✅ PRIVACY POLICY
1. General provisions
This Privacy Policy defines the principles of processing personal data by the online store www.dlazegarmistrza.pl (hereinafter: "Store"), in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 ("GDPR").
The administrator of personal data is:
P.H. "CZAS" Marek Jędrzejczyk
ul. Kominiarska 13, 43-382 Bielsko-Biała
NIP: 5470121927
E-mail: hurtowniakurant@gmail.com
Tel.: +48 884 265 589
For matters related to data protection, you can contact us via email: hurtowniakurant@gmail.com
2. What data do we process?
We process data necessary for:
✅ placing and fulfilling an order – first name, last name, delivery address, email, phone, payment data
✅ account registration – login, email, password (encrypted)
✅ issuing invoices – NIP, company name, address
✅ contact (form / email / complaints)
✅ marketing – email (newsletter), cookie data (if consent is given)
✅ handling online payments – transaction identifier, account number (in case of a refund)
We do not collect payment card data – they are handled exclusively by the payment operator.
3. Purposes and legal bases for data processing
| Purpose of processing | Legal basis |
|---|---|
| Order fulfillment / contract | art. 6 sec. 1 lit. b GDPR |
| Issuing and storing accounting documents | art. 6 sec. 1 lit. c |
| Commercial contacts, complaints, returns | art. 6 sec. 1 lit. b and f |
| Own marketing (e.g. newsletter) | art. 6 sec. 1 lit. a or f |
| Conducting statistics and analytics (Google Analytics, etc.) | art. 6 sec. 1 lit. a |
| Defense of claims and enforcement of rights | art. 6 sec. 1 lit. f |
| Online payments (imoje – ING Bank Śląski) | art. 6 sec. 1 lit. b and f |
4. Data recipients
Data may be transferred only to entities necessary for the operation of the store, including:
✅ courier companies / Polish Post
✅ accounting / hosting / IT service providers
✅ payment operators:
ING Bank Śląski S.A. (imoje), ul. Sokolska 34, 40-086 Katowice – handling electronic payments.
ING Bank Śląski S.A. is an independent data administrator in the scope of payment processing.
✅ analytical and marketing services (e.g. Google, Meta), if the user has consented to cookies
Data is not sold or transferred to unauthorized entities.
5. Data retention period
| Type of data | Retention period |
|---|---|
| Order data | up to 6 years (accounting/tax obligation) |
| Customer account data | until the account is deleted |
| Newsletter data | until unsubscribed or consent is revoked |
| Contact data (email messages) | up to 3 years for evidential purposes |
| Data related to claims | up to the limitation period (max 6 years) |
| Cookie data | according to the Cookie Policy or until consent is revoked |
6. Rights of the data subject
You have the right to:
✅ access to data
✅ rectify data
✅ delete data (if it does not conflict with legal obligations)
✅ restrict processing
✅ data portability
✅ object (when the basis is art. 6 sec. 1 lit. f)
✅ withdraw consent at any time (e.g. newsletter, cookies)
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
7. Profiling
The Store may use marketing profiling (e.g. selection of advertising content or product recommendations) based on statistical data or cookies – only if the user has consented to marketing cookies. Profiling does not have legal effects nor does it significantly affect the user.
8. Is providing data mandatory?
Providing data is voluntary, but:
-
lack of data means inability to fulfill the order,
-
basic data in the order form are necessary to conclude a sales contract,
-
lack of consent for marketing/newsletter does not affect the ability to purchase products.
9. Data transfer outside the EU
We do not transfer data outside the EU unless the user consents to services of entities that process them on servers outside the EU (e.g. Google, Meta) – then safeguards compliant with GDPR (SCC, TIA, Privacy Framework US) are applied.
10. Cookies
Detailed rules regarding cookies are available in a separate document Cookie Policy, available on the store's website.
11. Changes to the document
The administrator may change the Privacy Policy in case of:
-
changes in legal regulations,
-
changes in technology or methods of data processing,
-
introduction of new functionalities in the Store.
The current version of the document is always available on the website www.dlazegarmistrza.pl