Privacy Policy

Our company’s data protection policy is grounded on the terminology used by the European legislator in adopting the General Data Protection Regulation (GDPR). Our policy should be easy to read and comprehend for everyone, including our customers and business partners. To achieve this, we would like to clarify the terms we use in this document.

This data protection policy includes the following terms, among others:

1. Definitions

Administrator: According to the RODO regulation, an administrator of personal data is an authority, organizational unit, entity, or person who decides about the purposes and means of processing personal data.

Cookies: These are information data, such as small text files, that are saved and stored on devices used by the user to access a website.

Own/Internal Cookies: These are Cookies placed by the administrator in relation to the provision of electronic services via the site www.4x4line.pl
External Cookies: These are Cookies placed by partners of the administrator through the website.

Service: This refers to the website or application where the administrator runs a Web service on a domain, which in this case is www.4x4line.pl

Device: This means the electronic device used to access the site.

User: This refers to an entity that may be provided with electronic services or may conclude a service agreement by electronic means in accordance with the rules and regulations of law.

2. Name and Address of the Administrator
The personal data administrator is a company under the name 4X4OK EUROPE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ , with a registered address ul. ŚWIĘTOKRZYSKA, nr 30, lok. 63, miejsc. WARSZAWA, kod 00-116, with Tax Identification Number (NIP) 5252960564 and REGON : 525595700You can get in touch with the personal data administrator regarding your personal data by:
Email : 4x4line.sales@gmail.com
Traditional mail: ul. ŚWIĘTOKRZYSKA, nr 30, lok. 63, miejsc. WARSZAWA, kod 00-116,
Telephone: +48513102444

3.The purposes and legal bases for handling personal data.

To create an account before concluding a contract or browsing the online store, which includes providing your email address, password, first and last name, and shipping address.
To provide services that require account creation such as keeping order history and informing about order processing status, processing data provided in the account and when purchasing goods.
To provide services that do not require account creation and purchase of goods, including browsing the online store websites and searching for products, by processing personal data about your activity in the online store, such as the data about the goods you browse, your device session, operating system, browser, location, unique ID, and IP address.
To perform the goods sale agreement, which involves processing personal data you provide when purchasing goods, such as your name, email address, address details, payment details, and if you make a purchase through an account, your password.
To use statistics of individual functionalities available in the online store, facilitate the use of the online store and ensure IT security of the online store, by processing personal data regarding your activity in the online store and the amount of time spent on each subpage in the online store, your search history, location, IP address, device ID, and data about your internet browser and operating system.
To determine, investigate and enforce claims and defend against claims in court proceedings and other enforcement authorities, the administrator may process your personal data provided when purchasing goods or creating an account and other data necessary to prove the existence of a claim or that result from a legal requirement, court order, or another legal procedure.
To resolve complaints, requests, and respond to customer inquiries, the administrator processes personal data you provide in the contact form, complaints, and requests, or to answer questions in another form, and some of the personal details provided by you in the account, as well as data regarding the order of the goods and other services rendered by the administrator, which are the reason for the complaint, complaint, or application and data contained in the documents attached to the complaints, complaints, and applications.
To market goods and services and clients and partners, including remarketing, the administrator processes personal data provided by you when you create an account and its updates, data about your activity in the online store, including orders that are registered and stored via cookies, in particular order history, search history, clicks in the online store, login and registration dates, history, and your activity related to their communication with you. In the case of remarketing, the administrator uses data about your activity to reach you with marketing messages outside of the online store and uses the services of external suppliers for this purpose.
To organize contests and loyalty programs, the administrator uses your personal data provided in the account and when registering in a competition or loyalty program.
To examine the market and opinions of the administrator or their partners, the administrator uses information about your order, your data provided in the account or when purchasing goods, and your email address.

4. Cookies
www.4x4line.pl website uses cookies, which are small text files that are stored in a user's computer system through their Internet browser. These cookies often contain a unique identifier called a cookie ID that distinguishes the user's browser from others. This allows websites to provide more personalized services to users. With the use of cookies, www.4x4line.pl can optimize its website for users, making it unnecessary to enter access data repeatedly and allowing online stores to retain items in virtual shopping carts. However, users may choose to prevent the setting of cookies or delete them at any time. It should be noted that certain website functions may not be available without cookies.The "cookies" we use are safe for your devices. In particular, it is not possible to get into your devices through "cookies" viruses or other unwanted software or malicious software. These files allow you to identify the software used by the user and adjust the Service individually to each user. Cookies usually contain the name of the domain from which they come, their storage time on the device and the assigned value.

5. Registration on our website
Individuals are given the option to register on the administrator's website and input their personal data. The specific personal data transmitted to the administrator is determined by the registration input mask. The administrator collects and stores the personal data provided by the data subject solely for internal use and their own purposes. In some cases, the administrator may transfer the personal data to one or more processors, such as a parcel service, for internal purposes attributable to the administrator.

Upon registration, the IP address, date, and time of registration are also stored to prevent misuse of services and enable investigation of any potential offenses. The administrator stores this data to secure themselves, and will only transfer it to third parties if there is a legal obligation to do so or if it serves the purpose of criminal prosecution.

Registration enables the administrator to offer the registered user exclusive content or services that are only available to registered users. Individuals can modify or delete their personal data from the administrator's database at any time.

The administrator is obligated to provide information about the personal data stored upon request and to correct or delete personal data if there are no legal obligations to store it. The entirety of the administrator's employees is available to assist the data subject with this.

6. What categories of personal we collect
The types of personal information that are collected by the data administrator include contact information, information about online store activity, data related to orders placed on the online store, and information about complaints and applications.

7. Data processing time

The personal information will be processed as long as necessary to complete orders, services, marketing activities, and other services provided to the client. The personal data will be erased in certain situations, such as when the data subject requests deletion or withdraws consent, when the data subject is inactive for more than 10 years, or when the stored data is outdated or inaccurate. Some personal information, including email address, name, and surname, may be stored for up to 3 years for evidence purposes and handling of complaints and claims related to services provided by the online store, but not for marketing purposes. Data related to orders, paid services, contests, and loyalty programs will be kept for 5 years after the order delivery date. For non-registered customers, data will be stored for a time corresponding to the life cycle of cookies on the device or until the customer deletes them.

8. The rights of the data subjects
8.1 Right of confirmation
According to European legislation, individuals have the right to obtain confirmation from the administrator regarding whether or not their personal data is being processed. To exercise this right, the individual can reach out to any employee of the administrator at any time.
8.2 Right of access
Each data subject shall have the right granted by the European legislator to obtain from the administrator free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the administrator rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing;
the existence of the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject. Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organization. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the administrator.

8.3 Right to rectification
The European legislator grants every individual the right to obtain from the administrator the correction of any inaccurate personal data concerning them promptly. If the personal data is incomplete, the data subject has the right to have it completed, including by providing a supplementary statement, taking into account the processing purposes. To exercise the right to rectify, the data subject can contact any employee of the administrator at any time

8.4 Right to erasure (Right to be forgotten)
According to the European legislator, any individual has the right to request the administrator to promptly erase any personal data concerning them, and the administrator is obligated to erase the personal data without undue delay if the processing is not necessary and one of the following grounds applies:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

The data subject withdraws their consent, and there is no other legal ground for the processing.

The data subject objects to the processing, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.

The personal data has been unlawfully processed.

The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the administrator is subject.

The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

If any of these grounds apply, and a data subject wishes to request the erasure of their personal data stored by www.4x4line.pl, they can contact any employee of the administrator at any time. An employee of www.4x4line.pl will ensure that the erasure request is promptly complied with.

If the administrator has made personal data public and is obliged to erase the personal data under Article 17(1), the administrator must take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure of any links to, or copy or replication of, those personal data, as far as processing is not required. An employee of www.4x4line.pl will arrange for the necessary measures in individual cases.

8.5 Right of restriction of processing

The European legislator has granted each data subject the right to request the administrator to restrict the processing of their personal data in the following situations:

The data subject contests the accuracy of the personal data, and the administrator needs time to verify its accuracy.

The processing is unlawful, but the data subject does not want the personal data erased and instead requests its restricted use.

The administrator no longer needs the personal data for processing purposes, but the data subject needs it for legal claims.

The data subject objects to processing pursuant to Article 21(1) of the GDPR, and the administrator needs to verify if their legitimate grounds override those of the data subject.

If any of these conditions are met, and a data subject wants to request the restriction of the processing of their personal data stored by www.4x4line.pl, they can contact any employee of the administrator at any time. An employee of www.4x4line.pl will arrange for the restriction of the processing.

8.6 Right to data portability
According to the European legislator, every data subject has the right to receive their personal data provided to an administrator in a structured, commonly used, and machine-readable format. They also have the right to transmit that data to another administrator without hindrance, as long as the processing is based on their consent or a contract, and the processing is automated. This does not apply if the processing is necessary for a task in the public interest or exercise of official authority by the administrator.

Additionally, when exercising their right to data portability under Article 20(1) of the GDPR, the data subject has the right to have their personal data transmitted directly from one administrator to another, provided it is technically feasible and does not adversely affect the rights of others.

To assert their right to data portability, the data subject can contact any employee of 4x4ok at any time.

8.7 Right to object
Every data subject has the right, as granted by the European legislator, to object at any time to the processing of their personal data by an administrator based on Article 6(1)(e) or (f) of the GDPR, including any profiling based on these provisions, if it relates to their particular situation.

If a data subject objects, the administrator (in this case, www.4x4line.pl) must stop processing their personal data unless they can show compelling legitimate grounds for the processing that override the data subject's rights, interests, and freedoms or for legal claims.

If the administrator processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing, including any profiling related to it. If a data subject objects to such processing, the administrator must stop processing their personal data for direct marketing purposes.

Furthermore, the data subject has the right to object to the processing of their personal data by the administrator for scientific or historical research purposes or for statistical purposes under Article 89(1) of the GDPR, unless it is necessary for the performance of a task in the public interest.

To exercise the right to object, the data subject can contact any employee of the administrator (in this case, www.4x4line.pl). Additionally, the data subject is free to use automated means using technical specifications to object in the context of using information society services, notwithstanding Directive 2002/58/EC.

8.8 Right to withdraw data protection consent

As granted by the European legislator, every data subject has the right to withdraw their consent to the processing of their personal data by an administrator (in this case, www.4x4line.pl) at any time. If the data subject wants to exercise this right, they can contact any employee of the administrator at any time.

9. The possibility of determining the conditions of storage or access Cookies

The user has the ability to modify their Cookie settings, including storage and access conditions on their device, at any time. The user can adjust their settings to block automatic handling of Cookies or to receive notifications each time a Cookie is placed on their device. Information on managing Cookies is available in the software settings of their web browser. The user also has the option to delete Cookies using their browser's features. However, limiting the use of Cookies may impact certain website functions.