I. Personal Data Controller

1. The controller of personal data of users of the beSmart.bike online store is:

   Artur Dmochowski, conducting business under the name Artur Dmochowski ARTNOVA, with its registered office at ul. Mrówcza 85/4 unit 1, 04–857 Warsaw, Poland, NIP (Tax ID): 1180746769, REGON (Business ID): 015167524, e-mail for data protection inquiries: contact@artnova.com.pl, phone: +48 502 520 533.

2. The Controller is also the Seller of the products offered in the beSmart.bike online store.

II. Scope and Purpose of Data Processing

1. Personal data of users is processed for the following purposes:
   • processing orders placed in the online store (Article 6(1)(b) GDPR – performance of a contract),
   • handling electronic payments and deliveries (Article 6(1)(b) GDPR),
   • handling correspondence and complaints (Articles 6(1)(c) and 6(1)(f) GDPR),
   • fulfilling legal obligations, e.g. tax and accounting (Article 6(1)(c) GDPR),
   • ensuring the security and proper functioning of the website (Article 6(1)(f) GDPR – legitimate interest of the Controller).
2. Data is not used for marketing purposes or newsletter distribution.
3. Providing personal data is voluntary but necessary to place and fulfill an order.

III. Categories of Processed Data

The Controller may process the following data:

• first and last name,
• e-mail address,
• delivery address,
• phone number,
• billing information (address, Tax ID – if provided),
• payment data (transmitted by the TPay payment operator).

IV. Data Recipients

1. Personal data may be shared with:
   • TPay, the electronic payment operator,
   • courier and shipping companies fulfilling deliveries,
   • IT and hosting service providers supporting the Store,
   • public authorities if required by law.
2. All entities processing personal data act under a data processing agreement and in compliance with the GDPR.

V. Data Transfers Outside the European Economic Area (EEA)

1. The Store may transfer personal data to countries outside the EEA only to the extent necessary for fulfilling orders (e.g., if a Customer requests delivery to a non-EU country).
2. In such cases, data transfer is conducted in accordance with the GDPR, based on standard contractual clauses approved by the European Commission.

VI. Data Retention Period

1. Personal data processed in connection with order fulfillment is stored:
   • for the time necessary to perform the contract and handle the order,
   • and thereafter for the period required by law (e.g., 5 years for accounting records).
2. Data related to complaints is stored for the duration of warranty or guarantee claims.

VII. Rights of Data Subjects

Every person whose data is processed has the right to:

• access their data,
• rectify it,
• erase it (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing,
• lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

To exercise these rights, contact the Data Controller at contact@artnova.com.pl.

VIII. Data Security

1. The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction.
2. Access to data is granted only to authorized persons bound by confidentiality obligations.

IX. Cookies

1. The beSmart.bike online store uses cookies for the following purposes:
   • ensuring proper website operation,
   • remembering user preferences (e.g., language, shopping cart contents),
   • generating anonymous visit statistics (e.g., via Google Analytics),
   • analyzing website traffic and improving functionality.
2. Cookies are not used to identify users and do not allow determining their identity.
3. Users can change cookie settings in their browser at any time (e.g., block cookies or delete stored ones).
4. A detailed list of cookies used on the website is included in the Annex to this Policy.

X. Analytical and Marketing Tools

1. The Store uses analytical tools such as:
   • Google Analytics – to analyze traffic and visit statistics,
   • Meta Pixel (Facebook Pixel) – to measure the effectiveness of advertising activities.
2. Data collected by these tools is anonymous and does not allow user identification.
3. The legal basis for processing such data is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
4. Users can disable these tools by rejecting cookies in their browser settings.

XI. User Account

1. Users may create an account in the beSmart.bike store to simplify purchases and view their order history.
2. Data linked to the account is stored until the account is deleted by the user.
3. The account can be deleted at any time by sending a request to contact@besmart.bike.

XII. Contact Form

1. The Store enables users to contact the Controller via a contact form available in the Contact section of the website.
2. Personal data provided in the form—such as e-mail address, message subject, content, and any attachments—are processed solely to respond to the inquiry.
3. The legal basis for processing is Article 6(1)(a) GDPR – the data subject’s consent, expressed by checking the consent box below the form.
4. Data is processed for the duration of the correspondence and then retained for the period necessary to secure potential claims – not longer than 3 years from the end of communication.
5. Providing data is voluntary but necessary to send a message.
6. Please do not include or attach files containing special categories of personal data (e.g., health information, political opinions, religious beliefs, etc.).

XIII. Changes to the Privacy Policy

1. The Controller reserves the right to amend this Policy in the event of changes in law, technology, or the Store’s operation.
2. The current version of the Policy is always available on the beSmart.bike website.

Attachments (PDF)

• Annex 1 – Detailed list of cookies used on the website