Privacy Policy
Skate Care Plus Sp. z o.o.
This Policy is effective as of 01.03.2026.
This Privacy Policy (hereinafter: the “Policy”) contains information about the processing of your personal data in connection with the use of the website www.skate-care.com (hereinafter the “Website”) and the services provided by the Controller
Data Controller
The Controller of your personal data is:
Skate Care Plus Sp. z o.o., with its registered office at ul. Rogalińska 11b/12, 80-809 Gdańsk. Contact regarding the protection of personal data: info@skate-care.com Personal data protection measures
The Controller applies modern organisational and technical safeguards to ensure the best possible protection of your personal data and guarantees that it processes the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: the “GDPR”), the Act of 10 May 2018 on the Protection of Personal Data, and other personal data protection regulations.
Information about the personal data processed
In order to use the Website and the services offered by the Controller, the processing of your personal data is necessary. Below you will find detailed information about the purposes and legal bases of this processing, as well as the period for which the data will be stored and the requirements related to providing it.
I.
Purpose of processing: Conclusion and performance of a service agreement (including legal services), as well as taking steps aimed at concluding such an agreement, such as preparing a quote or an offer.
Personal data processed: first and last name/company name, residential/registered address, PESEL/KRS number, NIP number, email address, phone number,.
Legal basis: Art. 6(1)(b) GDPR (processing is necessary for the performance of a contract to which the data subject is party, or to take steps to enter into such a contract)
Providing the aforementioned personal data is necessary to conclude and perform the service agreement (although providing it is voluntary, failure to provide it will make it impossible to conclude and perform the said agreement).
Personal data will be stored for as long as necessary to achieve the purposes of its processing. In the case of marketing activities, the data will be stored until consent is withdrawn, but no longer than 3 years.
II.
Purpose of processing: Recruitment of employees.
Personal data processed: first name, surname, date of birth, contact details provided by the candidate (e.g. residential address, email address, phone number), education, professional qualifications, employment history.
Legal basis: Art. 6(1)(c) GDPR (processing is necessary to fulfil a legal obligation incumbent on the Controller, in this case the obligations related to the recruitment of employees set out in Art. 22(1) § 1 of the Labour Code) and also Art. 6(1)(a) GDPR (the processing of personal data takes place on the basis of consent given)
Providing the aforementioned personal data is mandatory and necessary to carry out the recruitment process.
The Controller will process the listed personal data until the recruitment process is completed or until the candidate withdraws from applying for the job, unless the candidate consents to the further processing of their data for the purposes of future recruitment.
III.
Purpose of processing: Recruitment of collaborators
Personal data processed: first name, surname, date of birth, contact details provided by the candidate (e.g. residential address, email address, phone number), education, professional qualifications, employment history.
Legal basis: Art. 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case the proper conduct of the recruitment process)
Providing the aforementioned personal data is voluntary, but necessary to carry out the recruitment process (the consequence of not providing it will be the inability to take part in the recruitment process).
The Controller will process the listed personal data until the recruitment process is completed or until the candidate withdraws from applying for the job, unless the candidate consents to the further processing of their data for the purposes of future recruitment.
IV.
Purpose of processing: Handling the contact form
Personal data processed: first and last name, email address. Phone number
Legal basis: Art. 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case responding to the message sent)
Providing the aforementioned personal data is voluntary, but necessary in order to receive a response to the message sent (the consequence of not providing it will be the inability to receive a response).
The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of the processing is achieved.
V.
Purpose of processing: Running the Controller's profiles on Facebook, Instagram and LinkedIn (the Services)
Personal data processed: the name of your profile, data you have made “public” on your profile, your image (if it is visible in photos available on your profile as “public”), personal data placed by you in comments under content published on the Controller's profile or sent in a private message to the Controller's profile, statistical and advertising data collected by the social media service, the name of your profile.
Legal basis: Art. 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case running profiles on the Services)
Providing this personal data is voluntary, but necessary to use the Controller's profile on a given Service. Failure to provide it will result in a lack of access to the Controller's profile.
The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of the processing is achieved.
The Controller informs that, with regard to statistical and advertising data, the joint controller of the personal data is the entity responsible for running a given Service, namely:
- Meta Platforms Ireland Limited – with regard to the Facebook and Instagram Services;
- LinkedIn Ireland Unlimited Company – with regard to the LinkedIn Service;
- Google LLC – with regard to the YouTube and Google Service.
Detailed information about the arrangements between the Controller and the entities listed, as well as the data processing rules applied by those entities, can be found in the privacy policies and other documents published on the Services.
Any questions and claims related to the use of the Services should be directed straight to the entities listed.
VI.
Purpose of processing: Establishing, pursuing or defending against claims
Personal data processed: first and last name, email address
Legal basis: Art. 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case establishing, pursuing or defending against claims that may arise in connection with the provision of services or the use of the Website)
Providing this personal data is voluntary, but necessary to establish, pursue or defend against claims that may arise in connection with the provision of services or the use of the Website. Failure to provide it will make it impossible for the Controller to take these actions.
The Controller will process this personal data for the period during which claims related to the provision of services or the use of the Website may arise, i.e. until the limitation periods for these claims expire.
VII.
Purpose of processing: Analysis of your activity on the Website
Personal data processed: date and time of the visit; device IP number; device operating system type; approximate location; web browser type; time spent on the Website; subpages visited and other actions taken within the Website.
Legal basis: Art. 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case obtaining information about your activity on the Website)
Providing this personal data is voluntary, but necessary for the Controller to obtain information about your activity on the Website. Failure to provide it will make it impossible for the Controller to obtain this information.
The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of the processing is achieved.
VIII.
Purpose of processing: Administration of the Website
Personal data processed: IP address; server date and time; information about the web browser; information about the operating system.
The above data is automatically recorded in the so-called server logs each time the Website is used (managing it without the use of server logs and automatic recording would be impossible).
Legal basis: Art. 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller, in this case ensuring the proper operation of the Website)
Providing this personal data is voluntary, but necessary to ensure the proper functioning of the Website. Failure to provide it will mean that the Website does not work correctly.
The Controller will process the aforementioned personal data until an effective objection is raised or the purpose of the processing is achieved.
Profiling
In order to build your marketing profile and direct personalised direct marketing to you (e.g. ads on Facebook) tailored to your preferences, the Controller will process your personal data in an automated manner, including by profiling it. However, this processing will not produce any legal effects concerning you or significantly affect your situation.
The scope of personal data subject to profiling is consistent with the scope of data indicated earlier, concerning the analysis of your activity on the Website.
The legal basis for processing personal data for the above purpose is Art. 6(1)(f) GDPR, under which the Controller may process personal data to pursue its legitimate interest, in this case carrying out marketing activities tailored to recipients' preferences. Providing the aforementioned personal data is voluntary, but necessary to achieve the said purpose (the consequence of not providing it will be the Controller's inability to carry out marketing activities tailored to recipients' preferences).
The Controller will process personal data for the purpose of profiling it until an effective objection is raised or the purpose of the processing is achieved.
Remember that you have the option to disable Facebook Pixel in the popup window related to the cookie settings.
Recipients of personal data
The recipients of the personal data will be the following external entities cooperating with the Controller:
- the data hosting service provider
- companies providing tools used to analyse activity on the Website and to direct direct marketing to people who use it (including Google Analytics)
- the company providing accounting services;
- the internet domain provider.
In addition, personal data may be disclosed to public or private entities if this results from obligations imposed by law or on the basis of a final decision.
Transfer of personal data to a third country
In connection with the Controller's use of tools such as Google Analytics and Facebook Pixel, your personal data may be transferred to the following third countries: United Kingdom, Canada, USA, Chile, Brazil, Israel, Saudi Arabia, Qatar, India, China, South Korea, Japan, Singapore, Taiwan (Republic of China), Indonesia and Australia. The transfer of data to these countries takes place on the following legal bases:
In the case of the United Kingdom, Canada, Israel, Japan and South Korea, personal data is transferred on the basis of a European Commission decision stating that each of these third countries ensures an adequate level of personal data protection.
In the case of the USA, personal data is transferred on the basis of Commission Implementing Decision (EU) 2023/1795 of 10 July 2023, issued pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council. This decision states that an adequate level of personal data protection is ensured under the EU-US Data Privacy Framework.
- In the case of the USA, Chile, Brazil, Saudi Arabia, Qatar, India, China, Singapore, Taiwan (Republic of China), Indonesia and Australia, personal data is transferred on the basis of contractual clauses ensuring an adequate level of protection, consistent with the standard contractual clauses set out in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
You can obtain from the Controller a copy of the data transferred to a third country.
Your rights
In connection with the processing of personal data, you have the following rights:
- You have the right to obtain information about the personal data processed by the Controller and to receive a copy of that data (the so-called right of access). The first copy of the data is free of charge, while the Controller may charge a fee for subsequent copies.
- If the data processed becomes outdated, incomplete or otherwise incorrect, you have the right to request its rectification.
- In certain situations you have the right to ask the Controller to erase your personal data, for example when:
- The data is no longer needed by the Controller for the purposes you were informed about, for example when the processing purposes have been achieved or are no longer necessary for their further fulfilment.
- You have effectively withdrawn your consent to the processing of the data, provided the Controller has no other legal basis for processing it (e.g. a legal obligation or a contract);
- The processing of the data is unlawful, for example if the data was collected in a manner inconsistent with the regulations or used for purposes other than those consented to.
- The need to erase the data results from a legal obligation incumbent on the Controller, for example where the data must be erased under the law or a decision of a supervisory authority.
- If personal data is processed by the Controller on the basis of consent given or in order to perform a contract, you have the right to transfer your data to another controller. This right covers the data you provided to the Controller and which is processed in a structured, commonly used and machine-readable format.
- If personal data is processed by the Controller on the basis of consent you have given, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place before its withdrawal.
- If you consider that the personal data processed is incorrect, its processing is unlawful, or the Controller no longer needs certain data, you have the right to request that, for a specified period (e.g. to verify the accuracy of the data or pursue claims), the Controller suspend any operations on that data and merely store it.
- You have the right to object to the processing of personal data where the basis of the processing is the Controller's legitimate interest. If an objection is effectively raised, the Controller will cease processing the personal data for that purpose.
- You have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data infringes the provisions of the GDPR.
Cookies
The Controller informs that the Website uses “cookies”, which are installed on your end device. These are small text files that can be read by the Controller's system, as well as by the systems of other entities whose services the Controller uses (e.g. Facebook, Google).
The Controller uses cookies for the following purposes:
- ensuring the proper operation of the Website – thanks to cookies, the Website can operate smoothly, its available functions can be used, and you can conveniently move between individual subpages;
- Ensuring security – cookies are used to authenticate users and prevent unauthorised access to the customer account. They therefore help protect personal data against access by unauthorised persons.
- Improving the comfort of browsing the Website – cookies make it possible to detect errors on individual subpages and to improve them systematically, which leads to a better user experience.
- Maintaining session state after logging into an account – cookies allow an active session to be kept, so you do not have to re-enter your login details on every subpage you view, which significantly increases the comfort of using the Website.
- Creating statistics – cookies are used to analyse how users use the Website (e.g. number of visits, time spent on the site, most frequently viewed content). Thanks to this data, it is possible to continuously improve the Site and adapt its functionality to users' preferences.
- Conducting marketing activities – cookies allow the Controller to display ads tailored to users' preferences, enabling more effective targeting of advertising content.
The Controller may place both temporary and persistent cookies on your device. Temporary files are usually deleted after closing the browser, while persistent files remain on the device even after it is closed.
Information about the cookies used by the Controller is displayed in a panel at the bottom of the Website. Depending on your decision, you can enable or disable cookies from individual categories (except for cookies necessary for the proper functioning of the site) and change these settings at any time.
The data collected via cookies does not allow the Controller to identify you.
The Controller uses the following tools that make use of cookies:
- Essential Website cookies – these files enable the correct and secure functioning of the Site, including adapting its layout to the device's screen size. They cannot be disabled, as they are necessary to use the Website. Essential cookies remain on your end device for a period of up to 1 year.
- Google Analytics – this tool (using cookies provided by Google LLC) collects statistical data about how users use the Website, such as the number of visits, time spent on the site, the search engine used or location. The information gathered helps to improve the Website and adapt it to users' needs. Cookies used by Google Analytics remain on your end device for a period of up to 2 years.
- Google Ads – this tool (using cookies provided by Google LLC) makes it possible to collect information about your preferences, such as the subpages you visit or the content you view, and then allows ads tailored to you to be displayed on other websites you visit. Cookies used by Google Ads remain on your end device for a period of up to 3 months.
- Facebook Pixel – this tool (using cookies provided by Meta Platforms Ireland Limited) makes it possible to recognise that you have visited the Website, and also allows ads to be displayed to you on the Facebook and Instagram social networks and the effectiveness of those ads to be measured. Cookies used by Facebook Pixel remain on your end device for a period of up to 3 months.
- Hubspot - this tool (using cookies provided by HubSpot, Inc.) makes it possible to collect data about your preferences and activity on the website, including the subpages visited, interactions with forms, time spent on the site, and emails opened and clicked. Thanks to this tool, it is possible to track the email delivery process (e.g. whether a message was opened, when, and how long it was viewed) and to personalise the content of communication depending on your actions. Cookies used by HubSpot remain on your end device for a period of up to 13 months.
Using most popular web browsers, you can check whether cookies have been installed on your device, and also delete them or block their installation by the Website or other sites in the future. Please note, however, that disabling or limiting the handling of cookies may make it harder to use the Website, for example by requiring you to log in on every subpage, lengthening the page load time or limiting access to certain functions.
In matters not regulated by this Policy, the generally applicable provisions on the protection of personal data apply.
This Policy is effective as of 01.03.2026.