PRIVACY POLICY
Privacy Policy of the spx-24.com website
1. Data Controller
The controller of personal data is Rafał Wawrzyniuk, the owner of the website spx-24.com.
Contact:
📧 [email protected]
2. Scope of data collected
The website may collect the following types of personal data:
- first name
- email address
- data provided in contact forms and newsletter sign-up forms
- technical data (such as IP address and browser information)
3. Purposes of data processing
Personal data is processed for the following purposes:
- providing and operating the newsletter (MailerLite)
- processing orders for digital products
- responding to user enquiries
- compiling statistics and analytics (Google Analytics 4)
- fulfilling legal obligations
4. Legal basis for processing
Personal data is processed on the basis of:
- the user’s consent (Article 6(1)(a) GDPR)
- performance of a contract (Article 6(1)(b) GDPR)
- legal obligation (Article 6(1)(c) GDPR)
- the legitimate interest of the controller (Article 6(1)(f) GDPR)
5. Data recipients
Personal data may be shared with the following entities:
- MailerLite — for newsletter services
- Google LLC — for Analytics and AdSense services
- payment service providers
Personal data is not sold or shared with third parties for marketing purposes.
6. Data retention period
Personal data is stored for as long as necessary to achieve the purposes for which it was collected, or until consent is withdrawn — where processing is based on consent.
7. User rights
Users have the right to:
- access their personal data
- rectify inaccurate data
- request erasure of data
- restrict processing
- transfer their data
- withdraw consent at any time
(without affecting the lawfulness of processing prior to withdrawal)
8. Data security
The Data Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or destruction.