Privacy Policy

  1. GENERAL PROVISIONS

    1. The administrator of personal data collected via the websites www.jgdattack.eu, jgdattack.pl, and jgdattack.com is the company JGD ATTACK Łukasz Malikowski, registered business address: Kiełczewo, ul. Polna 12a, 64-000 Kościan, Poland, NIP (Tax ID): 6981768381, REGON (Business ID): 386490120, registered in the Central Registration and Information on Business (CEIDG), e-mail address: help@jgdattack.eu, hereinafter referred to as the "Administrator", who is simultaneously the Service Provider.
    2. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter: GDPR) and the Polish Personal Data Protection Act of 10 May 2018.

  2. PURPOSES, LEGAL BASES AND PERIOD OF DATA PROCESSING

    The Administrator processes personal data of users and customers for the following purposes:
    1. Registration, management of the Customer Account, and handling of the contact form: Processing is necessary to take steps at the request of the data subject prior to entering into a contract or for the performance of a contract for the provision of services by electronic means (Article 6(1)(b) of the GDPR). The data are stored for the period of active maintenance of the Customer Account or until the handling of the inquiry is completed.
    2. Execution of orders and Sales Contracts: Processing is necessary for the performance of a contract for the sale of Goods (Article 6(1)(b) of the GDPR). Data (first name, last name, delivery address, e-mail address, telephone number) are stored for the period necessary to execute the order, and after that time until the expiry of the limitation periods for civil law claims (standardly 3 years for Business Customers/Entrepreneurs, 6 years for Consumers, calculated to the end of the calendar year).
    3. Fulfillment of legal and tax obligations: Processing is necessary for the issuance of invoices, bills, and maintaining accounting records in accordance with tax law regulations (Article 6(1)(c) of the GDPR). Data are stored for a period of 5 years, counting from the end of the tax year in which the document was issued.
    4. Newsletter subscription: Processing is based on the voluntary and separate consent of the user (Article 6(1)(a) of the GDPR) for the purpose of sending commercial and marketing information. Data are stored until the consent is withdrawn (unsubscribing from the subscription).
    5. Establishment, exercise, or defense of legal claims: Processing constitutes the legally justified interest of the Administrator (Article 6(1)(f) of the GDPR). Data are stored until the expiration of the limitation periods for claims resulting from the provisions of the Civil Code.

  3. DATA RECIPIENTS

    For the proper functioning of the Online Store and the execution of orders, the Administrator transfers personal data only to trusted third-party recipients within the necessary and minimal scope:
    1. To logistics and transport providers: courier companies and oversized cargo carriers (in particular: DPD, GLS, Dachser, Rohlig Suus, CTL) in order to deliver the shipment to the Customer.
    2. To payment service providers: independent operators of electronic payment systems (in particular: PayU, PayPal) for the purpose of processing and authorizing payments for the order.
    3. To accounting and legal service providers: an external accounting office for the purpose of proper tax settlements and maintaining the company's accounting documentation.
    4. To IT and hosting providers: companies managing servers, providers of store software, and tools for automated e-mail dispatch.
    All personal data are stored and processed exclusively within the European Economic Area (EEA).

  4. RIGHTS OF THE DATA SUBJECT

    Every person whose data is processed has the right to:
    1. Access the content of their data (Article 15 of the GDPR), rectify them (Article 16 of the GDPR), or restrict their processing (Article 18 of the GDPR).
    2. Erase their data – "the right to be forgotten" (Article 17 of the GDPR) – provided that the data are no longer necessary for tax/accounting purposes or the defense of legal claims.
    3. Data portability (Article 20 of the GDPR) and to object to the data processing (Article 21 of the GDPR).
    4. Withdraw consent at any time (Article 7(3) of the GDPR) without affecting the lawfulness of processing based on consent before its withdrawal.
    In order to exercise their rights, the user may send an e-mail message to the address: help@jgdattack.eu. The Administrator fulfills the request without undue delay, no later than within one month. The user also has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (PUODO) in Poland. Providing data is voluntary but necessary to place an order or use the electronic services.

  5. COOKIES AND TRACKING TECHNOLOGIES

    1. The Store's Website uses "cookies" and analytical/marketing tools installed on the user's terminal device.
    2. The Administrator uses two basic types of cookies:
      1. Session cookies (temporary) – temporary files stored until logging out, leaving the website, or turning off the web browser;
      2. Persistent cookies – stored on the user's device for the time specified in the cookie parameters or until their manual deletion.
    3. In terms of the purpose of application, the website utilizes:
      1. Necessary cookies – enabling the proper operation of the website, maintaining shopping cart contents, and log-in authorization;
      2. Analytical and statistical cookies – used to collect anonymous information about website usage, traffic, and the number of visits (the Store uses external services, including Google Analytics);
      3. Marketing and advertising cookies – allowing the adjustment of advertising content to the user's preferences on external platforms (the Store uses Google Ads services and tracking pixels from Meta/Facebook/Instagram/TikTok advertising systems).
    4. The user has the right to manage cookies, restrict their operation, or disable them at any time using the settings of their web browser or via the privacy settings bar provided on the Store's website. Disabling necessary cookies may hinder or completely prevent the proper use of the Online Store.

  6. FINAL PROVISIONS

    1. The Administrator applies advanced technical and organizational measures ensuring the protection of processed personal data appropriate to the risks and categories of protected data, and in particular, protects data against unauthorized disclosure, acquisition by an unauthorized person, processing in violation of binding regulations, as well as alteration, loss, damage, or destruction.
    2. The Administrator provides appropriate technical means preventing the acquisition and modification of personal data sent electronically by unauthorized persons.
    3. In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant provisions of Polish law shall apply accordingly.