Privacy Policy

1. Definitions:

1.1. Administrator – RentPlanet spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław at 7 Św. Mikołaja Street, 50-125 Wrocław, with REGON number: 365929227, NIP: 5223076793, entered in the register of entrepreneurs of the National Court Register under the number 0000648720.

1.2. Personal Data – information about a natural person identified or identifiable by one or more factors specific to physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, Internet ID and information collected through cookies and other similar technologies.

1.3. Policy – this Privacy Policy containing basic information about who may have access to personal data and the collection, storage and sharing of such data.

1.4. RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

1.5. Service – the website operated by the Administrator at https://rentinglock.com.

1.6. User – any natural person visiting the Service or using one or more services or functionalities described in the Policy.

1.7. Shop – an online store operated by the Seller within the Service.

1.8. Account – an individual panel available after registration and login, marked with a login and password, used to generate access codes to the Lock.

2. Processing of Personal Data in connection with the use of the Service.

2.1. In connection with the use of the Website, the Administrator collects your data to the extent necessary to provide the various services offered. When you browse the Website, the Administrator collects the following information about:

• Location and IP address: The administrator uses this data to estimate taxes and shipping costs,
• Shipping Address: The administrator will ask you to enter your address so that it can estimate shipping costs before you place your order and ship your order.

The Administrator will also use cookies to track the contents of your shopping cart as you browse our site.

2.2. When you buy from the Store, the Administrator will ask you to provide information including your name, payment and shipping addresses, email, phone, payment or card details. The Administrator will use this information for the following purposes:

• Sending information about your account and orders,
• Responding to your requests, including returns and complaints,
• Processing payments and preventing fraud,
• Fulfilling legal obligations, such as calculating taxes,
• Improving the Store’s offerings,
• Sending marketing information if you have given separate consent to receive it.

2.3. Any inquiries, requests, complaints regarding the processing of personal data by our company (the Personal Data Administrator), hereinafter referred to as Applications, should be sent to the following e-mail address: kontakt@rentinglock.com or in writing to the following address of the Administrator: 7 Św. Mikołaja Street, 50-125 Wrocław.

The content of the Submission should clearly indicate:

1. a) uniquely identifiable personal information of the person(s) to whom the Application relates,

1. b) the event that is the reason for the Notification,

1. c) present their demands and the legal basis for those demands,

1. d) indicate the expected manner of handling the case.

2.4. For the most common requests, we also offer the use of our data request form.

3. Purpose, data and storage period

3.1. The Administrator may collect or receive personal data for a number of purposes related to its business operations, which may include:

3.1.1. Contact – by phone, mail, e-mail and/or forms

For this purpose, the Administrator uses the following data:

• name and surname,
• email address,
  • home or other physical address including street name and city name,
  • phone number.

The basis on which the Administrator may process the data is necessity for the performance of a contract or preparatory proceedings related to a contract to which the data subject is a party (Article 6(1)(b) of the DPA).

Storage period

The Administrator shall store the data after the service has been provided for the following number of months: 36

3.1.2. Payments

For this purpose, the Administrator uses the following data:

• name,
• home or other physical address including street name and city name,
• email address.

The basis on which the Administrator may process the data is necessity for the performance of a contract or preparatory proceedings related to a contract to which the data subject is a party (Article 6(1)(b) of the DPA).

Storage period

The Administrator shall store the data after the service has been provided for the following number of months: 36

3.1.3. Registration of an Account in the Panel and its maintenance.

For this purpose, the Administrator uses the following data:

• email address,
• the physical addresses at which each lock is mounted.

The basis on which the Administrator may process the data is necessity for the performance of a contract or preparatory proceedings related to a contract to which the data subject is a party (Article 6(1)(b) of the DPA).

Storage period

The Administrator shall store the data until the termination of the service (deletion of the Account).

3.1.4. Newsletter

For this purpose, the Administrator uses the following data:

• first and last name,
• e-mail address

The basis on which we may process this data is the consent of the data subject (Article 6(1)(a) of the RODO).

Storage period

The administrator will keep the data until the service is terminated or the consent to send the newsletter is withdrawn.

3.1.5. Fulfillment of legal obligations

For this purpose, the Administrator uses the following data:

• name,
• home or other physical address, including street name and city name,

The basis on which the Administrator may process this data is to fulfill relevant accounting, tax obligations, etc. (Article 6(1)(c) of the DPA).

Storage period

The Administrator shall store this data after the service has been provided for the following number of months: 36

3.1.6. Create and analyze statistics to improve the site

For this purpose, the Administrator uses the following data:

• Internet activity information including (but not limited to) browsing history, search history, and information about your interactions with the Service.

The basis on which the Administrator may process the data is that it is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, and this interest outweighs the interest of the data subject (Article 6(1)(f) RODO).

Storage period:

For the following number of months: 24

3.1.7. Deliveries

For this purpose, the Administrator uses the following data:

• name,
• home or other physical address, including street name and city name,
• e-mail address,
• telephone number.

The basis on which the Administrator may process this data is necessity for the performance of the contract (Article 6(1)(b) of the DPA).

Storage period

The Administrator shall store this data after the service has been provided for the following number of months: 36

3.2 The provision of the data indicated in the preceding paragraph is voluntary, but necessary for the respective purposes indicated below:

1. a) in order to use the services offered on the Website,

2. b) in order to carry out the services you have ordered on the Site – in which case the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) RODO),

3. c) for the purpose of responding to your inquiries and enabling you to contact us via email, contact form available on the Service, snail mail or telephone contact,

4. d) in order for us to voluntarily register (set up) your account in the Panel in order to use the RentingLock or RentingLock Pro service on the Service – in such a situation, we store the data provided by you in order to facilitate your future use of the services available on the Service until you deregister (delete your account),

5. e) in order to carry out the newsletter service (subscription) – if you want to be informed about interesting events and commercial offers, you can become a subscriber to the newsletter run by the Administrator; joining the subscription is voluntary and you can unsubscribe from it at any time – then the legal basis for processing is your consent to the processing of personal data for specific purposes, when other legal grounds for processing personal data do not apply (Article 6(1)(a) RODO).

6. Cookies

4. The Administrator uses cookies and other similar technologies on the Website. For the purposes and rules regarding the use of all the above technologies, please refer to the Cookie Policy [link to Cookie Policy].

5. Period of processing of Personal Data

5.1. The data processing period may be extended if the processing is necessary for the establishment and assertion of possible claims or defense against claims, and thereafter only if and to the extent required by law. After the expiration of the processing period, the data shall be irreversibly deleted.

6. Your powers

6.1. You have the following rights in connection with data processing:

• You have the right to know why your personal information is needed, what will happen to it, and how long it will be kept.

• Right of access: You have the right to access your personal data known to the Administrator.

• Right to rectification: you have the right to complete, correct, delete or block your personal data at any time.

• If you consent to the processing of your data, you have the right to withdraw that consent and delete your personal data.

• Right to data portability: you have the right to request all of your personal data from the Administrator and transfer it in its entirety to another administrator.

• Right to object: you can object to the processing of your data. The Administrator will stop processing it unless there are legitimate grounds for further processing.

• Right to file a complaint: if you are not satisfied with the way the Administrator handles the processing of your personal data, you have the right to file a complaint with the Data Protection Authority.

6.2. If you have a complaint about how we handle your data, we would like to hear from you. However, you also have the right to file a complaint with the supervisory authority (the Office for Personal Data Protection).

6.3 You will find a detailed description of your individual rights below.

6.4 Under the provisions of the RODO, every person whose personal data we process as a Personal Data Controller has the right to:

1. a) to be informed about the processing of personal data, as provided for in Article 12 of the RODO – the Administrator is obliged to provide you, as a data subject, with the information specified in the RODO (among others, about your data, contact details of the DPO, purposes and legal grounds for processing personal data, recipients or categories of recipients of personal data, if any, or the period for which the data will be processed or the criteria for determining that period); this obligation should be fulfilled already at the moment of obtaining the data (i.e., e.g. when the customer places an order in the online store), and if the data are not obtained from the data subject, but from another source – within a reasonable period depending on the circumstances. when a customer places an order in an online store), and if the data is not obtained from the data subject, but from another source – within a reasonable period of time, depending on the circumstances; the Administrator may refrain from providing this information if the data subject already has it,
2. b) access to your personal data as provided for in Article 15 of the RODO – by providing your personal data, you have the right to inspect and access them; however, this does not mean that you have the right to access all documents on which your data appears, as they may contain confidential information; you have the right to know what data we process and for what purpose, and the right to obtain a copy of your personal data, with the first copy issued free of charge, and for each subsequent copy, in accordance with the provisions of the RODO, we charge an appropriate administrative fee corresponding to the cost of making the copy,
3. c) Correcting, supplementing, updating, rectifying personal data, as referred to in Article 16 of the RODO – if your personal data has changed, please inform us as the Personal Data Controller of this fact, so that the data in our possession will be in accordance with the real state and up-to-date; also, if there has been no change in personal data, but for any reason the data is incorrect or has been recorded incorrectly (e.g. due to a typing error), please inform us in order to correct or rectify such data,
4. d) deletion of data (right to be forgotten), as referred to in Article 17 of the RODO – in other words, you have the right to request the “deletion” of data held by us as a Personal Data Controller, and the right to request that we, as a Personal Data Controller, inform other controllers to whom we have provided your data of the need to delete it. You may request deletion of your personal data primarily when:

– the purposes for which the personal data was collected have been achieved, e.g. we have fully completed the sales contract concluded with you and the claims related to it have become time-barred,

– the sole basis for the processing of your personal data was consent, which was subsequently withdrawn and there is no other legal basis for further processing of your personal data, e.g. if you unsubscribe from our newsletter and otherwise no longer use our company’s offerings,

– you file an objection based on Article 21 RODO and you believe that we have no overriding legal grounds to continue processing your personal data,

– your personal data has been processed unlawfully, i.e. for unlawful purposes or without any basis for processing your personal data – please note that in this case you must have a basis for your request,

– the necessity of deletion of your personal data results from the law,

– the personal data concerns a minor and was collected in connection with the provision of information society services,

1. e) limitation of processing, referred to in Article 18 of the RODO – you can apply to our company with a request to limit the processing of your personal data (until the dispute is clarified, the Administrator stores personal data, but does not perform any other processing operations on it), if:

– you question the accuracy of your personal data, or

– you believe that we are processing your data without a legal basis, but at the same time you do not want us to delete the personal data (i.e. you do not exercise the right referred to in the preceding letter), or

– you have filed an objection as referred to in letter g of this paragraph, or

– your personal data are needed to establish, assert or defend claims, e.g. before a court,

1. f) Data portability, referred to in Article 20 of the RODO – you have the right to obtain your data in a computer-readable format and the right to send this data in such a format to another controller; you have this right only if the basis for the processing of your data was consent (e.g. for a newsletter subscription) or the data was processed in an automated manner,

1. g) object to the processing of personal data, as provided for in Article 21 of the RODO – you have the right to object if you do not agree with our processing of personal data that we have so far processed for legitimate purposes in accordance with the law, whereby:

– The right to object is to the processing of your personal data for direct marketing purposes (e.g. newsletter subscription) without stating a reason,

– the right to object to the processing of your personal data based on Article 6(1)(e) or (f), including profiling under these provisions for purposes other than direct marketing – provided that reasons related to your particular situation are indicated,

1. h) not to be subject to profiling as referred to in Article 22 in conjunction with Article 4(4) of the RODO – you will not be subject to automated decision-making or profiling within the meaning of the RODO on our Website, unless you have given your consent; in addition, we will always inform you of profiling, should it occur,

1. i) lodge a complaint to the supervisory authority (i.e., the President of the Office for Personal Data Protection) referred to in Article 77 of the RODO – if you believe that we are processing your personal data unlawfully or in any way violating your rights under generally applicable data protection laws.

7. Recipients of Personal Data

7.1 Your personal data is not transferred to a third country (i.e. outside the EEA) or an international organization within the meaning of the RODO. In the event that personal data is transferred to a third country or international organization, you will be informed in advance and the Administrator will apply the safeguards referred to in Chapter V of the RODO.

7.2 We do not share any personal data with third parties without the express consent of the data subject. Personal data without the consent of the data subject may be shared only with public law entities, i.e. authorities and administration (e.g. tax authorities, law enforcement agencies and other entities authorized by generally applicable laws).

7.3 If your consent is obtained, your data may also be made available to other entities for their own purposes, including marketing purposes.

7.4 The Administrator reserves the right to disclose selected information concerning you to the competent authorities or third parties who make a request for such information, based on the relevant legal basis and in accordance with the provisions of the applicable law.

7.5. Dane osobowe mogą być powierzane do przetwarzania podmiotom przetwarzającym takie dane na rzecz naszej firmy jako Administratora Danych Osobowych. W takiej sytuacji jako Administrator Danych Osobowych zawieramy z podmiotem przetwarzającym umowę powierzenia przetwarzania danych osobowych. Podmiot przetwarzający przetwarza powierzone dane osobowe, ale wyłącznie na potrzeby, w zakresie i w celach wskazanych w umowie powierzenia, o której mowa w zdaniu poprzedzających. Bez powierzenia Twoich danych osobowych do przetwarzania nie moglibyśmy prowadzić swojej działalności w ramach Serwisu. Jako Administrator Danych Osobowych powierzamy dane osobowe do przetwarzania podmiotom:

1. a) providing hosting services to the Website,
2. b) providing courier services for the benefit of the Administrator of personal data that are necessary for the performance of Sales Agreements referred to in the Terms and Conditions of the Online Store
3. c) providing payment intermediation for the benefit of the Administrator:

– (name) [link to intermediary’s privacy policy].

– (name) [link to intermediary’s privacy policy].

– (name) [link to intermediary’s privacy policy].

8. Security of Personal Data

8.1. The administrator takes care of the security of personal data and takes appropriate security measures to limit misuse and unauthorized access to personal data. This ensures that only necessary persons have access to your data, access to your data is protected, and security measures are regularly reviewed.

8.2 The Administrator shall take all necessary measures to ensure that its subcontractors and other cooperating entities also provide guarantees to apply appropriate security measures whenever they process Personal Data on behalf of the Administrator.

8.3 The Administrator is committed to ensuring the security of Personal Data. We take appropriate security measures to limit misuse and unauthorized access to Personal Data. This ensures that only necessary persons have access to your data, that access to your data is protected, and that our security measures are regularly reviewed.

8.4 Members of the Administrator’s team have access to some of the information you provide, i.e.:

• Order details, such as items purchased, order date, shipping address.
• Customer information, such as name, email address, and billing and shipping information.

8.5. All employees have been properly trained in the processing of personal data, and our company, as a Personal Data Controller, has implemented appropriate safeguards and technical and organizational measures to ensure the highest level of personal data protection. We have implemented procedures and policies for the protection of personal data in accordance with the RODO, through which we ensure the legality and reliability of data processing, as well as the enforceability of any rights you have as a data subject. In addition, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).

8.6 If our Service or organization is acquired, sold or involved in a merger or takeover, your data may be disclosed to our advisors and potential acquirers and will be transferred to the new owners.

9. Third party websites

9.1. This privacy statement does not apply to third party websites linked to our Service. We cannot guarantee that these third parties handle your personal information in a reliable or secure manner. We recommend that you read the privacy statements of these websites before using them.

9.2 The Website uses Privacy Suite for WordPress by Complianz to collect records of consent. For this purpose, your IP address is anonymized and stored in the Administrator’s database. For more information, see the Complianz Privacy Statement.

10. Changes to Privacy Policy

10.1. The Administrator reserves the right to make changes to this privacy statement. You are advised to check this privacy statement regularly to be aware of any changes. In addition, you will be actively informed whenever possible.

10.2 The current version of the Policy has been adopted and is effective as of 06/04/2023.