Privacy Policy and Cookies – TCM Service











Privacy Policy and Cookies of the TCM Service Online Store



I. General Information

This Privacy and Cookies Policy for the TCM Service online store (hereinafter referred to as the “Policy”) is provided for informational purposes only and does not create any obligations for visitors of the Online Store. Terms written in uppercase that are not defined in this Policy have the meaning ascribed to them in the Online Store’s Terms and Conditions. If you have any questions or concerns regarding the processing of your personal data, please contact: info@tcmservice.pl.

II. Objectives of the Policy

The objectives of this Policy are as follows:

  • To present the principles for the processing of personal data by the Data Controller within the Online Store and to provide the necessary information to data subjects in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”);
  • To inform you of your rights in relation to the processing of your personal data and the measures taken to protect them;
  • To provide information about the cookies used on the Online Store and the rules for their acceptance.

III. General Information

Data Controller – The Data Controller and operator of the Online Store is TCM SERVICE sp. z o.o. with its registered office in Poznań (ul. Karpia 27, 61-619 Poznań, Poland). Website: www.tcmservice.pl, E‑Mail: info@tcmservice.pl, Telephone: +48 618 267 234 (standard call rates apply as per the operator’s tariff). (Hereinafter referred to as the “Controller”).

Data Protection Officer – The Controller has appointed a Data Protection Officer, who can be contacted at: roman@tcmservice.pl.

The Controller declares that it takes special care to protect the interests of the data subjects and ensures, in particular, that:

  • Personal data is processed lawfully, fairly, and transparently;
  • Data is collected for specific, explicit, and legitimate purposes and is not further processed in a manner incompatible with those purposes;
  • The data collected is adequate, relevant, and limited to what is necessary for the purposes for which it is processed;
  • The data is accurate and updated when necessary;
  • Data is stored in a form which permits identification of the data subject for no longer than is necessary for the purposes for which it is processed;
  • Data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by means of appropriate technical and organizational measures.

IV. Purposes and Legal Bases for the Processing of Personal Data

Your personal data may be processed for various purposes and on different legal bases, depending on which functionalities of the Online Store you use. This includes, in particular:

Electronic Services – The personal data you provide when creating an account and using the electronic services is primarily processed for registration in the Online Store, for managing your account, and for accessing other provided services. The legal basis for this processing is the Service Provision Agreement you conclude by accepting the Online Store’s Terms and Conditions (Art. 6(1)(b) GDPR). Your data may also be processed for marketing, analytical, and statistical purposes, as well as for establishing, enforcing, or defending claims (Art. 6(1)(f) GDPR).

Order Fulfillment – The personal data you provide when placing an order is processed primarily for the purpose of fulfilling your order and executing the concluded Sales Contract. The legal basis for this processing is the Sales Contract (Art. 6(1)(b) GDPR) and the fulfillment of legal obligations, such as accounting and tax requirements (Art. 6(1)(c) GDPR). Your data may also be processed for marketing, analytical, and statistical purposes based on the Controller’s legitimate interest (Art. 6(1)(f) GDPR).

Contact – The personal data you provide when contacting the Controller via e‑mail, telephone, or a contact form is processed primarily to address your inquiry. The legal basis for this processing is the Controller’s legitimate interest (Art. 6(1)(f) GDPR) and the necessity to perform pre-contractual measures (Art. 6(1)(b) GDPR). Your data may also be processed for marketing, analytical, and statistical purposes based on the Controller’s legitimate interest (Art. 6(1)(f) GDPR).

Newsletter Subscription (if available) – The personal data you provide when subscribing to the newsletter is primarily processed for sending you marketing content. The legal basis for this processing is the necessity to perform the newsletter contract you conclude with the Controller (Art. 6(1)(b) GDPR). Additionally, your data may be processed for marketing, analytical, and statistical purposes based on the Controller’s legitimate interest (Art. 6(1)(f) GDPR). Providing your personal data is voluntary but necessary to achieve these purposes.

V. Duration of the Processing of Personal Data

Your personal data provided in connection with creating an account in the Online Store or using the electronic services will be processed for as long as your account exists or you use these services. Data provided when placing an order will be stored for as long as necessary to execute and settle the Sales Contract and to meet legal obligations (e.g., accounting and tax requirements). Data provided in connection with contacting the Controller will be stored for as long as needed to respond to your inquiry. Data processed for marketing, analytical, and statistical purposes will be stored for the duration of our legitimate interest or until you object. If your data is processed based on consent, you may withdraw it at any time without affecting the lawfulness of the processing prior to the withdrawal. In any case, your data may also be processed for the period necessary to fulfill the Controller’s obligations under applicable law or to establish, assert, or defend claims – for the duration of the statutory limitation period. Depending on the scope and purpose of the processing, the retention period may vary; in each case, the longer period applies.

VI. Recipients of Personal Data

The Controller may disclose your personal data to third parties with whom it cooperates in the operation of the Online Store. These may include service providers (such as hosting or IT service providers), carriers or intermediaries handling parcel delivery, payment service providers (for electronic payments or card transactions), companies that support customer communication and marketing campaigns, as well as legal, accounting, and consulting firms. All these entities are required to implement appropriate measures to ensure the security of your personal data. Generally, your data is processed within the European Economic Area (EEA). However, due to cooperation with third parties, your data may be transferred to countries outside the EEA, but only to the extent necessary for the provision of services by those entities to the Controller. In such cases, the Controller ensures compliance with the requirements of the GDPR, for example through the use of standard contractual clauses. You may request a copy of the data protection safeguards by contacting the Controller at info@tcmservice.pl.

VII. Rights of Data Subjects

As a data subject, you have the right to:

  • Access your personal data (e.g., receive information on what data is being processed);
  • Request correction and restriction of the processing of your personal data (e.g., if the data is inaccurate);
  • Request deletion of your personal data (e.g., if it has been processed unlawfully);
  • Request the portability of your personal data provided to the Controller in a structured, commonly used, and machine-readable format;
  • Object to the processing of your personal data based on legitimate interests, including for marketing purposes;
  • File a complaint with the relevant data protection supervisory authority.

VIII. Cookie Policy

Cookies (small text files) or similar technologies are used within the Online Store and are stored on your device. Cookies ensure the proper functioning of the Online Store and its basic functions. They may also be used to analyze the use of the Online Store, tailor its content to your interests, and display targeted advertising. In general, cookies collect various types of information that do not constitute personal data (as they do not enable you to be identified). However, depending on their content and use, such information may be attributed to an individual and therefore considered personal data. In such cases, the provisions of this Policy concerning personal data apply. To the extent that cookies contain your personal data, their processing is based on the Controller’s legitimate interest (Art. 6(1)(f) GDPR).

The Online Store generally uses two types of cookies:

  • Session Cookies – Temporary cookies that are deleted when you leave the website or close your browser;
  • Persistent Cookies – Cookies that remain on your device for a specified period or until you delete them.

In addition to the essential cookies (which are necessary for the secure and proper functioning of the Online Store), the Online Store may also use:

  • Functional Cookies – Cookies used to analyze the use of the Online Store and tailor its content to your individual preferences (e.g., language settings);
  • Marketing Cookies – Cookies used to display advertising that is tailored to your interests. These may also be used by third parties cooperating with the Controller.

Most web browsers allow cookies to be stored by default. You can delete or block cookies at any time via your browser settings; however, this may affect certain functionalities of the Online Store. For detailed instructions on how to block or delete cookies, please consult your browser’s help section.

IX. Final Provisions

The Controller reserves the right to change this Policy in the future, for example due to changes in applicable law or technological developments. Any changes will be communicated via the Online Store, and each new version will be published with a new date. This version of the Policy is effective as of 01.01.2022.