Privacy policy

This Privacy and Cookies Policy (hereinafter referred to as the " Policy ") sets out the rules for the processing and protection of personal data provided by Users and cookies, as well as other technologies appearing in connection with the use of the website: www.movelle.store (hereinafter referred to as the "Website"), within which the Movelle online store operates. Store (hereinafter referred to as the "Online Store") and within which services are provided electronically.

Personal data administrator

The Administrator of the Website, as well as your personal data within the meaning of the personal data protection regulations, is Movelle sp. z o. o. with its registered office in Straszyn at ul. Starogardzka 16A, 83-010 Straszyn, entered by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register under the KRS number: 0001179841, Tax Identification Number (NIP): 6040260934, National Business Registry Number (REGON): 542047772 (hereinafter referred to as the "Administrator" or "MOVELLE").

Contact with the Administrator

In all matters related to the processing of personal data, you can contact the Administrator via:

a)     e-mail - at: hello@movelle.store

b)     traditional mail - at the following address: ul. Starogardzka 16A, 83-010 Straszyn.

Personal data protection measures

The Administrator uses modern organizational and technical security measures to ensure the best possible protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the " GDPR "), the Act of 10 May 2018 on the protection of personal data and other provisions on the protection of personal data, as well as other provisions on the protection of personal data currently in force in Poland.

Users' personal data is stored, protected, and processed by MOVELLE using appropriate technical and organizational measures. These measures are primarily intended to protect personal data against loss, breach of integrity, and unauthorized access.

Access to Users' personal data is granted only to individuals authorized by MOVELLE, who are obligated to maintain the confidentiality of personal data, or to entities entrusted with the processing of personal data under applicable law or contract, including subcontractors, banks processing payments, courier companies, Poczta Polska, entities hosting (storing) personal data for MOVELLE, entities providing IT system maintenance and support services, software and email providers, mailing system companies, and entities providing marketing, accounting, legal, and IT services. Entities granted access to personal data are obligated to implement appropriate personal data protection and security measures required by law. Personal data may be disclosed to competent public authorities if required by applicable law.

Personal data will generally not be transferred outside the European Economic Area (hereinafter referred to as the "EEA"). However, due to the services provided by the online store software provider, your personal data may be transferred outside the EEA, but only to countries that ensure an adequate level of protection based on decisions of the European Commission, and in the case of countries that do not ensure an adequate level of protection, only if they provide appropriate contractual safeguards adopted by the European Commission or binding corporate rules.

Information about personal data being processed

Using the Online Store requires the processing of your personal data, including for marketing purposes, market and statistical analyses, improving service quality, fulfilling MOVELLE's legal obligations, providing services electronically, handling notifications and complaints, the Newsletter , information on the availability of goods or services, and contacting the User in the aforementioned areas. Below you will find detailed information about the purposes and legal basis for processing, as well as the processing period and whether or not you provide your personal data.

Purpose of processing      Personal data that may be processed Legal basis
Conclusion and performance of the Agreement for the provision of the Account Service (creation of a User account in the Online Store) in order to perform the contract for the sale of goods or services. 1) name and surname,
2) e-mail address,
3) telephone number,
4) gender,
5) address details (street, building number, apartment number, postal code, city, country).
Article 6(1)(b) of the GDPR (processing is necessary for the performance of the Agreement for the provision of the Account Service concluded with the data subject or to take steps to conclude it).
 Providing the above-mentioned personal data is a condition for concluding and performing the Sales Agreement for Goods or Services, including confirmation, reservation (if such an option is available and selected), contact (providing the data is voluntary, but failure to provide the data will result in the inability to conclude and perform the Sales Agreement).

The Administrator will process the above-mentioned personal data until the statute of limitations for claims arising from the Sales Agreement expires.

 

Purpose of processing     Personal data that may be processed Legal basis
Conclusion and performance of the Newsletter Delivery Agreement e-mail address. Article 6, paragraph 1, letter a and f of the GDPR (processing is necessary for the performance of the Agreement on the provision of the Newsletter concluded with the data subject or for taking steps to conclude it), (processing is necessary for the purposes of the legitimate interest of the Controller, in this case informing about new products and promotions
available in the Store)

Providing the above-mentioned personal data is voluntary, but necessary in order to receive the Newsletter (the consequence of not providing them will be the inability to receive the Newsletter).

The Administrator will process the above-mentioned personal data until an objection is effectively raised or the purpose of processing is achieved or until the claims arising from the Newsletter Delivery Agreement expire (depending on which of the above-mentioned events occurs first).

 

Purpose of processing   Personal data that may be processed Legal basis
Establishing, protecting or pursuing claims, including the return procedure and complaint handling

1) name and surname,

2) e-mail address,

3) telephone number,

4) address details (street, building number, apartment number, postal code, city, country),

5) NIP or PESEL (in the case of issuing an invoice),

6) bank account number (to enable settlement of funds for the returned Goods), transaction data (delivery address, order composition),

7) voice (in order to improve the quality of service, we may record conversations, about which the interlocutor is informed at the beginning).

art. 6 section 1 letter b, cif GDPR

(processing is necessary to fulfil the legal obligation incumbent on the Controller, in this case the obligations:
- to respond to
complaint – Article 7a of the Act on
consumer rights;
- implementation of the Client's rights
arising from the provisions on
the Administrator's liability in the event of non-conformity of the physical Goods with the Sales Agreement.

 Providing the above-mentioned personal data is a condition for receiving a response to a complaint or exercising the Customer's rights arising from the provisions on the Controller's liability in the event of non-compliance of the physical Goods with the Sales Agreement (providing such data is voluntary, but failure to provide them will result in the inability to receive a response to the complaint and exercise the above-mentioned rights).

 

The Administrator will process the above-mentioned personal data for the duration of the complaint procedure, and in the event of the execution of the above-mentioned Customer rights – until their limitation period expires.

 

Purpose of processing  Personal data that may be processed Legal basis
Marketing, analytical or statistical activities of MOVELLE, e.g. to present advertisements, promotions or offers, including discounts tailored to the User based on profiling.

e-mail address,

Article 6(1)(a) and (f) of the GDPR

(processing is necessary to pursue the legitimate interest of the Administrator, in this case informing Customers about the actions taken
activities related to
performance of Agreements concluded with Clients)

 Providing the above-mentioned personal data is voluntary, but necessary in order to receive information about activities related to the performance of Agreements concluded with Clients (the consequence of failure to provide such data will be the inability to receive the above-mentioned information).

The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved (depending on which of the above-mentioned events occurs first).

 

Purpose of processing  Personal data that may be processed Legal basis
Handling customer inquiries, including telephone contact and e-mail and traditional correspondence. 1) name and surname
2) e-mail address
3) other data contained in
messages to the Administrator .

Article 6(1)(b) and (f) of the GDPR

(processing is necessary to pursue the legitimate interest of the Administrator, in this case to respond to the received
inquiry).

 Providing the above-mentioned personal data is voluntary, but necessary in order to receive a response to your inquiry (the consequence of not providing them will be the inability to receive a response).

The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved (depending on which of the above-mentioned events occurs first).

 

Purpose of processing  Personal data that may be processed Legal basis
Fulfilling duties
tax (including issuing VAT invoices, storing accounting records)
1) name and surname/company
2) residential address
/headquarters
3) Tax Identification Number

Article 6(1)(c) of the GDPR

(processing is necessary to fulfil the legal obligation incumbent on the Administrator, in this case obligations arising from tax law)

 Providing the above-mentioned personal data is voluntary, but necessary in order to fulfill the

the Administrator's tax obligations (the consequence of failure to provide them will be the Administrator's inability to fulfill the above-mentioned obligations).

The Administrator will process the above-mentioned personal data for a period of 5 years from the end of the year in which the tax payment deadline for the previous year expired.

 

Purpose of processing  Personal data that may be processed Legal basis
Fulfillment of obligations related to the protection of personal data 1) name and surname
2) the data you provided
contact details (email address
electronic; address to
correspondence; number
phone)

Article 6(1)(c) of the GDPR

(processing is necessary to fulfil the legal obligation incumbent on the Controller, in this case the obligations arising from the provisions on personal data protection)

 Providing the above-mentioned personal data is voluntary, but necessary for the Controller to properly perform its obligations under the provisions on personal data protection, including the exercise of the rights granted to you by the GDPR (the consequence of not providing the above-mentioned data will be the inability to properly exercise the above-mentioned rights).

The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims for violation of personal data protection provisions.

 

Purpose of processing  Personal data that may be processed Legal basis
Securing information that can be used to prove facts (archival and evidentiary purposes) 1) name and surname/company
2) e-mail address
3) residential address/registered office
4) PESEL number
5) Tax Identification Number

Article 6(1)(f) of the GDPR

(processing is necessary to pursue the legitimate interest of the Administrator, in this case securing information)

 Providing the above-mentioned personal data is voluntary, but necessary for the purpose of establishing, pursuing or defending against claims that may arise in connection with the performance of the Agreements concluded with the Controller (the consequence of not providing the above-mentioned data will be the inability of the Controller to take the above-mentioned actions)

The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims that may arise in connection with the performance of Agreements concluded with the Administrator.

 

Purpose of processing  Personal data that may be processed Legal basis
Analysis of your activity in the Online Store 1) date and time of visit
2) device IP number
3) type of device operating system
4) approximate location
5) browser type
online
6) time spent in the Online Store
7) viewed Goods
8) visited subpages and other activities undertaken within the Online Store

Article 6(1)(f) of the GDPR

(processing is necessary to pursue the legitimate interest of the Administrator, in this case obtaining information about your activity in the Store)

 Providing the above-mentioned personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity in the Store (the consequence of not providing them will be the inability of the Administrator to obtain the above-mentioned information).

The Administrator will process the above-mentioned personal data until an objection is effectively raised or the purpose of processing is achieved.

 

Purpose of processing  Personal data that may be processed Legal basis
Online Store Administration

1) IP address
2) server date and time
3) browser information
online
4) system information
operational

The above data is saved automatically in the so-called server logs, each time the Store is used (its administration without the use of server logs and automatic
recording would not be possible).

Article 6(1)(f) of the GDPR

(processing is necessary to pursue the legitimate interest of the Administrator, in this case ensuring the proper functioning of the Store)

 Providing the above-mentioned personal data is voluntary, but necessary to ensure the proper functioning of the Store (the consequence of not providing them will be the inability to ensure the proper functioning of the Store).

The Administrator will process the above-mentioned personal data until an objection is effectively raised or the purpose of processing is achieved

Profiling

In order to create your profile for marketing purposes and to send you direct marketing tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling – however, this will not produce any legal effects on you or significantly affect your situation in a similar way.

The scope of profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity in the Store and the data you save in your Account.

The use of profiling may result in, among other things, reminders about unfinished purchases in the Online Store, or sending product or service suggestions that may meet the interests or preferences of a given User. The User will decide for themselves whether to take advantage of the offer mentioned above .

The legal basis for the processing of personal data for the above purpose is Article 6(1)(f) of the GDPR, pursuant to which the Controller may process personal data to pursue its legitimate interest, in this case, to conduct marketing activities tailored to recipients' preferences. Providing the aforementioned personal data is voluntary, but necessary to achieve the aforementioned purpose (the consequence of failure to provide such data will be the Controller's inability to conduct marketing activities tailored to recipients' preferences).

The Administrator will process personal data for the purpose of profiling until an objection is effectively raised or the purpose of processing is achieved.

Recipients of personal data

The recipients of personal data will be, in particular, the following external entities cooperating with MOVELLE:

a)    hosting company;
b)    logistics operator and courier companies;
c)    online payment system providers;
d)    provider of the Newsletter service and marketing automation tools;
e)    companies providing tools for analysing activity in the Store and directing direct marketing to people using it (including Google Analytics);
f)    a company providing accounting services;
g)    a company providing legal services.

Furthermore, personal data may also be transferred to public or private entities if such an obligation results from generally applicable legal provisions, a final court judgment or a final administrative decision.

Rights

With regard to the processing of personal data, the User has the right at any time to:
a)    lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw);
b)    transferring personal data provided by MOVELLE and processed by automated means, where the processing is based on consent or on a contract, e.g. to another controller, if technically feasible;
c)    access to personal data (including, for example, receiving information about which personal data are being processed or a copy thereof);
d)    request rectification and restriction of processing (e.g. if personal data are incorrect) or deletion of personal data (e.g. if they were processed unlawfully);
e)    withdraw any consent given to MOVELLE at any time, provided that the withdrawal of consent does not affect the processing carried out by MOVELLE in accordance with the law before its withdrawal and after the withdrawal of consent to the extent necessary to perform the obligations arising before the withdrawal of consent, e.g. delivery of ordered products;
f)    object to the processing of personal data concerning him/her carried out for the purposes of pursuing the legitimate interests of MOVELLE or a third party (if there are no other valid legitimate grounds for processing that override the interests of the User);
g)    being forgotten if further processing of personal data is not provided for by the currently applicable regulations.

If personal data are processed for direct marketing purposes, the User has the right to object at any time to the processing of his or her personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing – in such a case, the personal data may no longer be processed for such purposes.

The right referred to above may be exercised in accordance with the principles of Articles 16 – 21 of the GDPR, whereby MOVELLE may refuse the User to exercise certain rights indicated in the above-mentioned provisions, in which the exercise of a given right would be in conflict with the legitimate purpose of processing personal data, e.g. refusal to delete personal data contained in an order placed by the User until the expiry of the limitation period for claims under the contract concluded via the Online Store.

Any notifications or requests regarding personal data may be submitted by the User in the manner most convenient for the User, i.e.:
a)    e-mail - at: hello@movelle.store
b)    traditional mail - at the following address: ul. Starogardzka 16A, 83-010 Straszyn.

A response to the execution of the above-mentioned notification or request will be provided no later than 30 days from the date of receipt of the request and its justification, unless an extension of this period is justified in accordance with the GDPR.

Cookies
  1. The Administrator informs that the Online Store uses "cookies" (cookies) installed on your end device. These are small text files that can be read by the Administrator's system, as well as by systems belonging to other entities whose services the Administrator uses (e.g., Facebook, Google ). By accepting or closing the aforementioned files, the User consents to the use of cookies in accordance with the provisions of the Cookie Policy . The consent referred to above may be withdrawn by the User at any time by deleting cookies and changing the cookie settings in the User's web browser. However, the exclusion of cookies may cause difficulties in using the Website. Any withdrawal of consent to the storage of cookies does not affect the lawfulness of any actions taken.
  2. The Administrator uses cookies for the following purposes:
    a)    ensuring the proper operation of the Store – thanks to cookies, it is possible to ensure the efficient operation of the Store, use its functions and conveniently navigate between individual subpages;
    b)    increasing the comfort of browsing the Store – thanks to cookies, it is possible to detect errors on some subpages and constantly improve them;
    c)    Creating statistics – cookies are used to analyze how users use the Store. This allows us to continually improve the Store and tailor its operation to user preferences;
    d)    conducting marketing activities – thanks to cookies, the Administrator can target users with advertisements tailored to their preferences.
  3. The Administrator may place both persistent and temporary (session) cookies on your device. Session cookies are typically deleted when you close your browser, but closing your browser does not delete persistent cookies.
  4. Information about the cookies used by the Administrator is displayed in the panel located at the bottom of the Store's website. Depending on your decision, you can enable or disable cookies from specific categories (except essential cookies) and change these settings at any time.
  5. Data collected using cookies does not allow the Administrator to identify you.
  6. The Administrator uses the following cookies or tools that use them:
Tool  Supplier Functions and scope of downloaded data Period of operation
Essential cookies Administrator The operation of these files is necessary for the proper functioning of the Store's website, therefore
you can't turn them off. Thanks to these
files (collecting, among others, the IP number
your device), it is possible
including informing you about files
cookies operating on the website
Online Store
Most of the necessary files
cookies are session cookies,
some, however, remain in
your end device
for a period of 24 months or until
the moment of their removal;
Google Analytics Google This tool allows you to collect
statistical data on the method
use of the Store by Customers,
including the number of visits, time
duration of visits, applicable
search engine, location. Collected
data helps improve the Store and
make it more friendly to
Customers.    
up to 2 years or until they are
deletion (depending on
which of the following events
will happen sooner)
    

Facebook

Pixel

Facebook This tool allows you to determine that
you visited the Store also a referral
to you the ads displayed on
social networking sites
Facebook and Instagram and measuring
their effectiveness.
up to 3 months or until
their removal (depending on
which of the following
events will occur earlier)

 

7. Personal data collected by cookies may be stored for a varying period of time, depending primarily on the purposes and legal basis for personal data processing.
8. Using most commonly used browsers, you can check whether cookies have been installed on your device, delete installed cookies, and block the Store from installing them in the future. However, disabling or limiting the use of cookies may cause significant difficulties in using the Store, for example, requiring you to log in to each subpage, longer page loading times, or limitations in the use of certain functionalities.
9. Using the Website involves sending queries to the server where the page is stored. Each query sent to the server is recorded in server logs. The logs include, among other things, the User's IP address, the server date and time, and information about the web browser and operating system used by the User. The logs are saved and stored on the server. The data stored in the server logs is not associated with specific individuals using the website and is not used to identify the User. Server logs are solely auxiliary material used to administer the website, and their content is not disclosed to anyone other than those authorized to administer the server.

Final provisions

Due to our ongoing development, the services and features of the Website or Online Store may change, which may require modifications to the Privacy and Cookie Policy. New versions of the document will be published on the Website or Online Store.

The policy is effective from 30.07.2025.