Update cookies preferences
pl en
Call us
+48 889 939 580
Working hours:
Working hours:
Mon-Fri: 9 a.m.- 6 p.m.
+48 889 939 580
Working hours:
Working hours:
Mon-Fri: 9 a.m.- 6 p.m.
Cart is empty
Empty cart Your cart is empty

Check out our catalog — you’ll definitely find something

Go shopping
  1. Home
  2. Privacy Policy

Privacy Policy

I. General Information

1. The privacy policy adopted by MALWA Sp. z o.o. concerns the rules for processing personal data collected from users of the website https://wezer.pl (hereinafter: wezer.pl).

2. The Privacy Policy is the fulfillment of the information obligation arising from Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR) (OJ L 119, 4.05.2016, p. 1). It is also an expression of care for the rights of persons visiting wezer.pl and using the services offered through it.

3. The administrator of personal data collected from users of wezer.pl is: MALWA Sp. z o. o. with its registered office in Wrocław, at ul. Grabiszyńska 241E, entered into the register of entrepreneurs of the National Court Register under KRS number: 0000973359, which can be contacted in writing at the address: ul. Grabiszyńska 241E, 53-234 Wrocław, entered into the register of entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under KRS number: 0000973359, NIP: 5223226347, REGON: 522098911, share capital 5,000.00 PLN (hereinafter: Administrator). E-mail contact with the Administrator is possible via the e-mail address: sklep@wezer.pl.

4. The Administrator has appointed a Data Protection Officer (hereinafter: DPO). Contact with the DPO is possible via the e-mail address: rodo@wezer.pl.

II. Basis, Purpose, and Scope of Processing – what data we collect, for what information, and how we process data

1. The Administrator declares that they process personal data of wezer.pl users for the following purposes:

  1. account creation and management at wezer.pl - processing is necessary for the performance of the account management agreement to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract – the legal basis is Art. 6(1)(b) of the GDPR – conclusion and performance of the account management agreement;
  2. fulfillment of Orders placed on wezer.pl for the purpose of executing the sales agreement – processing is necessary for the proper implementation of the agreement for the sale of products offered via wezer.pl, to which the data subject is a party – the legal basis is Art. 6(1)(b) of the GDPR – conclusion and performance of the agreement;
  3. chatbot support - data processing is necessary to answer the question asked by the user – the legal basis is Art. 6(1)(f) of the GDPR – the legally justified interest of the Administrator;
  4. contact form support - data processing is necessary to answer the question asked by the user – the legal basis is Art. 6(1)(f) of the GDPR – the legally justified interest of the Administrator;
  5. returns form support - data processing is necessary to handle the reporting of returns – the legal basis is Art. 6(1)(b) of the GDPR – conclusion and performance of the agreement;
  6. complaints form support - data processing is necessary to handle the reporting of complaints – the legal basis is Art. 6(1)(b) of the GDPR – conclusion and performance of the agreement;
  7. newsletter delivery - data processing is necessary for sending marketing information via the communication channel indicated by the user - the legal basis is Art. 6(1)(a) of the GDPR – consent of the personal data owner and Art. 10(2) of the Act of July 18, 2002 on the provision of electronic services – consent to send ordered commercial information to the provided e-mail address;
  8. social media management - data processing is necessary to promote the Administrator's goods and answer questions asked - the legal basis is Art. 6(1)(f) of the GDPR – the legally justified interest of the Administrator;
  9. Establishment or defense against claims – data processing is necessary to enable the Administrator to determine the scope of possible claims or defend against claims submitted by the Website's customers – the legal basis is Art. 6(1)(f) of the GDPR – the legally justified interest of the Administrator.

2. The following personal data of wezer.pl users is collected voluntarily on wezer.pl:

  1. for the purpose of creating and maintaining an account at wezer.pl, we process the following personal data: e-mail address;
  2. for the purpose of performing the sales agreement concluded via wezer.pl, we process the following personal data: first name, last name, delivery address, company (if applicable), phone number, e-mail address, NIP number (if applicable), billing details (if different from delivery details);
  3. to enable the use of the chatbot, we process the following personal data: first name, last name, e-mail address, other data specified in the content of the correspondence;
  4. to enable the use of the contact form provided on wezer.pl, we process the following personal data: first name, e-mail address;
  5. to support the returns form provided on wezer.pl, we process the following personal data: order number, e-mail address, phone number;
  6. to support the complaints form provided on wezer.pl, we process the following personal data: order number, e-mail address, phone number;
  7. for the purpose of sending ordered commercial information (newsletter), we process the following personal data: e-mail address;
  8. for the purpose of establishing or defending against claims, we will process personal data provided by the wezer.pl Customer as part of using the Website's functionalities, such as: first name, last name, data regarding the services used by the Customer if the claims arise from the method of using these services, and other data necessary to prove the existence of the claim, including the extent of the damage suffered.

3. While using wezer.pl, additional non-personal data may also be processed, such as: the IP number of the Customer's computer or the external IP address of the Internet provider, domain name, type of web browser, access time, type of operating system. Providing the personal data indicated above is fully voluntary, with the proviso that in the event of failure to provide it or providing false data, the Administrator will not be able to fulfill the concluded agreement for account registration at wezer.pl or the sale of products offered via wezer.pl.

III. Who has access to the data collected via wezer.pl

1. The recipients of personal data collected via wezer.pl will be: IT service providers acting as processors, companies providing credit services (if necessary), courier companies delivering goods purchased in the store, entities providing advisory services, and in the case of a complaint, the manufacturer of the goods. Data transfer takes place on the basis of a personal data processing entrustment agreement, concluded in accordance with Art. 28 of the GDPR.

2. Personal data collected via wezer.pl is not shared with third parties, except for the situations described above or when such sharing results from applicable legal provisions obliging the Administrator to provide it to authorized entities.

3. The Administrator collects wezer.pl logs, however, they are not linked in any way with personal data. Statistics based on log files may be generated to assist in the administration of wezer.pl. Aggregate summaries in the form of such statistics do not contain any features identifying people visiting wezer.pl.

4. As part of performing our services, we use technical solutions offered by entities that may process personal data outside the European Economic Area (EEA), such as Google, Facebook, YouTube, Instagram, X, or Threads.

5. Personal data collected via wezer.pl is stored for the following period:

  1. in the case of personal data whose legal basis for processing is the consent of the data subject – this data will be stored until the consent is withdrawn, and after its withdrawal, for a period corresponding to the limitation period for any claims that the Administrator may raise or that may be raised against them. If the limitation period results from general civil law provisions, it is 6 years, and in the case of claims for periodic benefits or claims related to running a business, it is 3 years.
  2. in the case of personal data whose legal basis for processing is the performance of a contract concluded by the Customer, personal data will be stored for the period necessary for the proper implementation of the concluded contract, and after its performance, for a period corresponding to the limitation period of any claims. If the limitation period results from general civil law provisions, it is 6 years, and in the case of claims for periodic benefits or claims related to running a business, it is 3 years.
  3. in the case of personal data whose legal basis for processing is the legally justified interest of the Administrator, personal data will be stored for the period of existence of the Administrator's legally justified interest.

IV. Rights of the wezer.pl Customer

In accordance with Articles 15 – 22 of the GDPR, every Customer as a user of wezer.pl has the following rights:

1. Right of access to data (Art. 15 GDPR). The data subject is entitled to obtain confirmation from the Administrator as to whether personal data concerning them is being processed, and if so, is entitled to gain access to it.

2. Right to rectify data (Art. 16 GDPR). The data subject has the right to request from the Administrator the immediate rectification of incorrect personal data concerning them.

3. Right to delete data (“the right to be forgotten”) (Art. 17 GDPR). The data subject has the right to request from the Administrator the immediate deletion of personal data concerning them.

4. Right to restrict processing (Art. 18 GDPR). The data subject has the right to request from the Administrator a restriction of processing in the following cases:

  1. When the data is incorrect – for the time until it is rectified;
  2. The data subject has objected to processing under Art. 21(1) of the GDPR – until it is determined whether the legally justified grounds on the Administrator's side override the grounds of the data subject's objection;
  3. The processing is unlawful, and the data subject opposes the deletion of personal data, requesting instead the restriction of its use.

5. Right to data portability (Art. 19 GDPR). The data subject has the right to request that their personal data be sent directly to the indicated administrator, provided it is technically possible. In a situation where the Administrator is unable to send data directly to the indicated administrator, the personal data will be made available directly to the data subject in a machine-readable form (csv file), which can be sent to the selected administrator.

6. Right to object (Art. 21 GDPR). If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing. The data subject also has the right to object to processing based on the Administrator's legally justified interest.

7. The Customer may exercise their rights by sending an appropriate request to the address rodo@wezer.pl.

  1. for correct identification, the request should be sent from the e-mail address used for the submission via the contact form;
  2. the request can also be submitted by mail – by sending a registered letter containing such a request to the Administrator's correspondence address.

8. In accordance with Art. 12(3) of the GDPR, the Administrator shall provide the person who submitted the request with information on the actions taken within one month. However, in the case of a complex request, the Administrator may extend the response time by another two months. If the deadline is extended, the Administrator will inform the person submitting the request about the reasons for the extension. If the Administrator does not take the actions indicated in the request, they will inform the person submitting the request about this fact.

9. There is a right to lodge a complaint with the Supervisory Authority regarding the Administrator's actions.

10. The Customer also has the right to withdraw the consent granted for the processing of their personal data at any time for the purpose of receiving ordered commercial information at the indicated e-mail address. Withdrawal of consent takes legal effect from the moment of receipt of the statement of its withdrawal and does not affect the lawfulness of the personal data processing carried out by the Administrator in the period preceding the withdrawal of consent.

V. Cookies

Wezer.pl also uses cookies to collect data. These are small text files stored on the user's end device, intended to make it easier for Customers to use wezer.pl. Detailed information on which cookies are used within wezer.pl and what data is collected in this way is available at: https://wezer.pl/Informacja-o-cookies.

VI. Protection of the Privacy of Minors

1. Only natural persons who are of legal age can be Customers; however, wezer.pl does not collect or verify information regarding the age of customers.

2. The Administrator bears no responsibility for any registration at wezer.pl of minors nor for the actions taken by them. Legal responsibility for such actions lies solely with their legal guardians.

VII. Security Measures

1. Wezer.pl is equipped with security measures aimed at protecting personal data under the Administrator's control against loss, misuse, and modification. The Administrator also has appropriate documentation and has implemented appropriate procedures related to the protection of personal data.

2. The Administrator ensures that they protect all disclosed information in accordance with the applicable regulations and security standards, in particular:

  1. only authorized employees or associates of the Administrator and authorized persons involved in the maintenance of wezer.pl, who have been granted appropriate authorizations, have direct access to personal data collected by the Administrator in accordance with Art. 29 of the GDPR;
  2. the Administrator declares that when commissioning other entities to provide services, they require partners, in accordance with the instruction of Art. 28 of the GDPR, to ensure appropriately high standards of protection of entrusted personal data, to sign appropriate entrustment agreements in which partners confirm the application of standards and the right to control the compliance of these entities' activities with these standards;
  3. to ensure proper protection of services provided electronically, the Administrator applies a high level of security including cryptographic protection of personal data transmission (SSL protocol);
  4. due to the public nature of the Internet, using services provided electronically may involve risks, regardless of the Administrator's due diligence.

VIII. Changes to the Privacy Policy

1. The Administrator reserves the right to change the Privacy Policy at any time and place, simultaneously committing to immediately publish the new Privacy Policy on the wezer.pl website and inform all registered Customers about this fact.

2. The Data Administrator reserves the right to introduce changes, withdraw, or modify functions or properties of the wezer.pl websites, as well as to cease operations, transfer rights to wezer.pl, and perform any legal actions permitted by applicable law.

Read our Terms and Conditions to learn the rules for using the website.