Privacy and Cookies Policy

User – any natural person accessing the Online Store's website/pages or utilizing the services or functionalities described in this Privacy and Cookies Policy.

Customer – a natural person with full capacity for legal acts, a Consumer, a legal person, or an organizational unit without legal personality to which the law grants legal capacity, concluding a Distance Sales Agreement with the Seller.

Online Store (Store) – the website run by the Seller, available at the electronic address: alexvalex.pl and its subpages, through which the Customer/User can obtain information about Goods and their availability, and make a purchase.

Newsletter – information, including commercial information under the Act of 18 July 2002 on the provision of services by electronic means, originating from the Seller and sent to the Customer/User electronically; its receipt is voluntary and requires prior consent.

Account – a collection of data stored in the Online Store and the Seller\'s IT system concerning a given Customer/User and the orders submitted and agreements concluded by them.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

To perform the Distance Sales Agreement and provide electronic services, the Seller processes:

• User\'s device information: IP address, cookies, session data, browser details, and website activity. These data are processed based on Art. 6(1)(b) of the GDPR (performance of electronic contract) and Art. 6(1)(a) of the GDPR (consent to cookies). Data are processed until the end of Store usage.
• Customer\'s personal data: name, surname, residential address, delivery address, e-mail, telephone number, NIP (for businesses), and bank account number (for refunds). These data are processed based on Art. 6(1)(b) of the GDPR (execution of sales agreement) and Art. 6(1)(c) of the GDPR (tax and accounting obligations, including KSeF).

The Controller undertakes to implement all security measures required under Art. 32 of the GDPR to protect processed data.

The Controller may post marketing information about its products or services on the Online Store website. Displaying this content is performed in accordance with Art. 6(1)(f) of the GDPR, i.e., in line with the legitimate interest of publishing promotional content. Users accessing the Store can reasonably expect such information.

The Controller discloses personal data only to trusted processing entities under data processing agreements for the purpose of executing services for the Store:

• Hosting and IT support providers.
• Logistics and courier operators (e.g., Globkurier or other courier companies).
• Online payment operators (e.g., PayU via the implemented payment system).
• Sales automation and integration systems (e.g., BaseLinker).
• Tax and administrative authorities – to the extent required by law.

Personal data of Users will generally not be processed in third countries outside the European Economic Area (EEA). When using analytical services (Google Analytics), data may be transferred to providers in the USA based on standard contractual clauses or compliance frameworks approved by the European Commission.

Every data subject is entitled to the following rights under GDPR provisions:

• Right of access (Art. 15 GDPR) – to obtain confirmation and information about data processing.
• Right to copy data (Art. 15(3) GDPR) – to receive the first free copy of personal data.
• Right to rectification (Art. 16 GDPR) – to correct incorrect or complete incomplete data.
• Right to erasure (Art. 17 GDPR) – to request data deletion when there is no basis for processing.
• Right to restriction (Art. 18 GDPR) – to request suspension of processing operations.
• Right to data portability (Art. 20 GDPR) – to receive data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR) – to object to processing based on legitimate interests.
• Right to withdraw consent – to withdraw consent at any time without affecting prior lawfulness.

To exercise your rights, please contact us at: info@ffgroup.global.

The data subject has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland), if they believe their data are processed unlawfully.

Any inquiries, requests, or complaints regarding data protection can be addressed directly to the Controller via e-mail: info@ffgroup.global or in writing to the registered address: ul. Szlak 7/222, 31-153 Kraków, Poland.

This Privacy and Cookies Policy may be updated by the Controller to reflect legal or technical changes in Store operations.

The Online Store obtains information about Users through cookies and voluntarily filled forms.

Consent to cookies is expressed through interaction with the cookies banner on the page. The User can change cookies settings in their web browser (Internet Explorer, Chrome, Safari, Firefox, Opera, etc.) at any time.

Cookies are used for the following purposes:

• Maintaining the logged-in User\'s session.
• Creating anonymous statistics of Store usage (Google Analytics).
• Matching recommendations and advertisements in Google networks.

The Store website also utilizes plugins and integrations of partners such as Google (Maps, reCAPTCHA), PayU (payments), and BaseLinker (order handling).

The Customer may consent to receive the Newsletter. This consent is voluntary and can be withdrawn at any time by clicking the unsubscribe link in any email or contacting the Store support directly.

The User obtains access to the Account after registration. It is prohibited to provide false data or submit unlawful content.

The agreement for electronic services regarding Account maintenance is concluded for an indefinite period. The Customer may terminate it at any time. The Controller has the right to terminate it with a 7-day notice period in case of a serious breach of the Regulations or if the Account has been inactive for more than 6 months.