Privacy Policy

I. Administrator of personal data

The Administrator of the personal data is VILO.COM limited liability company with registered office in Czerwonak (62-004), ul. Gdyńska 143, registered in the register of entrepreneurs under KRS number: 0001110637, NIP: 7773428011, REGON: 528888130, hereinafter referred to as "Administrator"

II. Data Protection Inspector

The Administrator has appointed a Data Protection Supervisor, who can be contacted on all matters related to data protection by sending a message to kontakt@vilohome.com or in writing to the Administrator's postal address indicated in Section I.

III. General provisions

  1. This Privacy Policy sets forth the manner in which personal data of users of the website available at www.vilohome.com (hereinafter also referred to as the "Website") and the online store available at www.vilohome.com (hereinafter also referred to as the "Store") are collected, processed and stored

  2. Personal data are processed in accordance with the regulations on personal data protection, including in particular:

  1. Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU. L. of 2016 No. 119, p. 1, as amended), hereinafter referred to as "RODO",

  2. The Act of May 10, 2018 on the protection of personal data (i.e., Journal of Laws of 2019, item 1781), hereinafter referred to as the "DPA".

  1. Personal data shall mean any information about an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular on the basis of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

  2. The personal data processed by the Administrator shall be:

    • processed in accordance with the law,
    • collected for the designated lawful purposes indicated in Section IV of the Policy and not subjected to further processing incompatible with those purposes,
    • substantively correct and adequate in relation to the purposes for which they are processed,
    • kept no longer than necessary to achieve the purpose of processing.

IV. Purposes, legal basis and retention periods of processed personal data

Purpose of processing

Legal basis for processing personal data

Processing period

Account registration in the Store and identity verification related to secure login

Contract concluded by accepting the Store's regulations (Article 6(1)(b) RODO)

Personal data will be processed for the period during which a person remains a registered Store User, and after that period for the time necessary to comply with the law or to investigate or defend against possible claims.

Conclusion and execution of a sales contract, including handling payments, delivering goods, informing about the status of an order and handling complaints

Contract concluded by accepting the Store's regulations or filling out a purchase form in the case of purchases without registering an account with the Store (Article 6(1)(b) of the RODO)

Personal data will be processed for 5 years calculated from the end of the calendar year in which the purchase was made.

Communication with the user of the website or the customer of the Store through the form, chat or other solution provided.

The Administrator's legitimate interest in answering questions or communication from a website user or customer of the Store (Article 6(1)(f) RODO)

Personal data will be processed until an effective objection to processing is made.

Sending marketing information

The Administrator's legitimate interest in conducting marketing in connection with consent to a specific communication channel granted under the provisions of the Act of July 18, 2002 on the provision of electronic services or the Act of July 16, 2004. Telecommunications law

Until you withdraw your consent granted under the provisions of the Act of July 18, 2002 on the provision of electronic services or Article 172 (1) of the Act of July 16, 2004. Telecommunications Law, or until you express an effective objection to the processing of your personal data

Enabling the issuance of product reviews

Sending information about product availability

The Administrator's legitimate interest in providing information on product availability at the customer's request (Article 6(1)(f) of the RODO)

Personal data will be processed until an effective objection to processing is raised.

Fulfillment of the Administrator's legal obligations related to accounting and taxes

Provisions of the Accounting Act of September 29, 1994 and tax laws (Article 6(1)(c) RODO)

Personal data will be processed for the period required by the provisions of the Accounting Act of September 29, 1994 and tax laws

Investigation or defense against claims

The Administrator's legitimate interest in asserting or defending against claims, to the extent that such claims are likely to arise (Article 6(1)(f) RODO)

Personal data will be processed until an effective objection to the processing is made, but no longer than the expiration of the statute of limitations for claims.

V. Requirement to provide data

Regardless of the purpose of processing, the provision of data is voluntary, but failure to provide data may prevent, depending on the specific case, the conclusion of a contract, the use of selected services within the service and its functionalities, or the receipt of marketing content.

VI. Recipients of the data

Personal data, depending on the purpose of processing, may be disclosed:

  1. to subcontractors, in particular, to entities providing and operating selected IT systems and solutions (including hosting, development and maintenance of IT systems and websites) and supporting in the shipment of orders, installation, implementation of warranties, complaints and product repair, as well as providers of services or tools that automate marketing communications and analytical tools,

  2. financial institutions, including, in particular, banks, national payment institutions and small payment institutions, with respect to services offered by these entities, including payment services (e.g., payment methods) and consumer credit,

  3. entities providing accounting and tax services,

  4. entities providing courier and postal services,

  5. debt collection entities and law firms.

VII. Transfer of personal data to a third country

Personal data may be transferred to third countries, including in particular the USA. When the recipient of the data is outside the EEA, the transfer is based on a decision of the European Commission finding an adequate leveĺ of protection for personal data, and in the absence of such a decision, the transfer is based on appropriate safeguards, including standard data protection clauses adopted by the European Commission. The controller shall provide a copy or information about the safeguards in place upon request to kontakt@vilohome.com

VIII. Catalog of rights

You are entitled to the following rights:

  1. access to personal data,

  2. rectification of data,

  3. deletion of data,

  4. to object to the processing of data on the basis of the legitimate interest of the Administrator,

  5. data portability,

  6. withdrawal of the expressed consent at any time, which, however, does not affect the legality of the processing carried out on the basis of the consent expressed before its withdrawal,

  7. lodge a complaint to the President of the Office for Personal Data Protection.

IX. Information on automated decision-making, including profiling

There is no automated decision-making, including profiling, in the processing of personal data.