Privacy policy and cookies

Privacy and Cookies Policy

The Privacy Policy describes the rules for processing information about you, including personal data and cookies.

1. General Information

This policy applies to the website operating at the URL: WooHooBikes.com

The website operator and personal data administrator is: Mirosław Szwed
ul. Rudzka 38/3, 47‑400 Racibórz, Poland

Operator contact e‑mail address: kontakt@woohoobikes.com

The Operator is the Administrator of your personal data regarding the data voluntarily provided in the Service.

The Service uses personal data for the following purposes:

Operating the newsletter
Handling inquiries via the contact form
Preparing, packing, and shipping goods
Fulfilling ordered services

The Service collects information about users and their behavior in the following ways:

Through data voluntarily entered in forms, which are entered into the Operator’s systems.
Through storing cookies (“cookies”) in end‑user devices.

2. Selected Data Protection Methods Used by the Operator

Login and data entry areas are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the site are encrypted on the user’s computer and can only be read on the target server.
Personal data stored in the database are encrypted in a way that only the Operator holding the key can read them. This protects data in case of a database theft.
User passwords are stored in a hashed form. Hashing is one‑way and cannot be reversed, which is a modern standard for storing passwords.
The Operator periodically changes administrative passwords.
To protect data, the Operator regularly performs backups.
An essential element of data protection is the regular update of all software used by the Operator to process personal data, especially updates of software components.

3. Hosting

The Service is hosted (technically maintained) on the servers of dhosting.pl.

4. Your Rights and Additional Information About Data Usage

In certain situations, the Administrator has the right to share your personal data with other recipients if necessary to fulfill a contract with you or to fulfill legal obligations of the Administrator. These include:

Hosting provider on a delegated basis
Couriers
Postal operators
Banks
Payment operators
Online chat service providers
Companies providing marketing services for the Administrator

Your personal data are processed by the Administrator no longer than necessary to carry out the related activities defined by separate regulations (e.g., accounting). Marketing data will not be processed for more than 3 years.

You have the right to request from the Administrator:

Access to your personal data
Rectification
Deletion
Restriction of processing
Data portability

You have the right to object to processing as indicated in point 3.3(c) regarding processing for the purposes of legitimate interests pursued by the Administrator, including profiling. Your right to object cannot be exercised if there are valid, overriding legal grounds for processing, such as establishing, exercising, or defending legal claims.

You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00‑193 Warsaw, Poland.

Providing personal data is voluntary but necessary to use the Service.

Automated decision‑making, including profiling, may be applied to you for the purposes of providing services under a contract and for the Administrator’s direct marketing.

Personal data are not transferred to third countries outside the EU.

5. Form Information

The Service collects information voluntarily provided by the user, including personal data if provided.
The Service may record connection parameters (time, IP address).

In some cases, the Service may store information linking form data with the user’s email address. In such cases, the user’s e‑mail address appears within the page URL containing the form.

Data provided in forms are processed for purposes arising from the function of a specific form (e.g., service request handling, sales contact, service registration). The context and description of the form clearly indicate its purpose.

6. Administrator Logs

User activity in the Service may be logged. These data are used for website administration.

7. Important Marketing Techniques

The Operator uses traffic analysis via Google Analytics (Google Inc., USA). The Operator does not transfer personal data to Google, only anonymized information. The service uses cookies in the user’s device. Users can view and edit advertising preference data collected by Google using: https://www.google.com/ads/preferences/
The Operator uses remarketing techniques to adjust advertising content to user behavior. This may give the impression of tracking, but in practice no personal data are transferred to advertisers. The technical condition for these actions is cookie support.
The Operator uses Facebook Pixel. This allows Facebook (Facebook Inc., USA) to know that a registered user has visited the Service. Facebook bases this on its own data as an administrator; the Operator does not transfer additional personal data. This service also uses cookies in the user’s device.
The Operator uses heat‑mapping and session recording tools to analyze user behavior. These data are anonymized before being sent to the service provider. Passwords and other personal data are not recorded.
The Operator uses automation tools in the Service, e.g., sending emails to users visiting specific pages, provided they have consented to receiving commercial messages.

8. Cookies Information

The Service uses cookies.

Cookies are IT data, in particular text files, stored in the User’s end device and intended for using the Service’s web pages. Cookies usually contain the name of the website they come from, the time of storage on the device, and a unique number.

The entity placing cookies in the User’s device and accessing them is the Service Operator.

Cookies are used for:

Maintaining the Service user session (after login) so the user does not have to re‑enter login and password on every page
Implementing purposes described above in the “Important Marketing Techniques” section

The Service uses two main types of cookies:

Session cookies – temporary files stored in the User’s device until logout, leaving the site, or closing the browser
Persistent cookies – stored in the User’s device for the time specified in the cookie parameters or until deleted by the User

Web browsers usually allow cookies to be stored by default. Users can change these settings. Browsers allow deleting cookies, and automatic blocking is also possible. Detailed information is in the browser help or documentation.

Limiting the use of cookies may affect some functionalities of the Service.

Cookies placed in the User’s device may also be used by cooperating entities, including:

Google (Google Inc., USA)
Facebook (Facebook Inc., USA)
Twitter (Twitter Inc., USA)

9. Managing Cookies – How to Give and Withdraw Consent

If the user does not want to receive cookies, browser settings can be changed. Note that disabling cookies essential for authentication, security, or user preference maintenance may hinder or, in extreme cases, prevent the use of the website.

To manage cookies settings, choose your browser and follow the instructions: