PERSONAL DATA AND PRIVACY POLICY
- General Information
This Privacy Policy describes how HULE processes personal data of users visiting the website, using the online store, placing orders, subscribing to the newsletter, or contacting us.
We care about users’ privacy and process personal data in accordance with applicable laws, in particular the GDPR.
- Data Controller
The controller of personal data is: Nowa Fala Sp. z o.o. ul. Adama Mickiewicza 21 lok.2 01-517 Warszawa NIP: 525 271 93 60 KRS: 0000690116 Contact e-mail: hule@hule.pl For matters concerning personal data, you can contact us at the e-mail address above.
- What Data We May Process
Depending on how you use the website and the store, we may process the following data:
first name and surname;
e-mail address;
phone number;
delivery address;
billing address;
invoice details;
order-related data;
purchase history;
payment data to the extent necessary to process transactions;
data provided in contact forms;
data related to newsletter subscription;
IP address;
technical data concerning the device, browser, and the way the website is used;
cookie identifiers and similar technical information, in accordance with the user’s consent settings.
- Purposes and Legal Bases of Data Processing
We process personal data only when we have an appropriate legal basis to do so. Depending on the situation, data processing may take place for the following purposes:
4.1 Performance of a contract
We process data when it is necessary to conclude or perform a contract, in particular for the purpose of:
order handling;
concluding a sales agreement;
processing payments;
delivery of the order;
maintaining a customer account;
handling returns and complaints related to the order.
4.2 Compliance with legal obligations
We process data when required by applicable laws, in particular for the purpose of:
issuing invoices;
maintaining accounting and tax documentation;
fulfilling obligations related to complaints, returns, or consumer rights;
fulfilling other obligations arising from legal provisions.
4.3 Legitimate interest of the controller
We also process data when it is necessary to pursue our legitimate interest, in particular for the purpose of:
contacting the user;
responding to inquiries;
ensuring the security of the website;
preventing abuse;
pursuing or defending against claims;
conducting basic analytical activities, where these do not require the user’s consent.
4.4 User’s consent
In some cases, we process data based on the user’s voluntary consent, in particular for the purpose of:
sending the newsletter;
conducting marketing and advertising activities;
using analytical and marketing cookies;
measuring the effectiveness of advertising campaigns.
Consent can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
- Orders, Payments, and Delivery
In order to fulfill an order, we process data necessary to conclude and perform a sales agreement, including contact, address, and billing data, as well as information regarding the ordered products.
Data necessary to process payments is transferred to payment operators only to the extent needed to carry out the transaction.
Data necessary for delivery may be transferred to selected courier, shipping, or logistics companies, depending on the country of delivery, type of shipment, size, service availability, and transport costs.
- Newsletter and Marketing Communications
If the user subscribes to the newsletter, we process their e-mail address in order to send information about the brand, products, news, promotions, and other marketing content.
Subscription to the newsletter is voluntary. The user may unsubscribe from the newsletter at any time using the unsubscribe link available in the e-mail message or by contacting us.
To handle the newsletter, we may use an external mailing system provider.
- Cookies and Similar Technologies
The website uses cookies and similar technologies.
Cookies may be used in particular for:
the proper functioning of the website and the store;
handling the shopping cart and the checkout process;
remembering user settings;
analyzing how the website is used;
conducting marketing and advertising activities;
measuring the effectiveness of campaigns.
Cookies necessary for the operation of the website and the store may be used without additional user consent.
Analytical and marketing cookies are used only after the user’s consent has been given. The user may change their cookie preferences at any time in the consent settings available on the website.
- Analytics and Online Marketing
We may use analytical and marketing tools that help us measure the effectiveness of the website, analyze traffic, improve the operation of the store, and carry out advertising activities.
Such tools may process technical information, such as cookie identifiers, IP address, data about the device, browser, source of entry to the website, and user activity on the website.
Analytical and marketing tools that are not required for the basic operation of the website are activated only after the user’s consent has been given.
- To Whom We May Transfer Data
Personal data may be transferred to entities that support us in operating the online store and customer service, in particular:
hosting and technical service providers;
payment operators;
courier, shipping, and logistics companies;
providers of accounting services;
providers of mailing systems;
providers of analytical and marketing tools;
entities operating the website and IT infrastructure;
authorized public authorities, if required by applicable law.
We transfer data only to the extent necessary to achieve the given purpose.
- Transfer of Data Outside the European Economic Area
Some tools or services used to operate the website, analytics, marketing, communication, or payments may involve the transfer of data outside the European Economic Area.
If such a transfer occurs, it takes place in accordance with applicable laws, in particular on the basis of appropriate safeguards, such as an adequacy decision or standard contractual clauses.
- How Long We Store Data
We store personal data for the period necessary to achieve the purpose for which it was collected, and then for the period required by law or needed to secure potential claims.
In particular:
order data is stored for the period required by accounting and tax regulations as well as regulations concerning claims;
customer account data is stored for the period of account use or until its deletion;
newsletter data is stored until the user unsubscribes from the newsletter or withdraws consent;
correspondence data is stored for the period necessary to handle the matter;
technical logs are stored for the period necessary to ensure the security, stability, and proper operation of the website, in accordance with applicable laws and technical standards;
cookie data is stored in accordance with the user’s consent settings and the parameters of individual cookies.
- User Rights
The user has the right to:
access their data;
rectify the data;
erase the data;
restrict processing;
data portability;
object to processing;
withdraw consent at any time, if processing is based on consent;
lodge a complaint with the President of the Personal Data Protection Office.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise these rights, you can contact us at the e-mail address indicated in this Privacy Policy.
- Data Security
We apply appropriate technical and organizational measures to protect personal data against access by unauthorized persons, loss, destruction, alteration, or unauthorized disclosure.
The scope of the safeguards applied is adapted to the nature of the data, the risks associated with its processing, and the type of business conducted.
- Children’s Data
The website and the store are not directed at children. We do not knowingly collect personal data of children for marketing purposes.
- Changes to the Privacy Policy
The Privacy Policy may be periodically updated, in particular in the event of changes in legislation, the way the store operates, the services used, or data processing procedures.
The current version of the Privacy Policy is always available on the website.
Last updated: 25 May 2026