Privacy policy

Privacy Policy
Processing of Personal Data

AP Energy S.C. processes personal data in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"). To operate the Original Wax website, through which Users can make purchases in the Original Wax online store (hereinafter referred to as the "Service"), the required technical measures are used to ensure the protection of processed personal data and the security of personal data against unauthorized access, acquisition by unauthorized persons, unlawful processing, and alteration, loss, or destruction.

You have the right to request from us at any time:

• Information: whether your data is being processed and other information, particularly regarding any breaches of your data protection;
• Access to your data;
• Rectification of your data;
• The right to be forgotten (removal of data from the service);
• Restriction of the processing of your data;
• Data portability;
• Objection to the processing of your personal data, under the conditions specified in Article 21 of the GDPR;
• The right not to be subject to a decision based solely on automated processing (including profiling).

Data Controller

The data controller is AP Energy S.C., operating under the brand Original Wax, with its registered office in Dąbrowa Górnicza (postal code 41-300) at ul. Juliusza Kadena-Bandrowskiego 1A, registered in the Register of Entrepreneurs of the National Court Register by the District Court in Katowice, 11th Commercial Division under the number NIP: 6292496961, REGON: 386168186, email address: biuro@originalwax.pl, hereinafter referred to as "AP Energy" or the "Controller." The processing of personal data is understood as actions and operations performed on Users' personal data, including storage or analysis for the purposes of the services provided by the website www.originalwax.pl. Users' personal data will not be sold to third parties and, in particular, will not be transferred to other entities for the purpose of sending third-party marketing materials.

Purposes of Processing

AP Energy processes Users' personal data for the purpose of fulfilling an order placed on the Service, which is owned by the Controller, and possible contact regarding the placed or initiated order fulfillment process, User account registration, and fulfillment of the sales agreement (purchase), based on Article 6(1)(b) of the GDPR, as well as to fulfill legal and tax obligations related to the orders, based on Article 6(1)(c) of the GDPR. The obtained personal data may also be used for the legitimate interests of the Controller, based on the grounds specified in Article 6(1)(f) of the GDPR, e.g., for the purpose of pursuing and defending legal disputes and proceedings, as well as for direct marketing. Providing data is voluntary; however, it is necessary to set up a User account and make a purchase.

Additionally, if additional consents are given, personal data will be processed by the Controller in the following ways:

Newsletter

The newsletter is available exclusively to individuals over the age of 16. By subscribing to the service, the User declares that they are at least 16 years old and can independently give such consent. The data obtained will be processed for the purpose of distributing information about the Administrator's products and promotional campaigns, i.e., for marketing purposes (direct marketing), which constitutes the legitimate interest of the Administrator, in accordance with the provision specified in Article 6(1)(f) of the GDPR, or based on the User's consent, i.e., on the grounds specified in Article 6(1)(a) of the GDPR. Providing data is voluntary; however, it is necessary to subscribe to the newsletter.

Contact Form

Personal data obtained via the contact form will be used to process the inquiry and possible further contact, in accordance with the consent given, based on the provision specified in Article 6(1)(a) of the GDPR. The consent given may be withdrawn at any time, which does not affect the lawfulness of the processing carried out based on the consent before its withdrawal. Providing data is voluntary; however, it is necessary to process/answer the submitted application/inquiry.

Contractors

Personal data will be used to properly fulfill the contracts concluded by the Administrator, based on the provision specified in Article 6(1)(b) of the GDPR, or to fulfill legal and tax obligations based on the provision specified in Article 6(1)(c) of the GDPR, as well as based on Article 6(1)(f) of the GDPR, for the legitimate interest, which is the ability to execute contracts and maintain proper communication between the parties, in the case of personal data of individuals indicated in the concluded contracts who are not parties to these contracts. Providing data is necessary to conclude and execute the contract. The personal data in question may also be used for the legitimate interest of the Administrator, which includes direct marketing of the Administrator's own products and services, based on the provision specified in Article 6(1)(f) of the GDPR—in this regard, you have the right to object to the processing of personal data for direct marketing purposes; submitting an objection will result in not receiving marketing materials regarding the Administrator's own products and services.

In connection with ongoing legal proceedings, enforcement, etc., in which the Administrator is a party, the personal data of other participants in the mentioned proceedings are processed in the legitimate interest of the Administrator, which is to pursue claims or defend against claims, in accordance with Article 6(1)(f) of the GDPR.

We use Google Analytics, and if you consent, we process your data for analytical purposes.

Who Do We Share Your Personal Data With?

Your personal data may be shared for the purpose of fulfilling the contract, providing the service, delivering the product, collecting payment, analyzing data, conducting marketing activities, or providing customer service to entities such as postal operators and courier companies to deliver shipments, banks and payment service providers, legal and accounting service providers for the administrator, and other entities to whom the administrator has entrusted the processing of personal data based on Articles 28 and 29 of the GDPR.

Additionally, we transfer personal data to recipients in third countries (i.e., outside the European Economic Area), such as The Rocket Science Group LLC and Google LLC, based in the United States, with whom we have entered into standard contractual clauses adopted by the European Commission and on the basis of which basic safeguards for your data have been established.

Data Retention Period

The retention period of personal data may vary depending on the legal basis for the processing of personal data by AP Energy S.C. or the legal regulations regarding archiving or the Administrator's tax obligations.

Personal data is processed:

- For the period required to fulfill the order and other services ordered on the website originalwax.co.uk, and after this period, for the period of the statute of limitations, no longer than 5 years from the end of the year in which the order was fulfilled or expired.
- In the case of newsletter subscriptions—until the consent to receive the newsletter is withdrawn.
- In the case of personal data processed based on legal regulations—for the period required by these regulations.
- In the case of data processed based on the legitimate interest of the Administrator, data is processed for the duration of that interest or until a valid objection is submitted.
- In the case of data processed based on the User's consent—until the consent is withdrawn.

Cookies

The Service uses cookies, which are stored by the browser on the User's device and serve to provide services correctly and for statistical purposes. Cookies may be used, in particular, to recognize the User's device, tailor the Service to the User's preferences, and optimize the use of the Service. The personal data collected in this way is stored for the period necessary to achieve the purposes specified in this Policy. The User may change the cookie settings in their browser at any time; however, limiting the use of cookies may affect some functions of the Service.

User Rights

- **Right of access to your data**: You have the right to obtain confirmation from us whether we are processing your personal data, and if so, to access that data, as well as information on the purposes of processing, data categories, recipients, planned retention period, rights available, data source, and whether automated decision-making, including profiling, takes place on your data.
- **Right to rectification**: You have the right to request that we promptly rectify incorrect personal data concerning you.
- **Right to erasure ("right to be forgotten")**: You have the right to request the deletion of your personal data in cases provided by law.
- **Right to restriction of processing**: You have the right to request the restriction of the processing of your personal data.
- **Right to data portability**: You have the right to receive your personal data from us in a structured, commonly used format and transfer it to another controller.
- **Right to object**: You have the right to object to the processing of your personal data in cases provided by law.
- **Right to withdraw consent**: In cases where personal data processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- **Right not to be subject to automated decisions, including profiling**: You have the right not to be subject to decisions based solely on automated processing, including profiling.

To exercise the above rights, you can contact us by sending an email to biuro@originalwax.pl or by mail to AP Energy S.C., Juliusza Kadena-Bandrowskiego 1A, 41-300 Dąbrowa Górnicza, Poland.

Changes to the Privacy Policy

AP Energy S.C. reserves the right to change this Privacy Policy, particularly in the event of changes in legal regulations or the way personal data is processed. All changes will be published on this page, so please check for updates regularly. Using the Service after changes have been made implies acceptance of those changes.