Skip to main content
Open search engine
Search
Close search engine Clear Search
Products in the cart: 0. See details
Your cart is empty
English

Privacy Policy

 

§1 General Provisions

The controller of your personal data is: Weronika Madeja, conducting business under the name “Gifts Of The Universe Weronika Madeja”, with its registered office in Kraków at: os. Jagiellońskie 27/9, 31-835 Kraków, Poland, NIP: 6783193595 (hereinafter referred to as the “Controller”).

All personal data collected via the online store website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).


§2 Type, Purpose and Scope of Data Processing

The Controller processes personal data in the following cases:

1. Account registration and management
Legal basis: Article 6(1)(b) GDPR (performance of a contract)
Data processed: email address

2. Placing an order
Legal basis: Article 6(1)(b) GDPR (performance of a sales contract)
Data processed: first name, last name, delivery address, email address, phone number

3. Newsletter subscription
Legal basis: Article 6(1)(a) GDPR (consent)
Data processed: first name, last name, email address

Providing the above data is voluntary but necessary to use the relevant services.

The Controller undertakes to exercise due diligence in protecting personal data and the individuals who provide it.

The Controller ensures that:

  • only data necessary for providing services is processed;

  • processing is lawful and fair;

  • data is not processed for purposes incompatible with those specified in this Policy.

Additionally, the Controller may collect technical data such as:

  • time spent on the website,

  • IP address,

  • browser type.


§3 Data Retention

Personal data is processed only for as long as necessary for the purposes indicated above:

  • Account data – for as long as the account exists

  • Newsletter data – until consent is withdrawn

  • Order data – for the duration of contract performance and any complaint or withdrawal process, and thereafter in accordance with legal obligations (typically 3 or 6 years)


§4 Data Sharing

Personal data may be shared with entities authorized under applicable law.

Data may also be shared with trusted partners necessary to provide services, such as:

  • courier and delivery companies

  • accounting service providers

  • payment system providers and operators

  • IT and software service providers

  • email service providers

All such entities process data in accordance with applicable laws and are based within the European Economic Area (EEA).


§5 Data Subject Rights

You have the right to:

  • access your personal data

  • rectify your data

  • erase your data

  • restrict processing

  • data portability

  • object to processing

  • withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal)

To exercise your rights, please contact the Controller via email.


§6 Complaints

If you believe that your personal data is being processed in violation of GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).


§7 Cookies

The Store automatically collects information contained in cookies.

Cookies are small text files stored on the User’s device and used for browsing the Store’s website. They typically contain:

  • the website name,

  • storage time,

  • a unique identifier.

Cookies are used to:

  • adapt website content to user preferences;

  • optimize website usability;

  • create statistics to improve website functionality.

Types of cookies used:

  • Essential cookies – necessary for website functionality

  • Security cookies – used to detect fraud or abuse

  • Performance cookies – used for analytics

  • Functional cookies – remember user settings (e.g. language)

  • Advertising cookies – tailor advertising content

Cookies may be:

  • session cookies (deleted after closing the browser)

  • persistent cookies (stored for a specified time or until deleted)

Users can change cookie settings in their browser at any time.

Cookies may also be used by advertising partners cooperating with the Store.

More information: www.wszystkoociasteczkach.pl or your browser help section.


§8 Final Provisions

The Controller undertakes to implement appropriate technical and organizational measures to ensure data protection and minimize risks.

In matters not regulated by this Privacy Policy, the provisions of GDPR and Polish law shall apply.