Privacy policy

This Privacy Policy is intended to provide you with information on how your personal data is processed in connection with the use of our Online Store. It serves to provide you with the information referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR"). The Privacy Policy is for informational purposes and does not impose any obligations on you (it is not a regulation or contract)

Who is the administrator of your personal data?

1. The administrator of your personal data is the company under the name GOODIE BAG Spółka z ograniczoną odpowiedzialnością with its registered office in Cracow, address: 51 Josepha Conrada Street, 31-357 Krakow, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Krakow-Śródmieście in Krakow, XI Economic Department of the National Court Register under KRS number: 0001140017, REGON: 540253510, NIP: 9452302336.

2. In all matters relating to data protection, you can contact us by email at: store@relicrunners.com, by post at: GOODIE BAG Sp. z o.o., 51 Josepha Conrada Street, 31-357 Kraków, as well as through the contact form available on our website.

How do we take care of the security of your personal data?

1. Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR") and other currently applicable data protection laws.

2. We use, as required by national and EU laws, technical and organizational measures to ensure the protection of the processed personal data and to secure personal data against unauthorized access, acquisition by unauthorized persons, processing in violation of the law, and alteration, loss or destruction.

3. Provision of personal data is voluntary, but necessary for the use of the functionality of the Online Store that requires it, including the placement and processing of an order.

4. When the basis for the processing of personal data is consent, its absence will prevent us from taking the action to which the consent relates. You may withdraw your consent at any time, however, this will not affect the legality of our processing of your personal data, which we performed on the basis of consent before its withdrawal.

For what purpose and on what basis do we process your personal data and how long will we keep it?

Your personal data may be processed for different purposes and on different legal bases, depending on which functionality of the Online Store you use. In particular, we process your personal data for the purpose of providing services electronically under the Terms and Conditions, including in particular the purpose of placing and fulfilling an order on the Online Store. Your personal data may be processed by us for:

1. Services provided electronically

Your personal data provided by you in connection with your use of the functionality of the Online Store (in particular: first and last name, address [street, building number, premises number, city, country], e-mail address, telephone number, delivery address, if different from the customer's address), are or may be processed by us for the following purposes and on the following legal grounds:

a) providing the services specified in the Terms and Conditions by electronic means, based on an agreement for the provision of services by electronic means, as well as taking action, at your request, prior to the conclusion of the aforementioned agreement (Article 6(1)(b) GDPR),

b) possible establishment, investigation or defense against claims that may arise in connection with your use of the Online Store, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) GDPR).

We will process your personal data for the duration of the provision of electronic services, unless further retention is justified by the statute of limitations on claims or by generally applicable law, or is justified by our overriding interest arising from the pursuit of legitimate interests. In each case, the longer term of storage of personal data is decisive.

2. Placing an order in the Online Store

Your personal data provided by you in connection with placing an order in the Online Store (in particular: name and surname, address [street, building number, apartment number, city, country], e-mail address, telephone number, delivery address, if different from the customer's address, payment method, payment number, order number, order date, order value), are or may be processed by us for the following purposes and on the following legal grounds:

a) execution of your order placed on the Online Store and performance of the contract thus concluded, as well as taking action, at your request, prior to its conclusion (Article 6(1)(b) GDPR),

c) issuance and storage of accounting documents and processing of any complaints and withdrawal statements, in accordance with applicable regulations (Article 6(1)(c) of the DPA).

We will process your personal data for the period of performance of the contract, unless further data storage is required by generally applicable laws (e.g. tax, accounting regulations) or justified by the statute of limitations on claims, or justified by our overriding interest arising from the realization of legitimate interests. In each case, the longer term of storage of personal data is decisive.

3. Marketing and analytics of the store

Your personal data provided by you in connection with your use of the Online Store, as well as your data collected as part of your activity on the Online Store, is or may be processed by us for the following purposes and on the following legal grounds:

a) marketing of our services, which is our legitimate interest to conduct marketing activities (Article 6(1)(f) GDPR), with the proviso that sending commercial information by means of telecommunication terminal equipment and automatic calling systems by us is possible only with your prior consent (granting this consent is voluntary, but necessary for sending commercial information).

b) creation of compilations, analyses and statistics, including reporting, service development planning, development work, creation of statistical models, which is our legitimate interest to improve and develop the Online Store (Article 6(1)(f) GDPR),

c) possible establishment, investigation or defense against claims that may arise in connection with your use of the Online Store, as well as other purposes (e.g., archival for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) GDPR).

Our marketing activities may involve presenting you with offers, advertisements and promotions (discounts) tailored to you based on profiling (e.g. based on your activity in our store and your purchase history), so that we can better tailor offers to specific groups of our customers, as well as your preferences. However, our marketing activities do not affect you in a material way, and in our opinion, displaying personalized ads is more beneficial than presenting an offer without regard to customer needs. We will process your personal data in the case of marketing activities carried out on the basis of consent until it is withdrawn, while in the case of marketing activities carried out on the basis of the premise of legitimate interest until you raise an objection, unless further storage (in both cases) of data is justified by the statute of limitations for claims or results from generally applicable laws or is justified by the overriding interest of the Administrator resulting from the implementation of legitimate interests.

4. Email or telephone contact

Your personal data provided by you in connection with email or telephone contact (i.e. data necessary to establish and maintain contact), as well as collected in the course of further communication, are or may be processed by us for the following purposes and on the following legal grounds:

a) to respond to your email or telephone contact, which is our legitimate interest (Article 6(1)(f) GDPR),

b) taking pre-contractual action at your request, if that is what the communication will be about (Article 6(1)(b) GDPR),

We will process your personal data up to the time of correspondence, unless further storage is justified by the statute of limitations for claims or by generally applicable law, or is justified by an overriding interest of the Administrator arising from the realization of legitimate interests. In any case, the longer term of storage of personal data is decisive.

What are cookies?

1. The online store uses cookie technology, as well as functionalities similar to it. Cookie files are saved on the final device of the person visiting the Online Store. Each person visiting the Online Store has the possibility of choosing the scope of cookies, and then giving consent within the so-called cookie banner, displayed during the first visit to the Online Store.

2. Cookie files are IT data, in particular text files, which are stored on the final device of the person visiting the Online Store and are intended for the use of the Online Store. Cookies usually contain the name of the Online Store from which they originate, the time they are stored on the end device and a unique number.

3. Cookie files are used primarily to ensure proper operation of the Online Store. Depending on the choice of the scope of use of cookies by the visitor, cookies may also be used for other purposes, such as the creation of statistics that help to understand how customers use the websites, which allows to improve their structure and content, as well as for marketing purposes involving, among others, reaching visitors who have previously visited the Online Store with an advertising message when they use other websites or social networks (in this regard, cookies of third parties, i.e. providers of tools used by the Administrator for this purpose, may also be used).

4. Depending on the choice of the scope of use of cookies, they collect various types of information, which, as a rule, do not constitute personal data. However, some of the information collected in this way, depending on the type of cookies, may contain information that makes it possible to identify a visitor to the Online Store, especially when linked to other data. This applies primarily to cookies, the use of which requires the consent of the visitor to the Online Store. Other provisions of the Privacy Policy apply to such information, including in particular the rights of the data subject.

5. Detailed information regarding the scope and types of cookies used within the Online Store can be found within the cookie banner displayed during the first visit to the Online Store, as well as after clicking on the "Cookie Preferences" button. In the same way, a visitor to the Online Store may change his or her preferences regarding the use of cookies at any time, including withdrawal of previously granted consents, without affecting the legality of actions performed on the basis of consent before its withdrawal.

6. In terms of ensuring the proper operation of the Online Store, cookies are used on the basis of legal regulations. In the remaining scope, obtaining and storing information with the use of cookies is carried out on the basis of the consent of the person visiting the Online Store, expressed within the cookie banner displayed during the first visit to the Online Store or as a result of changing the settings after clicking on the "Cookies Preferences" button.

7. To the extent that cookie files may contain information constituting personal data, the basis for their processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR) in the form of, among other things, research and analysis of traffic on the website of the Online Store for statistical purposes, as well as the conduct of marketing activities by the Administrator or third parties. To the extent that these third parties will have direct access to such information, then the legal basis for such processing will be the legitimate interests of these third parties or a separate consent given by the visitor (e.g. within the privacy settings of the Social Shop). To the extent that the information collected through cookies is necessary for the proper provision of electronic services on the Online Store, the basis for processing such information is Article 6(1)(b) of the DPA.

8. Depending on the purposes and legal basis for processing personal data, information collected by cookies may be stored for different periods. Information about the storage period of information collected by individual cookies can be found within the cookie banner displayed during the first visit to the Online Store, as well as after clicking on the "Cookie Preferences" button. In the event that the information collected by cookies constitutes personal data, it will be stored as a general rule until you object. Personal data may also be stored until the statute of limitations for claims or for the time required by law. In each case, the longer term of storage of personal data is decisive.

9. The Online Store uses marketing and analytical tools of other suppliers who use cookies (third-party cookies) on the Online Store. The providers of these tools are the entities listed in the section below. For more information on the cookies of these entities, please refer to their privacy policies On the end device of a person visiting the Online Store, cookies from these third parties, who may be their independent administrators or act as co-administrators together with the Administrator, may be stored.

10. The Online Store uses marketing and analytical tools provided by the following entities that use external cookies:

1) Google Ireland Limited,

11. The aforementioned providers may store Customer data outside the European Economic Area. In such situations, your data will be transferred only to countries that provide an adequate degree of protection, and to countries that do not provide an adequate degree of protection, only if adequate safeguards are provided, including but not limited to standard contractual clauses adopted by the European Commission.

12. The online store also uses additional features of Google Analytics (Google Analytics Advertising Features). You can change this through the appropriate settings of your browser, but also through your Google Ads Preferences settings.

What rights do you have?

You have a number of rights in connection with our processing of your personal data. You can exercise each of your rights by contacting us by email to: store@relicrunners.com, by letter to: GOODIE BAG Sp. z o.o., 51 Josepha Conrada Street, 31-357 Kraków, as well as through the contact form available on our website.

You are entitled to:

a) access to your personal data and the right to request rectification, erasure and restriction of processing. To the extent that the basis for processing is the premise of our legitimate interest, you have the right to object to the processing of your personal data,

b) to the extent that the basis for the processing of your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal,

c) to the extent that the basis for the processing of your personal data is consent or contract, you also have the right to portability of your data, i.e. a request to receive your personal data from us, in a structured, commonly used format,

d) file a complaint with the President of the Office for Personal Data Protection (Stawki 2 Street, 00-193 Warsaw), whenever you consider that the processing of your personal data violates your rights.

Who do we share your personal data with?

1. Your personal data may be transferred to entities authorized to obtain personal data under the law, as well as to entities to whom we entrust data under contracts.

2. In order to perform the contract concluded through the Online Store and to ensure the proper functioning of the Online Store, we share your personal data in particular with entities that provide services:

a) postal, shipping and courier services and order processing,

b) electronic payments,

c) accounting,

d) hosting,

e) IT and in terms of software delivery, including in particular SaaS software of the online store,

f) delivery of tools for, in particular, conducting analytical research, creating statistics, tracking traffic on our website, marketing automation, CRM systems,

3. Some entities providing services to us may store your data outside the European Economic Area. In such situations, your data will be transferred only to countries that provide an adequate degree of protection, and to countries that do not provide an adequate degree of protection, only if adequate safeguards are provided, including but not limited to standard contractual clauses adopted by the European Commission.