Privacy Policy

PRIVACY POLICY OF THE SOFT TENNIS SHOP STORE (soft-tennis.eu)

Privacy Policy of 22.07.2026.

This is a translation provided for convenience. The Polish version of this Privacy Policy is the binding one.

We care about your privacy and want you to feel comfortable while using our services. Below we present the most important information about how we process your personal data and about the cookies used by our Store. This information has been prepared in accordance with the GDPR, the General Data Protection Regulation.

Personal data controller

HORCHA Spółka z ograniczoną odpowiedzialnością with its registered office at ul. Sadowa 21, 05-825 Grodzisk Mazowiecki, Poland, entered in the National Court Register (register of entrepreneurs) kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under KRS number 0000371294, NIP (VAT ID) 5291788833, REGON 142689307, share capital PLN 5,000.00.

If you wish to contact us in connection with our processing of your personal data, write to us at: michal.boniecki@horcha.pl.

Your rights

You have the right to demand: access to your personal data, including obtaining a copy of your data (Article 15 GDPR), its rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), and transfer of the data to another controller (Article 20 GDPR).

You also have the right to object at any time to the processing of your data:

• for reasons related to your particular situation — against the processing of personal data concerning you based on Article 6(1)(f) GDPR (Article 21(1) GDPR);
• where personal data is processed for direct marketing purposes, to the extent that the processing is related to such direct marketing (Article 21(2) GDPR).

Contact us if you wish to exercise your rights. If you have an account in the Store, you can manage some of your rights yourself in the "Privacy and consents" section. You can object to our use of cookies via the consent settings on our website or your browser settings.

If you consider that your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (UODO).

Personal data and privacy

Below you will find detailed information on the processing of your data depending on the actions you take.

1. Placing an order in the Store

Purpose: fulfilling your order.
Basis: the sales contract (Article 6(1)(b) GDPR) and the legal obligation related to accounting (Article 6(1)(c) GDPR).
Period: for the duration of the contract, until the legal obligation related to accounting expires, and additionally until the end of the period in which claims may be pursued.
Consequence of not providing data: inability to place an order.

2. Creating an account in the Store

Purpose: performing the contract for the account service.
Basis: the service contract (Article 6(1)(b) GDPR).
Period: for the duration of the contract, and additionally until the end of the claims period.
Consequence of not providing data: inability to create an account and use its functions, such as order history, favourite products, saved shopping lists or the loyalty program.

3. Contacting us (e.g. asking a question)

Purpose: handling your enquiries or reports.
Basis: the contract or actions taken at your request aimed at concluding it (Article 6(1)(b) GDPR) — where the enquiry concerns a contract; our legitimate interest in communicating with you (Article 6(1)(f) GDPR) — in other cases.
Period: for the duration of the contract or until the end of the claims period, or until your objection is accepted.
Consequence of not providing data: inability to reply.

Using the Advisor chat on the Store website

Purpose: answering questions asked in the chat window. Answers are generated automatically.
Basis: our legitimate interest in handling Store users' enquiries (Article 6(1)(f) GDPR).
Period: we store the content of conversations for up to 6 months, after which it is deleted.
We recommend not providing personal data or order numbers in the chat — for matters requiring such data, write to michal.boniecki@horcha.pl.
Consequence of not providing data: none; using the chat is voluntary.

4. Settings allowing marketing activities

Purpose: direct marketing consisting in displaying personalised advertisements.
Basis: our legitimate interest (Article 6(1)(f) GDPR) in connection with your consent to the relevant cookies.
Period: until the cookies used for marketing purposes expire or are deleted.
Consequence: without these settings you will not receive suggestions of products you may be interested in.

5. Settings allowing analytical activities

Purpose: analysing how the Store website is used and navigated, in order to improve its functionality.
Basis: our legitimate interest (Article 6(1)(f) GDPR) in connection with your consent to the relevant cookies.
Period: until the cookies used for analytical purposes expire or are deleted.

6. Subscribing to the newsletter or consenting to receive marketing content

Purpose: sending the newsletter and marketing information, and analysing the effectiveness of the messages sent.
Basis: the contract for the delivery of the newsletter (Article 6(1)(b) GDPR), your consent to marketing activities (Article 6(1)(a) GDPR), and our legitimate interest in analysing effectiveness (Article 6(1)(f) GDPR).
Period: until you unsubscribe from the newsletter or withdraw your consent; withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
Consequence of not providing data: inability to receive the newsletter and information about promotions.

7. Posting a product review

Purpose: publishing your review of a purchased product.
Basis: our legitimate interest in presenting customer reviews of products (Article 6(1)(f) GDPR), in connection with your voluntary posting of a review.
Period: until the review is deleted or your objection is accepted.

The content of the review and your signature will be visible to other Store users; we do not disclose your e-mail address to other users.

8. An act or omission that may give rise to claims

Purpose: establishing, pursuing or defending possible claims.
Basis: our legitimate interest (Article 6(1)(f) GDPR).
Period: until the limitation period for claims expires or until your objection is accepted.

Profiling

Within the Store we carry out profiling — in your case this will take place if you allow such activities. Profiling consists in automatically assessing which products you may be interested in, using information about the content you view. The profiling we carry out does not result in decisions that produce legal effects concerning you or similarly significantly affect you.

Analytical activities

On the Store website we carry out analytical activities aimed at making it more intuitive and accessible — in your case this will take place if you allow such activities. We analyse how you navigate the Store in order to optimise its layout and content. If you receive our newsletter or marketing messages, we may analyse the effectiveness of the mailings.

Data security

When processing your personal data, we apply organisational and technical measures compliant with the applicable law, including encrypting the connection with an SSL/TLS certificate.

Cookies

Our Store uses cookies. These files are saved in the memory of your device and do not change its settings. Cookies are used for: remembering your session and cart contents, statistical purposes, marketing purposes, and providing Store functions. The scope of cookies used depends on the consents you give in the settings on our website; you can change or withdraw your consents at any time. The storage period of individual cookies depends on their type and is indicated in the consent settings. You can also disable cookies in your browser settings.

External services / data recipients

We use the services of external entities that support us in running our business. We entrust them with the processing of your data — these entities process data exclusively on our documented instruction. Depending on the actions you take, the recipients of your data are:

• any action related to the Store: the provider of the Store platform and hosting, the entity providing technical/IT support, the provider of standard office software (including e-mail);
• placing an order: the payment provider (PayU, PayPo), the carrier delivering the parcel (InPost or a courier company), the accounting office, the provider of accounting software;
• subscribing to the newsletter or consenting to marketing messages: the entity providing newsletter delivery;
• being on the website with settings allowing analytical or marketing activities: entities enabling analytical and marketing activities on the website — data may be transferred to the United States of America**;
• using social media services in connection with the Store: social media platforms — data may be transferred to the United States of America**;
• using the Advisor chat: the provider of language processing technology (generating answers) — data may be transferred to the United States of America**.

In addition: the relevant public authorities to the extent we are obliged to make data available to them.

Transfer of personal data to countries outside the European Union

** Your personal data may also be processed by entities from outside the European Union. An adequate level of protection of your data is ensured by these entities' participation in the Data Privacy Framework, a programme established by an implementing decision of the European Commission as a set of principles guaranteeing adequate privacy protection — in the case of entities from the United States of America.