSIDE THE EEA
Personal data will not be subject to automated decision-making, including profiling, and will not be transferred to third countries, i.e., outside the European Economic Area (EEA).