How we process your personal data.

1. Data controller

   The controller of your personal data is GORKE ELECTRONIC sp. z o.o., based in Pszczyna, Poland (KRS 0000116885, NIP 6381524713) — a manufacturer of electronic devices and the seller in the online shop on this site. The controller has not appointed a data protection officer. The controller’s contact details are below; use the same address for any matter concerning your data.

   GORKE Electronicul. Staromiejska 31b
   43-200 Pszczynabiuro@gorke.com.pl+48 32 326 30 70

2. Purposes and legal bases of processing

   We process personal data for the following purposes:

   • answering your enquiry, selecting devices and preparing a quotation — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR);
   • running your shop account and concluding and performing a contract of sale or supply, including taking payment, shipping and handling complaints (Art. 6(1)(b) GDPR);
   • issuing, sending and keeping invoices and other accounting records — a legal obligation of the controller (Art. 6(1)(c) GDPR);
   • checking the tax identification number (NIP) or EU VAT number given for the invoice in the Polish register of VAT payers and in the VIES system, to issue the invoice to the right party and to establish the VAT rate of a supply to another EU state — a legal obligation of the controller (Art. 6(1)(c) GDPR in conjunction with Articles 42 and 106e of the Polish VAT Act), and otherwise the legitimate interest of the controller in verifying its business partners (Art. 6(1)(f) GDPR);
   • contacting you by telephone about your enquiry or order, to settle its details — as part of steps taken at your request and of performing the contract (Art. 6(1)(b) GDPR); we do not market by telephone;
   • sending commercial information by e-mail — only if you have consented to it (Art. 6(1)(a) GDPR and Art. 398 of the Polish Electronic Communications Law);
   • day-to-day contact, handling correspondence and establishing, pursuing or defending claims — the legitimate interest of the controller (Art. 6(1)(f) GDPR).

3. Scope of the data and whether providing it is voluntary

   Through the enquiry forms we collect your name, e-mail address and telephone number and, if you provide them, your company name, VAT identification number, project name, the content of your enquiry and any attached files. When you open a shop account you give your first name, surname, e-mail address and a password — we do not know the password, we keep only its secured hash. When you order you give your invoice details, delivery address and telephone number and, when buying for a company, its name and VAT identification number. If you give a tax identification number (NIP) or an EU VAT number, we obtain from publicly available registers — the register of VAT payers kept by the Head of the National Revenue Administration (Article 96b of the Polish VAT Act) and the VIES system of the European Commission — the VAT status and the name under which the entity is registered, and from VIES also the reference number of the check. Providing data is voluntary, but without the data marked as required in the forms we cannot answer an enquiry, open an account or fulfil an order.

4. Recipients of the data

   We entrust data to the parties that support us in running the business, which process it solely on our documented instructions: OVH (hosting of the site and the shop), Microsoft (e-mail, Microsoft 365), our accountancy office and, where needed, software suppliers, including the tool we send the newsletter with, and legal advisers. To the extent needed to fulfil an order we also pass it to the carrier chosen with the order (DPD, InPost or Poczta Polska) and to the payment operator PayU S.A., based in Poznań, and invoices issued to companies go to the Polish National e-Invoicing System (KSeF). We pass the NIP or EU VAT number for checking to the Head of the National Revenue Administration (register of VAT payers) and to the European Commission (VIES), through which it reaches the tax administration of the state that issued it. We process data in the European Economic Area. Microsoft and software suppliers that use servers outside the EEA may transfer it outside the EEA, including to the United States — on the basis of a European Commission adequacy decision (the EU–US Data Privacy Framework) or of standard contractual clauses.

5. Retention period

   We keep enquiry data for as long as handling it requires, and then for the limitation period of any claims arising from a resulting contract. Account data is kept until the account is deleted — you can delete it at any time in the customer panel. Orders and accounting records are kept for 5 years counted from the end of the calendar year in which the tax became payable, also after the account is deleted. Data processed on the basis of consent is kept until the consent is withdrawn, and data processed on the basis of a legitimate interest until an effective objection is raised.

6. Your rights

   In connection with the processing of your data you have:

   • the right of access to your data and to receive a copy of it;
   • the right to have inaccurate data rectified and incomplete data completed;
   • the right to erasure;
   • the right to restriction of processing;
   • the right to port your data to another controller;
   • the right to object to processing based on a legitimate interest;
   • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

   Several of them you can exercise yourself in the customer panel: correct your data under Details and account, and under Account settings withdraw consents, request a copy of your data or delete the account. For any of them you can also write to us at the address given above.

7. Complaint to the supervisory authority

   If you consider that we process your data unlawfully, you have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

8. Automated decisions and profiling

   We do not take decisions about you based solely on automated processing, including profiling. The forms on this site build no customer profile — they reach the office mailbox and are read by a person.

9. Cookies and browser storage

   The site stores in your browser only what it needs to work and what the features you use require:

   • login cookies — when you sign in to the Customer panel;
   • cart and order cookies — when you add a device to the cart;
   • in browser storage: the list of devices to compare, your Enquiry Wizard list and the catalogue view you chose.

   We use no analytics or advertising cookies, so the site does not ask for cookie consent. You can delete or block them in your browser settings — you will then be unable to sign in to the shop, and the cart and the enquiry list will not be remembered. The Paczkomat locker search in the checkout connects directly to the InPost server, which receives your browser's IP address and the phrase you type. Likewise, the “Fetch company details” button by the NIP field connects directly to the register of VAT payers of the Polish Ministry of Finance, which receives your browser’s IP address and the NIP you typed.

Last updated: October 2026