Regulations of the MySoxo loyalty program

The organizer of the Loyalty Program is SOXO LIMITED LIABILITY COMPANY LIMITED PARTNERSHIP with its registered office in Sopot (registered office address and address for service: ul. Smolna 1A, 81-877 Sopot); entered into the Register of Entrepreneurs of the National Court Register under number KRS 0000711413; the registry court where the company's documentation is kept: District Court Gdańsk – Północ in Gdańsk, 8th Commercial Division of the National Court Register; NIP: 5851481692; REGON: 369129251, email address: sklep@soxo.pl and contact phone number: +48 585 500 758.

The administrator of personal data processed in connection with the implementation of this Loyalty Program is the Organizer. Personal data is processed for the purposes, for the period, and based on the grounds and principles indicated in point 5 of these Regulations. Providing personal data by the Client is voluntary, however, failure to provide personal data to the extent necessary to use the Loyalty Program results in the inability to participate in the Loyalty Program.

The terms used in these Regulations mean:

1. PARTICIPANT, CLIENT – (1) a natural person; (2) a legal person; or (3) an organizational unit without legal personality, which the law grants legal capacity – who has concluded or intends to conclude a Sales Agreement with the Seller.

2. CIVIL CODE – the Civil Code Act of April 23, 1964 (Journal of Laws No. 16, item 93, as amended).

3. CLIENT ACCOUNT – Electronic Service, marked with an individual name (login) and password provided by the Service Recipient, a collection of resources in the Service Provider's ICT system, in which the data provided by the Service Recipient and information about Orders placed by them in the Online Store are collected.

4. ORGANIZER/SELLER – SOXO LIMITED LIABILITY COMPANY LIMITED PARTNERSHIP with its registered office in Sopot (registered office address and address for service: ul. Smolna 1A, 81-877 Sopot); entered into the Register of Entrepreneurs of the National Court Register under number KRS 0000711413; the registry court where the company's documentation is kept: District Court Gdańsk – Północ in Gdańsk, 8th Commercial Division of the National Court Register; NIP: 5851481692; REGON: 369129251, email address: sklep@soxo.pl and contact phone number: +48 585 500 758.

5. PRODUCT – a movable item, service, or right available in the Online Store, which is the subject of a Sales Agreement between the Client and the Seller.

6. LOYALTY PROGRAM – a loyalty program for Participants organized by the Organizer in accordance with these Regulations on the Website.

7. POINTS – points awarded to the Participant of the Loyalty Program for purchases or other activities in the Organizer's Online Store.

8. REGULATIONS – these Loyalty Program regulations.

9. ONLINE STORE – the Organizer's online store available at www.soxo.pl.

The Loyalty Program runs from September 2024 until further notice.

A participant in the Loyalty Program is a retail client (consumer) who has a registered Client Account.

The Client is obliged to use the Loyalty Program in accordance with its assumptions and purpose, in a manner consistent with the law and good practices, respecting the personal rights and intellectual property rights of the Organizer and third parties.

The Organizer awards Points to the Participant for the following activities within the Online Store:

1. Purchase of products from specific product groups, which are assigned point values (e.g., hot water bottles 300 points, beer can socks 200 points, etc.). The number of Points assigned to a given product is determined by the Seller.

2. Subscribing to the Newsletter – 50 points.

The Client will receive Points for the purchase of a given Product only after it has been delivered to them / collected by them and after the 14-day statutory return period has passed. If the client does not collect the Order or withdraws from the Sales Agreement, they will not receive points.

In the case of Points for the purchase of a Product, Points are not awarded for shipping, only for the gross value of the Products.

Points are not exchangeable for any legal tender.

Points cannot be exchanged for cash or transferred to another person.

Collected points are valid for one year, i.e., 12 months from the moment they are credited (awarded).

Changes made to the value of Points assigned to specific Products do not affect the total number of Points already collected by the Client in their Account (the number of collected points does not change).

Orders based on which the Participant loses the right to Points within the Loyalty Program are: Orders placed outside the Client Account, Orders subject to withdrawal from the agreement, canceled, not collected.

The Participant can use Points by exchanging them for discount coupons, according to the following rules:

1. Coupons can be used by the Client only for subsequent purchases.

2. The coupon combines with current promotions in the Online Store.

3. Discount coupons do not accumulate. Only one coupon can be used at a time during one Order.

4. Coupons cannot be shared with third parties other than the Client.

5. Each coupon works once, and its use results in the deduction of Points from the pool.

6. The Client cannot use coupons for wholesale purchases.

7. The discount coupon does not cover shipping costs.

8. The discount coupon will be deducted in full, even if the order value is less than the coupon value.

In the event of the Program's cancellation, the Organizer will:

1. inform Participants about the intention to end the Loyalty Program with appropriate notice, not less than 14 days before the planned end of the Loyalty Program, to allow Participants to use the collected Points,

2. the information referred to in point 4.5.1. of the Regulations will be sent to the Participant's email address indicated in the Client Account and by publishing a notice on the Online Store's website.

The administrator of personal data processed in connection with the implementation of the provisions of these Regulations is the Organizer (hereinafter: "Administrator"). Personal data is processed in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as "GDPR" or "GDPR Regulation".

The Administrator processes personal data for the purposes, for the period, and based on the principles indicated in this point of the Regulations. Providing personal data is voluntary, however, failure to provide personal data necessary to use the Loyalty Program results in the inability to use it. The Administrator takes special care to protect the interests of persons whose personal data is processed, and in particular is responsible for and ensures that the data collected by them is: (1) processed in accordance with the law; (2) collected for specified, lawful purposes and not subjected to further processing incompatible with those purposes; (3) factually correct and adequate in relation to the purposes for which it is processed; (4) stored in a form that allows the identification of persons to whom it relates, no longer than is necessary to achieve the purpose of processing; and (5) processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical or organizational measures. Taking into account the nature, scope, context, and purposes of processing, as well as the risk of violating the rights or freedoms of natural persons with varying probability and severity of threat, the Administrator implements appropriate technical and organizational measures to ensure that processing is carried out in accordance with the GDPR Regulation and to be able to demonstrate this. These measures are reviewed and updated as necessary. The Administrator uses technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically.

The Administrator is entitled to process personal data in cases where – and to the extent that – at least one of the following conditions is met: (1) the data subject has given consent to the processing of their personal data for one or more specific purposes; (2) processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract; (3) processing is necessary for compliance with a legal obligation to which the Administrator is subject; or (4) processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

The processing of personal data by the Administrator requires the existence of at least one of the grounds indicated above each time. The specific grounds for processing personal data of Loyalty Program Participants by the Administrator are indicated in the next point of the Regulations – in relation to the specific purpose of processing personal data by the Administrator.

The Administrator may process personal data for the following purposes, on the following grounds, and for the following periods:

It is necessary for the Administrator to use the services of external entities. The Administrator uses only the services of such processors who provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of the GDPR Regulation and protects the rights of data subjects. The Administrator transfers data only when it is necessary to achieve a specific purpose of personal data processing and only to the extent necessary to achieve it. Clients' personal data may be transferred to the following recipients or categories of recipients:

1. service providers supplying the Administrator with technical, IT, and organizational solutions that enable the Administrator to conduct business activities, including the Loyalty Program (in particular, providers of software for company management and technical support to the Administrator) – the Administrator provides the collected personal data of the Client to the selected provider acting on its behalf only when and to the extent necessary to achieve a specific purpose of data processing in accordance with this point 5 of the Regulations.

2. service providers of accounting, legal, and advisory services providing the Administrator with accounting, legal, or advisory support (in particular, an accounting office, law firm, or debt collection company) – the Administrator provides the collected personal data of the Client to the selected provider acting on its behalf only when and to the extent necessary to achieve a specific purpose of data processing in accordance with this point 5 of the Regulations.

Every person has the right to control the processing of data concerning them contained in the Administrator's data set, and in particular the right to: request supplementation, updating, correction of personal data, temporary or permanent suspension of their processing or their deletion if they are incomplete, outdated, untrue, or collected in violation of the law or are no longer necessary to achieve the purpose for which they were collected.

1. Right of access, rectification, restriction, deletion, or transfer – the data subject has the right to request from the Administrator access to their personal data, rectification, deletion ("right to be forgotten"), or restriction of processing, and has the right to object to processing, as well as the right to transfer their data. Detailed conditions for exercising the above rights are indicated in Articles 15-21 of the GDPR Regulation.

2. Right to withdraw consent at any time – the data subject whose data is processed by the Administrator based on consent (under Article 6(1)(a) or Article 9(2)(a) of the GDPR Regulation) has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

3. Right to lodge a complaint with a supervisory authority – the data subject whose data is processed by the Administrator has the right to lodge a complaint with a supervisory authority in the manner and mode specified in the provisions of the GDPR Regulation and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office.

4. Right to object – the data subject has the right to object at any time – for reasons related to their particular situation – to the processing of their personal data based on Article 6(1)(e) (public interest or tasks) or (f) (legitimate interest of the administrator), including profiling based on these provisions. In such a case, the Administrator may no longer process these personal data unless it demonstrates the existence of compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject or grounds for establishing, exercising, or defending claims.

5. Right to object to direct marketing – if personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.

6. To exercise the rights referred to in this point 5 of the Regulations, you can contact the Administrator by sending an appropriate message in writing or by email to the address of the Administrator indicated at the beginning of the Regulations.

The Client may withdraw from the Loyalty Program at any time and without giving any reason by sending an appropriate statement to the Organizer, in writing to the address: ul. Smolna 1A, 81-877 Sopot or via email: sklep@soxo.pl. Withdrawal from the Loyalty Program will take place immediately after receiving the statement from the Client.

Complaints related to the Loyalty Program can be submitted by the Client to the address: ul. Smolna 1A, 81-877 Sopot or via email: sklep@soxo.pl.

It is recommended to provide as much information and circumstances regarding the subject of the complaint as possible, in particular the type and date of the irregularity and contact details – this will facilitate and expedite the consideration of the complaint by the Organizer. The requirements specified in the previous sentence are only recommendations and do not affect the effectiveness of complaints submitted without the recommended description of the complaint.

The Organizer will respond to the complaint immediately, no later than within 14 days from the date of submission of the complaint.

The Loyalty Program is conducted in Polish, and the law applicable to the Loyalty Program is Polish law.

The Organizer reserves the right to make changes to the Regulations for important reasons, i.e., changes in the law to the extent that these changes affect the implementation of the provisions of these Regulations. The amended regulations are binding on the Client if the requirements specified in Articles 384 and 384[1] of the Civil Code are met, i.e., the Client has been properly notified of the changes and has not terminated participation in the Loyalty Program within 15 days from the date of notification. If the change in the Regulations results in the introduction of any fees, the Client has the right to withdraw from the contract. The change in the Regulations does not affect the benefits already granted.

In matters not covered by these Regulations, the provisions of the Civil Code and other relevant provisions of generally applicable Polish law shall apply.