Privacy Policy

We care about your privacy. This Privacy Policy explains what personal data we collect, for what purpose we process it, and what rights you have—in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

1. Data Controller

The controller of your personal data is [SELLER'S FIRST AND LAST NAME], address: [BUSINESS ADDRESS], e-mail: [EMAIL ADDRESS] (hereinafter: "Controller").

For matters concerning the protection of personal data, you can contact us at the e-mail address: [EMAIL ADDRESS].

2. What data we process and for what purpose

Purpose of processing Scope of data Legal basis Retention period
Order fulfillment and sales contract first name and last name, delivery address, e-mail address, phone number, order and payment details Art. 6(1)(b) GDPR (performance of a contract) until claims from the contract are time-barred
Handling complaints and returns order data, content of the complaint, bank account number (for payment refunds) Art. 6(1)(b) and (c) GDPR until the procedure is completed and claims are time-barred
Fulfillment of tax and accounting obligations data from sales documents Art. 6(1)(c) GDPR (legal obligation) 5 years from the end of the tax year
Contact (form, e-mail, phone) name, e-mail address, message content Art. 6(1)(f) GDPR (legitimate interest—handling inquiries) until correspondence is completed, max. 12 months
Newsletter (if you consent) e-mail address Art. 6(1)(a) GDPR (consent) until consent is withdrawn
Own marketing, analytics, traffic statistics data collected through cookies (online identifiers) Art. 6(1)(a) GDPR (consent expressed in the cookie banner) according to the Cookies Policy
Establishment, exercise or defense of claims data from contract and correspondence Art. 6(1)(f) GDPR (legitimate interest) until claims are time-barred

Providing data is voluntary, but necessary to place and fulfill an order.

3. Data Recipients

We may transfer your personal data only to entities that support us in operating the Store, to the extent necessary to achieve the purposes described above:

  • Shopify — provider of the store platform on which our Store operates (hosting, order handling),
  • payment operators — to handle electronic payments ([NAME OF PAYMENT OPERATOR]),
  • courier companies and postal operators — for order delivery ([NAME OF CARRIER]),
  • suppliers and wholesalers with whom we cooperate in order fulfillment — to the extent of address data necessary to complete and dispatch the shipment (our logistics partners operate within the European Union),
  • IT, analytical and marketing service providers — only to the extent covered by your consent,
  • public authorities — only when required by law.

All entities processing data on our behalf act on the basis of data processing agreements compliant with Art. 28 GDPR.

4. Transfer of data outside the European Economic Area

Due to the use of the Shopify platform and some analytical tools, your data may be transferred to countries outside the EEA (in particular to Canada and the United States). The transfer takes place only on the basis of mechanisms provided for in the GDPR — decisions of the European Commission confirming an adequate level of protection or standard contractual clauses (Art. 46 GDPR).

5. Your rights

In connection with the processing of personal data, you have the following rights:

  • the right to access data and receive a copy thereof,
  • the right to rectification (correction) of data,
  • the right to erasure of data,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing based on legitimate interest,
  • the right to withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, please write to us at: [EMAIL ADDRESS].

If you believe that we are processing your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl).

6. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, which would have legal effects on you or similarly significantly affect you.

7. Cookies

The Store uses cookies. Detailed information on the types of files used, the purposes of their use, and how to manage consents can be found in the Cookies Policy available on the Store's website.

8. Data Security

We apply technical and organizational measures to ensure the protection of processed personal data, including an encrypted SSL/TLS connection on all pages of the Store and restricting access to data only to authorized persons.

9. Changes to the Privacy Policy

The Privacy Policy may be updated due to changes in legal provisions or the development of the Store. The current version is always available on www.zadawear.pl.