Privacy Policy

Last updated: January 2025  |  VALORYNE Sp. z o.o.  |  Version 1.1

1. Introduction and Scope

This Privacy Policy explains how VALORYNE Spółka z ograniczoną odpowiedzialnością (“VALORYNE”, “we”, “us”, “our”) collects, uses, stores, and protects personal data. It applies to all visitors to our website and any persons who contact us or engage with our services.

We process personal data in accordance with:

• Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR)
• Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa o ochronie danych osobowych)
• Polish Telecommunications Law (Prawo telekomunikacyjne) — regarding cookies and electronic communications
• Act of 18 July 2002 on Providing Services by Electronic Means (Ustawa o świadczeniu usług drogą elektroniczną)

2. Who We Are

VALORYNE Sp. z o.o. is the data controller for personal data collected through this website. We are a limited liability company registered in Poland, conducting digital commerce operations across the European Union. As data controller, we determine the purposes and means of processing your personal data.

3. What Personal Data We Collect

3.1 Data you provide directly

• Identity data: first name, last name, company name
• Contact data: email address, phone number, postal address
• Communication data: content of messages, enquiries, and correspondence
• Transaction data: details of purchases, payment information (processed by payment providers — we do not store card data)

3.2 Data collected automatically

• Technical data: IP address, browser type and version, operating system, device identifiers
• Usage data: pages visited, time spent, referring URLs, click behaviour
• Cookie data: as described in our Cookie Policy

We do not collect special category data (health, racial origin, religious beliefs, biometric data, etc.) in the ordinary course of our business.

4. Legal Bases for Processing (Article 6 GDPR)

Processing activity	Legal basis	GDPR Article
Responding to contact enquiries	Legitimate interests / pre-contractual steps	Art. 6(1)(b)(f)
Processing orders and transactions	Performance of a contract	Art. 6(1)(b)
Tax and accounting obligations	Legal obligation (Polish tax law)	Art. 6(1)(c)
Fraud prevention and security	Legitimate interests	Art. 6(1)(f)
Marketing communications	Consent	Art. 6(1)(a)
Analytics cookies	Consent	Art. 6(1)(a)
Strictly necessary cookies	Legitimate interests	Art. 6(1)(f)

5. How We Use Your Data

• Responding to enquiries and managing business communications
• Processing and fulfilling orders, managing returns and refunds
• Complying with Polish tax, accounting, and commercial law obligations
• Preventing fraud and maintaining the security of our systems
• Improving our website and services through anonymised analytics
• Sending marketing communications where you have given explicit consent
• Complying with requests from competent Polish and EU authorities

6. Data Sharing and Processors

We may share your personal data with the following categories of recipients, all of whom are bound by appropriate data processing agreements:

• Payment service providers (e.g. Stripe, Revolut) — for secure payment processing
• Logistics and fulfilment partners — for order delivery
• IT and hosting providers — for website hosting and technical infrastructure
• Email service providers — for transactional and marketing emails
• Accounting and legal advisors — under professional confidentiality obligations
• Public authorities — where required by Polish or EU law

We do not sell personal data to third parties.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46 GDPR, or transfers to countries with an adequacy decision.

8. Data Retention

Data type	Retention period	Legal basis
Transaction and order records	5 years from end of tax year	Polish Accounting Act
VAT invoices and records	5 years from end of tax year	Polish Tax Ordinance
Contact and enquiry records	3 years from last contact	Legitimate interests
Marketing consent records	Duration of consent + 3 years	GDPR Art. 7(1)
Website technical logs	12 months	Legitimate interests

9. Your Rights Under GDPR

As a data subject, you have the following rights, exercisable by contacting us at contact@valoryne.com:

• Right of access (Art. 15): obtain a copy of your personal data we hold
• Right to rectification (Art. 16): correct inaccurate or incomplete data
• Right to erasure (Art. 17): request deletion where no overriding legal basis applies
• Right to restriction (Art. 18): limit processing in certain circumstances
• Right to data portability (Art. 20): receive your data in a machine-readable format
• Right to object (Art. 21): object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: at any time, without affecting prior lawful processing
• Right to lodge a complaint: with UODO (www.uodo.gov.pl) or your EU country’s supervisory authority

We will respond to all valid requests within one month as required by Article 12 GDPR.

10. Security Measures

We implement appropriate technical and organisational security measures in accordance with Article 32 GDPR, including SSL/TLS encryption for data in transit, access controls and authentication measures, regular security assessments, and data minimisation practices.

11. Minors

Our website and services are not directed at persons under 16 years of age. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version with the date of last update will always be available on our website.

13. Contact

For any questions or to exercise your rights:
Email: contact@valoryne.com
Post: VALORYNE Sp. z o.o., ul. Hoża 86/410, 00-682 Warszawa, Polska
Supervisory authority: UODO, ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl