Information on the processing of personal data (GDPR)

1. Data controller

2. Purposes and legal basis for data processing

• Fulfilment of orders and sales contracts – Article 6(1)(b) of the GDPR.
• Handling complaints and returns – Article 6(1)(b) and (c) of the GDPR.
• Maintaining a customer account – Article 6(1)(b) of the GDPR.
• Contact regarding order-related matters – Article 6(1)(b) and (f) of the GDPR.
• Own marketing (subject to consent) – Article 6(1)(a) of the GDPR.
• Compliance with legal obligations – Article 6(1)(c) of the GDPR.

3. Recipients of the data

Data may be disclosed to entities supporting the provision of services, such as:

• Courier firms and carriers.
• Payment service providers.
• Online shop software providers.
• Entities providing accounting and legal services.
• Public authorities authorised by law.

4. Data retention period

Data will be retained for as long as is necessary to fulfil the purposes for which it was collected, and thereafter in accordance with legal obligations (e.g. tax obligations).

5. Rights of data subjects

• The right of access to data.
• Right to rectification.
• Right to erasure (‘right to be forgotten’).
• Right to restriction of processing.
• Right to data portability.
• Right to object to the processing of data.
• The right to withdraw consent at any time.
• The right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

6. Additional information

Providing your personal data is voluntary, but necessary for the conclusion and performance of the contract. If you do not provide your personal data, it may not be possible to fulfil your order.

7. Cookies

Information about cookies can be found in the Cookie Policy.