Privacy Policy

Last update: 27.01.2026

1. Data Controller

The controller of your personal data is JONEX Sp. z o.o. Sp.k. with registered office in Szczecinek (78-400), ul. Gen W. Sikorskiego 22, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000707974, NIP: 6731900052, REGON: 363397068.

2. Purposes and legal basis for processing

Your personal data is processed for the purpose of:

• Performance of sales contract or taking action at request before concluding a contract (Art. 6(1)(b) GDPR)
• Fulfilling legal obligations of the Controller, particularly regarding accounting and taxes (Art. 6(1)(c) GDPR)
• Pursuing legitimate interests of the Controller, such as direct marketing of own products and services, pursuing claims (Art. 6(1)(f) GDPR)
• Operating the B2B platform and processing orders (Art. 6(1)(b) GDPR)
• Statistical analysis and service quality improvement (Art. 6(1)(f) GDPR)

3. Categories of processed data

The Controller processes the following categories of personal data:

• Identification data (name, surname, company name)
• Contact data (email address, phone number, correspondence address)
• Billing data (tax ID, registered address)
• Order and transaction data
• Technical data (IP address, cookies - details in Cookie Policy)

4. Data recipients

Recipients of your personal data may include:

• Courier and transport companies handling deliveries
• IT and hosting service providers
• Accounting and legal service providers
• Public administration bodies (e.g., Tax Office) as required by law
• Google LLC (for Google Analytics service)

5. Data transfer outside EEA

Due to the use of Google Analytics, data may be transferred to the USA. Data transfer is based on standard contractual clauses approved by the European Commission, ensuring an adequate level of personal data protection.

6. Data retention period

Your personal data will be stored for a period:

• Necessary for contract performance, and after completion for the period required by law (e.g., tax regulations - 5 years)
• Until the limitation period for claims arising from the contract expires
• Until consent is withdrawn (if processing is based on consent)
• Until an effective objection is raised (in the case of direct marketing)

7. Rights of data subjects

You have the following rights:

• Right to access your data and receive a copy
• Right to rectification (correction) of your data
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object to data processing
• Right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)
• Right to lodge a complaint with the supervisory authority (UODO)

8. Obligation to provide data

Providing personal data is voluntary but necessary for concluding and performing a sales contract and using the B2B platform. Failure to provide data will prevent order processing and full use of the service.

9. Automated decision-making

The Controller does not make decisions based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

10. Data security

The Controller applies appropriate technical and organizational measures to ensure the protection of processed personal data, in particular protection against unauthorized access, processing in violation of regulations, and against change, loss, damage or destruction.

11. Contact regarding personal data

For matters related to personal data protection, you can contact the Controller: