Privacy policy

Privacy Policy of the Ormire.com Online Store

GENERAL PROVISIONS
The administrator of personal data collected via the Ormire.com Online Store is Absolutico Sp. z o.o., based at ul. Górska 73, 43‑300 Bielsko‑Biała, Poland, email: shop@ormire.com, registered in the National Court Register (KRS) under KRS no. 0000544072, with share capital of PLN 10,000 fully paid up, tax ID (NIP): 5472153073, statistical ID (REGON): 360802670 (hereinafter “Administrator”), acting both as the provider of the Online Store and Seller.

Personal data of the Service Recipient (Customer) are processed in accordance with (i) the Act of 10 May 2018 on personal data protection, (ii) the Act of 18 July 2002 on electronic services, and (iii) the EU Regulation 2016/679 (GDPR). The Administrator ensures that data are processed lawfully, for specified purposes, accurately, proportionately, and stored no longer than necessary.

Terms capitalized herein (e.g. “Seller”, “Online Store”, “Electronic Service”) shall have the meaning set forth in the Store’s Terms & Conditions, available at:
• EN – https://ormire.com/webpage/terms-and-conditions.html

PURPOSE AND SCOPE OF DATA COLLECTION
The Administrator processes the following personal data provided in the course of placing an order:

name and surname, or company name – for invoicing and shipping;
shipping and (if applicable) billing address;
email address – for order-related communications;
telephone number – required by delivery providers;
Tax ID (NIP) – if invoicing a business entity.

Data may also be shared with mBank S.A. for the purpose of processing payments, based on legitimate interest under GDPR Article 6(1)(f).

Data are processed for order fulfillment, accounting, complaint handling, marketing (if consent is granted), and analytical purposes. Processing bases include contract performance, legal obligations, and legitimate interest under GDPR Articles 6(1)(b), (c), and (f).

If the Customer creates a Store account, order history may also be stored. Data retention period: 5 years from the end of calendar year of last login or last purchase.

DATA RECIPIENTS
Personal data may be shared with:

shipping companies or agents (only as needed for delivery);
the accounting firm BESKID-LEX Sp. z o.o. via the Enova accounting system;
payment service providers (PayU, PayPal, Tpay) to the extent necessary to process payment.

Payment data entered on external platforms are not accessible by the Administrator.

COOKIES AND OPERATIONAL DATA
Cookies are small text files stored on User devices. The Store uses them to:

maintain user login state;
retain shopping cart contents;
save form entries;
personalize layout and preferences;
compile anonymous site usage statistics.

Types of cookies in use: essential, security, performance, functional, and advertising cookies. Users may manage cookie preferences in their browser settings, though disabling essential cookies may affect site functionality.

Operational logs (IP addresses, domains) are collected in anonymized form for statistics and site administration.

LEGAL BASIS FOR PROCESSING
Provision of personal data is voluntary; however, withholding required data may prevent contract formation or provision of an electronic service. Transfer of data is lawful to perform the contract (Article 6(1)(b) GDPR), to comply with legal obligations (Article 6(1)(c)), or for legitimate interest (Article 6(1)(f)). Marketing communications are based on consent.

USER RIGHTS
The User has the right to:

access, rectify, or erase data;
restrict or object to processing;
withdraw consent at any time;
lodge a complaint with the President of the Personal Data Protection Office.

To exercise these rights, please contact us via email at shop@ormire.com or in writing at the Administrator’s address.

Data may only be transferred to the recipients indicated above, under appropriate data processing agreements.

FINAL PROVISIONS
The Online Store may contain links to third-party websites, whose privacy policies should be reviewed separately. This Privacy Policy applies only to Ormire.com.

We implement technical and organizational measures (SSL encryption, access controls, trained staff, antivirus protection) to protect user data.

We reserve the right to update this Privacy Policy in response to legal or technical changes, with notice provided via email to registered users.