Privacy Policy
1. Data Controller
The data controller responsible for processing your personal data is Kinga Gronek-Bokota, based in Germany:
Steuernummer: DE44/026/02940
2. Types of Personal Data Processed
We process the personal data you provide when using our online store, including:
Name and surname.
Delivery and billing address.
Email address and phone number.
Payment details (e.g., transaction number, card details via payment systems such as PayPal).
IP address and data collected through cookies.
3. Purposes and Legal Basis for Processing Data
Your data is processed solely for legitimate purposes, including:
1. Order Fulfillment:
Data is processed under Article 6(1)(b) GDPR – performance of a sales contract (e.g., order shipment).
2. Customer Support:
To respond to your inquiries or resolve issues related to your orders.
3. Compliance with Legal Obligations:
We process data to fulfill legal obligations under German tax law (e.g., § 147 AO).
4. Marketing (with Consent):
We send newsletters and promotional offers if you have given your consent (Article 6(1)(a) GDPR).
5. Website Optimization:
We use cookies to analyze traffic and improve website functionality (Article 6(1)(f) GDPR – legitimate interest).
4. Sharing of Personal Data
Your data may be shared with:
Courier companies: to deliver your order.
Payment service providers: such as Stripe
IT service providers: managing the hosting of the online store.
Your personal data will not be transferred outside the European Economic Area (EEA) unless in compliance with appropriate data protection regulations (e.g., European Commission adequacy decisions).
5. Data Retention Period
We retain your data for the following periods:
Legal compliance: Accounting and tax documents are kept for 10 years (as per German § 257 HGB).
Marketing: Until you withdraw your consent for marketing purposes.
Other purposes: As long as necessary to fulfill the purposes for which the data was collected.
6. Your Rights
Under the GDPR, you have the following rights:
Access your data (Article 15 GDPR).
Rectify your data (Article 16 GDPR).
Erase your data ("right to be forgotten," Article 17 GDPR).
Restrict the processing of your data (Article 18 GDPR).
Data portability (Article 20 GDPR).
Withdraw your consent (Article 7(3) GDPR).
Lodge a complaint with a supervisory authority – in Germany, Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI).
7. Cookies and Analytics
We use cookies for:
Enhancing your experience on our website (e.g., remembering your cart).
Analyzing website traffic (e.g., using Google Analytics).
You can disable cookies in your browser settings.
8. Contact Information for Data Privacy Inquiries
If you have any questions about data privacy, you can contact us via contact form.