§ 1 Data Controller

1. The controller of personal data is GSM-Support Jadwiga Konefał - Góral, with its registered office in Kraków (31-416), ul. Dobrego Pasterza 102/5, Poland, Tax ID (NIP): 8133358609, REGON: 181081334 (the "Controller").
2. Contact regarding personal data protection: e-mail sales@gsm-support.net, phone +48 608 107 455, or in writing to the registered office address.
3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the applicable national data protection law.

§ 2 Purposes, legal bases and retention periods

1. Processing of orders and sales agreements (including delivery, complaints and withdrawal from the agreement) — Article 6(1)(b) GDPR; data is stored for the duration of the agreement and thereafter for the limitation period of claims provided by law.
2. Maintaining the Customer Account — Article 6(1)(b) GDPR; until the account is deleted, and afterwards for the limitation period of claims.
3. Compliance with legal obligations (e.g. tax and accounting documentation) — Article 6(1)(c) GDPR; for the period required by law (as a rule, 5 years from the end of the tax year).
4. Newsletter and commercial information — Article 6(1)(a) GDPR (consent); until the consent is withdrawn.
5. Handling contact forms — Article 6(1)(a) GDPR (consent); until the correspondence is concluded or the consent is withdrawn.
6. Establishing and defending claims, fraud prevention, technical purposes and security of the service (including server logs containing IP addresses) — Article 6(1)(f) GDPR (legitimate interest of the Controller); for the period necessary to achieve these purposes.

§ 3 Recipients of data

1. Personal data may be shared with entities cooperating with the Controller only to the extent necessary for the purposes of processing: carriers and postal operators (order delivery), payment service providers, hosting and IT service providers, and accounting service providers — on the basis of appropriate data processing agreements.
2. Data may be disclosed to public authorities only in cases provided for by law.
3. The Controller does not transfer personal data to third countries (outside the European Economic Area) or to international organisations.

§ 4 Rights of the data subject

1. Every person has the right to: access their data, rectify it, erase it (the "right to be forgotten"), restrict processing, data portability, and object to processing.
2. Where processing is based on consent, the consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
3. To exercise the above rights, simply send a message to sales@gsm-support.net. Logged-in Customers may also view and modify their data themselves in the Customer Account panel.
4. Every person has the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).

§ 5 Voluntary provision of data

1. Providing personal data is voluntary but necessary to place an order, register a Customer Account, subscribe to the newsletter or use the contact forms.

§ 6 Cookies

1. The service uses cookies. Detailed rules of their use are set out in the Cookie Policy.

§ 7 Final provisions

1. Personal data is not subject to automated decision-making, including profiling.
2. The Controller applies technical and organisational measures ensuring protection of the processed personal data appropriate to the risks and categories of data.
3. This Privacy Policy may be amended (e.g. due to changes in the law or development of the service) — the current version is always published on this page.
4. This version is effective from 5 July 2026.