Privacy Policy

Last updated: April 12, 2026 | Version 1.0

1. Data Controller

Company name	Payment Provider Spółka z ograniczoną odpowiedzialnością
KRS	0001141182
NIP	5862412370
REGON	540305879
Registered address	ul. Opolska 15, 40-084 Katowice, Poland
Email (Data Protection)	office@all-techworld.com
Website	https://all-techworld.com

Payment Provider Sp. z o.o. is the Data Controller within the meaning of Regulation (EU) 2016/679 (GDPR) for personal data collected through the all-techworld.com website.

2. Categories of Personal Data

We may collect and process the following categories of personal data:

Identity data: first name, last name, company name
Contact data: email address, postal/delivery address
Transaction data: order details, payment information (processed by Saferpay/Worldline — we do not store full card numbers)
Technical data: IP address, browser type and version, device type, operating system, referral source
Usage data: pages visited, time spent on site, click patterns (via analytics cookies, with consent)

3. Purposes and Legal Basis for Processing

Purpose	Legal basis (GDPR)
Processing and fulfilling orders	Art. 6(1)(b) — performance of a contract
Sending order confirmations and shipping updates	Art. 6(1)(b) — performance of a contract
Processing payments via Saferpay/Worldline	Art. 6(1)(b) — performance of a contract
Handling complaints and warranty claims	Art. 6(1)(b) — performance of a contract
Compliance with tax and accounting obligations	Art. 6(1)(c) — legal obligation
Website analytics (with consent)	Art. 6(1)(a) — consent
Fraud prevention and security	Art. 6(1)(f) — legitimate interest
Marketing communications (if opted in)	Art. 6(1)(a) — consent

4. Data Recipients and Processors

Your personal data may be shared with the following categories of recipients:

Payment processor: Worldline Switzerland Ltd (Saferpay) — for secure payment processing. Saferpay is PCI DSS Level 1 certified and processes card data in compliance with EU data protection standards.
Shipping carriers: UPS, GLS, DHL, DPD, InPost — for order delivery
Hosting provider: Netlify, Inc. — website hosting
Database provider: Supabase, Inc. — order and account data storage
Analytics: Google LLC (Google Analytics) — only with your consent
Tax/accounting advisors: as required by Polish law

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. International Data Transfers

Some of our service providers are based outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure that adequate safeguards are in place, including:

EU Standard Contractual Clauses (SCCs)
Adequacy decisions by the European Commission
EU-U.S. Data Privacy Framework certification (where applicable)

6. Data Retention

Order data: retained for 5 years from the date of the transaction (as required by Polish tax law)
Account data: retained for the duration of the account plus 30 days after deletion
Analytics data: retained for up to 14 months (Google Analytics default)
Marketing consent records: retained until consent is withdrawn

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

Right of access (Art. 15) — request a copy of your personal data
Right to rectification (Art. 16) — correct inaccurate data
Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten")
Right to restriction (Art. 18) — restrict processing in certain circumstances
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
Right to object (Art. 21) — object to processing based on legitimate interest
Right to withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting lawfulness of prior processing

To exercise any of these rights, please contact us at office@all-techworld.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish supervisory authority:

Authority	Prezes Urzędu Ochrony Danych Osobowych (UODO)
Address	ul. Stawki 2, 00-193 Warszawa, Poland
Website	https://uodo.gov.pl

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

SSL/TLS encryption for all website traffic
PCI DSS compliant payment processing via Saferpay
Access controls and authentication for administrative systems
Regular security audits and monitoring

9. Children's Privacy

The Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact

For any questions regarding this Privacy Policy or our data processing practices, please contact:

Data Controller	Payment Provider Sp. z o.o.
Address	ul. Opolska 15, 40-084 Katowice, Poland
Email	office@all-techworld.com
NIP	5862412370
KRS	0001141182