PRIVACY POLICY

As of January 1, 2021, new consumer law regulations came into effect. Individuals running a business who make a purchase online or in a brick-and-mortar store will, in some cases, have the same rights as consumers, even if they receive an invoice. This applies primarily to returns and complaints. Sellers will also have to comply with a number of additional disclosure obligations applicable to sole proprietorships.

The changes apply to online and stationary sales, as well as orders placed by telephone or email.

This Privacy Policy contains information on the principles of collection, processing, use, purpose and access of personal data obtained from Users by VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, NIP number: 5322118945, REGON number: 541702370, via the website operating at velvetgym.pl. The Privacy Policy contains the principles of collecting and using data about Users applicable on the Website.

§1. DEFINITIONS

1. Administrator – VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, Tax Identification Number (NIP): 5322118945, National Business Registry Number (REGON): 541702370.
2. Personal data – all information about a natural person identified or identifiable by one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, online identifier and information collected via cookies and other similar technology.
3. Policy – this Privacy Policy.
4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
5. Website/service – website run by the Administrator at velvetgym.pl.
6. User – any natural person visiting the Website or using one or more services or functionalities described in the Policy.
7.  Cookies – means IT data, in particular small text files, saved and stored on devices through which the User uses the Website pages.
8. Own Cookies – means Cookies placed by the Administrator, related to the provision of electronic services by the Administrator via the Website.
9. Script – a piece of program code used to make our website function correctly and interactively. This code is executed on our server or on your device.
10. Webbeacon – A web beacon (or pixel tag) is a small, invisible piece of text or image on a website that is used to monitor website traffic. For this purpose, various data about you is stored using web beacons.

§2. GENERAL PROVISIONS

1. This Privacy Policy is for informational purposes only, which means that it does not constitute a source of obligations for Users or Customers.
2. The Administrator processes personal data in accordance with the provisions of generally applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR") and national provisions on the protection of personal data.
3. The data we receive is data resulting from your use of the contact form on the website and direct contact with the Administrator.
4. The Administrator takes special care to protect the interests of data subjects, and in particular ensures appropriate technical and organizational measures to guarantee the security of personal data processing and compliance of processing with applicable law.
5. The Administrator ensures that data is collected for specified, legitimate purposes and is not subject to further distortion or processing incompatible with those purposes. Collected data is processed and stored in a form that permits identification of the data subjects for no longer than is necessary to achieve the processing purpose.
6. The Personal Data Administrator reserves the right to change the Privacy and Cookie Policy. Changes take effect on the date they are published on the website and apply to all legal actions or events that occur from the time of their publication until the next change to the Privacy and Cookie Policy.
7. Processing, within the meaning of the Privacy Policy, means an operation or set of operations performed on Personal Data or sets of Personal Data in an automated or non-automated manner, such as collecting, recording, organizing, structuring, storing, adapting or modifying, downloading, viewing.

§3. Who is the Administrator of your data?

1. The Controller of your personal data is VELVET GYM Sp. z o. o. with its registered office in Józefów, at Marszałka Piłsudskiego 126A Street, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, XIVth Commercial Division of the National Court Register, under the KRS number: 0001172097, and the Tax Identification Number (NIP): 5322118945, and the National Business Registry Number (REGON): 541702370. This Privacy Policy defines the principles of privacy and processing of personal data of Website Users based on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

§4. Purpose of personal data processing

1. The purpose of the data processed by the Administrator results from the User's consent or legal provisions and from specifying the actions taken by the User within other channels of communication with the User.
2. The purpose of data processing is to conclude and execute a commercial service agreement between the Service Provider and the User. In these cases, the basis for processing your data is its necessity to perform the agreement or to take necessary steps before entering into the agreement (Article 6, Section 1, letter b of the GDPR). Therefore, in accordance with applicable regulations, the basis for processing data will also be its necessity to comply with a legal obligation to which the Controller is subject (Article 6, Section 1, letter c of the GDPR), in particular:

• issuing and storing invoices and accounting documents,
• making data available to state authorities within the limits and on the basis of legal provisions, e.g. for tax and accounting purposes.

Personal Data are processed by the Administrator on the Website for the purpose of:
and) enabling the use of the Website's functionalities, including automatically when using the Website. Further possible purposes of processing Customer Personal Data by the Administrator include, in particular: conclusion and implementation Service Provision Agreements,

b) in order to conclude and implement the Sales Agreement, or taking action at the request of a future Client before concluding it, i.e. VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, and the Tax Identification Number (NIP): 5322118945, and the National Business Registry Number (REGON): 541702370. We need your personal data to fulfil your order and execute the concluded contract – in particular to confirm the submission and booking of the selected service, as well as to contact you in this matter, if necessary – this applies to random, non-standard situations in relation to the service order;

c) to present advertisements, offers or promotion regarding services intended for all recipients, in particular for the provision of services electronically, e.g. newsletter, account management on the website, expressing opinions, handling various notifications, as well as ongoing contact with you;

d) fulfillment of legal obligations arising from regulations, e.g. tax and accounting, especially in the case of paid contracts;

e) conducting correspondence with Customers, including responding to Customer messages;

f) efficient operation and functioning of the Website and ensuring the security of its use, including the detection of abuses and analysis;

g) fulfilling the obligations of the Service Provider, in particular complaints regarding contracts concluded on the Website or via the Website;

h) for the purpose of publishing the Content.

§5. Consent

1. When you first visit our website, we'll show you a pop-up window explaining how we use cookies. By clicking on the "Cookies" notification, you consent to the use of all cookies and plug-ins as described in the pop-up window and this cookie statement. You can disable cookies through your browser, but please note that our website may not function properly if you do so.

§6. Third Parties

1. We have entered into cookie agreements with other companies that place cookies. However, we cannot guarantee that these third parties will process personal data reliably or securely. VELVET GYM Sp. z o. o., with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, XIV Commercial Division of the National Court Register, under KRS number: 0001172097, Tax Identification Number (NIP): 5322118945, National Business Registry Number (REGON): 541702370. Sites such as Google should be considered independent data controllers within the meaning of the General Data Protection Regulation. We recommend that you read the privacy statements of these companies.

§7. Privacy Policy regarding cookies

1. This Cookie Policy covers cookies and other similar technologies. By using this website, you consent to the use of cookies and other similar technologies in accordance with this Cookie Policy.
2. Some cookies ensure that certain parts of the website work properly and that user preferences are met. By placing functional cookies, we make visiting our website easier. This way, you don't have to repeatedly enter the same information when visiting our website, and, for example, items remain in your shopping cart until you pay. We may place these cookies without your consent.
3. Analytical cookies – We use analytical cookies to optimize the website experience for our users. These analytical cookies allow us to obtain information about how our website is used. We request your consent to place analytical cookies.
4. Social buttons – We have included Facebook buttons on our website to promote the website (e.g., "Like," "Pin") or share (e.g., "Post") on social media platforms like Facebook. These buttons work using pieces of code from Facebook itself. This code places cookies. These social media buttons may also store and process certain information so that personalized advertising can be displayed. Please read the privacy policies of these social media networks (which may change regularly) to understand what they do with the (personal) data they process using these cookies. The data collected is anonymized to the greatest extent possible. Facebook is based in the United States.
5. The website automatically collects data contained in cookies to process and store information about how users use the website. Cookies are small text files that are saved on your computer or mobile device and then retrieved during subsequent visits.

Cookies they can be used and exploited as social, advertising, functional, static, transaction security, necessary for the proper operation of the website, permanent, own, external or session cookies. The administrator uses

Own Cookies for the following purposes:

a) Configuration of the website, adapting the content of the Website pages to the User's preferences and optimizing the use of the Website pages;
• recognizing the Website User's device and its location and appropriately displaying the website, tailored to his individual needs;
• remembering the settings selected by the User and personalizing the User interface, e.g. in terms of the selected language or region from which the User comes;
• remembering the history of pages visited on the website in order to recommend content;
• font size, website appearance, etc.
b) Authenticating the user on the website and ensuring the user's session on the website
• maintaining the Website User's session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Website; • correct configuration of selected Website functions, enabling in particular verification of the authenticity of the browser session;
• optimizing and increasing the efficiency of services provided by the Administrator.
c) Implementation of processes necessary for the full functionality of websites
• adapting the content of the Website's web pages to the User's preferences and optimizing the use of the Website's web pages. In particular, these files allow for the recognition of the basic parameters of the User's Device and appropriate display of the website, tailored to their individual needs;
d) Remembering the user's location
• correct configuration of selected Website functions, enabling in particular the adjustment of the information provided to the User, taking into account his location.
e) Analysis, research and audience audit
• creating anonymous statistics that help understand how Website Users use the website, which allows for the improvement of its structure and content.
f) Ensuring the security and reliability of the website.

The service administrator uses and may use external cookies in accordance with the development of the website.. To fully optimize the User experience, when using our website, we may use third-party cookies that provide marketing services to us, displaying advertisements that reflect the user's subsequent online activity. a) Analysis: The services specified in this section allow the Owner to monitor and analyze website traffic and may be used to track user behavior.

Facebook Ads Conversion Tracking System – is a service provided by Facebook Inc. It links data from Facebook with actions observed while using this application. Personal data collected: cookies and usage data. Place of processing: Facebook Inc., based in the USA, or Facebook Ireland, based in Ireland. Privacy Policy

Google Analytics is an analytics service provided by Google Inc. ("Google"). Google uses the collected data to track and analyze how you use this website, to prepare reports on website activity, and to share them with other Google services. Google may use the collected data to personalize and contextualize ads within its own advertising network. Personal data collected: cookies and usage data. Place of processing: USA – Privacy Policy – Opt Out

Google AdWords Conversion Tracking (Google Ads) is an analytical tool provided by Google, Inc. that links data from the Google AdWords advertising network with activities performed while using this application. Personal data collected: cookies and usage data. Place of processing: USA –  Privacy Policy

Google Tag Manager is an analytical tool provided by Google, Inc.. Personal data collected: cookies and usage data. Place of processing: USA –  Privacy Policy
b) Presenting multimedia content on the Website pages that are downloaded from an external website:

YouTube Video Widget (GOOGLE) – is a video content display service provided by Google Inc. It allows the display of this type of content within the application. Personal data collected: cookies and usage data. Place of processing: USA – Privacy Policy) Logging in to the website using an account on another website:

Facebook Connect – a solution that allows you to log in to the website using your Facebook.com account. Personal data collected: cookies and usage data. Place of processing: Facebook Inc., based in the USA, or Facebook Ireland, based in Ireland.  Privacy Policy

Google – a solution that allows you to log in to the website using your Google account. Personal data collected: cookies and usage data. Place of processing: USA – Privacy Policy .

Instagram – a solution that allows you to log in to the website using your existing Instagram.com account. Personal data collected: cookies and usage data. Place of processing: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland –  Privacy Policy

Tweeter – a solution that allows you to log in to the website using your existing account on Tweeter.com. Personal data collected: cookies and usage data. Place of processing: Twitter International Company, Attn: Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND –  Privacy Policy

Linkedin – a solution that allows you to log in to the website using your existing account on Linkedin.com. Personal data collected: cookies and usage data. Place of processing: LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland –  Privacy Policy

§8. Possibility of specifying the conditions for storing or accessing cookies

1. The User may independently and at any time change their Cookie settings, specifying the conditions for their storage and access by Cookie files to the User's Device. The User may make changes using the web browser settings or through the service configuration. These settings can be changed, in particular, to block the automatic handling of Cookies in the web browser settings or to notify the User each time Cookies are placed on the User's Device. Detailed information about the possibilities and methods of handling Cookies is available in the software (web browser) settings, or you can indicate your preferences at: www.youronlinechoices.eu

Below we present how you can change your web browser settings regarding the use of cookies: Browser Internet Explorer Browser Mozilla FireFox Browser Chrome Browser Safari Browser Opera Browser Windows Phone

The user may delete cookies at any time using the functions available in the web browser he or she uses.

Restricting the use of cookies may affect some of the functionalities available on the Website, so it is recommended to verify that the website continues to function correctly. If errors occur during the website loading process or other issues that adversely affect or limit the use of the website, restore the default cookie settings in your web browser.

§9. Scope of personal data processing

1. The scope of personal data processed by the Administrator results from the User's further consent or legal provisions to further specify actions taken by the User on the website or through other channels of communication with the User. In connection with the User's use of the website, the Administrator collects data to the extent necessary to provide the individual services offered, as well as information about the User's activity on the Website. Detailed rules for personal data collected during the User's use of the Website are described below. Users using the website remain anonymous until they decide to provide their data. Information contained in system logs (e.g., IP address) resulting from the general rules of internet connections is used by the Administrator for technical purposes resulting from the website's software. IP addresses are used to collect general, statistical demographic information (e.g., about the region from which the connection originates).
2. Placing an order or requesting a service requires completing a form, which requires providing contact information via email and, if applicable, telephone. We use the information provided in the form to contact our customers, identify payments, and provide comprehensive services.
3. Providing personal data referred to in point II -§9 is voluntary, although necessary for the Service Provider to provide Electronic Services within the website or to conclude an Agreement for the provision of services, and failure to provide such data will prevent the conclusion of a given agreement/order.
   The possible scope of personal data processed during:Concluding contracts via the contact form, in particular for the provision of services – name and surname, address (street, house number, town and postal code), contact telephone number, IP address, Cookies or other data provided by the Service Provider on the Website or during contact with the Client for the purpose of providing the service/order.
4. Efficient operation and functioning of the Service, including the website, and ensuring user safety, including for the purpose of detecting abuse, creating reports and analyses, including page view statistics for the Service. Detailed information regarding further data processing can be obtained by contacting the user:

   and) Contact form (Internal website application) – By completing the contact form, the user authorizes this application to use this data to respond to requests for information, quotes, or other actions indicated in the form header. Depending on its location, the contact form collects personal data such as: first name, last name, email address, phone number, mailing address, province, postal code, or other optional data designed as "checkboxes" to specify the subject of the contact.

   b) Mailing list or newsletter – Upon registering for a mailing list or newsletter, your email address will be added to a contact list of those who may receive emails regarding this application containing commercial or promotional information. Your email address may also be added to the list as a result of signing up for the application or after placing an order. Personal data collected: email address, first name, last name, phone number, province, and zip code.

   c) Telephone contact – We may contact users who provide their phone number for advertising or promotional purposes related to the application featured on the website, as well as to assist with an order. Personal data collected: phone number.

§10. Legal basis for processing Personal Data

1. The legal basis for the processing of Personal Data is:
   a) the consent of the person whose Personal Data relates to their further processing;
   b) necessity to perform contracts concluded on or through the Website, or to take actions requested by the person to whom the Personal Data relate before concluding the contract;
   c) necessity to fulfil a legal obligation incumbent on the Service Provider; d) legitimate interests pursued by the Service Provider or by a third party, which are electronic payment operators or other interests pursued in connection with the functionality of the Website, provided that this basis for the processing of Personal Data does not apply to children.
   e) In the case of personal data relating to children, they are processed if the child is over 16 years of age.

§11. Period of processing of Personal Data

1. VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, XIVth Commercial Division of the National Court Register, under the KRS number: 0001172097, NIP number: 5322118945, REGON number: 541702370, we store personal data for the period of your account on the velvetgym.pl website for the purpose of making purchases. After deletion of the Account, VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, NIP number: 5322118945, REGON number: 541702370 will be deleted.
2. If the processing of Personal Data is dependent on the Customer's consent, Personal Data may be processed until the consent is withdrawn.
3. The data processing period may be extended if processing is necessary to establish, pursue, or defend against potential legal claims, and after that period only if and to the extent required by law. After the processing period, the data is irreversibly deleted or anonymized.
4. We store the personal data of non-logged-in Users for a period corresponding to the life cycle of Cookies stored on their devices.
5. Data contained in accounting documents will be stored in accordance with tax law for a period of 5 years.

§12. Voluntary provision of personal data

1.  Providing Personal Data by the Customer on the Website is voluntary, but necessary to use certain website functionalities and fulfill the Sales Agreement. Failure to provide the required data in a specific area of the website may result in the inability to conclude the Sales Agreement and further service provision.
2. The data necessary to conclude a Sales Agreement or an agreement for the provision of Electronic Services are also indicated each time on the page/subpages of the Website.
3. Refusal to consent to the processing of personal data provided for marketing, advertising or promotional purposes may prevent the user from accessing special offers, promotions and service information sent electronically by the website to users.

§13. Profiling of Personal Data

1. VELVET GYM Sp. z o. o. with its registered office in Józefów, at 126A Marszałka Piłsudskiego Street, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, XIVth Commercial Division of the National Court Register, under the KRS number: 0001172097, and the Tax Identification Number (NIP): 5322118945, and the National Business Registry Number (REGON): 541702370. Your personal data may be processed in an automated manner (including in the form of profiling), however this will not produce any legal effects for you or similarly significantly affect your situation. Profiling of personal data by the Controller involves the processing of your data (also in an automated manner) by using it to evaluate certain information about you, in particular to analyse or forecast your personal preferences or interests.
2. You have the right to object to profiling at any time.
3. By opting out of receiving emails and marketing communications about our services, we will consider you to be objecting to the processing of your personal data, including profiling, for these purposes. Legal basis: Article 21 of the GDPR.

§14. Protection of your Personal Data

1. The personal data you provide to us is processed by the Administrator in a secure manner and in accordance with the law.
2. The personal data entrusted to us are used only for the purpose and to the extent described in §4 and §7.
3. The personal data you entrust us with is stored and secured in accordance with the principles set out in applicable legal provisions: The Personal Data Protection Act of 29 August 1997 (consolidated text: Journal of Laws No. 101 of 2002, item 926, as amended),
   • Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws No. 144, item 1204, as amended)
   • Act of 16 July 2004 - Telecommunications Law
   • Regulation of 29/04/04 of the Minister of Internal Affairs and Administration on the documentation of personal data processing and the technical and organizational conditions that should be met by devices and IT systems used for personal data processing (Journal of Laws No. 100, item 1024).
4. What is called the provision of services?
   Pursuant to Article 2, Section 4 of the Act of 18 July 2002 on the provision of services by electronic means – „provision of services” means the performance of a service provided without the simultaneous presence of the parties (remotely), by transmitting data at the individual request of the service recipient, sent and received by means of electronic processing devices, including digital compression, and data storage, which is entirely broadcast, received or transmitted via a telecommunications network within the meaning of the Act of 16 July 2004 – Telecommunications Law.
   ENTIRE CONTENT OF THE ACT
   
5. To increase the protection of personal data, we recommend that when registering or using the Website or other Online Services: • enter a login and a strong password that will not be easy to guess or known by close/third parties.
   • exercise caution and keep your login details and personal data confidential, which may be used on our website, and should not fall into unauthorized hands beyond the scope of your own web browser.
   • always "log out" from the website, not leaving the website access account open when you suddenly need to leave the room or apartment for a longer period of time, which may affect the risk of data being intercepted by people from your surroundings.
   • it is advisable to have and use antivirus programs that will additionally protect the use of your device in the vicinity of unsecured Wi-Fi networks available in public places.
   • Introduce additional external solutions, such as installing a browser plug-in. Sometimes websites may have additional tracking scripts resulting from further functionalities of the website. In this case, you can use the "Ghostery" plug-in or other similar ones to disable scripts that track the user's activity on the website.
6. Our goal is to ensure the privacy of our website users. Data protection is a matter of trust that builds long-term relationships that benefit all parties. To ensure that every user of our website feels safe, we strictly comply with national regulations in this area when processing personal data. Due to the entry into force on May 25, 2018, of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we make every effort to meet all the requirements arising directly from the aforementioned regulation.
7. The security of personal data also rests with the user of the service. Therefore, we ask that you, at your own discretion, also follow the specific guidelines in §10, point 4 and be aware of the actions taken in connection with providing consent and further contact inquiries. You can always contact us via the "CONTACT" tab to inquire about the data required or the data that will be processed for the purpose of placing an order/providing a service.

§15. Payment transactions

1. The quick payment process on the website is carried out by eService.

§16. Information on the transfer of data in forms

1. The website only collects data voluntarily provided by the User.
2. The data provided in the forms may be transferred to entities that technically implement certain services – e.g. payment processing services or for the purpose of courier/postal shipment on a legal document/postal/courier shipping label, or other entities with which the Website Administrator cooperates in this respect.
3. The website may also save information about connection parameters (time stamp, IP address).
4. The data provided in the form may constitute a set of potential customers, registered by the Website Administrator in the register maintained by the Inspector General for Personal Data Protection.
5. The provision of an identifying e-mail address by the user will be considered as an order for commercial information in accordance with Article 10, paragraph 2 of the Act on the provision of services by electronic means.

§17. Your rights in connection with the transfer of personal data

1. We ensure that all your rights discussed below are met. You can exercise your rights by submitting your requests to kontakt@velvetgym.pl. Additionally, you can make selected changes to your account settings after logging in to the website.
2. Data subjects have the following rights related to the processing of personal data:
   and) The right to withdraw/withdraw consent to data processing.
   You have the right to withdraw any consent you provided during the registration process for the Website, as well as when using individual services and functionalities offered on the Website. Withdrawing consent does not generate any legal consequences; however, it may affect your further use of the Website's services for the purpose of fulfilling orders or services that can only be provided with consent – Legal basis: Article 7, paragraph 3 of the GDPR.
   b) The right to access personal data. You have the right to obtain confirmation from us as to whether we process personal data. VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, Tax Identification Number (NIP): 5322118945, National Business Registry Number (REGON): 541702370. If so, you have the right to access your personal data, obtain information about the purposes of their processing, the categories of personal data being processed, as well as the recipients or categories of recipients of this data, the planned retention period of your personal data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with a supervisory authority, the source of this data, any automated decision-making, including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union. You always have the right to request a copy of your personal data. Legal basis: Article 15 of the GDPR.
   c) The right to request the rectification of personal data. You have the right to rectify and amend your personal data. You can do this yourself in your account section on the Website. You can always request that we do this for you, based on your consent and the substantive need for such amendment or modification. Legal basis: Article 16 of the GDPR.
   d) The right to request the deletion of personal data ("the right to be forgotten") You have the right to request the deletion of all or some of your personal data. We will treat a request to delete all personal data as a request to delete your Account. Despite your request to delete personal data, in connection with your objection or withdrawal of consent, we may retain certain personal data to the extent necessary to establish, pursue, or defend legal claims. This applies in particular to personal data including: first name, last name, email address, and purchase history, which we retain for the purpose of handling complaints and claims related to the use of our services. Legal basis: Article 17 of the GDPR.
   e) The right to request the restriction of the processing of personal data. You always have the right to request that we restrict the processing of your personal data on our website. Submitting such a request may prevent you from using certain functionalities or services that would require the processing of the data covered by the request. We will also not send you any communications, including marketing, commercial, promotional, etc. Legal basis: Article 18 of the GDPR
   f) The right to object to data processing. You have the right to object to the processing of your Personal Data, to withdraw consent to the processing of Personal Data for one or more purposes for which it was granted, at any time without affecting the lawfulness of processing based on consent before its withdrawal, as well as the right to transfer your Personal Data. Unsubscribing from receiving recommended events by email, as well as unsubscribing from receiving marketing communications regarding our services, will constitute your objection to the processing of your personal data. If your objection proves to be justified and we have no other legal basis for processing your personal data, we will delete VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Józefów. Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, NIP number: 5322118945, REGON number: 541702370, to the use of which you have objected. Legal basis: Article 21 of the GDPR.
   g) The right to transfer personal data. You have the right to receive your personal data that you provided to us or that you entered on the website during account registration, and then send it to another personal data controller of your choice, e.g., another operator of similar services. You can also request that we send your data directly to another controller, if technically feasible. Legal basis: Article 20 of the GDPR.
   h) The right to withdraw consent, to any extent in which they are processed by VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, NIP number: 5322118945, REGON number: 541702370 Personal data on the basis of previously expressed consent, there is the right to withdraw it.
   and) The right to submit complaints, inquiries, and requests to the authority. You can submit complaints, inquiries, and requests to us regarding the processing of your personal data and the exercise of your rights. If you believe that your right to personal data protection or other rights granted to you under the GDPR have been violated, you have the right to lodge a complaint with the Inspector General for Personal Data Protection (in the future, the President of the Personal Data Protection Office).
3. How long does it take for us to comply with your request? If, in exercising the rights listed above, you submit a request to us, we will comply with it or refuse to comply with it immediately, but no later than 14 days after receiving it. However, if – due to the complex nature of the request or the number of requests – we are unable to comply with your request within 14 days, we will comply within 60 days, informing you in advance of the intended extension. For technical reasons, we always need 24 hours to update the settings you have selected in our systems. Therefore, you may receive an email from us during the system update that you have opted out of receiving.

§18. Is VELVET GYM Sp. z o. o. with its registered office in Józefów, at ul. Marszałka Piłsudskiego 126A, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under the KRS number: 0001172097, NIP number: 5322118945, REGON number: 541702370 made available to other entities?

1. State bodies – We provide VELVET GYM Sp. z o. o. with its registered office in Józefów, at 126A Marszałka Piłsudskiego Street, 05-420 Józefów, entered into the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the capital city of Warsaw in Warsaw, XIV Commercial Division of the National Court Register, under the KRS number: 0001172097, and the Tax Identification Number (NIP): 5322118945, and the National Business Registry Number (REGON): 541702370, with personal data if we are requested to do so by authorized state authorities, in particular organizational units of the prosecutor’s office, the Police, the Inspector General for Personal Data Protection (in the future the President of the Office for Personal Data Protection), the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications. The collected contact details will not be transferred or sold to any entities or natural persons other than those mentioned above or to those entities to which you have not given your consent through prior contact explaining such action and the purpose of its further implementation.

§19. Changes to the Privacy Policy

1. We reserve the right to make changes and additions to the Privacy Policy as needed. We will notify you of any changes or additions by posting appropriate information on the main pages of our websites. In the case of significant changes, we may also send you separate notifications to the email address you provided.
2. The Privacy Policy does not limit any rights you have under the current Privacy Policy.

§20. Links to other websites

1. The website may contain links to other pages/subpages of its website, or as a redirect to a collaborating website. The Administrator encourages users to familiarize themselves with the terms and conditions and privacy policies of other websites. This Policy applies only to the Administrator's specified actions.

§21. Final provisions

1. This privacy policy is effective from December 11, 2025.
2. In the event of a change to the above privacy policy, the Administrator will inform Customers about the change by publishing the new privacy policy on this website.
3. In matters not regulated in the Privacy Policy, legal provisions regarding the processing of Personal Data, including the GDPR, shall apply.
4. Unannounced News – The velvetgym.pl website reserves the right to send unsolicited messages to individuals whose contact information it possesses and who have agreed to the Privacy Policy. These messages will concern technical aspects of the Website's operation (technical messages) and changes to the privacy policy. These messages will not contain commercial information.
5. The Personal Data Administrator is not responsible for the content and practices used in the field of personal data protection by other websites whose links and Internet addresses are found on the pages or in advertisements of the velvetgym.pl website.
6. In the event of an inspection by the Inspector General for Personal Data Protection, the Customer's data may be made available to the Inspectorate's employees in accordance with the Personal Data Protection Act.
7. To ensure customer safety, all private data (sent during registration, login and purchases) is secured with a strong SSL (Secure Socket Layer) encryption algorithm and the databases are protected against access by third parties.
8. Any changes to our Privacy Policy will be posted on this page, and if the changes are significant, we will provide a more prominent notice (including, for some services, sending you an email notification informing you of the Privacy Policy changes).
9. The User has the right to inspect his/her personal data, to correct them and to submit a request to cease their processing, unless the data to which the above request relates are necessary for the provision of a given Service – then such a declaration will be equivalent to a declaration of termination of the contract for the provision of Services.
10. If you have any additional questions regarding privacy protection, please contact us at the following e-mail address: kontakt@velvetgym.pl.