1. Data controller
The controller of personal data is Rafał Podraza, address: ul. Bogusza Stęczyńskiego 19/1, 58-100 Świdnica, Polska.
Contact for privacy matters: contact@rafalpodraza.com.
2. Data processed
- e-mail address and data needed to provide access to purchased products,
- order, cart, payment and invoice data if an invoice is requested,
- technical data such as IP address, cookie identifiers, browser and device information,
- content of correspondence sent to the seller.
3. Purposes and legal bases
- order handling and contract performance - Article 6(1)(b) GDPR,
- issuing and storing accounting documents - Article 6(1)(c) GDPR,
- complaints, contact and claims handling - Article 6(1)(f) GDPR,
- shop security and technical functionality - Article 6(1)(f) GDPR,
- processing based on consent, where consent is given - Article 6(1)(a) GDPR.
4. Data recipients
Data may be shared with service providers supporting the shop, in particular hosting providers, Stripe, Resend, IT providers, accounting support and public authorities where required by law.
5. Transfers outside the EEA
Some providers may process data outside the European Economic Area. In such cases, appropriate safeguards required by the GDPR are used.
6. Retention period
Order and accounting data is stored for the period required by law.
Contact data is stored for the time needed to complete correspondence and then for the limitation period of possible claims.
Data processed based on consent is stored until consent is withdrawn unless another legal basis applies.
7. User rights
- right of access,
- right to rectification,
- right to erasure,
- right to restriction of processing,
- right to data portability,
- right to object,
- right to withdraw consent at any time,
- right to lodge a complaint with a data protection supervisory authority.
8. Cookies and similar technologies
The shop uses cookies and similar technologies to provide the website, cart, admin session and security.
Cart contents and discount codes may be stored locally in the user's browser. The user can remove this data in browser settings.
If analytics or marketing tools requiring consent are introduced in the future, they will be used in accordance with applicable law.
9. Voluntary provision of data
Providing data is voluntary but necessary to place an order, make a payment, receive access or obtain an invoice.
10. Changes to this policy
This Privacy Policy may be updated if laws, shop features or data processing practices change.