Privacy policy
Privacy Policy
Privacy Policy
Last updated: 10/02/2026
Personal Data Administrator
Company name: HALAS GROUP PL SP. Z O.O.
Address of the registered office: Janusza Zeylanda 1 / 5, 60-808 Poznań
nip: 7812095313
REGON: 7812095313
KRS: 7812095313
Contact email: privacy@xostorebrand.shop
1. General Information
This Privacy Policy sets out the rules for the processing and protection of personal data of Customers of the xostorebrand.shop online store, in accordance with theregulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Act of 10 May 2018 on the protection of personal data .
2. What data we collect
As part of our business, we collect the following dno personal:
Name
Email address
Phone number
Delivery address (street, number, postal code, city)
Invoice details (nip, company name – optional)
IP address and browser data
Order History
3. Purpose of data processing
Order fulfillment – processing necessary for the performance of the contract (Article 6 (1) (b) of the GDPR)
Payment handling – transfer of data to the payment operator PayU S.A. (Article 6 (1) (b) of the GDPR)
Handling complaints and returns – processing necessary for the performance of the contract (Article 6 (1) (b) of the GDPR)
Issuing invoices – compliance with a legal obligation (Article 6 (1) (c) of the GDPR)
Marketing bezintermediate – on the basis of consent (Article 6 (1) (a) of the GDPR)
Analytics and service improvement – legitimate interest of the administrator (Article 6 (1) (f) of the GDPR)
4. Legal basis for processing
Processpersonal data is processed on the basis of:
Art. 6 (1) (a) GDPR – consent of the data subject
Art. 6 (1) (b) GDPR – execution of the sales contract
Art. 6 (1) (c) GDPR – fulfilment of a legal obligation (e.g. tax regulations)
Art. 6 (1) (f) GDPR – legitimate interest of the controller
5. Data recipients (third parties)
Your personal data may be shared with the following entities:
6. Data protection method
We take appropriate technical and organizational measures to protect personal data:
SSL/TLS Connection Encryption
Secure storage of data on servers with security certificates
Limited access to data only forauthorized employees
Regular backups
Software and security system updates
7. Rights of the data subject
Under the GDPR, you have the following rights:
Right of access – to obtain information about the data processed
Right to rectification – to correct incorrect data
Right to erasure – to request erasure of data ("right to be forgotten")
Right to restriction of processing – to limit data processing
Right to data portability – to receive data in a transferable format
Right to object – to object to processing
Right to withdraw consent – at any time, without affecting the lawfulness of the processingbefore its withdrawal
Right to complain – to the President of the Office for Personal Data Protection (PUODO)
To exercise the above rights, please contact us at: privacy@xostorebrand.shop
8. Data retention period
>
Order data: 5 years (tax requirements)
Data for marketing purposes: until consent is withdrawn
9. Cookies
Wedrona uses cookies to:
Ensuring the proper functioning of the store
Remember Cart Contents
Website Traffic Analysis (Google Analytics)
Personalization of advertising content
The user can manage cookie settings in his pbrowser.
10. Data Protection Contact
Email: privacy@xostorebrand.shop
Address: HALAS GROUP PL SP. Z O.O., ul. Janusza Zeylanda 1 / 5, 60-808 Poznań
Phone: +48 604 475 435