Privacy Policy

1. General provisions

  • This Privacy Policy defines the rules for the processing of personal data and the use of cookies within the online store ringsen.com.
  • The data controller is Lemming Spółka z ograniczoną odpowiedzialnością, with its registered office in Rzeszów, Poland, ul. Hanasiewicza 10, 35-103 Rzeszów, entered into the National Court Register under number KRS: 0000532194, VAT ID PL8133698802, REGON 360173641.
  • Contact details of the data controller: e-mail biuro@ringsen.com; postal address ul. Hanasiewicza 10, 35-103 Rzeszów, Poland.
  • The Controller makes every effort to ensure that personal data is processed in accordance with the applicable law, including Regulation (EU) 2016/679 (GDPR).

2. Scope and purposes of data processing

Personal data is processed for the following purposes:

  • processing and fulfillment of orders placed in the online store,
  • management of the user account,
  • customer communication and responding to inquiries,
  • handling of complaints, returns and claims,
  • issuing accounting documents (invoices, receipts),
  • verification of company data on the basis of the NIP/VAT number in public registers (GUS, VIES),
  • fulfilling legal obligations of the Controller,
  • marketing of products and services - only with prior consent.

The data processed may include, among others: name, surname, company name, e-mail address, phone number, delivery address, tax identification number (NIP/VAT UE), payment details and the IP address of the user's device.

3. Legal basis for data processing

  • Article 6(1)(b) GDPR - processing necessary for the performance of a contract or steps prior to entering into a contract,
  • Article 6(1)(c) GDPR - processing necessary to comply with a legal obligation (e.g. accounting or tax),
  • Article 6(1)(f) GDPR - legitimate interests pursued by the Controller (e.g. customer contact, fraud prevention, claims),
  • Article 6(1)(a) GDPR - consent of the data subject (e.g. for marketing communication).

4. Data recipients

Personal data may be disclosed to third parties only to the extent necessary to perform the contract, including:

  • courier and logistics companies,
  • payment service providers (PayU, Revolut),
  • hosting and IT service providers,
  • the e-mail delivery service provider (Resend),
  • the form protection service provider (Cloudflare),
  • accounting firms,
  • legal and tax advisors (if required by law).

All entities processing personal data act under data processing agreements and are bound by confidentiality obligations.

5. Transfer of data outside the EEA

Personal data is generally not transferred outside the European Economic Area (EEA). If such transfer is necessary (e.g. for international payment or delivery), it will be carried out in accordance with GDPR requirements, using appropriate safeguards - in particular, EU Standard Contractual Clauses.

6. Data retention period

  • for the duration necessary to perform the contract and process the order,
  • for the time required by accounting and tax regulations (at least 5 years),
  • until consent is withdrawn - where processing is based on consent,
  • until the expiry of the limitation period for potential legal claims.

7. Rights of data subjects

The customer has the right to:

  • access and obtain a copy of their data,
  • rectify or update data,
  • delete data (right to be forgotten),
  • restrict processing,
  • transfer data to another controller,
  • object to processing,
  • lodge a complaint with the supervisory authority - in Poland: the President of the Personal Data Protection Office (UODO).

8. Cookies

The online store uses cookies - small text files stored on the user's device.

  • The store uses only the cookies necessary for its operation: maintaining the session and login, the cart contents, the selected language and delivery country. The store does not currently use analytics or marketing cookies.
  • The registration form is protected by the Cloudflare Turnstile service, which may store its own cookies to protect against automated submissions (bots).

The user can manage cookie settings in their web browser at any time or delete stored cookies. Disabling or limiting cookies may affect some functionalities of the website.

9. Data security measures

The Controller applies appropriate technical and organizational measures to ensure data protection, including:

  • encryption of data transmission using the SSL protocol,
  • restricted access to data only to authorized personnel,
  • regular system updates and data backups.

Data is stored on secure servers compliant with GDPR standards.

10. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy and Cookies Policy. The current version is always available on the website. Any changes become effective on the date of publication.