GDPR INFORMATION CLAUSE

Information Duty

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), we inform you about the rules for processing personal data in connection with the use of the Voltopedia sales platform.

1. Personal Data Controller

The controller of the personal data is epiLED Polska sp. z o.o. with its registered office at ul. Stanisławowska 27, 54-611 Wrocław, Poland.

2. Purposes and Legal Bases for Data Processing

Personal data is processed for the following purposes:

1. creation and management of an Account on the Platform, conclusion and execution of sales contracts, and communication related to their performance — pursuant to Article 6(1)(b) of the GDPR;
2. fulfillment of legal obligations incumbent on the Controller, in particular related to accounting and tax obligations — pursuant to Article 6(1)(c) of the GDPR;
3. establishment, exercise, or defense of legal claims, as well as the realization of other legitimate interests of the Controller — pursuant to Article 6(1)(f) of the GDPR;
4. conducting marketing activities — on the appropriate legal basis, depending on the type of activity, taking into account regulations governing electronic communication.

3. Scope of Processed Data

The Controller may process, in particular, identification and contact data, data concerning business activity, invoicing data, order and payment details, as well as information related to the use of the Account.

4. Requirement to Provide Data

Providing the data necessary to create an Account, place and execute an order, and fulfill the Controller's legal obligations is required within the scope resulting from a given purpose. Failure to provide the required data may render it impossible to create an Account, place or execute an order, or issue documents required by law.

Providing data for other purposes, where it is not necessary for the performance of a contract or a legal obligation, is voluntary.

5. Data Recipients

Personal data may be transferred to entities that support the Controller in conducting business operations, in particular IT and hosting service providers, carriers, payment operators, banks, entities providing accounting, legal, or debt collection services — to the extent necessary to achieve the respective purposes.

Data may also be disclosed to public authorities if such an obligation arises from applicable laws.

6. Data Retention Period

Personal data will be stored for the period necessary to achieve the purpose for which it was collected, and thereafter for the period required by law or necessary for the establishment, exercise, or defense of legal claims.

Data related to accounting and tax documentation will be stored for the period resulting from applicable regulations.

Account data will be processed for the period of its activity, and after its closure — for the period during which its further retention is justified by legal obligations or other lawful purposes of the Controller.

7. Rights of Data Subjects

The data subject has the right — in cases and under the conditions specified in the GDPR — to:

1. access their personal data;
2. rectify their data;
3. erase their data;
4. restrict the processing of their data;
5. data portability;
6. object to the processing of data, provided that the basis for processing is the legitimate interest of the Controller.

If processing is based on consent, the data subject also has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

8. Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if they consider that the processing of their personal data violates the provisions of the GDPR.

9. Contact Regarding Personal Data Protection

In matters regarding the processing of personal data, you can contact the Controller at the following e-mail address: rodo@voltopedia.pl.

10. Additional Information

Personal data will not be used to make decisions based solely on automated processing, including profiling, which produce legal effects concerning the individual or similarly significantly affect them, unless the Controller informs about such processing in accordance with applicable regulations.

Detailed information regarding personal data processing can also be found in the Privacy Policy available on the Platform.