This privacy policy ("Privacy Policy") is an integral part of the Regulations of the Wholesale of dietary supplements and nutrients for athletes: Olivit limited liability company. Acceptance of the Regulations also means acceptance of the Privacy Policy. Before using the Online Wholesale service, the Buyer should familiarize themselves with the Privacy Policy. The Privacy Policy specifies the principles of processing and protection of personal data of individuals using the Olivit sp. z o.o. website.

1. Administrator

1.1. The administrator of personal data of individuals using the Olivit sp. z o.o. website, including Buyers and Users, is Olivit sp. z o.o. with its registered office in Poznań at ul. Blacharska 11, 61-006 Poznań, entered into the National Court Register by the District Court for Stare Miasto and Wilda in Poznań under the number 0000581055, NIP: 783-173-07-91; REGON 362497678 ("Administrator").

1.2. The Administrator processes personal data in accordance with the requirements of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as "GDPR").

2. Collected Data

Collected personal data includes: first and last name, name (company), NIP, business address, delivery address, phone number, email, credit card information, bank account number, user login and password, IP address of the computer used for registration or placing an order. Personal data is collected during User registration, newsletter sign-up, and communication with the data subject.

3. Data Processing Purposes

1. 3.1. Providing the Account service - for the duration of the User's Account, until the User's Account is liquidated at the User's request - based on art. 6 para. 1 lit. b) GDPR;
2. 3.2. Conclusion and performance of sales contracts for products through the Portal - until the completion of the contract - based on art. 6 para. 1 lit. b) and art. 9 para. 2 lit. h) GDPR;
3. 3.3. Fulfillment by the Administrator of its legal obligations, in particular resulting from tax law - for a period of 5 years, counting from the end of the calendar year in which the deadline for payment of the tax due in connection with the conclusion and performance of the sales contract for the product through the Portal expired, or longer if required by law - based on art. 6 para. 1 lit. c) and art. 9 para. 2 lit. h) GDPR;
4. 3.4. Establishing, investigating, or defending against claims that the Administrator or you may have against each other (including data in the User's Account, data concerning sales contracts for products through the Portal) - based on art. 6 para. 1 lit. f) and art. 9 para. 2 lit. h) GDPR - for the limitation periods specified in the law;
5. 3.5. Sending a newsletter with informational content about products offered by the Administrator, until consent is withdrawn - based on art. 6 para. 1 lit. a) GDPR;
6. 3.6. Initiating contact using the contact form, based on art. 6 para. 1 lit. f GDPR, i.e., the legitimate interest of the Administrator. The legal basis for processing after the contact is completed is the justified purpose in the form of archiving correspondence for internal purposes (art. 6 para. 1 lit. f GDPR).
7. 3.7. Social media support, including responding to comments and messages or any other forms provided within a given social media service - based on art. 6 para. 1 lit. f GDPR, only during the time necessary for interaction and for the purpose of using the functions offered by social media and then for archiving correspondence for external purposes.

4. Voluntariness of providing data, consent to processing

4.1. Providing data is voluntary. In the scope indicated in the Regulations, providing data is necessary for Registration or placing and executing an Order.

4.2. You can provide your personal data without giving your consent to their processing for receiving newsletters.

4.3. If you consent to the processing of your data for the above purposes, you can withdraw this consent at any time by contacting the Administrator at +48 618 112 019. You can also withdraw your consent to receive the newsletter by clicking on the appropriate link in each newsletter. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

5. Rights related to the processing of personal data

5.1. Everyone whose personal data is processed has the right to access their personal data, rectify them, delete them or object to processing (to the extent permitted by law), restrict processing, and the right to data portability. The person whose data is processed also has the right to lodge a complaint with the data protection authority.

5.2. Contact with the Data Protection Officer is possible at the following address: iod@olivit.pl

5.3. The envisaged recipients of the data are entities to whom the Administrator has entrusted the processing of data, including, for example, entities providing technical infrastructure used to run the Portal, entities to whom the Administrator has entrusted customer service, employees and associates of the Administrator or those entities — to the extent necessary to achieve the purposes specified in this Privacy Policy or resulting from contracts concluded by you with the Administrator.

5.4. The Administrator may refuse to delete the Data if there are grounds arising from legal regulations.

6. Data Security

6.1. The Administrator uses appropriate technical and organizational measures to ensure the protection of processed data, in particular, it protects data against unauthorized disclosure, processing in violation of the law, and change, loss, damage, or destruction.

6.2. The Administrator provides the following technical measures to prevent the acquisition and modification by unauthorized persons of personal data transmitted electronically:

6.3. Data transmission is secured with an SSL certificate.

6.4. Access to the Account requires providing an individual login and password.

6.5. The Administrator undertakes to exercise due diligence in the selection and supervision of persons authorized to process the data, ensuring that persons authorized to process personal data undertake to maintain confidentiality or are subject to an appropriate statutory obligation of confidentiality.

6.6. The Administrator undertakes to make any information available on unauthorized persons' activities affecting the security of processing personal data immediately after their discovery.

6.7. In the event of a breach of the security of personal data, which may pose a high risk to the rights or freedoms of individuals, the Administrator will inform the data subject about the breach immediately.

7. Cookies and Similar Technologies

7.1. The Administrator uses cookies or similar technologies. Cookies are IT data, in particular, text files, which are stored on the End User's device and are intended for using the Portal's websites. Cookies usually contain the name of the website from which they come, their storage time on the end device, and a unique number.

7.2. The Administrator uses cookies for the following purposes:

7.3. Creating statistics that help understand how Service Users use websites, which allows improving their structure and content;

7.4. Maintaining the Service User's session (after logging in), thanks to which the User does not have to re-enter their login and password on every subpage of the Service;

7.5. Determining the user's profile to display matched materials in advertising networks, in particular, the Google network.

7.6. The Administrator uses external cookies to collect general and anonymous static data via analytical tools, e.g., Google Analytics (cookies administrator: Google Inc., based in the USA).

7.7. In many cases, the software used for browsing websites (web browser) allows cookies to be stored on the User's device by default. Users can change their cookie settings at any time. These settings ...