Privacy policy

Definitions.

Controller – Cloud Wear Sp. z o.o. with its registered office in Pabianice.
Personal data – all information about a natural person who is identified or identifiable by one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including the device IP, location data, online identifier and information collected through cookies and other similar technology. Policy – this Privacy Policy.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Website – the online service operated by the Controller at [www.cloudwear.pl](https://www.cloudwear.pl)


Who is responsible for the processing of personal data?

The controller of your personal data is Cloud Wear Sp. z o.o., with its registered office in Pabianice 95-200, ul. Marszałka Józefa Piłsudskiego 7/21, entered in the register of entrepreneurs of the National Court Register kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register, under number 0001226576, Tax ID (NIP): 7312096031, REGON: 544075650, hereinafter referred to as the "Company". The Company can be contacted regarding personal data protection at the e-mail address: info@cloudwear.pl, phone: 727 777 701

What kind of data do we collect through the Website?

  1. In connection with your use of the Website, we collect Personal data to the extent necessary to provide the individual services offered, as well as information about your activity on the Website.
  2.  We collect Personal data through the relevant forms, while you browse the Website, register, place an order online, contact the company or take part in promotions. In addition, we collect all information regarding the way you navigate the Website.

 

For what purpose and on what legal basis do we process data?

  1. The personal data of all persons using the Website, and information collected through cookies or other similar technologies, who do not have an account on the Website and do not place an online order as a Guest, are processed by us in order to obtain information on the way the Website is navigated, products viewed, items added to the cart, sections visited and location.
  2. The legal basis for such processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR) consisting in direct marketing of its own products.
  3. The legal basis for such data processing is Art. 6(1)(b) GDPR, which allows the processing of personal data if it is necessary for the performance of a contract or in order to take steps prior to entering into a contract.

 

Handling online orders

Placing an order in the store involves the processing of personal data such as: first and last name, address, e-mail address and phone number, company name, tax ID (NIP), payment information and payment history, order information. Providing the data marked as mandatory is required in order to accept and handle the order, and failure to provide it results in the order not being fulfilled. Providing the remaining data is optional. If you have an account in the store, we will also process your personal data such as: purchase history, order history, customer cart, shipment status, payments. The legal basis for such data processing is:

  1. if we process personal data in order to fulfil a placed order – Art. 6(1)(b) GDPR, which allows the processing of personal data if it is necessary for the performance of a contract or in order to take steps prior to entering into a contract; with regard to data provided optionally, the legal basis for processing is consent (Art. 6(1)(a) GDPR)
  2. if we process data in order to fulfil statutory obligations incumbent on the Controller, arising in particular from tax and accounting regulations – the legal basis for processing is a legal obligation (Art. 6(1)(c) GDPR)
  3. if we process personal data in order to handle complaints – the legal basis for processing is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR);
  4. if we process personal data for the purpose of the possible establishment and pursuit of claims or defence against them – the legal basis for processing is the legitimate interest of the Controller (Art. 6(1)(f) GDPR) consisting in the protection of its rights.

 

Contact forms

Using the contact form involves providing personal data such as: first and last name, e-mail address, message content. Providing the data marked as mandatory is required in order to accept and handle the enquiry, and failure to provide it results in the inability to handle it. Providing the remaining data is voluntary. The legal basis for such data processing is the pursuit of the legitimate interests of the Controller (Art. 6(1)(f) GDPR) in the form of communication with Website users.


Direct marketing

If you have consented to receiving marketing information via e-mail, SMS and other means of electronic communication, your personal data will be processed for the purpose of sending such information. The legal basis for such data processing is consent (Art. 6(1)(a) GDPR).

 

Cookies

"Cookies" are IT data, in particular text files, stored on users' end devices and intended for using websites. These files allow the user's device to be recognised and the website to be displayed appropriately, tailored to their individual preferences. "Cookies" usually contain the name of the website they come from, the time they are stored on the end device and a unique number.

What do we use "cookies" for?

  1. "Cookies" are used to adapt the content of websites to the user's preferences and to optimise the use of websites. They are also used to create anonymous, aggregated statistics that help understand how the user uses websites, which makes it possible to improve their structure and content, excluding personal identification of the user.11. What "cookies" do we use?
  2. Two types of "cookies" are used – "session" and "persistent". The former are temporary files that remain on the user's device until they log out of the website or close the software (web browser). "Persistent" files remain on the user's device for the time specified in the "cookies" parameters or until they are manually deleted by the user. "Cookies" used by partners of the website operator, including in particular users of the website, are subject to their own privacy policies.12. Do "cookies" contain personal data?
  3. Personal data collected using "cookies" may be collected solely for the purpose of performing specific functions for the user. Such data is encrypted in a way that prevents access by unauthorised persons.13. Deleting "cookies"
  4. By default, software used for browsing websites allows "cookies" to be placed on the end device. These settings can be changed so as to block the automatic handling of "cookies" in the web browser settings, or to inform about each time they are sent to the user's device. Detailed information on the possibilities and ways of handling "cookies" is available in the software (web browser) settings. Restricting the use of "cookies" may affect some of the functionalities available on the website.V. Personal data processing period.1. The period of processing of your personal data depends on the type of service provided and the purpose of processing. As a rule, personal data is processed for the duration of the service or fulfilment of the order, until the withdrawal of the consent given or the raising of an effective objection to data processing in cases where the legal basis for data processing is the legitimate interest of the Controller.2. The data processing period may be extended where processing is necessary for the establishment and pursuit of possible claims or defence against them, and after that time only in the event and to the extent required by law. After the processing period has expired, the data is irreversibly deleted or anonymised.

 

Recipients of personal data

  1. Like most businesses, in our activities we use the assistance of other entities, which often involves the need to transfer personal data. Therefore, where necessary, we transfer your personal data to entities cooperating with us, such as banks and payment operators, the accounting firm, the hosting company, providers responsible for operating IT systems, courier companies and postal operators (in connection with order fulfilment).
  2. We reserve the right to disclose selected information containing personal data to the competent authorities or third parties who submit a request for such information, relying on an appropriate legal basis and in accordance with applicable law.VII. Transfer of personal data outside the EEA. We do not transfer your personal data outside the European Economic Area (EEA).VIII. Rights of data subjects.1. In connection with the processing of your personal data, you have the following rights: access to your personal data; rectification of personal data; erasure of personal data; restriction of the processing of personal data; objection to the processing of personal data; portability of personal data. Regarding the right to object, we explain that at any time you have the right to object to the processing of personal data based on the legitimate interest of the Controller in connection with your particular situation. Regarding the right to withdraw consent, we explain that you have the right to withdraw it at any time, which, however, does not affect the lawfulness of processing carried out before the withdrawal of that consent. You can exercise your rights by: sending an e-mail directly to the company at info@cloudwear.pl

Consent to collecting reviews

  1. REVIEWS IN THE ONLINE STORE
    1. A Customer of the Online Store has the option of voluntarily and free of charge submitting a review of purchases made in the Online Store. The subject of a review may also be a rating, photo or review of a product purchased in the Online Store.
    2. After purchases have been made in the Online Store, the Seller provides the data necessary to create an e-mail invitation to the company handling the survey process. The sending of surveys and the process of collecting reviews in forms is handled entirely by TrustMate SA, with its registered office at Bartoszowicka 3, 51-641 Wrocław. TrustMate SA sends the Customer an e-mail asking them to submit a review, together with a link to the online form enabling them to do so – the online form makes it possible to answer the Seller's questions about the purchases, rate them, add their own description of the review and a photo of the purchased product. If no review is submitted after receiving the first invitation to submit a review, TrustMate may resend the invitation.

 

Right to lodge a complaint

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

 

Final provisions

  1. In matters not regulated by this Policy, the GDPR and national personal data protection regulations apply.
  2. You will be notified by e-mail of any changes made to this Policy.
  3. This Policy is effective from 31.03.2026.