1. General provisions
- The controller of personal data collected via the online shop is [Company name], with its registered office at: [company address], VAT No.: [VAT No.], REGON No.: [REGON No.]. Contact: [email address].
- Personal data is processed in accordance with the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016).
2. Purposes and legal basis for data processing
- Your personal data may be processed for the following purposes:
- Order fulfilment – the data is necessary for the conclusion and performance of a contract (Article 6(1)(b) of the GDPR).
- Maintaining a customer account – to provide access to order history and facilitate purchases.
- Sending the newsletter – only with the user’s consent (Article 6(1)(a) of the GDPR).
- Compliance with legal obligations – e.g. issuing invoices (Article 6(1)(c) of the GDPR).
- Marketing of our own products and services – based on the controller’s legitimate interest (Article 6(1)(f) of the GDPR).
3. Types of data collected by the shop
- First name and surname
- Email address
- Telephone number
- Delivery address
- Invoice details (if applicable)
- IP address and technical data (cookies)
4. Sharing of data
Data may be shared with entities processing data on our behalf, i.e.:
- courier and postal companies,
- online payment providers (e.g. PayU, Przelewy24),
- entities operating the shop’s IT systems,
- an accounting firm,
- the newsletter platform (if the user has subscribed to the newsletter).
Data is not transferred outside the European Economic Area (EEA), unless this is necessary due to the use of global tools (e.g. Mailchimp, Google Analytics), whilst maintaining appropriate safeguards.
5. Your rights
You have the right to:
- access your data,
- correct it,
- delete it (‘right to be forgotten’),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (if processing is based on consent),
- to lodge a complaint with the President of the Personal Data Protection Office.
6. Data retention period
Your data will be retained:
- for the duration of the contract and accounting obligations (minimum 5 years),
- until consent is withdrawn (e.g. newsletter),
- until you object – if the data is processed on the basis of a legitimate interest.
7. Cookies
The shop uses cookies for the following purposes:
- ensure the website functions correctly,
- remembering user preferences,
- analyse traffic (Google Analytics),
- carry out remarketing activities (Google Ads, Facebook Ads).
By using our website, you consent to their use in accordance with your browser settings. You can change your cookie settings at any time.
8. Changes to the Privacy Policy
We reserve the right to make changes to this policy. Changes will be published on the shop’s website. The current version is effective from the date of publication.