Privacy Policy

GROUNDS AND PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA

We process your personal data on the following grounds:

• The contract concluded between us and you, for the purpose of fulfilling our obligations under it;
• Your explicit consent;
• Compliance with legal obligations applicable to our activities.

The following paragraphs contain detailed information about the processing of your personal data, depending on the legal basis on which we process it.

FOR THE PERFORMANCE OF A CONTRACT OR IN THE CONTEXT OF PRE-CONTRACTUAL RELATIONS

We process your personal data to fulfil our contractual and pre-contractual obligations and to exercise our rights under the contracts concluded with you.

Purposes of processing:

• verifying your identity;
• managing and fulfilling your requests and orders;
• preparing an offer to conclude a contract;
• issuing and sending invoices and other accounting documents;
• providing customer service and support;
• maintaining correspondence relating to orders, complaints, enquiries and other matters;
• providing notifications about orders, deliveries and services;
• creating and maintaining a user account;
• preventing misuse and conduct in breach of the Terms and Conditions.

Data processed on this basis:

• first and last name;
• delivery and contact address;
• telephone number;
• email address;
• information about orders placed;
• correspondence relating to customer service, enquiries and complaints;
• information about payments made through payment service providers such as Stripe;
• customer number or other identifier;
• IP address when visiting the website;
• demographic data.

Providing the above data is necessary to conclude and perform the contract. Without it, we would be unable to fulfil our obligations to you.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

For the purpose of fulfilling orders and providing quality service, we may disclose personal data to the following categories of recipients:

• courier and postal service providers;
• payment service providers;
• providers responsible for maintaining the software, hardware and information systems we use;
• accounting and legal advisers;
• other subcontractors, where necessary to provide the service.

All data recipients are required to comply with the applicable personal data protection legislation.

RETENTION PERIOD

Data processed on a contractual basis is retained for 5 years after the contractual relationship ends, unless a statutory provision requires a longer period.

TO COMPLY WITH LEGAL OBLIGATIONS

In certain cases, we are required to process personal data in order to comply with legal obligations, including:

• obligations under the Consumer Protection Act;
• obligations under the Accountancy Act;
• obligations under the Tax and Social Security Procedure Code;
• providing information to competent government authorities;
• complying with court orders and legal requirements.

RETENTION PERIOD

Personal data is retained for the periods prescribed by applicable law.

For example:

• accounting documents – 10 years;
• documents relating to the defence of legal claims – up to 5 years or as required by applicable law.

WITH YOUR CONSENT

We process your personal data on this basis only after obtaining your explicit, voluntary and informed consent.

Where you have given your consent, we may use your data for:

• sending marketing communications;
• providing personalised offers;
• analysing user behaviour to improve the services offered;
• remarketing and advertising through platforms such as Google and Meta (Facebook and Instagram).

WITHDRAWAL OF CONSENT

You may withdraw your consent at any time by contacting us or using the settings available in your account, where applicable.

Withdrawing your consent does not affect the lawfulness of processing carried out before its withdrawal.

DATA PROCESSED ON THIS BASIS

Depending on the consent given, this may include:

• name;
• email address;
• telephone number;
• address;
• data about interests and preferences;
• demographic data.

RETENTION PERIOD

Data is retained until you withdraw your consent or for up to 10 years from the date of collection.

PROCESSING OF ANONYMISED DATA

We may use anonymised data for statistical analysis and to improve our services. Once anonymised, the data cannot be linked to a specific individual.

HOW WE PROTECT YOUR PERSONAL DATA

We implement appropriate technical and organisational measures to protect personal data, including:

• access controls;
• encryption of communications;
• protection of information systems;
• restricted access to personal data;
• periodic review of security measures.

USER RIGHTS

Every user has the right to:

• access their personal data;
• correct inaccurate data;
• erase personal data;
• restrict processing;
• data portability;
• object to processing;
• lodge a complaint with the Commission for Personal Data Protection;
• seek judicial protection if their rights are violated.

COMPLAINT TO A SUPERVISORY AUTHORITY

Every user has the right to lodge a complaint with the Commission for Personal Data Protection or the competent court if they believe that their personal data is being processed unlawfully.

MAINTENANCE OF A RECORD

We maintain a record of personal data processing activities in accordance with the requirements of Regulation (EU) 2016/679 (GDPR), which contains information about:

• the purposes of processing;
• the categories of personal data;
• the categories of recipients;
• retention periods;
• the security measures implemented.