GDPR<\/strong>\u00a0\u2013 Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.<\/li>\n<\/ol>\n\n\n\n2. Data controller and contact details<\/h3>\n\n\n\n
The administrator of your personal data is Bartek Kruk with its registered office at Przytkowice 38,
34-141 Przytkowice, NIP: <\/strong>5512659897, REGON: <\/strong>525131490<\/p>\n\n\n\nYou can contact us:<\/p>\n\n\n\n
\n- e-mail:<\/strong> bartekkruk.kontakt@gmail.com<\/li>\n\n\n\n
- phone:<\/strong> +48 518 297 751<\/li>\n\n\n\n
- correspondence address:<\/strong> Przytkowice 38, 34-141 Przytkowice<\/li>\n<\/ul>\n\n\n\n
3. Purposes, scope and basis of data processing<\/h3>\n\n\n\n| Purpose of processing<\/th> | Data range<\/th> | Legal basis<\/th> | Obligation \/ Voluntary<\/th><\/tr> |
|---|
Posting comments<\/strong><\/td>| name\/nickname, e-mail address, comment content, IP address, browser ID<\/td> | Article 6(1)(f) of the GDPR (legitimate interest \u2013 protecting the website against spam and building a community)<\/td> | Providing data is voluntary, but necessary to post a comment; lack of data will prevent the comment from being added<\/td><\/tr> | Contact form<\/strong><\/td>| name, e-mail address, message content, any attachments<\/td> | Article 6(1)(f) of the GDPR (our legitimate interest in providing a response) or Article 6(1)(b) of the GDPR (actions at the request prior to concluding a contract)<\/td> | Providing data is voluntary, but necessary to receive a response<\/td><\/tr> | Newsletter<\/strong><\/td>| e-mail address, IP address, date\/time of recording<\/td> | Article 6(1)(a) GDPR (your consent)<\/td> | Providing data is voluntary; failure to consent will prevent the newsletter from being sent.<\/td><\/tr> | Fulfilling orders in the store<\/strong><\/td>| name, surname, delivery address, e-mail, telephone number, Tax Identification Number (optional), payment details<\/td> | Article 6(1)(b) of the GDPR (performance of the sales contract); Article 6(1)(c) of the GDPR (legal obligation \u2013 e.g. accounting)<\/td> | Providing data is a contractual requirement; failure to provide data will prevent you from placing an order<\/td><\/tr> | Settlements and accounting services<\/strong><\/td>| invoice data (name, surname\/company, address, tax identification number)<\/td> | Article 6(1)(c) of the GDPR (legal obligation \u2013 Accounting Act)<\/td> | mandatory under tax law<\/td><\/tr> | Statistics analysis and marketing<\/strong><\/td>| IP address, cookie ID, data on activity on the Website<\/td> | Article 6(1)(a) of the GDPR (consent to cookies)<\/td> | voluntary; refusal of consent will prevent personalization and traffic measurement<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n4. Data recipients<\/h3>\n\n\n\nData may be disclosed to the following categories of recipients:<\/p>\n\n\n\n \n- hosting and server provider \u2013 Hostinger;<\/li>\n\n\n\n
- avatar service Gravatar<\/strong> \u2013 Automattic Inc. (USA);<\/li>\n\n\n\n
- analytical tools provider Google Analytics<\/strong> \u2013 Google LLC (USA);<\/li>\n\n\n\n
- newsletter operator \u2013 Mailchimp<\/strong><\/li>\n\n\n\n
- payment operator \u2013 Przelewy24 sp. z o. o.<\/strong><\/li>\n\n\n\n
- courier\/logistics company \u2013 InPost SA<\/strong><\/li>\n\n\n\n
- public authorities to the extent required by law.<\/li>\n<\/ul>\n\n\n\n
We have concluded an appropriate data processing agreement with each data processor or use another instrument that meets the requirements of Article 28 of the GDPR.<\/p>\n\n\n\n 5. Data transfer outside the European Economic Area<\/h3>\n\n\n\nIf the recipient of the data is located outside the EEA (e.g. Automattic \u2013 USA, Google LLC \u2013 USA, Maichimp \u2013 USA), the data transfer takes place only<\/strong> based on:<\/p>\n\n\n\n\n- adequacy decision (EU\u2011US Data Privacy Framework) or<\/strong><\/li>\n\n\n\n
- Standard Contractual Clauses adopted by the European Commission and additional safeguards (Article 46 of the GDPR).<\/li>\n<\/ul>\n\n\n\n
You can obtain a copy of the security measures in place by contacting us.<\/p>\n\n\n\n 6. Data storage period<\/h3>\n\n\n\n| Data category<\/td> | Retention criterion\/period<\/td><\/tr> | | Comments and their metadata<\/td> | indefinitely (until you delete the comment yourself or request its deletion)<\/td><\/tr> | | Data from the contact form<\/td> | 12 months from the last correspondence<\/td><\/tr> | | Newsletter<\/td> | until you withdraw your consent or unsubscribe<\/td><\/tr> | | Sales data (orders)<\/td> | 6 years (tax liability)<\/td><\/tr> | | Accounting\/Invoicing Data<\/td> | 5 calendar years from the end of the tax year<\/td><\/tr> | | Analytical and marketing data<\/td> | up to 26 months or less \u2013 according to the tool settings + until consent is withdrawn<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n7. Cookies and similar technologies<\/h3>\n\n\n\n\n- During your first visit, we show you cookie banner<\/strong>, where you can accept all cookies or manage settings (enable\/disable analytics or marketing).<\/li>\n\n\n\n
- You can also delete or block cookies yourself at any time in your browser settings.<\/li>\n<\/ol>\n\n\n\n
8. Your rights<\/h3>\n\n\n\nYou have the right to:<\/p>\n\n\n\n \n- access<\/strong> to your data (Article 15 of the GDPR),<\/li>\n\n\n\n
- corrections<\/strong> data (Article 16 of the GDPR),<\/li>\n\n\n\n
- removal<\/strong> data (Article 17 of the GDPR),<\/li>\n\n\n\n
- limitations<\/strong> processing (Article 18 of the GDPR),<\/li>\n\n\n\n
- transfer<\/strong> data (Article 20 of the GDPR),<\/li>\n\n\n\n
- opposition<\/strong> (Article 21 of the GDPR) \u2013 including profiling,<\/li>\n\n\n\n
- withdrawal of consent<\/strong> at any time (Article 7(3) of the GDPR),<\/li>\n\n\n\n
- bringing complaints to the President of the Personal Data Protection Office<\/strong> (Article 77 GDPR).<\/li>\n<\/ul>\n\n\n\n
To exercise your rights, please contact us (details in point 2). We will respond to your request no later than 1 month.<\/p>\n\n\n\n 9. Obligation to provide data and consequences of failure to provide data<\/h3>\n\n\n\n\n- Providing data for the purpose of publishing a comment, placing an order or contacting is voluntary but necessary<\/strong> to perform a given function. Failure to provide data will prevent you from posting a comment, completing an order, or responding to a message.<\/li>\n\n\n\n
- Providing data for marketing purposes (newsletter, analytical\/marketing cookies) is voluntary<\/strong>Refusing consent has no negative consequences other than not receiving the newsletter and personalized content.<\/li>\n<\/ul>\n\n\n\n
10. Automated decisions and profiling<\/h3>\n\n\n\nWe do not make automated decisions about you that would produce legal effects or significantly affect you in a similar way (Article 22 of the GDPR). We only use analytical and marketing tools (e.g., Google Analytics) that may collect statistics or show you personalized advertising content \u2013 these activities do not significantly impact your rights or freedoms.<\/p>\n\n\n\n 11. Safety measures<\/h3>\n\n\n\nWe use appropriate technical and organizational measures to ensure data confidentiality, integrity, and accountability, including:<\/p>\n\n\n\n |
| | | | | | |