PRIVACY POLICY

Last updated: 11 June 2026

  1. General information

This Privacy Policy explains how personal data of users of the website available at globalauthority.eu is processed, in particular data of users who use the online store, purchase digital products, contact the controller or use forms available on the website.

We respect users’ privacy and process personal data in accordance with applicable law, in particular Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the GDPR.

  1. Data controller

The controller of your personal data is:

COMMFORT SAFETY spółka z ograniczoną odpowiedzialnością
ul. Puławska 39/40
02-508 Warsaw
Poland
Tax ID: 5223284333
KRS: 0001080605
REGON: 527434176

Contact regarding personal data protection: media@commfort.pl

  1. Categories of personal data processed

The controller may process the following categories of personal data:

  • first and last name,

  • email address,

  • phone number, if provided,

  • billing details,

  • order details,

  • IP address,

  • technical data concerning the device, browser and operating system,

  • data concerning activity on the website,

  • data included in correspondence sent to the controller.

Providing personal data is voluntary, but in some cases it is necessary to place an order, process payment, deliver a digital product, issue an accounting document or respond to a message.

  1. Purposes and legal bases of processing

Personal data is processed for the following purposes:

a) Processing orders and delivering digital products

Data is processed to handle the purchase of an ebook or another digital product, accept payment, provide access to the product and manage the order.

Legal basis: Article 6(1)(b) GDPR, meaning performance of a contract or taking steps prior to entering into a contract.

b) Payment processing

Data may be processed to enable online payment through external payment providers.

Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR, meaning performance of a contract and the controller’s legitimate interest in ensuring proper payment handling.

c) Issuing accounting documents and fulfilling tax obligations

Data may be processed to issue invoices, maintain accounting records and comply with tax and accounting obligations.

Legal basis: Article 6(1)(c) GDPR, meaning compliance with a legal obligation.

d) Handling contact and correspondence

Data is processed to respond to messages sent through a contact form, email or other communication channels.

Legal basis: Article 6(1)(f) GDPR, meaning the controller’s legitimate interest in communicating with users.

e) Establishing, pursuing or defending claims

Data may be processed to establish, pursue or defend against possible claims.

Legal basis: Article 6(1)(f) GDPR, meaning the controller’s legitimate interest.

f) Analytics, statistics and website improvement

Technical and analytical data may be processed to analyse how the website is used, improve its performance, security and content effectiveness.

Legal basis: Article 6(1)(f) GDPR or Article 6(1)(a) GDPR, if user consent is required.

g) Own marketing

Data may be processed to present marketing content, measure the effectiveness of advertising activities or target advertisements to users, provided that the user has given the appropriate consent or where permitted by applicable law.

Legal basis: Article 6(1)(a) GDPR or Article 6(1)(f) GDPR.

  1. Data recipients

Personal data may be transferred to entities supporting the controller in operating the website, online store and order handling, in particular:

  • hosting and technical service providers,

  • providers of the store system and plugins used on the website,

  • payment operators,

  • email service providers,

  • analytical and advertising tool providers,

  • accounting service providers,

  • law firms or advisors,

  • public authorities, where required by law.

Data is transferred only to the extent necessary to achieve the specific purpose.

  1. Transfers of data outside the European Economic Area

Due to the use of technological, analytical, advertising or payment tools, personal data may be transferred outside the European Economic Area, in particular to the United States.

In such cases, the controller applies appropriate safeguards required by the GDPR, in particular standard contractual clauses, adequacy decisions or other mechanisms provided by law.

  1. Data retention period

Personal data is stored for the period necessary to achieve the purpose for which it was collected.

In particular:

  • data related to order processing is stored for the duration of the contract and the limitation period for possible claims,

  • accounting and tax data is stored for the period required by law,

  • correspondence data is stored for the time necessary to handle the matter and secure possible claims,

  • data processed on the basis of consent is stored until the consent is withdrawn,

  • analytical data and cookies are stored in accordance with the settings of a given tool or until deleted by the user.

  1. User rights

The data subject has the right to:

  • access their personal data,

  • receive a copy of their data,

  • rectify their data,

  • erase their data,

  • restrict processing,

  • data portability,

  • object to processing,

  • withdraw consent at any time if data is processed on the basis of consent,

  • lodge a complaint with the President of the Personal Data Protection Office in Poland.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

  1. Cookies

The website uses cookies and similar technologies.

Cookies may be used to:

  • ensure proper operation of the website and store,

  • remember the contents of the cart,

  • support the purchase process,

  • ensure security,

  • conduct statistics and analytics,

  • measure the effectiveness of advertising activities,

  • adjust content and advertisements to the user.

The user may manage cookie settings in their browser. Restricting the use of certain cookies may affect the operation of the website, in particular the cart, payment and checkout process.

  1. Analytical and marketing tools

The website may use analytical and marketing tools, such as Meta Pixel, Google Analytics, Google Ads or similar solutions.

These tools may collect information about user activity on the website, such as visited pages, clicks, traffic source, device used, browser and approximate location.

This data may be used to analyse the effectiveness of the website, conduct advertising campaigns and create advertising audience groups.

  1. Online payments

Payments for products available on the website are handled by external payment operators. The controller does not store full payment card details.

Data necessary to process payment is processed by the payment operator in accordance with its own security rules and privacy policy.

  1. Digital products

When purchasing a digital product, such as a PDF ebook, the user’s data is processed to fulfil the order, provide access to the product, handle payment and process any possible complaints.

The digital product may be delivered through a download link, email message or another technical solution available on the website.

  1. Voluntary provision of data

Providing personal data is voluntary, but necessary to place an order, make payment, receive a digital product or use selected website functions.

Failure to provide required data may prevent order fulfilment or communication with the controller.

  1. Automated decision-making

User data may be used within advertising and analytical tools to create audience profiles and adjust marketing content.

We do not make decisions concerning users that produce legal effects or similarly significantly affect them solely by automated means.

  1. Data security

The controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or disclosure.

Access to data is granted only to persons and entities that need it to perform specific tasks.

  1. Changes to this Privacy Policy

The controller may update this Privacy Policy, in particular in the event of changes in law, technologies used on the website, the operation of the store or the scope of data processing.

The current version of the Privacy Policy is always available on the website.