2. Scope of Processed Data
The Controller processes Customers' personal data including:

first and last name,
email address,
phone number,
delivery and billing address,
invoice data,
IP address,
data contained in correspondence,
marketing data (if consent has been given).

3. Purposes and Legal Bases for Data Processing
Personal data is processed for the purpose of:

fulfilling sales contracts – Article 6(1)(b) GDPR,
fulfilling accounting and tax obligations – Article 6(1)(c) GDPR,
handling complaints and returns – Article 6(1)(b) and (c) GDPR,
conducting correspondence – Article 6(1)(f) GDPR,
marketing and newsletter – Article 6(1)(a) GDPR (based on consent),
analytics and statistics – Article 6(1)(a) or (f) GDPR (depending on data type and consents given).

4. Data Recipients
Personal data may be transferred to:

courier and postal companies (InPost, Poczta Polska, DHL, GLS),
payment operators (Przelewy24.pl),
accounting firms,
IT and hosting service providers,
analytical and marketing tool providers.
Detailed information regarding the use of cookies and the rules for giving and withdrawing consent can be found in the Cookie Policy.

​

5. Provision of Data
Provision of personal data is voluntary, but necessary to conclude a sales contract and fulfil an order.

Failure to provide data marked as mandatory makes it impossible to fulfil the order and provide services electronically.

​

6. Automated Decision-Making and Profiling
Personal data may be processed in an automated manner, including in the form of profiling, solely for marketing purposes, provided the Customer has given separate consent.

Profiling does not produce legal effects or significantly affect the Customer's situation.

​

7. Data Transfer Outside the EU
Data may be transferred outside the EU only to entities ensuring an adequate level of data protection in accordance with GDPR (e.g., standard contractual clauses).

​

8. Data Retention Period
Data is stored:

for the duration of the contract and after its termination in accordance with legal provisions,
marketing data – until consent is withdrawn,
accounting data – in accordance with the Accounting Act.

9. User Rights
Each Customer has the right to:

access their data,
rectify their data,
delete their data ("right to be forgotten"),
restrict processing,
data portability,
withdraw consent at any time,
lodge a complaint with the President of the Personal Data Protection Office (UODO).