GERMANIA MINT
PRIVACY POLICY & RODO

for Germania Mint websites

Effective date: June 22nd 2026

General information

This Privacy Policy, GDPR and Cookies Policy sets out the rules for the processing of personal data and the use of cookies and similar technologies within websites operated under the Germania Mint brand, in particular:

• www.germaniamint.com;
• b2b.germaniamint.com;
• other websites, forms, platforms or subpages that refer to this Policy.

This Policy is for informational purposes and has been prepared to provide users of the websites with transparent information about who processes personal data, for what purpose, on what legal basis and for how long, as well as what rights are granted to data subjects.

All activities of Germania Mint Invest Sp. z o.o. are subject to data protection laws and the General Data Protection Regulation: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the GDPR, as well as the Act of 10 May 2018 on the Protection of Personal Data,

• the Act of 18 July 2002 on the Provision of Electronic Services,
• the Act of 16 July 2004 — Telecommunications Law.

Data controller

The controller of personal data is Germania Mint Invest Sp. z o.o., with its registered office in Jelenia Góra, Al. Wojska Polskiego 21, 58-500 Jelenia Góra, KRS: 0000486736, NIP: 6112732869.

For matters concerning personal data, the controller may be contacted:

e-mail: office@germaniamint.com;
e-mail: info@germaniamint.com;
by post: Al. Wojska Polskiego 21, 58-500 Jelenia Góra, Poland.

If the controller appoints a Data Protection Officer, their contact details will be provided in this Policy or in a separate information clause.

Scope of personal data

The controller may process, in particular, the following categories of data:

• identification data: first name, surname, company name, tax identification number, KRS number or other registration number;
• contact details: e-mail address, telephone number, correspondence address, delivery address;
• user account data: login, customer ID, login history, account settings;
• transaction data: information about orders, payments, invoices, complaints, returns, deliveries and correspondence;
• communication data: content of messages sent via a form, e-mail, telephone or other contact channels;
• technical data: IP address, cookie identifiers, device identifiers, browser data, operating system data, server logs, website activity data;
• marketing data: consents, communication preferences, newsletter mailing history, reactions to marketing communications;
• other data voluntarily provided by the website user or customer.

Use of the website’s functionalities constitutes acceptance of the website privacy policy.

Purposes and legal bases of processing

Personal data is processed for the following purposes:

Website operation and security — technical data, including IP address, server logs, browser information and website activity data, are processed to ensure the proper functioning of the website, maintain security, prevent abuse, detect errors and protect IT systems.

Account registration and customer service — data provided during account registration, login, order placement or use of website functionalities is processed to create and maintain an account, provide customer service, process orders, contact users regarding services and take steps prior to entering into a contract.

Processing orders, payments, deliveries and complaints — customer data is processed to accept and fulfil orders, issue sales documents, process payments, deliver products, handle complaints, returns and perform obligations related to after-sales service.

Contact via form, e-mail or telephone — data provided in a contact message is processed to respond, conduct correspondence, prepare an offer or handle a request.

Newsletter and marketing communication — data, in particular the e-mail address and information about granted consents, is processed for the purpose of sending newsletters, commercial information, promotional content or direct marketing — only to the extent that the person has given appropriate consent or where another legal basis permits such contact. Consent to receive the newsletter or marketing communication may be withdrawn at any time, in particular by clicking the unsubscribe link in an e-mail or by contacting the controller. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Analytics, statistics and website development — data concerning use of the website may be processed to compile statistics, analyse traffic, optimise content, improve functionality and develop the website. If analytics are based on cookies or similar technologies other than essential ones, their use takes place after obtaining the user’s consent.

Online marketing and content personalisation — the controller may use advertising tools, remarketing tools or tracking pixels if they are implemented on the website. Such technologies may enable advertisements to be displayed based on the user’s activity on the website or the effectiveness of campaigns to be measured. The use of marketing cookies, pixels, tags or similar technologies takes place after obtaining the user’s consent.

Establishment, pursuit and defence of claims — data may be processed to establish, pursue or defend claims, conduct complaint, debt collection, court or out-of-court proceedings.

Legal obligations — data may be processed to fulfil obligations arising from legal provisions, in particular tax, accounting, consumer protection and anti-money laundering obligations — if applicable — as well as obligations related to the protection of personal data.

Voluntary provision of data

Providing personal data is voluntary, but in some cases necessary to use specific functionalities, enter into or perform a contract, place an order, receive a response to an inquiry, receive a newsletter or have a complaint processed. Failure to provide data required to perform a given service may prevent its performance.

A person subscribing to the newsletter available at www.germaniamint.com declares that they are the owner of the e-mail address provided or are authorised to use it, and that they consent to receiving automated e-mail messages containing content related to the business profile of Germania Mint. Consent to receive the newsletter may be withdrawn at any time and without giving a reason.

Data recipients

Personal data may be transferred to the following categories of recipients:

Germania Mint Sp. z o.o., Germania Mint Packaging Sp. z o.o., Germania Mint Sotre Sp. z o.o., to the extent that these companies, on the basis of agreements concluded with Germania Mint Invest Sp. z o.o., perform activities related to the provision of services required by Germania Mint Invest Sp. z o.o.;
providers of IT services, hosting, e-mail services, CRM systems, e-commerce systems and analytical tools;
payment operators, banks and financial service providers;
courier, postal and logistics companies;
accounting offices, law firms, tax advisers, auditors and insurers;
providers of marketing, newsletter, advertising and analytical tools — if used;
public authorities, courts, prosecutors’ offices, tax authorities or other authorised entities — if the obligation to transfer data results from legal provisions.

Entities processing data on behalf of the controller act on the basis of appropriate agreements and are obliged to apply personal data protection measures.

Transfer of data outside the European Economic Area

As a rule, the controller aims to process data within the European Economic Area. If, in connection with the use of specific tools, in particular IT, analytical, marketing or cloud tools, personal data is transferred outside the European Economic Area, such transfer will take place only using mechanisms provided for in the GDPR, in particular an adequacy decision, standard contractual clauses or other appropriate safeguards. Detailed information about any possible data transfer may be provided in the description of a specific cookie tool or in the consent management panel.

Data retention period

Personal data is stored for the period necessary to fulfil the purpose for which it was collected, and thereafter for the period required by law or necessary to secure claims.

In particular:

customer account data — for the duration of the account’s existence, and after its deletion for the period required by law or necessary to pursue or defend claims;
data concerning orders, invoices and settlements — for the period required by tax and accounting regulations;
correspondence data — for the time needed to handle the matter, and thereafter for the limitation period of any possible claims;
data processed on the basis of consent — until consent is withdrawn, unless there is another legal basis for further processing;
data processed for the controller’s own marketing purposes on the basis of legitimate interest — until an effective objection is raised;
technical data and server logs — for the period necessary to ensure security and proper operation of the website, no longer than 36 months, unless longer storage is necessary due to a security incident, claims or a legal obligation;
data related to cookie consents — for the period necessary to demonstrate that consent was granted or withdrawn, no longer than 36 months, unless regulations or claims require a longer period.

Rights of data subjects

The data subject has the right to:

• access their data;
• receive a copy of their data;
• rectify their data;
• erase their data;
• restrict processing;
• data portability;
• object to data processing;
• withdraw consent at any time, if processing is based on consent;
• lodge a complaint with the supervisory authority competent for personal data protection matters.

Requests concerning rights may be sent to the e-mail address: office@germanimint.com or in writing to the controller’s address. The controller may request additional information necessary to confirm the identity of the person submitting the request if this is necessary to protect the data.

Right to object

The data subject has the right to object to the processing of personal data where the legal basis for processing is the legitimate interest of the controller. If data is processed for direct marketing purposes, an objection may be raised at any time. After an objection is raised, the data will no longer be processed for that purpose.

Deletion of personal data at the request of the person providing the data results in the deletion of the account, and if the person wishes to make another purchase, re-registration is required.

Automated decision-making

The controller does not make decisions concerning website users based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them. If such mechanisms are implemented in the future, the controller will provide separate information in accordance with the GDPR.

Data security

The controller applies technical and organisational measures appropriate to the risks associated with the processing of personal data, in particular IT system safeguards, access control, transmission encryption, backups, authorisation procedures and measures designed to ensure the confidentiality, integrity, availability and resilience of systems. Data transmission through online forms takes place using an encrypted connection, provided that the given functionality is available on the website.

Cookies and similar technologies

Germania Mint websites use cookies and similar technologies, such as pixels, tags, device identifiers, local storage or session storage. Cookies are small files or pieces of information stored on the user’s device or read from that device when using the website. They may be used to ensure the operation of the website, maintain sessions, remember settings, compile statistics, conduct analytics, personalise content or carry out marketing activities.

Cookie categories

The controller may use the following categories of cookies and similar technologies:

Essential cookies — these are necessary for the proper operation of the website, ensuring security, handling sessions, remembering privacy settings, operating the shopping cart, forms or other basic functions. These cookies may be used without the user’s consent because they are necessary to provide the service requested by the user or for the proper operation of the website.

Functional cookies — these enable additional user settings to be remembered, such as language, region, display preferences or other elements that make the website easier to use. The use of these cookies takes place after obtaining the user’s consent, unless a specific functionality is necessary to provide a service requested by the user.

Analytical cookies — these help measure the number of visits, traffic sources, popularity of subpages and the manner in which the website is used. They allow the controller to improve the operation of the website and adapt content to users’ needs. The use of analytical cookies other than essential ones takes place after obtaining the user’s consent.

Marketing cookies — these are used to conduct advertising and remarketing activities, measure campaign effectiveness or adapt advertising content to the user’s activity. The use of marketing cookies, pixels and similar technologies takes place after obtaining the user’s consent.

Managing cookie consents

During the first visit to the website, the user receives information about the cookies used and the option to make a choice.

The user should have the option to:

• accept all optional cookies;
• reject all optional cookies;
• manage consents independently by category;
• withdraw or change consent at any time.

Lack of consent to optional cookies should not restrict access to the website, except for functions that technically require a given technology.

Cookie consents may be changed in the cookie settings panel available on the website: [link / “Cookie settings”].

The user may also change cookie settings in their web browser, in particular block cookies, delete them or receive information when they are stored. Restricting cookies may affect the operation of some website functions.

Changes to the Policy

The controller may amend the Policy, in particular in the event of changes in legal provisions, organisational changes within the Germania Mint group, company mergers, technological changes, changes in the cookies used or changes in website functionalities.

The current version of the Policy is available on the website. If a change is material for data subjects, the controller will inform them in an appropriate manner, for example through a notice on the website or by e-mail.

Registration and contact details

Germania Mint Invest Sp. z o.o.
Al. Wojska Polskiego 21
58-500 Jelenia Góra
Poland
KRS: 0000486736
NIP: 6112732869
Share capital: PLN 5,000.00
E-mail: info@germaniamint.com
E-mail for personal data matters: office@germaniamint.com

Trademark law

Please note that the designations, trademarks, logotypes and brand names mentioned and presented on the website are the property of Germania Mint Invest Sp. z o.o.

All materials, i.e. content, graphics, videos and photographs placed on the website, are the property of Germania Mint Invest Sp. z o.o. and may not be used without consent. The only exception is materials available in the “DOWNLOAD” section, which may be used exclusively for marketing activities and sales of original Germania Mint Invest products.