Privacy Policy
This Privacy Policy outlines the rules and guidelines for the processing of personal data collected through the website TwentyfiveWest (hereinafter referred to as the “Website”).
1. Data of the Administrator
The administrator of your personal data, within the meaning of the GDPR, is TwentyfiveWest operating under the name Eqvol Sp. Z. o. o. with its registered office at ul. Krucza 2A, 53-411, Wroclaw, Poland (hereinafter: “Administrator”). For matters related to the protection of personal data, you can contact the Administrator via email at help@twentyfivewest.com.
The personal data collected by TwentyfiveWest through the www.twentyfivewest.com online store is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, commonly known as the General Data Protection Regulation (GDPR).
2. Purposes and Legal Bases for Data Processing
Your personal data may be processed by the Administrator on the following legal grounds:
- Contract Performance (Article 6(1)(b) GDPR): To perform a contract or take action before entering into a contract.
- Consent (Article 6(1)(a) GDPR): For marketing activities of the Administrator and cooperating entities.
- Legitimate Interest (Article 6(1)(f) GDPR): For purposes such as:
- Marketing of the Administrator’s own products and services, including analytical and profiling purposes. Profiling is used to tailor product offerings to your preferences.
- Use of contact forms provided by the Website, where the legitimate interest is to respond to user inquiries.
- Defense against potential claims, where the legitimate interest is the protection or assertion of legal claims.
3. Transfer of Personal Data
Your data may be transferred to data processors based on contracts concluded with the Administrator, but only for the purpose and to the extent necessary to achieve the objectives outlined above. This includes entities providing IT services or other services that ensure the proper functioning of the Website, where such entities process data only according to the Administrator’s instructions.
Data is only transferred to entities located within the European Economic Area (EEA), ensuring that they are subject to strict EU data protection regulations or meet an appropriate security standard.
4. Period of Storage of Personal Data
Your personal data is processed only for the period necessary to achieve the purpose of storage or as required by law, particularly until the expiry of any claims or the expiration of any legal archiving obligations, including the storage of accounting documents.
- Newsletter and Contact Forms: Data processed for these purposes will be stored until you opt-out of the service.
- Consent-Based Processing: If your data is processed based on consent, it will be stored until the consent is withdrawn. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Legitimate Interest: Data processed under legitimate interest will be retained until an effective objection to processing is raised.
5. Your Rights
You have several rights concerning your personal data, including:
- Right of Access: You have the right to obtain information about the personal data stored by the Administrator, including a copy of the data.
- Right to Rectification: You can request the correction of inaccurate personal data. Depending on the processing purposes, you may also request the completion of incomplete data.
- Right to Erasure: You can request the deletion of your personal data in cases such as:
- The data is no longer needed for the purposes for which it was collected.
- You have withdrawn your consent, and there is no other legal basis for processing.
- The data was unlawfully processed or must be deleted to comply with legal obligations.
- Right to Data Portability: You have the right to receive your personal data in a commonly used, machine-readable format if the processing is based on consent or contract and is automated. You may also request that this data be transferred directly to another controller, if technically feasible.
- Right to Restrict Processing: You may request that processing of your data be limited in cases such as:
- You contest the accuracy of the data.
- The processing is unlawful, but you oppose deletion and request restriction instead.
- The Administrator no longer needs the data but you require it to establish, exercise, or defend legal claims.
- Right to Object: If your data is processed based on the legitimate interest of the Administrator, you have the right to object to the processing at any time.
- Right to Withdraw Consent: You can withdraw your consent for data processing at any time. This will not affect the legality of processing that occurred before the withdrawal.
To exercise any of these rights, please contact us via email at help@twentyfivewest.com.
6. Security of Personal Data
Protecting your personal data is a priority for the Administrator. If you believe your data is being processed in violation of GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.
- Security Measures: Personal data is transmitted securely using SSL encryption. The Administrator regularly backs up data and updates all software used for processing personal data.
- Complaint Handling: The Administrator will respond to complaints or requests concerning your personal data within one month. If an extension is necessary, you will be informed within the initial month.
7. Information on How Personal Data is Used
In some cases, the Administrator may transfer your data to third parties necessary for fulfilling the contract or legal obligations, including:
- Couriers: For delivery of goods.
- Payment Operators: For processing payments.
8. Additional Purposes for Processing Personal Data
Your personal data may also be used for:
- Handling inquiries via contact forms.
- Preparing, packaging, and shipping goods.
- Providing the ordered services.
- Running newsletters.
The Website may collect information about users and their behavior through:
- Data entered voluntarily in forms.
- Cookies stored on user devices.