Privacy Policy of the Online Store www.galopwear.eu

1. General Information

This Privacy Policy governs the processing of personal data of users of the online store www.galopwear.eu (hereinafter referred to as the „Store”).

The data controller is Zargo Marek Czaja, headquartered at Al. Najświętszej Maryi Panny 6, 42-202 Częstochowa, Poland,
VAT ID: PL9492166106, REGON: 363991386,
Email: contact@galopwear.eu, Phone: +48 508 478 822 (hereinafter referred to as the „Controller”).

The Controller processes personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.

All appropriate technical and organizational measures are taken to ensure the security of the personal data processed.

By using the Store, the user accepts this Privacy Policy and consents to the processing of their data in accordance with its terms.

2. Data Protection Contact

For all questions related to data protection, users may contact the Controller:

• Email: contact@galopwear.eu

• Mailing address: Zargo Marek Czaja, Al. Najświętszej Maryi Panny 6, 42-202 Częstochowa, Poland

• Phone: +48 508 478 822

3. Types of Personal Data Processed

The Controller may process the following personal data of users:

• First and last name

• Email address

• Phone number

• Billing and shipping address

• VAT ID (for business clients)

• IP address

• Order history

• Preferences and usage behavior within the Store

• Device and operating system information

• Payment and transaction data

• Data from cookies and similar technologies

Providing personal data is voluntary, but necessary for order processing, account management, and access to store functionalities.

4. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

• Contract performance and order fulfillment (Art. 6(1)(b) GDPR) – data stored for 10 years, in accordance with tax regulations.

• Handling returns and complaints (Art. 6(1)(c) GDPR) – stored until the limitation period expires.

• User account management (Art. 6(1)(b) GDPR) – stored until the account is deleted.

• Marketing purposes based on user consent (Art. 6(1)(a) GDPR) – stored until consent is withdrawn.

• User behavior analysis (e.g. via Google Analytics, Facebook Pixel) based on legitimate interest (Art. 6(1)(f) GDPR) – data retained for up to 2 years or until cookies are deleted.

• Ensuring store security and fraud prevention (Art. 6(1)(f) GDPR).

• Fulfilling legal obligations, including tax duties (Art. 6(1)(c) GDPR).

5. Data Sharing

Personal data may be shared with the following categories of recipients:

• Shipping providers (e.g. DHL, DPD) for order delivery

• Payment processors (e.g. PayPal, Klarna, Stripe) for handling payments

• IT and hosting service providers (e.g. Google, Meta)

• Public authorities, if legally required

• Partner companies involved in loyalty programs or analytical services

Data will only be transferred outside the EU/EEA if the destination country ensures an adequate level of data protection under GDPR.

6. User Rights

Each user has the following rights under the GDPR:

• Access to their data (Art. 15 GDPR)

• Correction of incorrect data (Art. 16 GDPR)

• Deletion of their data („right to be forgotten”, Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to data processing (Art. 21 GDPR)

• Withdrawal of consent at any time (Art. 7(3) GDPR)

• Filing a complaint with a supervisory authority

If located in Germany, the relevant authority is:

The Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Str. 153, 53117 Bonn, Germany
Email: poststelle@bfdi.bund.de

7. Cookies and Tracking Technologies

The Store uses cookies for the following purposes:

• Personalizing the user experience

• Statistical analysis (e.g. via Google Analytics)

• Targeted advertising (e.g. via Facebook Pixel, Google Ads)

• Ensuring secure transactions

• Measuring the effectiveness of marketing campaigns

Users can manage cookie settings in their browser. Disabling cookies may limit some Store features.

8. Data Retention Periods

Personal data is stored for the following durations:

• 10 years – for tax and accounting purposes (as required by law)

• Until consent is withdrawn – for marketing purposes

• Up to 2 years – for website behavior analysis

• Until objection – for data processed under legitimate interest

9. Final Provisions

• The Controller reserves the right to amend this Privacy Policy. Any changes will be published on the website.

• Questions regarding this Privacy Policy can be sent to: contact@galopwear.eu

• Use of the Store constitutes acceptance of this Privacy Policy.