Privacy Policy

I. General Provisions

This Privacy Policy defines how the personal data of Users is collected, processed, and stored, which is necessary for the provision of electronic services via the website kinaway.pl (hereinafter: the "Website").

The Website collects only the personal data necessary to provide and improve the services offered.

Personal data collected through the Website is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter: GDPR) and the Polish Data Protection Act of 10 May 2018.

II. Data Controller

The controller of personal data collected through the Website is:

KINAWAY Sp. z o.o.

Registered office: Aleja Jana Pawła II 27, 00-867 Warsaw, Poland

Tax ID (NIP): 5273213141

National Court Register (KRS): 0001182333

Business ID (REGON): 529243871

Legal form: Limited Liability Company (Spółka z ograniczoną odpowiedzialnością)

(hereinafter: the "Controller").

III. Purpose of Data Collection

Personal data is used for the following purposes:

registering an account and verifying the User’s identity,

executing service and e-service agreements,

communication with the User (live chat, contact form, etc.),

sending newsletters (upon the User’s consent),

enabling the comment system,

providing transport and delivery services,

promoting the Controller’s offer,

marketing, remarketing, and affiliation,

personalizing the Website for Users,

analytical and statistical purposes,

debt collection,

establishing and pursuing claims or defending against them.

Providing personal data is voluntary but necessary to conclude an agreement.

IV. Types of Processed Personal Data

The Controller may process the following User personal data:

name and surname,

date of birth,

address,

e-mail address,

phone number,

tax identification number (NIP).

V. Data Processing Period

Personal data of Users will be processed for the following periods:

if the basis for processing is the performance of a contract – until the statute of limitations for claims after its execution,

if the basis for processing is consent – until it is withdrawn, and after withdrawal until the statute of limitations for claims.

In both cases, the limitation period is 6 years, and for periodic claims or those related to business operations – 3 years (unless a special provision states otherwise).

VI. Data Sharing

Users’ personal data may be transferred to entities related to the Controller, subcontractors, and partners cooperating with the Controller, e.g. companies handling electronic payments, courier/postal companies, legal offices.

Users’ personal data will not be transferred outside the European Economic Area (EEA).

VII. Users’ Rights

Users of the Website have the right to:

access their personal data,

rectify it,

delete it,

restrict processing,

transfer it,

object to processing,

withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

Requests to exercise these rights should be sent to: contact@kinaway.pl

The Controller will comply with or refuse the request without undue delay – no later than within one month of receipt.

Users have the right to lodge a complaint with a supervisory authority if they believe that data processing violates their rights and freedoms (GDPR).

VIII. Cookies

The Website collects information through cookies – session, persistent, and third-party cookies.

Collecting cookies supports the proper provision of services on the Website and serves statistical purposes.

Users may define the scope of cookie access to their devices in their browser settings.

IX. Automated Decision-Making and Profiling

Users’ data will not be processed in an automated way that would result in decisions affecting them.

Users’ data may be subject to profiling for content adjustment and personalized offers, upon their consent.

X. Final Provisions

The Controller reserves the right to make changes to this Privacy Policy, provided that Users’ rights are not limited.

Information about changes will appear in the form of a notice available on the Website.

In matters not regulated by this Privacy Policy, the provisions of the GDPR and Polish law apply.