$
en | $
Poland
Save to wishlist
Create a new wishlist
  1. Start
  2. Privacy Policy

Privacy Policy

This Privacy Policy explains what personal data we collect in the online store www.rallymerchandise.eu (hereinafter: the Store), why we collect it, on what legal basis, how long we keep it, and what rights you have in connection with its processing.

1. Data Controller

The controller of your personal data is Top Racing Shop sp. z o.o. with its registered office in Warsaw, ul. Powstańców Śląskich 127, 01-355 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001071394, NIP (Tax ID) 522-327-92-43 (EU VAT: PL5223279243), REGON 527048622 (hereinafter: the Controller).

Contact regarding personal data: e-mail info@rallymerchandise.eu, telephone +1 (929) 640-0292, or by post to the registered office address.

2. What data we collect

We collect only the data needed to handle purchases and run the Store:

  • data provided when placing an order or registering an account: first and last name, delivery address, e-mail address, telephone number, and — for companies — also the company name, address and tax identification number,
  • order data: purchase history, chosen delivery and payment method, returns and complaints,
  • data collected automatically while using the website: IP address, device and browser type, information stored in cookies (details in section 9),
  • the content of correspondence when you contact us by e-mail, telephone or chat.

Providing data is voluntary, but without the data marked as required when placing an order we will not be able to complete the purchase.

3. Purposes and legal bases of processing

  • Fulfilment of the order and the sales agreement (acceptance of the order, payment, delivery, handling of the customer account): Article 6(1)(b) GDPR, i.e. processing necessary for the performance of a contract.
  • Handling of returns, withdrawals from the contract and complaints: Article 6(1)(b) and (c) GDPR, i.e. performance of a contract and obligations arising from consumer law.
  • Issuing and storing invoices and tax settlements: Article 6(1)(c) GDPR, i.e. a legal obligation arising from tax and accounting regulations.
  • Newsletter: Article 6(1)(a) GDPR, i.e. your consent, which may be withdrawn at any time (an unsubscribe link is included in every message).
  • Our own marketing, analytics and improvement of the Store (visit statistics, advertising effectiveness): Article 6(1)(f) GDPR, i.e. our legitimate interest; to the extent required by law, we rely on cookie consent.
  • Establishing, pursuing or defending claims: Article 6(1)(f) GDPR.

4. How long we keep data

  • order-related data: for the period required by tax and accounting regulations (as a rule, 5 years from the end of the year in which the sales document was issued) and until the limitation periods for claims expire,
  • customer account data: until the account is deleted by you or by us at your request,
  • data processed on the basis of consent (e.g. newsletter): until consent is withdrawn,
  • cookie data: in accordance with the periods described in the cookie consent settings,
  • correspondence: up to 3 years from the closure of the matter, unless longer storage is needed to defend claims.

5. With whom we share data

We transfer data only to entities that participate in fulfilling an order or operating the Store, and only to the extent necessary to perform their tasks:

  1. Store platform operator: IAI S.A. (the IdoSell system, including the IdoAccounts login service), on which our Store runs.
  2. Courier companies carrying out deliveries:
    • FedEx Express Poland sp. z o.o., ul. Kolejowa 323, 05-092 Łomianki, Poland (FedEx privacy policy) — our main carrier for international shipments,
    • DPD Polska sp. z o.o., ul. Mineralna 15, 02-274 Warsaw, Poland (DPD privacy policy),
    • InPost sp. z o.o., ul. Pana Tadeusza 4, 30-727 Kraków, Poland (InPost privacy policy).
  3. Payment providers: the IdoSell payment system (IdoPay) operated by IAI S.A. for express payments, payment cards and Google Pay, and PayPal (Europe) S.à r.l. et Cie, S.C.A. (PayPal privacy policy).
  4. Google (Google Ireland Ltd.): Google Ads, Google Analytics, Google reCAPTCHA and Google Maps services, used for advertising, statistics and securing forms.
  5. Meta Platforms Ireland Ltd. (Facebook, Instagram): in connection with our advertising activities and social media profiles.

We limit the amount of data transferred to the required minimum. Data may also be disclosed to the relevant public authorities where required by applicable law.

6. Transfer of data outside the European Economic Area

In connection with the use of Google and Meta services, some data (mainly related to cookies and statistics) may be transferred to countries outside the European Economic Area, in particular to the USA. Such transfers take place on the basis of mechanisms provided for in the GDPR, such as a European Commission adequacy decision (Data Privacy Framework) or standard contractual clauses.

7. Your rights

In connection with the processing of your data, you have the following rights:

  • the right to access your data and receive a copy of it,
  • the right to rectification (correction) of your data,
  • the right to erasure of your data,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing, including to direct marketing,
  • the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
  • the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl); if you reside in another EU country, you may also lodge a complaint with your local data protection authority.

To exercise these rights, simply write to info@rallymerchandise.eu. You can also view and edit your account data yourself after logging in to the Store.

8. Automated decision-making

We do not make decisions about you based solely on automated processing that would produce legal effects. Analytics and advertising tools may create basic interest profiles (e.g. matching ads to viewed products) solely for marketing purposes and based on your cookie consent settings.

9. Cookies

The Store uses cookies, i.e. small text files saved on your device. Essential cookies enable the operation of the cart and login; analytics and advertising cookies work only after you have given consent in the notice displayed on your first visit. You can change the scope of consent at any time in the Consent Configuration tab or by deleting cookies in your browser settings.

10. Data security

We use an encrypted connection (SSL) across the entire website, including for electronic payments, as well as security measures for the servers and systems on which the Store runs. At the same time, please keep your account login and password confidential. The Store will never ask you to provide your password outside the login form.

11. Changes to the Privacy Policy

This Policy may be updated, e.g. when regulations or the list of cooperating entities change. The current version is always available on this page together with the date from which it applies.

12. Questions

Please direct any questions or concerns regarding this Privacy Policy to: info@rallymerchandise.eu.

pixelpixelpixelpixelpixelpixelpixel