PRIVACY POLICY

Online store www.biterightstore.com
Last updated: 17.02.2026


1. Data Controller

The controller of personal data is:

Olympia sp. z o.o.
Radomska 59a
64-708 Huta, Poland
NIP (Tax ID): 7632145216
KRS: 0000885145
REGON: 388224724

Contact regarding data protection:
📩 contact@biterightstore.com

Contact regarding orders, complaints and returns:
📩 support@biterightstore.com


2. Data Protection Officer

The Controller has not appointed a Data Protection Officer.
For all matters related to data processing, you may contact us at:
📩 contact@biteright.com


3. Scope of Processed Data

Depending on the purpose of processing, we may process the following data:

  • first and last name or company name,
  • VAT number (in case of invoice),
  • delivery and billing address,
  • email address,
  • phone number,
  • order-related data (products, value, history),
  • payment transaction identifiers (without full card details),
  • data contained in correspondence,
  • IP address,
  • technical data (device, browser, operating system),
  • cookie identifiers.

The Controller does not process full payment card details. Payments are handled by external payment providers.


4. Purposes and Legal Basis for Processing

We process personal data for the following purposes:

Order processing and execution of the sales contract
Legal basis: Article 6(1)(b) GDPR

Handling complaints, returns and customer communication
Legal basis: Article 6(1)(b) and (c) GDPR

Issuing accounting documents and fulfilling tax obligations
Legal basis: Article 6(1)(c) GDPR

Establishing, pursuing or defending claims
Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller)

Marketing of own products and services:

  • newsletter: Article 6(1)(a) GDPR (consent),
  • marketing to existing customers: Article 6(1)(f) GDPR (legitimate interest).

In the case of direct marketing, objection is always effective.

Analytics and online advertising
Legal basis: Article 6(1)(a) GDPR (consent via cookie banner)

Ensuring security and proper operation of the website
Legal basis: Article 6(1)(f) GDPR


5. Data Recipients

Data may be shared with entities supporting the Controller, in particular:

  • hosting provider: Cyber_Folks S.A.,
  • payment operator: PayPro S.A. (Przelewy24),
  • courier and logistics companies (e.g. InPost, DPD, DHL, OrlenPaczka),
  • accounting office,
  • IT system and website maintenance providers,
  • marketing and analytics tool providers (e.g. Google, Meta).

These entities process data under data processing agreements or as independent controllers.
Data is not sold or shared with third parties for their own marketing purposes.


6. Data Transfers Outside the EEA

Due to the use of tools such as Google (Analytics, Ads) and Meta (Facebook, Instagram), data may be transferred outside the European Economic Area, in particular to the USA.

Data transfers are based on:

  • an adequacy decision (EU–US Data Privacy Framework), or
  • standard contractual clauses approved by the European Commission.


7. Data Retention Period

We store data for the following periods:

  • accounting and order data: as required by law (usually 5 years from the end of the tax year),
  • customer account: until deletion,
  • marketing data: until consent is withdrawn or objection is raised,
  • correspondence: for the time necessary to handle the case and until claims expire,
  • technical data and cookies: according to cookie expiration periods.


8. Rights of the Data Subject

You have the right to:

  • access your data,
  • rectify your data,
  • erase your data,
  • restrict processing,
  • data portability,
  • object to processing,
  • withdraw consent at any time,
  • lodge a complaint with the President of the Personal Data Protection Office (UODO).


9. Voluntary Provision of Data

Providing data is voluntary; however:

  • in the scope necessary to conclude and perform a sales contract, it is required to enter into the contract,
  • failure to provide data will prevent order fulfillment.


10. Profiling

The Controller may use profiling for marketing purposes (e.g. tailoring ads to interests), but does not make decisions producing legal effects or similarly significantly affecting the user.


11. Cookies

The website uses cookies for:

  • essential purposes (e.g. cart, session),
  • functional purposes (e.g. currency preferences),
  • analytical purposes (with consent),
  • marketing purposes (with consent).

Detailed information is available in the separate Cookie Policy.


12. WooCommerce – Technical Information

The WooCommerce-based store may store cookies related to:

  • cart and user session,
  • checkout process,
  • user account login (if applicable).

The scope of data depends on system configuration and installed plugins.


13. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy, in particular in case of:

  • changes in legal regulations,
  • changes in business activities,
  • implementation of new marketing tools or technologies.

The current version of the document is always available at:
www.biterightstore.com