Privacy Policy

What is a privacy policy?

We would like to acquaint you with the details of how we process your personal data to provide you with full knowledge and comfort when using our website.
Since we operate in the online industry ourselves, we understand how important the protection of your personal data is. Therefore, we take special care to protect your privacy and the information you provide to us.

We carefully select and apply appropriate technical measures, particularly programming and organizational ones, to ensure the protection of personal data processed. Our website uses encrypted data transmission (SSL), which ensures the security of your identifiable data.

In our Privacy Policy, you will find all the essential information regarding how we process your personal data. Please read it—we promise it will only take a few minutes.

Who is the administrator of the website spacerebels.pl?

The administrator of the website is Hjoma Sp. z o.o., operating under the name Hjoma Sp. z o.o., headquartered in Wrocław, Honoriusza Balzaka Street 63, 52-437 Wrocław, registered in the National Court Register of Entrepreneurs, maintained by the District Court for Wrocław-Fabryczna under KRS number: 0001145996, with tax identification number (NIP): 8943250507, share capital: 6,000 PLN, hereinafter referred to as the Seller (i.e., us).

Personal Data

What legal act governs the processing of your personal data?
Your personal data is collected and processed in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly referred to as GDPR. Where GDPR does not regulate an issue, data processing is governed by the Polish Act on the Protection of Personal Data of 10 May 2018.

Who is the administrator of your personal data?
The administrator of your personal data is Hjoma Sp. z o.o., headquartered in Wrocław, Honoriusza Balzaka Street 63, 52-437 Wrocław, registered in the National Court Register of Entrepreneurs, maintained by the District Court for Wrocław-Fabryczna under KRS number: 0001145996, with tax identification number (NIP): 8943250507, share capital: 6,000 PLN, hereinafter referred to as the Seller.
Contact information:

  • Phone: +48 789 046 667
  • Email: shop@spacerebels.com
  • Postal address: Honoriusza Balzaka Street 63, 52-437 Wrocław, Poland

How do we process your personal data?

What personal data do we process, and for what purposes?

Purpose Personal Data Legal Basis Data Retention Period
Conclusion and performance of a contract Name, surname, mailing address, email address, phone number Article 6(1)(b) GDPR—processing necessary for the performance of a contract or for taking steps prior to entering into a contract Until the limitation period for claims related to contract performance expires
Newsletter Email address Article 6(1)(a) GDPR—processing based on your consent Until you withdraw your consent for data processing
Organizing contests Name, surname, email address, image, phone number Article 6(1)(a) GDPR—processing based on your consent Until you withdraw your consent for data processing
Interactive chat Name, surname, email address, data provided during the conversation Article 6(1)(f) GDPR—processing based on our legitimate interest to maintain communication continuity Until you object to data processing
Website traffic analysis Name, address, IP address, browser data Article 6(1)(f) GDPR—processing based on our legitimate interest to analyze customer traffic Until you object to data processing
Direct marketing, including remarketing Name, address, IP address, browser data Article 6(1)(f) GDPR—processing based on our legitimate interest to conduct direct marketing Until you object to data processing
Claims establishment and defense Name, surname, address, PESEL number, NIP, REGON, email, phone number, IP address, bank account number, payment card number Article 6(1)(f) GDPR—processing necessary for the establishment, exercise, or defense of legal claims Until the limitation period for claims expires
Compliance with legal obligations Name, surname, company name, PESEL, NIP or REGON, email, phone number, mailing address, payment card number Article 6(1)(c) GDPR—processing necessary for compliance with a legal obligation Until the legal obligations requiring data processing cease

Voluntary Provision of Personal Data

Providing the required personal data is voluntary but constitutes a condition for us to provide our services to you (e.g., sending newsletters or creating an account).

Recipients of Personal Data

You can find the current list of entities to which we disclose your personal data [here].

Automated Decision-Making (Including Profiling)

We use tools to direct personalized advertisements to you. Based on your activities in our Store, such as the selection of viewed content and time spent on subpages, we customize and display marketing content tailored to you. Profiling allows us to target more relevant marketing messages, benefiting both us and you by reducing unwanted advertising content.

Transfer of Personal Data Outside the EEA or to International Organizations

To use Google tools, your data may be transferred to the United States, where Google LLC servers are located.

Google LLC participates in the Data Privacy Framework program, ensuring data protection in line with EU regulations as per the European Commission’s adequacy decision.

To use Meta tools (Facebook), your data may also be transferred to servers in the United States, with similar guarantees.

Using Hotjar may involve data transfers, and appropriate safeguards are in place as per their Privacy Policy.

What rights do you have regarding the processing of your personal data?

Under GDPR, you have the right to:

  • request access to your personal data,
  • request the rectification of your personal data,
  • request the deletion of your personal data,
  • request the restriction of processing of your personal data,
  • object to the processing of your personal data,
  • request the transfer of your personal data.

If you submit any of the above requests, we will provide you with information on the actions taken in response to your request without undue delay and, in any case, within one month of receiving your request.

If necessary, we may extend the one-month period by another two months due to the complexity of the request or the number of requests.

In any case, we will inform you within one month of receiving the request about the extension and provide reasons for the delay.

Right of access to personal data (Article 15 GDPR)

You have the right to obtain information on whether we process your personal data. If we process your personal data, you have the right to:

  • access your personal data,
  • obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of the data, the planned retention period or criteria for determining this period, your rights under GDPR, the right to lodge a complaint with the supervisory authority, the source of the data, automated decision-making, including profiling, and safeguards in place for the transfer of data outside the European Union;
  • receive a copy of your personal data.

If you wish to request access to your personal data, please submit your request to: sklep@spacerebels.com.

Right to rectification of personal data (Article 16 GDPR)

If your personal data is inaccurate, you have the right to request that we rectify it immediately. You also have the right to request that we complete your personal data.
If you wish to request rectification or completion of your personal data, please submit your request to: sklep@spacerebels.com.

Right to erasure of personal data (the "right to be forgotten") (Article 17 GDPR)

You have the right to request the deletion of your personal data if:

  • your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you have withdrawn your consent to the extent that the processing was based on your consent;
  • your personal data has been processed unlawfully;
  • you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing is related to direct marketing;
  • you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by us or a third party.

Despite a request to delete your personal data, we may continue to process it to establish, pursue, or defend claims, about which you will be informed.

If you wish to request the deletion of your personal data, please submit your request to: sklep@spacerebels.com.

Right to request restriction of processing of personal data (Article 18 GDPR)

You have the right to request the restriction of the processing of your personal data if:

  • you contest the accuracy of your personal data—in such a case, we will restrict the processing of your personal data for the time necessary to verify the accuracy of your data;
  • the processing of your data is unlawful, and instead of deleting your personal data, you request the restriction of its processing;
  • your personal data is no longer needed for processing purposes but is required to establish, pursue, or defend your claims;
  • you have objected to the processing of your personal data—until it is determined whether our legitimate interests override the grounds indicated in your objection.

If you wish to request a restriction on the processing of your personal data, please submit your request to: shop@spacerebels.com.

Right to object to the processing of personal data (Article 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

  • processing necessary for the performance of a task carried out in the public interest or processing necessary for purposes arising from legitimate interests pursued by the personal data controller or a third party;
  • processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please submit your request to: sklep@spacerebels.com.

Right to request the transfer of personal data (Article 20 GDPR)

You have the right to receive your personal data from us in a structured, commonly used, machine-readable format and to transmit it to another personal data controller.

By default, we will provide your personal data in CSV format. If you prefer your data in a different format, please indicate your preferred format in your request. We will try to provide the data in your preferred format whenever possible.

You may also request that we transmit your personal data directly to another controller (if technically feasible).

If you wish to request the transfer of your personal data, please submit your request to: sklep@spacerebels.com.

Can you withdraw your consent to the processing of personal data?

You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out based on your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, please submit your request to: shop@spacerebels.com.