The controller of your personal data is:
TRENTIX SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Aleje Jerozolimskie 109 / 70,
02-011 Warsaw
NIP (Tax ID): 7011254127
REGON: 541369670
KRS: 0001164664
Share capital: PLN 5,000.00
E-mail: info@enerotrade.com
Phone: +48 731 785 059
§2. Purposes, Scope and Legal Basis for Data Processing
Personal data is processed for the following purposes:
Order fulfillment and provision of electronic services (account creation and management, order placement and processing, payment handling, product shipment, complaint handling, returns, and exchanges),
Marketing activities (newsletter distribution, offer personalization – with consent),
Traffic statistics and analytics (Google Analytics, Facebook Pixel, Google Ads),
Compliance with legal obligations (accounting, taxation),
Customer communication (responding to inquiries, handling contact forms),
Product reviews and publishing comments,
Remarketing and user profiling for advertising purposes (with consent).
The legal basis for processing is:
Necessity for the conclusion and performance of a contract or provision of electronic services (Art. 6(1)(b) GDPR),
Compliance with legal obligations (Art. 6(1)(c) GDPR),
Legitimate interests of the controller (Art. 6(1)(f) GDPR) – e.g., statistics, customer contact, direct marketing, claims handling, defense against claims, profiling,
User consent (Art. 6(1)(a) GDPR) – e.g., newsletter, marketing activities, cookies, publication of reviews or comments.
§3. Scope of Processed Data
The controller processes the following personal data:
First name, last name, residential/delivery address, email address, phone number,
Invoice data (company name, Tax ID/NIP, address),
Order, payment, and return details,
Bank account number (in case of refunds),
Website usage data (IP address, cookies, device identifiers),
Content of reviews and comments,
Age – in the case of underage users (we recommend use under adult supervision).
§4. Data Recipients
Personal data may be shared with the following categories of recipients:
Courier company InPost (delivery),
Payment operator Autopay S.A.,
The controller’s accounting office,
IT service providers (including hosting),
Analytics and advertising providers (Google Ireland Ltd., Meta Platforms Ireland Ltd.),
Public authorities authorised by law.
These entities process data under relevant processing agreements or within the scope of service provision (e.g., delivery, payment, settlements).
Data may be transferred outside the European Economic Area only in connection with the use of Google and Meta/Facebook tools under GDPR-compliant rules (e.g., EU Standard Contractual Clauses).
§5. Data Retention Period
Personal data is stored for the time necessary to achieve the purposes for which it was collected, i.e.:
For contract execution – for the duration of the contract and until the expiry of limitation periods for claims (at least 6 years),
For customer accounts – until account deletion,
For marketing purposes – until consent is withdrawn,
For accounting and tax purposes – for the period specified by law (minimum 5 years),
For reviews and comments – for the time of publication or until a deletion request is made.
§6. Data Subject Rights
You have the following rights regarding your personal data:
Right to access your data,
Right to rectify data,
Right to erasure (“right to be forgotten”),
Right to restrict processing,
Right to data portability to another controller,
Right to object to processing,
Right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
Right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
To exercise your rights, contact the controller: info@enerotrade.com, phone +48 731 785 059
§7. Voluntary Data Provision and Consequences of Non-Provision
Providing personal data is voluntary but necessary to process an order, create an account, or receive the newsletter.
Failure to provide data may prevent the use of certain store features.
§8. Automated Processing and Profiling
At enerotrade.com, automated decision-making, including user profiling (e.g., ad personalization, remarketing), may occur – only based on consent for marketing/analytics cookies or marketing activities (in line with the cookie policy).
Profiling does not produce legal effects or significantly affect the user.
The user has the right to object to profiling or withdraw consent at any time.