You have the right, among other things, to access your data, correct it, and request its deletion. Additionally, you have the right to object to the processing of your personal data or request the restriction of its processing. Providing the required personal data is voluntary, but it is necessary for us to provide certain services to you (e.g., maintaining an account, sending newsletters) or to fulfill a contract. We do not make individual decisions based solely on automated processing (profiling) that would have legal effects or similarly significantly affect your situation. Our domain is SSL-certified, ensuring that your data is encrypted. Below, you will find all the key issues related to the processing of personal data on our website.
Who is the administrator of the website and personal data?
In terms of services related to the operation of the Platform, the administrator of the personal data of Customers and Sellers collected through the Platform is Sellgro spółka z ograniczoną odpowiedzialnością, based in Poznań, at ul. Grochowska 137/7, 60-336 Poznań, registered in the Register of Entrepreneurs maintained by the District Court in Poznań – Nowe Miasto and Wilda in Poznań, VIII Commercial Division of the National Court Register under KRS number: 0000457201, with NIP: 7792413683.
Contact details: office@sellgro.com, phone no. +48 607 071 941.
In terms of order placement and fulfillment, the data controller is the Seller.
What is the legal basis for processing personal data?
Personal data is collected and processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR). The processing of personal data is also regulated by the national law of 10 May 2018 on the protection of personal data (Journal of Laws of 2019, item 1781).
What data do we process?
Depending on the purpose and user preferences, we may process data such as: name, address, email address, phone number, bank account number, IP address, and for businesses, also the VAT number and business address. Additionally, we may process other personal data sent to us in correspondence. For analytical purposes, we may also process data regarding the source of traffic to the Platform, the operating system and web browser used to browse the Platform, data on viewed products, time spent on the site, abandoned carts, placed orders, activities in response to the newsletter, user age range, gender, approximate location, and interests (based on online activity).
These data are provided to us as a result of actions such as:
- Using the contact form,
- Sending correspondence directly to our email address,
- Providing data during a phone conversation,
- Registering an account on the Platform,
- Placing an order on the Platform,
- Subscribing to the newsletter,
- Adding a product review (if such an option is available),
- Collecting other data for analytics through the Platform's software or tools listed in this Privacy Policy.
For what purposes do we process your data?
We process data relevant to the functioning of our Platform and store them for the period permitted by law. We process data provided by users while using the Platform.
- Conclusion and performance of a contract – based on Article 6(1)(b) GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
- Creation and maintenance of an account - based on Article 6(1)(b) GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
- Ensuring contact with us via the contact form, email, or phone conversation - based on Article 6(1)(b) GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
- Adding reviews and verifying them - based on Article 6(1)(a) GDPR – i.e., when the data subject has given consent to the processing of their personal data for one or more specific purposes.
- Direct marketing - based on Article 6(1)(a) GDPR – i.e., when the data subject has given consent to the processing of their personal data for one or more specific purposes, or based on Article 6(1)(f) GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, especially when the data subject is a child.
- Sending newsletters and managing loyalty programs - based on Article 6(1)(a) GDPR, i.e., when the data subject has given consent to the processing of their personal data for one or more specific purposes.
- Fulfilling legal obligations, establishing and pursuing claims – based on Article 6(1)(c) GDPR, i.e., when processing is necessary for compliance with a legal obligation to which the controller is subject, and based on Article 6(1)(f) GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, especially when the data subject is a child.
- Analytical and statistical activities - based on Article 6(1)(f) GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, especially when the data subject is a child.
We use tools such as Facebook Ads and Google Ads, through which we can target ads to specific groups based on interests, gender, age, or occupation. These tools are detailed in the cookie policy.
Who do we share personal data with?
We share personal data with other entities only to the extent that the data subject has consented to data processing, to the extent necessary to fulfill a contract, or to the extent arising from the legitimate interests pursued by the controller. These entities include the Platform's partners: hosting providers, newsletter tool providers, CRM system providers, invoicing system providers, accounting offices, courier and transport companies, IT companies providing services to the Platform, online payment operators, banks, marketing tool providers, and other subcontractors, as well as entities to which we are obliged to provide your data under applicable law. For analytical and statistical data that do not constitute personal data, they may be transferred to companies providing commonly available services in analytics, statistics, and optimization, including to the United States (e.g., companies: Google LLC, Meta Platforms Inc.).
Are data transferred to third countries or international organizations?
Some data processing operations may involve transferring data to third countries or international organizations due to the use of tools that store personal data on servers located in third countries, particularly the USA.
However, it should be noted that the providers of these tools guarantee an adequate level of personal data protection, particularly by participating in the Privacy Shield program or using standard contractual clauses. This particularly applies to the services of Google Ireland Limited.
What rights do you have regarding the processing of your personal data?
You have the right to:
- request access to your personal data,
- request the rectification of your personal data,
- object to the processing of personal data,
- request the deletion of your personal data,
- request the restriction of the processing of your personal data,
- request the transfer of your personal data,
- obtain information on automated decision-making, including profiling, and on safeguards applied in connection with the transfer of such data outside the EU,
- obtain information on the purposes of processing, the categories of processed personal data, the recipients or categories of recipients of such data,
- obtain information on your rights under the GDPR, the right to lodge a complaint with the supervisory authority, the planned retention period for data, or the criteria for determining that period, and the source of the data,
- obtain a copy of your personal data.
If you wish to exercise any of the aforementioned rights, please inform us. We will promptly provide you with all the information on actions taken in response to your request.
You can withdraw your consent to the processing of your personal data at any time. To do so, please contact us.
Cookie policy
Cookies are commonly used short text files that allow the identification of the software used, customization of content to the user's needs, and ensure the proper functioning of websites. They are stored on the device you are using and contain the domain name, storage time, and a specific value. The cookies used on our Platform are secure and are divided into session cookies and persistent cookies. Session cookies are stored only until the end of the browser session. Persistent cookies are stored on the device until they are deleted. Using your web browser, you can change your cookie preferences or delete them (persistent cookies) at any time.
Legal basis for the use of cookies
We use some cookies to the extent necessary for the proper provision of electronic services, while other cookies are used based on consent granted.
The consent derives from your web browser settings, other cookie management software, or the cookie manager settings if provided on the site.
You can disable cookies or certain types of cookies. However, we reserve the right that if cookies are disabled or limited, you may lose access to certain functionalities available on our website, for which consent to the use of specific cookies is required.
Entities whose cookies we use:
Google tools - Google Analytics, Google Ads, Google AdSense, Google Tag Manager, and YouTube, provided by Google Ireland Limited (Registration Number: 368047 / VAT Number: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland. We rely on our legitimate interest in using these tools for marketing purposes with commonly used tools. From our perspective, the data collected in connection with using these tools do not constitute personal data due to anonymization.
More information on the tools can be found in the Terms of Service and Privacy Policy of Google.
We use Google Analytics for analytics and statistics purposes to improve the performance of our website.
The data collected in connection with using the tool do not constitute personal data due to anonymization and include user traffic on the site (information about the operating system, browser, visited pages, and subpages, time spent on the site and subpages, and the source of traffic).
Google Ads
When you visit our website, cookies related to remarketing are left on your device, collecting information about your activity on our site. The collected information is used to display ads in the Google network that match your activities and interests. If you have consented to this with Google, this data may also be further processed by the company, for example, to create target groups.
If you do not wish to receive personalized ads, you can adjust the settings on the myadcenter.google.com page.
Google AdSense
Personalized ads may be displayed on our site as part of the AdSense network. Cookies are used to display ads based on visits and activities on our site or other sites.
Google Tag Manager
This tool allows analyzing traffic and user activity through tags. This helps collect information on ad effectiveness, which contributes to optimizing our website and offer.
YouTube
We use YouTube widgets on our site to embed videos hosted on YouTube. YouTube collects cookies containing information about watched videos – to ensure proper and secure service provision, improve the services, and personalize ads.
Meta Pixel
We use marketing tools available through Facebook, provided by Meta Platforms Ireland Limited.
Meta Pixel is a short code placed on the website, allowing measuring the effectiveness of ads based on the analysis of actions taken by users on the website and personalizing ads. The purpose of the code is to display ads to the right audience, increase sales, and measure ad results.
Meta Pixel uses cookies to record actions on the website – for example, traffic on the site, visits to specific subpages, adding products to the cart, or making purchases. Analyzing these actions helps optimize the site's functionality and our offer.
More information can be found in the Meta Privacy Policy.
Social media
If we place a social media plugin on the site (Facebook, Instagram, LinkedIn, Twitter), the administrator of the respective platform receives information about visits to our site using the user ID. The platform's administrator collects information about the used browser, date, and time of the visit. Platform administrators use this information to ensure the full functionality of the plugins, improve their services, and personalize ads.
More information can be found in the Meta Privacy Policy, LinkedIn Privacy Policy, and X Privacy Policy.
Server logs
Visiting the site and using it involves sending requests to the server, which are recorded in server logs. These logs contain information such as the user's IP address, date and time of the request, browser, and operating system.
Server logs are recorded and stored on the server. However, they are not associated with specific individuals using the site and are not intended for identification – they are used only for site administration, and their content is not disclosed to unauthorized persons.