PRIVACY POLICY & COOKIES

PRIVACY AND COOKIES POLICY

of the online store www.skilspo.com

This Privacy and Cookies Policy (the „Policy”) explains how UNIQ SPORT Sp. z o.o. processes the personal data of Users and Customers of the online store, what rights they have and how we use cookies. We take care to keep your data secure and to process it in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Polish law.

1. Data controller

The controller of personal data is UNIQ SPORT Sp. z o.o. with its registered office in Warsaw, ul. VI Poprzeczna 23, 04-620 Warsaw, entered into the register of entrepreneurs of the National Court Register under KRS number: 0000767475, NIP: 9522193072, REGON: 382369551 (the „Controller”, „we”).

Contact regarding personal data: e-mail sklep@skilspo.com, tel. +48 730 033 332, correspondence address: ul. VI Poprzeczna 23, 04-620 Warsaw. The Controller has not appointed a data protection officer; in all matters concerning personal data you may contact the Controller directly.

2. What data we process

Depending on how you use our services, we may process:

  • identification and contact data: first and last name, e-mail address, telephone number, delivery address and invoice address;
  • company data (for entrepreneurs): company name, NIP (Tax ID), registered address;
  • account data: login (e-mail address) and password (in encrypted form);
  • order and transaction data: ordered products, value, payment and delivery method, history of orders, returns and complaints;
  • communication data: content of correspondence, enquiries and requests, product reviews;
  • technical and usage data: IP address, browser type and version, operating system, device identifiers, session data, entry source and manner of using the site, collected mainly via cookies and similar technologies (see section 9).

Providing data is voluntary but necessary to conclude and perform the contract (placing an order, creating an account, handling complaints). Failure to provide data necessary to fulfil an order makes it impossible to accept and perform it.

3. Purposes and legal bases of processing

We process your personal data for the following purposes and on the following legal bases:

  • fulfilment of the order and sales contract (handling the account, orders, payments, delivery, returns) – Art. 6(1)(b) GDPR (necessity to perform the contract);
  • handling complaints and withdrawals from the contract – Art. 6(1)(b) and (c) GDPR (performance of the contract and legal obligation);
  • issuing and keeping invoices and accounting documents – Art. 6(1)(c) GDPR (obligations under tax and accounting law);
  • maintaining a Customer account – Art. 6(1)(b) GDPR;
  • sending the newsletter and e-mail marketing – Art. 6(1)(a) GDPR (your consent), which you may withdraw at any time;
  • marketing, remarketing and personalisation of advertising using cookies and similar technologies – Art. 6(1)(a) GDPR (consent given via the cookie banner);
  • statistics and analytics of the use of the site – Art. 6(1)(a) GDPR (consent to analytics cookies);
  • collecting reviews of purchases (e.g. via Trusted Shops) – Art. 6(1)(a) or (f) GDPR;
  • establishing, pursuing and defending claims and ensuring security and preventing abuse – Art. 6(1)(f) GDPR (our legitimate interest);
  • answering enquiries and handling correspondence – Art. 6(1)(f) GDPR.

4. Recipients of data

We may share or entrust your data for processing to trusted entities that support us in running the store, only to the extent necessary and on the basis of data processing agreements. The categories of recipients include:

  • payment operators: PayU S.A., PayPo sp. z o.o., PayPal (Europe) S.à r.l. et Cie, and in the skilspo.de store also Klarna;
  • courier companies and logistics operators: InPost, DPD, UPS and the shipping broker apaczka (R2G Polska sp. z o.o.);
  • provider of marketing e-mail and newsletter services: Mailchimp (Intuit Inc.);
  • providers of analytics and marketing tools: Google (Google Analytics 4, Google Tag Manager, Google Ads – Google Ireland Ltd.), Meta Platforms Ireland Ltd. (Facebook pixel and Conversions API) and Microsoft Clarity (Microsoft Ireland Operations Ltd.) – a user-behaviour analytics tool (session recordings and heatmaps), loaded only after you consent to analytics cookies;
  • product search provider: Doofinder S.L.;
  • review platform and trust mark: Trusted Shops GmbH;
  • sales and marketplace integrations: Allegro and BaseLinker sp. z o.o. (handling orders from sales platforms);
  • hosting and IT infrastructure provider: cyberfolks (H88 S.A.);
  • accounting office handling accounting and tax settlements;
  • authorised public authorities – where the obligation to disclose data results from the law.

5. Transfer of data outside the European Economic Area (EEA)

Some of our providers (including Google, Meta, Microsoft, Mailchimp/Intuit, PayPal) are based in or process data in third countries, including the United States. In such cases, the transfer takes place on the basis of appropriate safeguards provided for in the GDPR, in particular an adequacy decision of the European Commission (EU-US Data Privacy Framework) or standard contractual clauses (SCC) approved by the European Commission. You have the right to obtain a copy of the safeguards applied by contacting us at sklep@skilspo.com.

6. Data retention period

We keep personal data no longer than necessary to achieve the purposes for which it was collected:

  • data related to the performance of the contract and the order – for the duration of its performance and then until the limitation period for claims arising from the contract expires;
  • invoices and accounting documents – for the period required by tax and accounting law, i.e. as a rule 5 years counted from the end of the calendar year in which the tax obligation arose;
  • Customer account data – until the account is deleted by the User or a deletion request is made, subject to data necessary to defend claims;
  • data processed on the basis of consent (newsletter, marketing, cookies) – until consent is withdrawn;
  • data processed on the basis of legitimate interest (including pursuing claims, security) – until an effective objection is raised or that interest ceases;
  • data in cookies – for the period indicated in section 9, no longer than until consent is withdrawn or the cookies are deleted.

7. Your rights

In connection with the processing of your personal data, you have the following rights:

  • the right to access your data and to obtain a copy of it;
  • the right to rectification (correction) of data;
  • the right to erasure of data („right to be forgotten”);
  • the right to restriction of processing;
  • the right to data portability (for data processed on the basis of consent or a contract);
  • the right to object to processing based on legitimate interest, including direct marketing;
  • the right to withdraw consent at any time – without affecting the lawfulness of processing carried out before its withdrawal;
  • the right to lodge a complaint with a supervisory authority.

To exercise the above rights, please contact us at sklep@skilspo.com. The supervisory authority in Poland is the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl).

8. Automated decision-making and profiling

We may profile data for marketing purposes (e.g. tailoring content and advertising to your interests based on your browsing and purchase history), on the basis of your consent given via cookies. This profiling does not produce legal effects concerning you or similarly significantly affect you – we do not make decisions concerning you based solely on automated processing that would produce such effects.

9. Cookies and similar technologies

Cookies are small text files stored on your device when you use the site. We use them and similar technologies to ensure the correct operation of the store, remember your preferences, keep statistics and – with your consent – carry out marketing activities.

We use the following categories of cookies:

  • necessary – required for the site to operate (cart, login, security, remembering the cookie consent); they do not require consent;
  • functional / preferences – remember the User's choices (e.g. language, currency);
  • analytical / statistical – allow measuring traffic and the manner of using the site (including Google Analytics 4 and, once implemented, Microsoft Clarity);
  • marketing / advertising – serve to personalise advertising and remarketing (including Google Ads, the Meta/Facebook pixel), as well as to operate the Doofinder search and the Trusted Shops trust mark.

On your first visit to the site we display a cookie consent banner. Cookies other than necessary are disabled by default (consent „denied” until it is given) and are activated only after you give your consent. We use the Google Consent Mode mechanism, thanks to which Google tools and other marketing scripts respect your choice. You can change or withdraw your consent at any time by clicking „Cookie settings” in the site footer. You can also manage cookies in your browser settings, including blocking or deleting them – this may, however, affect the operation of some store functions.

Information on managing cookies in popular browsers can be found on the websites of their providers (Google Chrome, Mozilla Firefox, Microsoft Edge, Safari, Opera).

10. Data security

We apply appropriate technical and organisational measures to protect personal data, including encryption of data transmission (SSL/TLS protocol), access control and limiting access to data only to authorised persons. Despite due diligence, we cannot guarantee the complete security of data transmitted over the internet.

11. Changes to the Policy

We may update this Policy, in particular in connection with changes in the law or the implementation of new tools or services. The current version is always available on this page.

Date of last update: 26 July 2026.