Privacy Policy

1. Data Controller

The controller of your personal data is [Company legal name], [Registered address], [NIP/VAT number], [REGON/KRS] (the "Controller", "we"). For any matter concerning your personal data, contact us at [contact email] or via [Telegram].

This Privacy Policy explains how we process personal data in accordance with Regulation (EU) 2016/679 (GDPR / "RODO") and applicable Polish law.

2. Personal Data We Collect

• Identification and contact data: first and last name, delivery address, telephone number, email address, and (where used) your Telegram username;
• Order data: products ordered, order value, payment method, correspondence and delivery details;
• Technical data: data strictly necessary to operate the website (see our Cookie Policy).

3. Purposes and Legal Bases

• To conclude and perform the sales contract (processing your order, delivery, payment, contact) — Art. 6(1)(b) GDPR (performance of a contract);
• To comply with legal obligations, such as accounting, tax and complaint-handling duties — Art. 6(1)(c) GDPR (legal obligation);
• For our legitimate interests, such as ensuring the security of the Store, handling enquiries, and establishing or defending legal claims — Art. 6(1)(f) GDPR (legitimate interest).

4. Recipients of the Data

We disclose personal data only to the extent necessary, to:

• Courier and postal operators that deliver your order;
• Messaging providers where you contact us or order via Telegram (subject to that provider's own policies);
• providers of accounting, IT and hosting services acting as our processors;
• competent public authorities, where required by law.

5. Data Retention

We retain personal data for as long as necessary to perform the contract, and thereafter for the periods required to comply with legal obligations (in particular accounting and tax records) and to establish or defend legal claims under applicable limitation periods. Once these periods expire, the data is deleted or anonymised.

6. International Transfers

Where a recipient (for example a messaging provider) processes data outside the European Economic Area, such transfer takes place only on the basis of an adequacy decision or appropriate safeguards under the GDPR.

7. Your Rights

Subject to the conditions set out in the GDPR, you have the right to:

• access your personal data and obtain a copy;
• rectification of inaccurate or incomplete data;
• erasure of your data ("right to be forgotten");
• restriction of processing;
• data portability;
• object to processing based on our legitimate interest;
• lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

8. Cookies

The website uses only essential cookies. For details, please see our Cookie Policy.

9. Contact

To exercise your rights or ask any question about this policy, contact the Controller at [contact email] or [Telegram], [Registered address].