This version of the website has no visitor analytics or advertising pixels.
The email address button opens your email application.
YIVO listings open on external sales platforms.
1. Who is responsible for your data?
The controller of personal data associated with operating the yivo.pl website and correspondence addressed to YIVO is:
YIVO Sebastian Zającul. Zofii Nałkowskiej 16/E
41-700 Ruda Śląska, Poland
NIP: 642-315-75-74 · REGON: 383257067
Email: kontakt@yivo.pl
For personal data matters, write to the address above. Send product complaints to reklamacje@yivo.pl.
2. What data do we process and for what purpose?
Displaying the website and downloading documents
To deliver a page or PDF file, the server receives connection data, including the IP address, the time of the request, the address of the page or file being opened and technical information sent by the browser. These may be recorded in access and error logs.
Purpose and legal basis: providing the website, identifying errors and protecting against misuse — the controller's legitimate interest, Article 6(1)(f) GDPR.
Enquiries, parts selection and documentation
If you write to us, we receive your email address, message content and any attachments you provide. You may also give your name, device model, product name, order number or a link to the listing. We use this information to handle your enquiry.
Purpose and legal basis: replying to a general enquiry — Article 6(1)(f) GDPR, namely our interest in conducting correspondence. Where the enquiry concerns preparing or performing a contract with you — Article 6(1)(b) GDPR, to the extent necessary for those actions.
Complaints and the buyer's rights
We process contact details, purchase information, a description of the problem and the evidence needed to assess the complaint. An address is needed if the matter requires postal correspondence or shipping the product.
Purpose and legal basis: fulfilling the seller's obligations under the applicable sales and consumer rights legislation, in Poland in particular the Consumer Rights Act and the Civil Code — Article 6(1)(c) GDPR; performing contractual obligations, including any warranty provided — Article 6(1)(b) GDPR. Establishing, exercising or defending legal claims may require retaining relevant evidence under Article 6(1)(f) GDPR.
Requests concerning personal data
We use the data in a request to establish its scope, verify the applicant's identity where necessary, provide a response and demonstrate compliance with the obligation. Retaining necessary evidence in the event of a dispute may serve to establish, exercise or defend legal claims — Article 6(1)(f) GDPR.
Purpose and legal basis: fulfilling obligations under the GDPR — Article 6(1)(c) GDPR in conjunction with Articles 12–22 GDPR.
Financial settlement of the matter being handled
If the matter requires a refund, a correction or the issue of a document, we use the necessary identification and settlement details, purchase information and, where needed, the account for the refund.
Purpose and legal basis: settling the contract — Article 6(1)(b) GDPR; tax and record-keeping obligations under the applicable legislation, in particular the Tax Ordinance Act and the VAT Act — Article 6(1)(c) GDPR.
We receive data primarily from you. When investigating a purchase-related matter, we may also use order and complaint data made available to YIVO by the platform on which the product was purchased: contact details, order number, and information about the product, payment and delivery. If a representative acts on your behalf, we also receive data from them.
Provide only the information needed
Browsing the website and downloading documents do not require an account. Contacting us is voluntary, but we may be unable to handle your matter without a reply address or a description of it. Do not send your PESEL number, a scan of your identity card or health data unless they are needed for the particular matter. Photographs should show the product, model and fault; obscure unnecessary personal details and document information.
3. How long do we retain data?
From the publication of this version, we apply the following retention rules to data under YIVO's control. If the purpose ends earlier and there is no other basis for retaining the data, we delete them earlier or effectively anonymise them.
| Type of information | Period and how it is calculated |
|---|---|
| Enquiries about listings, parts selection and documentation | For the duration of handling the matter, and then for up to 12 months after its conclusion if the correspondence is needed to continue or clarify it. Longer retention applies only to the extent covered by another basis described below. |
| Necessary evidence relating to a purchase, return or complaint | Until the relevant claim becomes time-barred, if retaining this evidence is necessary to establish, exercise or defend it. For typical consumer claims in Poland, this is generally 6 years; the start and end of the period are determined for the individual matter. |
| Tax and settlement documents relating to the matter being handled | Until the relevant tax liability becomes time-barred; generally 5 years from the end of the year in which the tax payment deadline expired. Specific obligations may justify a longer period. |
| Records of the exercise of GDPR rights | For the duration of handling the request. After that, the necessary record of the request, response and actions taken is retained for up to 3 years after the matter is concluded, to demonstrate compliance with the obligation. We delete unnecessary attachments, including data used solely to verify identity, once their purpose ends. An ongoing dispute may justify retaining necessary evidence for longer. |
| Ordinary website access and error logs under YIVO's control | For up to 30 days after recording. |
| Security logs under YIVO's control | For up to 90 days after recording. Data relating to a particular incident may be separated out for the duration of its investigation and any protection of legal claims. |
| Our own backups containing customer data, if created | For up to 30 days after the backup is created. After restoring it, we reapply justified data deletions carried out previously. |
| Spam and messages moved to the bin | For up to 30 days after placement in the relevant folder. The provider's separate process for deleting technical copies is described below. |
We consider a matter concluded when we provide a final response or complete the agreed actions. Further handling of the same request postpones the point at which it is concluded; we do not restart the period solely because of an internal mailbox review.
Only material needed for a specific purpose remains in longer-term archives: for example, the complaint, relevant photographs, the decision and evidence of settlement. Tax obligations and the possibility of legal claims do not automatically mean retaining every message for 5 or 6 years.
The limitation period for claims depends on the type of claim, the law applicable to the sale and events affecting how the period runs, including suspension or interruption of the limitation period. During an ongoing dispute, we retain necessary evidence until the justified need to use it ends. If an invoice is stored in KSeF, the separate retention period in that system is 10 years from the end of the year in which it was issued; this does not automatically extend the retention of all correspondence.
Service providers' technical copies
Deleting a message or file from an active account does not necessarily mean that all technical copies are deleted immediately. Google describes its deletion process as usually taking around two months, and up to six months in backup systems, subject to the exceptions it describes. Details: Google's data retention and deletion rules.
At SEOHOST, data included in a backup remain there until the backup is replaced or deleted in accordance with the backup cycle for the service. Information about backups and data processed by the provider for its own purposes is described in SEOHOST's privacy policy. Retention periods for the provider's own purposes do not provide a basis for YIVO to extend its retention of correspondence.
4. Who handles the data?
SEOHOST — hosting and domain
The website and domain are operated through SEOHOST. The provider is SEOHOST sp. z o.o., ul. Obornicka 330, 60-689 Poznań, NIP 9721323212. The hosting service involves handling connection data needed to make the website available. Provider information: SEOHOST's privacy policy.
Google — Gmail email service
YIVO also uses a regular Gmail account to handle correspondence. Google therefore receives the data contained in stored messages, including email addresses, content and attachments, as well as technical data associated with operating the service. The service provider for users in the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details: Google's privacy policy and terms of service.
Processing outside the EEA
Google uses infrastructure in various countries, so email services may involve processing data outside the European Economic Area. Google cites adequacy decisions, including the EU–US Data Privacy Framework for transfers to the USA covered by it, and standard contractual clauses where appropriate. A description of the mechanisms and how to obtain a copy of the clauses can be found in Google's information on data transfers.
Recipients involved in handling your matter
Depending on the subject of the request, necessary data may be received by:
- the sales platform operator and providers of order management systems — where the matter requires verifying a purchase or handling the request on the platform;
- postal operators and carriers — where a parcel needs to be sent or received;
- banks and payment operators — where we make a settlement or refund;
- a repair service, an entity handling settlements or a legal adviser — only if we entrust them with actions needed to resolve the particular matter.
We limit the data shared to the information needed for the action concerned. Authorised authorities may also receive data where required by law. Within YIVO, the people handling the matter have access within the scope of their duties.
6. Search and external services
Catalogue and parts selection
The catalogue and the “Find compatible parts” selector run in your browser. Selected filters, brand, model, searched identifier, SKU or EAN may be included in the catalogue URL so that you can return to the results or share the link. Such a URL may appear in your browser history and, when the page is opened or refreshed, in YIVO server logs. The website does not store the selected catalogue filters in cookies or local storage; a separate cookie may store only the language version selected manually, as described in “Cookies and browser storage”. You are taken to a marketplace only after clicking the chosen link; a search link may pass a product or device identifier to the platform, such as an EAN, SKU or model. Do not enter personal data in the catalogue fields.
Product photographs in the selector results are downloaded from the image server used by YIVO in the Base system (upload.cdn.baselinker.com). When an image is downloaded, the server receives the IP address and technical information about the request. The website does not include the referring page URL in the image request. We do not pass the entered model, SKU or EAN in that request; however, the URL of the image being downloaded identifies the product displayed. Photographs are used to present products, not to analyse user behaviour.
The “Ask YIVO about compatibility” option opens your email program with a prepared subject and message containing the selected identifier. You can edit them, add a photograph and send the message yourself. We describe how received correspondence is processed in the Contact and personal datasection. Further use of the marketplace is governed by that platform's privacy information.
Searching for instructions and warnings
The document list is filtered in the browser. The selected search term, category and language may be included in the page URL so that you can return to the results or share the link. Such a URL may appear in your browser history and, when the page is opened or refreshed, in server logs. Search by product or category name, without personal data.
Links to our listings
Clicking a marketplace link takes you to a separate service. Merely displaying its logo on yivo.pl does not require a connection to that platform. After you go there, its operator processes data associated with using the platform under the rules described in its privacy information.
When you buy from YIVO, we are responsible as the seller for processing the data we need to handle your order. The marketplace operator's information does not replace YIVO's information obligations. This page describes the yivo.pl information website and contact with us; it is not a complete description of all sales processes on the platforms.
Clicking an email address opens your email program. The message content is passed to our email service only when you send the message.
7. What rights do you have?
Within the limits and subject to the conditions set out in the GDPR, you may:
- obtain information about the processing of your data, access to them and a copy of them;
- ask for inaccurate data to be corrected or incomplete data to be completed;
- request erasure of your data or restriction of their processing where the conditions laid down by law are met;
- receive the data you have provided to us in a format that allows their portability, if we process them by automated means on the basis of a contract or consent;
- object on grounds relating to your particular situationif our legitimate interest is the basis for processing.
We assess objections in accordance with Article 21 GDPR. Further processing may be permissible where there are compelling legitimate grounds that override the objection, or where it is necessary to establish, exercise or defend legal claims. An obligation to retain certain documents may also limit the possibility of erasing them.
If processing in a particular matter is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of earlier processing. Ordinary contact or complaint handling does not require separate consent to the processing of data necessary for those purposes.
You can send a request to kontakt@yivo.pl or to the postal address provided. We respond without undue delay and no later than one month after receiving the request. Where required by the complexity or number of requests, this period may be extended by a further two months; in that case, we inform you of the extension and its reason within the first month. Where we have reasonable doubts about your identity, we may ask for additional information that is necessary.
Handling requests is generally free of charge. Exceptions apply in particular to manifestly unfounded or excessive requests, under Article 12(5) GDPR. If we refuse to take action, we explain the reasons within one month and inform you of the possibility of lodging a complaint and seeking a judicial remedy.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office. Information and current contact methods are available on the UODO website.
The yivo.pl website does not profile users or make decisions about them based solely on automated processing that would produce legal effects or similarly significantly affect them.
8. Scope and updates
This information covers the yivo.pl home page, the product catalogue at /katalog/, the “Our stores” page at /marketplaces/, the /wsparcie/ section including its documents, and the correspondence described above.
The content needs to be updated when data processing methods, the tools used or the applicable legislation change. Adding an online shop, customer accounts, a newsletter or statistics requires the information and relevant mechanisms to be adapted beforehand.
- GDPR — text of the Regulation (PDF), in particular Articles 5–6, 12–22, 28 and 44–49.
- Electronic Communications Law — consolidated text (PDF) — Articles 399–400 concerning the storage of information on a device and consent.
Do you have a question about your data?
Tell us what the matter concerns. We will contact you at the address you provide.
kontakt@yivo.pl