Publication date: 01/06/2025

This Privacy Policy outlines the principles for processing personal data of individuals using the website www.7sun.eu. This document includes the information required by the General Data Protection Regulation (GDPR) and considers Irish law, including the Data Protection Acts 1988-2018 and the ePrivacy Regulations 2011 (S.I. No. 336/2011).

1. Data Controller

The controller of your personal data is:
Paweł Sternal, conducting business under the name 7SUN Paweł Sternal, with its registered office at: Wojska Polskiego 8, 41-208 Sosnowiec, VAT (NIP): 6443163595, REGON: 240990583, email: orders@7sun.eu, phone: +48 534 991 991 (hereinafter: “Controller” or “we”).

2. Data Protection Officer

The Administrator has appointed a Data Protection Officer (DPO), Gabriel Gatner. If you have any questions regarding the processing of personal data or the exercise of privacy rights, please contact the Data Protection Officer:

3. Legal Basis for Data Processing

Your personal data is processed in accordance with applicable legal regulations, including:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR),
  • Data Protection Acts 1988-2018,
  • ePrivacy Regulations 2011 (S.I. No. 336/2011), governing electronic communication and the use of cookies.

4. Purposes, Scope, and Legal Basis for Data Processing

We process your data for the following purposes:

  1. Contract Performance (e.g., order fulfillment, account management)
    • Scope: Name, email address, correspondence address, VAT number (if applicable), phone number, payment details.
    • Legal Basis: Article 6(1)(b) GDPR (necessary for contract performance).
    • Retention Period: Until the expiration of contractual claims.
  2. Handling Inquiries and Correspondence (e.g., contact form, chat support)
    • Scope: Data provided in the inquiry (e.g., name, email, phone number).
    • Legal Basis: Article 6(1)(f) GDPR (legitimate interest in maintaining user contact).
    • Retention Period: Until objection is raised or the matter is resolved.
  3. Legal Obligations (e.g., tax and accounting requirements)
    • Scope: Data necessary for compliance (e.g., invoice details: name, company name, address, VAT number).
    • Legal Basis: Article 6(1)(c) GDPR (legal obligation).
    • Retention Period: As required by tax and accounting laws.
  4. Direct Marketing (newsletter, promotional offers)
    • Scope: Email address, name, phone number (if provided), IP address.
    • Legal Basis: Article 6(1)(a) GDPR (consent). Additionally, under ePrivacy Regulations, electronic marketing requires prior consent.
    • Retention Period: Until consent is withdrawn.
  5. Claims and Dispute Resolution
    • Scope: Data necessary for legal claims (e.g., identification details, contact information, transaction history).
    • Legal Basis: Article 6(1)(f) GDPR (legitimate interest in defending or pursuing claims).
    • Retention Period: Until claims expire.
  6. Analytics, Statistics, and Personalization (profiling)
    • Scope: Data on browsing behavior, IP address, order history, preferences.
    • Legal Basis: Article 6(1)(f) GDPR (legitimate interest in improving services) or Article 6(1)(a) GDPR (consent) for marketing profiling.
    • Retention Period: Until an objection is raised or consent is withdrawn.

5. Data Recipients

Your data may be shared with entities that support us in service delivery, such as:

  • IT service providers (hosting, analytics services),
  • Courier and transport companies (order delivery),
  • Accounting firms, legal offices (compliance with legal obligations, claims handling),
  • Providers of newsletter and marketing campaign services,
  • Providers of analytical and advertising tools.

If data is transferred outside the EEA (e.g., to the USA), we apply appropriate safeguards such as standard contractual clauses.

6. Data Subject Rights

You have the following rights:

  • Right of access (Article 15 GDPR) – obtain information about processing and a copy of your data.
  • Right to rectification (Article 16 GDPR) – correct inaccurate or incomplete data.
  • Right to erasure (‘right to be forgotten’, Article 17 GDPR) – delete data when it is no longer needed or processed unlawfully.
  • Right to restriction of processing (Article 18 GDPR) – limit processing in specific situations.
  • Right to data portability (Article 20 GDPR) – receive your data in a structured format and transfer it to another controller.
  • Right to object (Article 21 GDPR) – object to processing based on legitimate interest or direct marketing.
  • Right to withdraw consent (Article 7(3) GDPR) – withdraw consent at any time without affecting past processing.

To exercise your rights, contact us at orders@7sun.eu. We will respond promptly, no later than one month from receiving your request.

You also have the right to lodge a complaint with the Data Protection Commission of Ireland (www.dataprotection.ie) if you believe your data is processed unlawfully.

7. Voluntary Data Provision

Providing your data is voluntary, but in some cases, it is necessary for contract execution or service provision (e.g., we cannot process an order without address details).

8. Automated Decision-Making and Profiling

We may process data automatically, including profiling, to tailor offers or advertisements to your preferences. Profiling does not result in legal consequences or significantly affect you without your consent.

9. Cookies and Similar Technologies

In accordance with ePrivacy Regulations, before storing or accessing information on your device, we will inform you of the purpose and obtain your consent. Cookies are small text files stored on your device. We use them to ensure website functionality, analyze traffic, and tailor content and ads. We use both session cookies (deleted after closing your browser) and persistent cookies (stored until manually removed). We may use third-party cookies (e.g., Google Analytics, Meta Pixel, Microsoft Advertising) for analytics, advertising, and marketing. Detailed privacy policies of these providers can be found on their websites. You can manage cookie settings in your browser (block, delete). If you do not change settings, you consent to their use.

10. Changes to the Privacy Policy

This Privacy Policy may change due to legal updates or service modifications. We will notify you of significant changes via our website or email (if you have an account and provided an email address). We recommend reviewing this policy regularly.

Privacy Policy valid until 31/05/2025:

Privacy Policy – 31-05-2025Pobierz