§ 1. Definitions

1. Service Provider — Grupa Lewandowski spółka z ograniczoną odpowiedzialnością, with its registered office in Olsztyn, ul. Stanisława Murzynowskiego 4 lok. 10, 10-684 Olsztyn, Poland, NIP 7393937858, REGON 385615878, KRS 0000830531.
2. Program / Service — the AleSprzedawca web application available at https://alesprzedawca.pl, enabling the management of sales on the Allegro platform.
3. User — an entrepreneur (a natural person conducting business activity, a legal person or an organisational unit without legal personality) who has concluded a contract for the use of the Program.
4. Account — the User's individual, password-protected panel in the Program.
5. Trial period (Trial) — a free period for testing the Program lasting 30 days from Account activation.
6. Subscription — paid access to the Program in the selected pricing plan, billed in monthly periods.
7. Price list — a list of plans and fees available in the Service.
8. Contract — the contract for the electronic provision of services concluded between the Service Provider and the User on the terms of these Terms of Service.

§ 2. General provisions

1. These Terms of Service set out the rules for using the Program, the rights and obligations of the Parties, and the terms of payment.
2. The Program is intended exclusively for entrepreneurs (B2B). It is not directed at consumers; consumer protection provisions do not apply.
3. Use of the Program is conditional on acceptance of these Terms of Service and the Privacy Policy.
4. The Service Provider provides services electronically in accordance with the Polish Act of 18 July 2002 on the provision of electronic services.

§ 3. Technical requirements

1. Using the Program requires: a device with Internet access, an up-to-date web browser supporting JavaScript and cookies, and an active e-mail address.
2. Use of the integration functions requires the User to hold an active Allegro account and, respectively, accounts with courier operators and access to the National e-Invoicing System (KSeF).

§ 4. Conclusion of the contract and registration

1. The Contract is concluded by registering an Account: providing the required data, setting a password, and confirming the e-mail address via an activation link.
2. The Account is created only after the e-mail address is confirmed. Incomplete registrations are automatically deleted.
3. The User undertakes to provide true, current and complete data and declares that they are authorised to represent the entrepreneur on whose behalf the Account is created.
4. Sharing login credentials with unauthorised persons and using the Program in a manner that breaches the law or third-party rights is prohibited.

§ 5. Trial period and subscription

1. Upon Account activation, the User receives access to a free Trial period lasting 30 days.
2. After the Trial period ends, further use of the Program requires purchasing a Subscription in accordance with the Price list. Failure to pay the Subscription results in restriction or suspension of access to the Account.
3. The Subscription is billed in advance for the selected period. Fees are net prices; VAT is added to net prices in accordance with applicable law.
4. The Service Provider issues VAT invoices electronically, to which the User consents.
5. Failure to pay on time entitles the Service Provider to suspend the service after prior notice and, after 14 days, to terminate the Contract.
6. The Service Provider may change the Price list; the change does not apply to periods already paid for and takes effect under the rules of § 11.

§ 6. Scope of services and integrations

1. The Program enables, among others: synchronisation of offers and orders from Allegro, handling correspondence with buyers, issuing invoices and sending them to KSeF, generating shipping labels and ordering couriers, handling returns, and reporting (scope depending on the plan).
2. The integration functions require authorisation of the Program in external services (Allegro, couriers, KSeF) by the User. The User is responsible for holding and for the correctness of their own accounts, tokens, permissions and consents in those services.
3. The Service Provider is not a party to the User's contracts with Allegro, courier operators or public authorities and is not liable for their operation, availability, API changes, or fees they charge (e.g. label costs, commissions).
4. Some operations entail costs on the part of third parties (e.g. creating a shipping label). The User accepts that such costs are charged to their account with the given operator.

§ 7. Entrustment of personal data processing

1. To the extent that the Program processes personal data of which the User is the controller (in particular the data of the User's buyers and contractors), the Parties conclude a data processing agreement, the content of which constitutes Appendix No. 1 to these Terms of Service.
2. The Service Provider processes the entrusted data solely on the User's documented instructions, for the purpose and to the extent necessary to provide the service, and applies appropriate technical and organisational measures.
3. The Service Provider may use further processors (sub-processors) indicated in the Privacy Policy; the User gives general consent thereto.

§ 8. User obligations and liability

1. The User undertakes to use the Program in accordance with the law, these Terms of Service and its intended purpose, and not to take actions disrupting its operation.
2. The User is responsible for the content of data entered into the Program, for the correctness of issued documents (invoices, corrections), and for fulfilling their own tax obligations and obligations towards buyers.
3. The User secures the Account access credentials and is liable for the actions of persons to whom they have been disclosed.

§ 9. Service Provider's liability

1. The Service Provider makes efforts to ensure that the Program operates correctly and continuously, but does not guarantee uninterrupted availability. Technical breaks are permissible and, where possible, announced in advance.
2. The Service Provider is not liable for the consequences of the operation or failure of third-party services (Allegro, KSeF, couriers, infrastructure providers), changes to their interfaces, or data loss caused by the User's actions.
3. To the extent permitted by law (a B2B contract), the Service Provider's liability is limited to the amount of subscription fees paid by the User in the 12 months preceding the event, excluding lost profits. The limitation does not apply to damage caused intentionally.
4. The Service Provider performs regular, encrypted backups, which does not relieve the User of the duty to take care of their own data.

§ 10. Complaints

1. Complaints regarding the operation of the Program should be submitted to kontakt@alesprzedawca.pl, stating a description of the problem, the Account login and the date of occurrence.
2. The Service Provider handles complaints within 7 days and informs of the outcome electronically.

§ 11. Duration, termination of the contract and changes to the Terms

1. The Contract is concluded for an indefinite period (billed in subscription periods) and may be terminated by the User at any time by cancelling the Account; fees for a commenced subscription period are non-refundable, unless mandatory provisions of law state otherwise.
2. The Service Provider may terminate the Contract or suspend the Account in the event of a material breach of these Terms by the User or non-payment, after prior notice.
3. After termination of the Contract, Account data and entrusted data are deleted or returned in accordance with the data processing agreement and the Privacy Policy, observing the periods resulting from legal provisions.
4. The Service Provider may amend these Terms for important reasons (changes in law, Program functions, terms of cooperation with third parties). It informs of changes 14 days in advance. Failure to terminate the Contract within that period constitutes acceptance of the changes.

§ 12. Final provisions

1. The governing law is Polish law.
2. Any disputes are resolved by the court having local jurisdiction over the Service Provider's registered office.
3. In matters not regulated herein, the provisions of the Polish Civil Code, the Act on the provision of electronic services, and the GDPR apply.
4. The rules for processing personal data are set out in the Privacy Policy.

Appendix No. 1 to the Terms of Service — Personal Data Processing Agreement

Effective date: 23.06.2026

§ 1. Parties and conclusion of the agreement

1. This Personal Data Processing Agreement (hereinafter: the „Processing Agreement") forms an integral part of the Terms of Service of the AleSprzedawca service and is concluded between:
   • the User of the Program, being the Controller within the meaning of the GDPR (hereinafter: the „Controller"), and
   • Grupa Lewandowski spółka z ograniczoną odpowiedzialnością, with its registered office in Olsztyn, ul. Stanisława Murzynowskiego 4 lok. 10, 10-684 Olsztyn, Poland, NIP 7393937858, REGON 385615878, KRS 0000830531 (hereinafter: the „Processor").
2. The Processing Agreement is concluded upon acceptance of the Terms of Service and the start of use of the Program, for the duration of the main Contract (provision of services).
3. The Processing Agreement fulfils the requirement of Art. 28 GDPR (Regulation (EU) 2016/679).

§ 2. Subject matter, nature and purpose of processing

1. The Controller entrusts the Processor with the processing of personal data solely to the extent and for the purpose necessary to provide the services specified in the Terms of Service, i.e. making available and operating the Program for managing sales on Allegro.
2. The nature of processing covers operations performed in IT systems: collecting, recording, storing, organising, modifying, retrieving, viewing, using within the Program's functions, transmitting to integrated services, and erasing.
3. Purpose of processing: performing the Program's functions, in particular synchronisation of Allegro orders, handling correspondence with buyers, issuing and sending invoices (including to KSeF), generating shipping labels and handling shipments, handling returns, and reporting.

§ 3. Type of data and categories of data subjects

1. Categories of persons: the Controller's clients/buyers, contractors, and other persons whose data the Controller enters into the Program or which are synchronised from their Allegro account.
2. Type of personal data:
   • identification data (name, optionally company name);
   • contact data (e-mail address, phone number);
   • address data (delivery address, invoicing address, pickup point address);
   • accounting document data (tax ID, company details);
   • order and transaction data (order numbers, content of correspondence with the buyer).
3. The entrustment does not cover the special categories of data referred to in Art. 9 GDPR. The Controller undertakes not to enter such data into the Program.

§ 4. Processor's obligations

The Processor undertakes to:

1. process the entrusted data solely on the Controller's documented instructions — actions performed by the Controller within the Program's functions are also deemed such instructions; if the obligation to process arises from EU or Member State law, the Processor informs the Controller thereof before processing, unless the law prohibits it;
2. ensure that persons authorised to process the data have committed to confidentiality or are under a statutory obligation of confidentiality;
3. apply technical and organisational measures ensuring data security appropriate to the risk (Art. 32 GDPR), in particular: encryption of connections (TLS), access control, password encryption, a firewall, encrypted backups, and event logging;
4. assist the Controller in handling data subjects' requests (Art. 12–22 GDPR), as far as possible through appropriate technical means;
5. assist the Controller in fulfilling the obligations under Art. 32–36 GDPR (security, breach notification, impact assessment), taking into account the nature of processing and the information available to it;
6. notify the Controller of a personal data breach without undue delay, no later than within 48 hours of becoming aware of it, together with the available information necessary for the Controller to fulfil its obligations;
7. make available to the Controller the information necessary to demonstrate compliance with the obligations set out in Art. 28 GDPR.

§ 5. Further entrustment (sub-processors)

1. The Controller gives general consent to the Processor's use of further processors (sub-processors) to the extent necessary to provide the service.
2. The current categories of sub-processors are indicated in the Privacy Policy and include in particular: the server infrastructure provider (hosting), the backup service provider, the e-mail service provider, and operators of integrated services in respect of the functions used by the Controller (incl. Allegro, courier operators, the National e-Invoicing System).
3. The Processor imposes on each sub-processor — by means of a contract — data protection obligations corresponding to those under this Agreement. The Processor remains liable to the Controller for a sub-processor's failure to fulfil its data protection obligations.
4. The Processor informs the Controller of any intended change of sub-processors (addition or replacement), giving the Controller the opportunity to object. Raising a justified objection that cannot be resolved may result in termination of the main Contract.

§ 6. Transfers of data outside the EEA

The Processor does not transfer the entrusted data to a third country (outside the EEA) or to an international organisation without ensuring appropriate safeguards required by the GDPR (e.g. a European Commission adequacy decision or standard contractual clauses), unless such an obligation is imposed by law — in which case the Processor informs the Controller thereof before processing, unless the law prohibits it.

§ 7. Right of inspection (audit)

1. The Controller has the right to inspect the Processor's compliance with the terms of the Processing Agreement, including by requesting written explanations and conducting an audit after prior arrangement of a date (at least 14 days in advance), during working hours and in a manner that does not disrupt the Processor's ongoing operations or compromise the security and confidentiality of other clients' data.
2. The Processor may also document compliance by providing current certificates, reports, or a description of the security measures applied.

§ 8. Deletion or return of data

After the end of the provision of services (termination of the main Contract), the Processor, at the Controller's choice, deletes or returns all entrusted data and deletes existing copies thereof, unless EU or Member State law requires their further storage. Deletion takes place without undue delay, no later than within 30 days of the end of the Contract, subject to backups deleted within the standard overwriting cycle.

§ 9. Liability

1. The Processor is liable for damage caused by processing only to the extent that it has not fulfilled the obligations imposed by the GDPR directly on processors or has acted outside or contrary to the Controller's lawful instructions.
2. The Controller declares that it is the controller of the entrusted data and has a legal basis to process them and to entrust them to the Processor. The Controller is liable for the legality of obtaining and for the content of the entrusted data.
3. The liability limitations set out in the Terms of Service apply accordingly, to the extent permitted by the GDPR.

§ 10. Final provisions

1. In matters not regulated herein, the provisions of the Terms of Service, the GDPR, and Polish law apply.
2. In the event of a conflict between this Processing Agreement and the Terms of Service, this Processing Agreement prevails in matters of personal data protection.
3. The Processing Agreement binds the Parties for the duration of the main Contract and expires upon fulfilment of the obligations under § 8.