Privacy Policy of the enerotrade.com store Effective from 27.07.2025
§1. General Information
The administrator of personal data of users of the online store enerotrade.com is: TRENTIX SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ul. Aleje Jerozolimskie 109 / 70, 02-011 Warsaw NIP: 7011254127 REGON: 541369670 KRS: 0001164664 Share capital: PLN 5,000.00 E-mail: info@enerotrade.com Phone: +48 731 785 059
This privacy policy defines the rules for processing personal data in connection with the use of the online store enerotrade.com, including creating an account, fulfilling orders, handling complaints, returns, contact, and marketing activities. The administrator exercises special care to protect the interests of data subjects, in particular ensuring that the data is processed lawfully, collected for specific purposes, not further processed in a manner incompatible with those purposes, and stored in a form that permits identification of the data subjects for no longer than necessary to achieve the purpose of processing. The administrator applies technical and organizational measures to ensure the protection of processed personal data, in particular protecting the data against access by unauthorized persons, acquisition by an unauthorized person, processing in violation of applicable regulations, and alteration, loss, damage, or destruction. The store uses an SSL certificate and conducts regular software updates to protect the data.
§2. Scope and purposes of personal data processing
The personal data of store users may be processed for the following purposes:
creating and managing a customer account,
receiving and fulfilling orders, processing payments, shipping products,
handling complaints, returns, and exchanges,
contacting the customer (including responding to inquiries),
sending marketing information and newsletters (with consent),
fulfilling accounting and tax obligations,
personalizing content and advertising based on profiling (remarketing, automatic offer matching),
expressing opinions about products and publishing comments,
compiling statistics and analyzing the use of the online store (Google Analytics, Google Ads, Facebook Pixel).
Personal data is processed based on:
a sales contract or provision of electronic services (Art. 6(1)(b) GDPR),
a legal obligation (accounting, taxes – Art. 6(1)(c) GDPR),
the legitimate interest of the administrator (e.g., marketing, statistics – Art. 6(1)(f) GDPR),
the consent of the data subject (newsletter, marketing activities, cookies – Art. 6(1)(a) GDPR).
Providing personal data is voluntary but necessary to create an account, fulfill an order, or use selected store functions. User data may be automatically processed for profiling and personalization of offers, remarketing, and ad customization – only based on consent expressed via the Cookiebot panel.
§3. Categories of processed data
Depending on how the store is used, the Administrator may process the following categories of data:
First and last name, residential/shipping address, phone number, email address,
Invoice details (Tax ID, company name, address),
Order details, payment information, purchase history,
Bank account number (in case of refunds),
Data regarding the use of the service (IP address, cookies, device identifiers),
Content of reviews and comments,
Age – in case of account creation by a minor (the administrator does not verify the age of users but recommends using the service under the supervision of an adult).
§4. Recipients of data and data processing outsourcing
Personal data may be transferred to entities cooperating with the administrator only to the extent necessary to fulfill the contract and legal obligations, in particular:
courier company InPost (shipment processing),
payment operator,
accounting office servicing Trentix sp. z o.o.,
IT service providers (hosting),
providers of analytical and advertising services: Google Ireland Ltd., Meta Platforms Ireland Ltd. (Facebook), in accordance with the rules for data transfer outside the EEA,
state authorities upon request in accordance with applicable laws.
All entities processing personal data act on the basis of appropriate data processing agreements and are obliged to apply security measures. User data is not transferred to other administrators for marketing purposes without explicit consent. The administrator does not transfer personal data outside the European Economic Area (EEA) except in situations arising from the use of tools provided by Google, Meta (Facebook), under the terms set by the providers of these services (based on compliance mechanisms such as standard contractual clauses).
§5. Data retention period
Personal data is processed for the period necessary to achieve the purposes of processing:
in the case of contract performance – for the duration of the contract and until the expiry of claims (at least 6 years),
in the case of account management – until the account is deleted by the user or administrator,
data processed for marketing and newsletter purposes – until consent is withdrawn,
accounting documentation – for the period indicated by law (minimum 5 years),
data regarding reviews, comments – for as long as the content is present on the site or until a deletion request is made.
After the above periods, the data is deleted or anonymized.
§6. Rights of data subjects
Every data subject has the right to:
access their personal data,
request rectification, erasure, or restriction of processing,
object to processing,
transfer data to another administrator,
lodge a complaint with the President of the Personal Data Protection Office (UODO),
withdraw consent to data processing at any time (this does not affect the lawfulness of processing before consent withdrawal).
For matters related to the exercise of the above rights, you may contact the administrator by e-mail: info@enerotrade.com.
§7. Cookies and analytical tools
The store uses cookies and similar technologies to ensure the proper functioning of the service, personalize content, compile statistics, and conduct advertising activities (remarketing). During the first visit to the store, the user is informed about the use of cookies and the possibility of managing preferences via the Cookiebot panel.
The following tools are used, among others:
Google Analytics, Google Ads – for analyzing statistics and advertising activities,
Facebook Pixel – for ad personalization and remarketing campaigns.
The use of cookies and analytical data is carried out solely on the basis of the user’s consent, which can be withdrawn at any time via Cookiebot. Detailed rules for the use of cookies are described in the Cookies Policy.
§8. Data security
The administrator applies technical and organizational measures to ensure the security of personal data, including:
encrypted transmission (SSL),
regular updates of the store’s systems and software,
staff training,
application of data minimization principles and access control,
maintaining a register of data protection breaches and procedures for reporting incidents to the UODO.
The administrator independently performs duties related to personal data protection – no Data Protection Officer (DPO) has been appointed.
§9. Changes to the privacy policy
The privacy policy may be updated periodically. The new version of the document will be published on the store’s website, and users with an account will be notified electronically. Any changes take effect on the date of publication on the store’s website, unless explicitly stated otherwise.
§10. Contact
Any questions and requests regarding the privacy policy and the processing of personal data should be sent to the e-mail address: info@enerotrade.com or by phone: +48 731 785 059.
