Dear User!

We care about your privacy and want you to feel comfortable while using our services. For this reason, below we provide you with the most important information about the principles of our processing of your personal data, which is used by our online shop. This information has been prepared taking into account RODO, the General Data Protection Regulation.

THEREFORE, PURSUANT TO ART. 13 PAR. 1 AND ART. 2 OF THE GENERAL REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 OF 27 APRIL 2016. ON THE PROTECTION OF INDIVIDUALS WITH REGARD TO THE PROCESSING OF PERSONAL DATA AND ON THE FREE MOVEMENT OF SUCH DATA AND REPEALING DIRECTIVE 95/46/EC (RODO), WE INFORM YOU:Administrator danych osobowych ("Administrator")

The administrator of your personal data is the company: LUNA CORPORATE sp. z o.o., 174 Obornicka Street, 62-002 Suchy Las, NIP: 6751740806, REGON: 387707640 (hereinafter: we). You can contact us as follows:

• by letter to: Obornicka 174, 62-002 Suchy Las,
• by e-mail: [email protected].

2. Personal and private data

If you intend to create a user account (so-called "Customer Account") and use our services, you will be asked to provide us with your personal data.

Your data is processed by us for the purposes indicated below, related to the operation of the online shop and the provision of individual features within its functionality.

3. Purposes of processing and legal basis for processing

We process your personal data that you provide when placing an order for our products via the online shop operated under the name: x-booster.energy (x-booster.energy) or when registering a user account (so-called "Customer Account") operated within the x-booster.energy online shop (x-booster.energy) and if you agree to receive newsletters (in the form of email correspondence).

In addition, we may process your personal data that you provide when sending us a message, making a complaint, or withdrawing from a contract. We also process your bank account number from which you will make payments or to which we will make refunds. If we issue a VAT invoice, we additionally process your company name, your residential or business address, your VAT number.

Accordingly, we will process your personal data in order to:

• to enable you to place an order for goods on offer in the webshop
• to enable you to register a user account (so-called "Customer Account") in the webshop,
• to pay for your order, to the extent mentioned above,
• to perform the concluded sales agreement concerning the goods distributed by us in the online shop, including for the purpose of exercising your rights as a consumer and for the purpose of post-sale service of the goods distributed by us as well as handling claims,
• to carry out activities of a direct marketing nature, consisting of sending non-public commercial information to the e-mail address indicated by you, by means of electronic communication (so-called newsletter), in accordance with the Act of 18 July 2002 on electronic provision of services (t.j. Dz. U. z 2020 r. poz. 344), i.e. in the form of an e-mail message - if you have given your separate consent to this,
• evaluation and analysis of activity and information about you as a customer of the x-booster.energy online shop (x-booster.energy), including within the framework of automated processing of personal data (profiling), aimed at presenting general advertisements, offers and promotions of the Administrator's products or services in a manner tailored to your individual interests (without, however, producing any legal effects for you or significantly affecting your decisions), as well as for the purpose of adjusting the newsletter service (if you have given appropriate consent for non-public commercial information by means of electronic communication) and market and statistical analyses.

4. Basis for processing

The legal basis for processing your personal data is:

• Your consent with regard to the registration of a user account ("Customer Account") within the online shop; tj. art.  6 ust. 1 pkt a) RODO;
• Your consent with regard to the conduct of direct marketing activities involving the sending of non-public commercial information by means of electronic communication to the e-mail address indicated by you tj. art.  6 ust. 1 pkt a) RODO and our legitimate interest in conducting marketing activities, tj. art. 6 ust. 1 pkt f) RODO.
• The contract for the sale of the goods we distribute in the online shop, tj. art. 6 ust. 1 lit. b RODO, the processing is necessary for the conclusion and performance of a civil law contract;
• Our legitimate interest in providing proper customer service to the online shop and the proper performance of the respective sales contract concerning the goods we distribute in the online shop, tj. art. 6 ust. 1 pkt f) RODO;
• Our legitimate interest in processing your data for analytical and statistical purposes and consisting of customer satisfaction surveys and in order to present general advertisements, offers and promotions of the Administrator's products or services in a manner tailored to your individual interests (art. 6 ust. 1 lit. f RODO);
• Our legal obligations relating to the exercise of our consumer rights relating to our customers' use of the online shop tj. art. 6 ust. 1 pkt c) RODO.

If you agree to participate in a non-public promotional event requiring separate registration, we will process the data you provide on the basis of your separate consent i.e. under Article art.  6 ust. 1 pkt a) RODO.

5. Profiling

Profiling in the online shop x-booster.energy (x-booster.energy), involves the automatic analysis or prediction of a person's behaviour on the website of the online shop, e.g. by analysing the products added to the shopping cart, by viewing the page of a specific product in the online shop or by analysing the previous purchase history of the shop.

The Administrator uses automated processing tools such as, for example, Klaviyo, Hotjar or Google Analytics to process users' personal data to the above extent. By means of the aforementioned tools, the Administrator is able to assess personal factors concerning a specific user and, in particular, to analyse or forecast aspects concerning, among other things, personal preferences, interests or behaviour.

The above activities are aimed at presenting general advertisements, offers and promotions of the Administrator's products or services in a manner tailored to your individual preferences, interests or behaviour, as well as at adapting the newsletter service (if you have given the appropriate consent to non-public commercial communications by electronic means) and at market and statistical analyses, i.e. their purpose is to carry out direct marketing activities.

However, the forms of automated analysis or behavioural forecasts used by the Administrator (i.e. forms of profiling) do not have any legal effects on the users or do not significantly affect the users' decisions, in particular, no decisions are made on the basis of them concerning the conclusion or refusal of a sales contract or the possibility of using other services via the x-booster.energy online shop (x-booster.energy).

Not in every case the profiling activities described above will involve the processing of personal data. The condition for such processing is that the Administrator holds the personal data of the person (user) concerned.

6. Categories of personal data

To the extent set out in section 3. above, personal data provided in the relevant forms for placing an order or creating a user account (i.e.: first name, surname, e-mail address or telephone number, delivery address) or consent to receive messages of a direct marketing nature (newsletter) will be processed, and in connection with the processing of an order we also process the bank account number, and in the event of issuing a VAT invoice we additionally process the company name, address of residence or business address, NIP number and in the scope of activities of a marketing nature (i.e.: first name, surname, e-mail address).

7. Period of retention of personal data

We will store your personal data for the time necessary for the performance of the contract and the settlement of the contract, as well as for the period during which the parties to the contract are entitled to civil law claims (limitation period for claims).

To the extent that you have given us consent to process your personal data, we will cease to process your personal data immediately after you have withdrawn your consent or, at the latest, after a 2-year period of inactivity on your part (no transactions within the online shop, no response to our marketing messages), calculated from the end of the calendar year in which the aforementioned 2-year period expires, unless the circumstances indicated in the first paragraph of this section, above, apply.

To the extent that we process your personal data on the basis of our legitimate legal interest, we will cease processing your personal data immediately upon receipt of your objection to the processing of your personal data or, at the latest, after a 2-year period of inactivity on your part (no transactions within the online shop, no response to our marketing messages), calculated from the end of the calendar year in which the aforementioned 2-year period expires unless the circumstances indicated in the first paragraph of this section, above, apply.

8. Recipients of your personal data

We will transfer your personal data to our suppliers to whom we outsource personal data processing services, such as IT service providers, courier services, payment services and other services. Such providers will process your data under contract with us and only in accordance with our instructions, 

9. Transfers of data outside the European Economic Area

Where this is necessary due to the services provided to the Controller by the third parties referred to in the paragraph above, we reserve the possibility of transferring your personal data to recipients located outside the European Economic Area and the European Union. We guarantee that the transfer will in any case comply with the applicable data protection legislation and that an adequate level of protection of your data will be ensured. 

10. Your rights in relation to the processing of your personal data

You have the following rights in relation to the processing of your personal data:

The right to withdraw your consent to the processing of your data for the purpose of creating and maintaining a user account (so-called "Customer Account") and for the purpose of direct marketing activities involving the sending of commercial information to your e-mail address by means of electronic communication - your withdrawal of consent to the processing of your personal data: 

• for marketing purposes, this means that you will no longer receive non-public commercial communications from us by electronic means about products, services and non-public activities aimed at consumers of legal age, and you will lose any other rights provided for users who have given their consent to direct marketing,  
• for the purpose of maintaining a user account ("Customer Account"), this will mean that you will no longer be able to use the aforementioned functionality within the online shop, and you will lose any other rights provided for users who have created a user account ("Customer Account"),

• the right to access your personal data,
• the right to request the rectification of your personal data,
• the right to request the deletion of your personal data - exercising your right to request the deletion of your personal data will mean that: 
  • you will no longer receive non-public commercial communications from us by means of electronic communication and the loss of any other rights provided for users who have consented to direct marketing activities,
  • you will no longer be able to use your user account ("Customer Account") within the online shop and you will lose any other rights provided for users who have created a user account ("Customer Account"),
• the right to request the restriction of the processing of your personal data,
• the right to object to the processing of your data due to your particular situation - in cases where we process your data on the basis of our legitimate interest, 
• the right to portability of your personal data, i.e. the right to receive your personal data from us, in a structured, commonly used, readable IT format. You can send this data to another controller or request that we send your data to another controller. However, we will only do this if such a transfer is technically possible. You have the right to data portability only in respect of data that we process on the basis of a contract with you or on the basis of your consent.

To exercise the above rights, please contact us (contact details in section 1 above).

We are obliged to inform you of the action taken on your requests without undue delay and in any case within one month of receipt of the request. 

Duty to provide data.

Your obligation to provide personal data is voluntary, however, it is necessary in order to place an order within the online shop and to conclude a sales contract for goods available in the online shop or to set up a user account within the online shop (so-called "Customer Account").

Consent for direct marketing activities, i.e. sending information and marketing material, is voluntary and is not required to place an order in the webshop, but it does allow you to receive commercial information by electronic means and to grant any other rights provided for users who have consented to direct marketing activities.  

The creation of a user account within the online shop (so-called "Customer Account") is voluntary and is not required in order to place an order within the online shop, however, its creation enables the use of the aforementioned functionality within the online shop and enables you to obtain possible other rights provided for users who have created a user account (so-called "Customer Account"). 

In addition, the absence of your consent, depending on the purpose for which the data is provided, may result in:

• inability to register a user account in the web shop;
• inability to use the services of the online shop;
• unable to make purchases in the web shop;
• inability to receive information about promotions or special offers offered in the web shop.

Right to withdraw consent.

To the extent that your data is processed by us solely on the basis of your consent - you have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of your consent prior to its withdrawal. You can withdraw your consent by contacting us (contact details in section 1. above).

The right to lodge a complaint with the authority.

In addition, you also have the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Office for Personal Data Protection with its registered office at 2 Stawki Street in Warsaw (postal code: 00-193).

11. Data security

When processing your personal data, we apply organisational and technical measures in accordance with the relevant legislation, including the use of encryption of the connection using an SSL certificate.