Privacy Policy

§ 2. Terms used in the Privacy Policy

If you notice one of the following capitalised terms in this Privacy Policy, it has the following meaning:

1. „Service” - an online shop, the main page of which can be found at https://www.oponeo.co.uk/;
2. „Policy” – means this document, i.e. the Privacy Policy that you read;
3. „GDPR” – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC. The GDPR text can be found here;
4. „Social media” – social networking sites such as Facebook, YouTube and other social networking sites where we have our profiles.

§ 3. Security of personal data

1. All personal information that you provide to the Service or that we collect about you when you use the Service will be processed by us as the Controller in accordance with GDPR.
2. We take the technical measures required by current data protection legislation to prevent unauthorised persons from collecting and modifying personal data transmitted electronically, i.e. within the framework of our Service.

§ 4. Your rights regarding personal data

1. We process your personal data, therefore:
   1. You have the right to access your personal data,
   2. You can rectify your personal data,
   3. You may request the deletion of your personal data where GDPR so permits,
   4. You have the right to limit the processing, to the extent specified in GDPR.
2. In Parts 2-4 of this Policy, you will find information about additional rights. In some situations, you will have further possibilities.
3. Would you like to exercise your rights or learn more about them? Do not hesitate to contact us. You can find our contact details in § 1 section 3 of this Policy.

§ 5. Right to object

1. If you provide us with your personal data or if we collect it ourselves, you may exercise your right to object. You have the right to object in two situations - when we process your personal data:
   1. for the purposes of direct marketing; you do not need to justify such an objection;
   2. on the basis of our other legitimate rights; such an objection must be justified by your particular circumstances. Tell us why we should not process your data.
2. Would you like to exercise your right of objection? Do not hesitate to contact us. You will find our contact details in § 1 section 3 of this Policy.

§ 6. Complaint to the Supervisory Authority

If you believe that we are processing your personal data unlawfully, you may file a complaint with the supervisory authority. In the UK this is the Office for the Protection of Personal Data and its website is available at this address: https://ico.org.uk/.

§ 7. Questions to the Policy and the place of its publication

1. If you have any questions about our Policy, do not hesitate to contact us. You will find our contact details in § 1 section 3 of this Policy.
2. The Policy can be found at https://www.oponeo.co.uk/privacy-policy.

§ 9. Execution of the order

If you use these options on our Site, please note the following:

1. Why do we need your data, or why do we process it?
   1. To perform services which we provide for you under the terms of the Regulations of the Service.
   2. For marketing consisting of:
      • sending you newsletters and other marketing information by e-mail, analysing what content you are interested in, what you like to read, and we can also tailor our communication to your interests;
      • adjusting the Service, its content, products, services, functionality and communication with you to your interests, which we determine based what you conduct on the Service, interaction with e-mails or notifications sent to you, in applications, in social media, as well as e.g. based on your location, login information, device you use;
      • posting advertisements addressed to you on social networking sites and other websites. These advertisements may be based on your activities in the Service.
2. What are your rights?

   We have described them in § 4 and § 5 of the Policy. You also have the right to transfer your personal data under the conditions set out in GDPR.

3. Do you have to give us your details?

   This is voluntary. Without this information you cannot complete your order through the Service and, as a result, use the services provided by us. You will also not be able to subscribe to our newsletter or receive commercial information from us.

4. On what legal basis do we process your data?
   1. Article 6(1)(b) of GDPR, that is to say, performance of the contract we enter into with you and Article 6(1)(f) of GDPR, that is to say, our legitimate interest.
   2. If you consent to receive marketing communications to your e-mail address, please note that you may revoke your consent at any time. If you wish to do so, please contact us.
5. What is our legitimate interest?

   Our legitimate interest is to conduct marketing within the scope described under a.2) above.

   In addition, if you subscribe to our e-mail communication (e.g. newsletter), our legitimate interest is to improve our communication by analysing whether you are familiar with the content and news you are most interested in, and to tailor the content to your interests.

6. Who will we transfer on your data to?
   1. workshops and car dealerships to which we deliver the products you have ordered,
   2. tyre manufacturers,
   3. tyre wholesalers and tyre dealers,
   4. courier and forwarding companies,
   5. Oponeo.pl S.A. with its registered office in Bydgoszcz, Poland,
   6. external stakeholders supporting the selection of appropriate tyres,
   7. accounting and bookkeeping offices supporting the process of sale and settlement,
   8. electronic payment operators,
   9. entities involved in hosting (storing) the Service or personal data for us;
   10. entities providing the tools used to operate the Service,
   11. law firms and debt collection companies.
7. How long will we process your data?

   for a period of time:

   1. of our marketing activities or
   2. until you object to the further processing of your data for marketing purposes or
   3. until revocation of the consent to send messages to your e-mail address. Your withdrawal of consent shall not affect the lawfulness of the processing prior to your withdrawal of consent.
8. Will we transfer your personal data outside the European Economic Area?

   No.

§ 10. Issuing opinions concerning the Service in TrustPilot portal or opinions concerning products purchased through the Service

If you are using this opportunity to contact us, please note the following:

1. Why do we need your data, or why do we process it?

   To survey customer satisfaction and to ensure the highest level of customer service. To achieve this, we need your feedback on the quality of our services. In order to achieve this goal, we send you e-mails referring to the appropriate forms.

2. What are your rights?

   We have described them in § 4 and § 5 of the Policy.

3. Do you have to give us your details?

   This is voluntary, but without it we will not know what we can improve.

4. On what legal basis do we process your data?

   Article 6(1)(f) GDPR, which is our legitimate interest.

5. What is our legitimate interest?

   Improving the quality of our services and providing goods of the highest quality.

6. Who will we pass on your data to?
   1. entities hosting (storing) the Service or personal data for us;
   2. entities dealing with administrative service of the Service;
   3. entities collecting and publishing opinions concerning online shops or products.
7. How long will we process your data?

   For a period of time:

   1. until posting your opinion about a shop or product or
   2. until you object to the further processing of your data for marketing purposes.
8. Will your personal data be transferred outside the European Economic Area?

   No.

§ 11. Newsletter

If you use this option in our Service, please note the following:

1. Why do we need your data, i.e. for what purpose do we process it?

   For marketing consisting in sending you newsletters and other marketing information by e-mail, as well as analysing what content you are interested in and what you read the most willingly. On this basis, we can also adjust our communication to your interests.

2. What are your rights?

   We have described them in § 4 and § 5 of the Policy. You also have the right to transfer your personal data under the conditions set out in GDPR.

3. Do you have to give us your details?

   This is voluntary, but without this information you cannot receive commercial information from us.

4. On what legal basis do we process your data?
   1. Article 6(1)(f) of the GDPR, which is our legitimate business.
   2. If you consent to receive marketing communications to your e-mail address, please note that you may revoke your consent at any time. If you wish to do so, please contact us.
5. What is our legitimate interest?

   Our legitimate interest is to improve our communications by analysing whether you are familiar with the content and which news you are most interested in and adapting it to your interests.

6. Who will we transfer on your data to?
   1. suppliers of tools for sending newsletters;
   2. entities involved in hosting (storing) the Service or personal data for us;
   3. entities dealing with administrative service of the Service.
7. How long will we process your data?

   For a period of time:

   1. of our marketing activities or
   2. until you object to the further processing of your data for marketing purposes or
   3. until you revoke the consent to send messages to your e-mail address. Your withdrawal of consent shall not affect the lawfulness of the processing prior to your withdrawal of consent
8. Will we transfer your personal data outside the European Economic Area?

   No.

§ 14. Types of cookies

There are several types of cookies on the Service:

1. session cookies, which remain in the memory of your Internet browser until you turn it off,
2. constantly stored in the memory of your web browser until you delete them,
3. external, from suppliers of analytical tools in our Service. You can read more about external cookies in § 17.

§ 15. How to delete cookies

1. You can configure your web browser to prevent cookies from being stored on your computer, phone or tablet.
2. You can delete your cookies after we have saved them. You can use them for this purpose: The appropriate functions of your browser, programs for this purpose or the appropriate tools available on your operating system.
3. Each of the most popular web browsers in the "support and help" section provides information on how to delete cookies.

§ 16. Influence of changing browser settings on the use of the Service

Changing the configuration of your web browser to one that prevents or limits the storage of cookies may result in restrictions on the functionality of the Service. The deletion of cookies during the provision of the service may lead to similar effects. This means that some of our services will not be available without cookies.

§ 17. External cookies

1. The cookies placed on your computer, phone or tablet may come from other service providers.
2. We use the service:
   1. Google Analytics, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA); to analyse traffic on the Site. We obtain statistics from it, telling us how you and other users use the Service.
   2. Google Ads, provided by Google Ireland Ltd. | Gordon House, Barrow Street, Dublin 4, Ireland; in order to optimise the display of advertisements, remarketing and popularisation of the Service.
   3. Emarsys eMarketing Systems AG - Märzstraße 1, A-1150 Vienna, Austria; for the purpose of sending e-mails and analysing their use by you and other recipients.
   4. Facebook.com [cookie administrator: Facebook Inc with the registered office in USA or Facebook Ireland with the registered office in Ireland];
   5. Bing.com [cookie administrator: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521]; in order to optimise the display of advertisements, remarketing and popularisation of the Service.
3. The operation of Google Analytics, as mentioned in paragraph 2(a) above, you can block it. To do so, install this browser add-on provided by Google Inc. available here: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
4. In connection with the use of tools provided by entities established in the United States, your data goes to the United States on the basis of the European Commission's Executive Decision of 12.07.2016 implementing the Privacy Shield.