Privacy Policy
version valid from April 16, 2026
WHAT IS THE PRIVACY POLICY?
We would like to inform you about the details of how we process your personal data, to give you full knowledge and comfort in using our website.
As we operate in the internet industry ourselves, we know how important the protection of your personal data is. Therefore, we take special care to protect your privacy and the information you provide to us.
We carefully select and apply appropriate technical measures, in particular those of a software and organizational nature, ensuring the protection of processed personal data. Our website uses encrypted data transmission (SSL), which ensures the protection of your identifying data.
In our Privacy Policy, you will find all the most important information regarding the processing of your personal data by us. Please read it, and we promise it will not take you more than a few minutes.
Who is the administrator of the website sklepgtbt.com?
The administrator of the website is WALAS MEDIA limited liability company with its registered office in Lublin, at ul. Kowalska 5/203, 20-115 Lublin, registered by the District Court Lublin-Wschód in Lublin with its registered office in Świdnik, VI Commercial Division of the National Court Register, KRS 0000932220, NIP 7123426645, REGON 520424430, with a share capital of: PLN 5,000.00 (i.e., us).
PERSONAL DATA
What legal act governs the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly known as: GDPR. To the extent not regulated by the GDPR, the processing of personal data is regulated by the Personal Data Protection Act of May 10, 2018.
Who is the administrator of your personal data?
The administrator of your personal data is WALAS MEDIA limited liability company with its registered office in Lublin, at ul. Kowalska 5/203, 20-115 Lublin, registered by the District Court Lublin-Wschód in Lublin with its registered office in Świdnik, VI Commercial Division of the National Court Register, KRS 0000932220, NIP 7123426645, REGON 520424430, with a share capital of: PLN 5,000.00, email: sklep@gt-bt.com, telephone: +48 695 501 992.
Regarding your personal data, you can contact us via:
- email: sklep@gt-bt.com,
- traditional mail: ul. Kowalska 5/203, 20-115 Lublin,
- contact phone number: +48 695 501 992.
HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?
What personal data do we process and for what purposes do we process it?
On our website, we offer you many different services for which we process various personal data for various purposes, based on different legal bases.
|
Purpose |
Personal data |
Legal basis for processing |
Data retention period |
|---|---|---|---|
|
conclusion and execution of the agreement |
first name, last name, correspondence address, NIP, email address, phone number |
Art. 6(1)(b) of the GDPR, i.e., processing for the purpose of taking action at your request, before concluding the agreement, and processing necessary for the performance of an agreement to which you are a party |
until the expiration of the limitation period for claims related to the performance of the agreement |
|
account creation and maintenance |
first name, last name, email address, phone number, correspondence address |
Art. 6(1)(b) of the GDPR, i.e., processing for the purpose of taking action at your request, before concluding the agreement, and processing necessary for the performance of an agreement to which you are a party |
until the expiration of the limitation period for claims related to the performance of the agreement |
|
contact form |
First name, last name, email address |
Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing our legitimate interest, consisting in maintaining communication continuity and enabling contact with us regarding business activities |
6 months or until an objection to the processing of personal data is raised |
|
analysis of traffic on the online store's website |
IP address, browser data |
Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing our legitimate interest consisting in analyzing customer traffic on the store's website |
6 months or until an objection to the processing of personal data is raised |
|
establishment, exercise, and defense of claims and defense against claims in proceedings before courts and other state authorities |
first name, last name, residential address, PESEL number, NIP, REGON, email address, phone number, IP number, bank account number, payment card number |
Art. 6(1)(f) of the GDPR, i.e., processing for the purpose of pursuing our legitimate interest, consisting in the establishment, exercise, and defense of claims and defense against claims in proceedings before courts and other state authorities |
until the expiration of the limitation period for claims related to the performance of the agreement |
|
fulfillment of legal obligations arising from legal provisions, in particular tax and accounting regulations |
first name, last name, company name, PESEL number, NIP or REGON, email address, phone number, correspondence address, payment card number |
Art. 6(1)(c) of the GDPR, i.e., processing is necessary for compliance with legal obligations to which we are subject, arising from legal provisions, in particular tax and accounting regulations |
until the expiry of legal obligations incumbent on the Administrator that justified the processing of personal data |
Voluntary provision of personal data
The provision of required personal data by you is voluntary but is a condition for us to provide services to you (e.g., creating an account).
Recipients of personal data
You can find the current list of entities to whom we disclose your personal data here.
Automated decision-making (including profiling)
We do not make automated decisions concerning you and do not use profiling.
Will we transfer your personal data outside the EEA or to an international organization?
To use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located.
Google LLC is listed in the register of entities participating in the Data Privacy Framework program (link: https://www.dataprivacyframework.gov/s/participant-search), therefore, the protection of personal data is adequate in relation to the regulations in force in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of 10 July 2023 on the adequate level of personal data protection under the EU-US Data Privacy Framework (link: https://eur-lex.europa.eu/legal-content/PL/TXT/PDF/?uri=CELEX:32023D1795&qid=1710923455391).
WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?
Based on the GDPR, you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request erasure of your personal data,
- request restriction of processing of personal data,
- object to processing of personal data,
- request data portability of personal data.
Should you submit any of the above requests without undue delay – and in any case within one month of receiving the request – we will provide you with information on the actions taken in response to your request.
If necessary, we may extend the one-month period by another two months due to the complexity of the request or the number of requests.
In any case, we will inform you within one month of receiving the request about the extension of the deadline and provide you with the reasons for the delay.
Right of access to personal data (Art. 15 GDPR)
You have the right to obtain confirmation as to whether or not your personal data is being processed. If we are processing your personal data, you have the right to:
- access personal data,
- obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of such data, the envisaged period for which your data will be stored or the criteria used to determine that period, your rights under the GDPR and the right to lodge a complaint with the President of the Personal Data Protection Office, the source of this data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union;
- obtain a copy of your personal data.
If you wish to request access to your personal data, please send your request to: sklep@gt-bt.com.
Right to rectification of personal data (Art. 16 GDPR)
If your personal data is inaccurate, you have the right to request us to promptly rectify your personal data. You also have the right to request us to complete your personal data. If you wish to request rectification or completion of your personal data, please send your request to: sklep@gt-bt.com.
Right to erasure of personal data, i.e., "right to be forgotten" (Art. 17 GDPR)
You have the right to request the erasure of your personal data when:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn specific consent, to the extent that personal data was processed based on your consent;
- your personal data has been unlawfully processed;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.
Despite submitting a request for erasure of personal data, we may continue to process your data for the establishment, exercise, or defense of claims, about which you will be informed.
If you wish to request the erasure of your personal data, please send your request to: sklep@gt-bt.com.
Right to request restriction of personal data processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data when:
- you contest the accuracy of your personal data – in such a case, we will restrict the processing of your personal data for a period enabling us to verify the accuracy of the data;
- the processing of your data is unlawful, and instead of erasure of personal data, you request the restriction of the processing of your personal data;
- your personal data is no longer needed for the purposes of processing, but it is required for the establishment, exercise, or defense of your claims;
- you have objected to the processing of your personal data – pending the verification whether our legitimate grounds override the grounds indicated in your objection.
If you wish to request the restriction of the processing of your personal data, please send your request to: sklep@gt-bt.com.
Right to object to the processing of personal data (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
- processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Personal Data Administrator or a third party;
- processing for direct marketing purposes.
If you wish to object to the processing of your personal data, please send your request to: sklep@gt-bt.com.
Right to request personal data portability (Art. 20 GDPR)
You have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to transmit it to another personal data administrator.
We will usually provide your personal data in CSV format. If you prefer the data to be provided in another format, please indicate your preferred format in your request. To the extent possible, we will try to provide you with the data in your preferred format.
You can also request that we transmit your personal data directly to another administrator (if technically feasible).
If you wish to request the portability of your personal data, please send your request to: sklep@gt-bt.com.
Can you withdraw your consent to personal data processing?
You can withdraw your consent to the processing of your personal data at any time. Withdrawal of consent to the processing of personal data does not affect the lawfulness of processing carried out by us based on your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data, please send your request to: sklep@gt-bt.com.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates personal data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
In Poland, the supervisory authority in the meaning of the GDPR is the President of the Personal Data Protection Office, who replaced GIODO as of May 25, 2018.
You can find more information here.
"Cookies"
General information
While browsing the Online Store websites, "cookies" (hereinafter referred to as Cookies) are used, which are small text files saved on your end device in connection with your use of the Online Store. Their purpose is to ensure the proper functioning of the Online Store websites.
These files allow us to identify the software you use and to tailor the Online Store individually to your needs.
Cookies usually contain the name of the domain they come from, their storage time on the device, and an assigned value.
Security
The Cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted software or malware to penetrate your devices through Cookies.
Types of Cookies
We use two types of Cookies:
- Session Cookies: they are stored on your device and remain there until the end of the browser session. The stored information is then permanently deleted from your device's memory. The Session Cookies mechanism does not allow for the collection of any personal data or confidential information from your device.
- Persistent Cookies: they are stored on your device and remain there until they are deleted. Ending a browser session or turning off the device does not remove them from your device. The Persistent Cookies mechanism does not allow for the collection of any personal data or confidential information from your device.
Purposes
We also use third-party Cookies for the following purposes:
- configuring the Online Store;
- creating statistics that help understand how users of the Online Store use the websites, which allows for improving their structure and content through Google Analytics analytical tools, administered by Google Ireland Ltd. based in Ireland. Google's privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
To learn about the rules for using Cookies, we recommend reviewing the privacy policies of the aforementioned companies.
Cookies may be used by advertising networks, particularly the Google network, to display advertisements tailored to your preferences. For this purpose, information about your navigation on the web or the time you spent on the website may be stored.
To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at https://www.google.com/ads/preferences/.
Using your web browser settings or by configuring the service, you can independently and at any time change the settings regarding Cookies, specifying the conditions for their storage and access by Cookies to your device. You can change these settings to block the automatic handling of Cookies in your web browser settings or to inform you about each placement of Cookies on your device. Detailed information about the possibilities and methods of handling Cookies is available in the settings of your software (web browser).