Privacy Policy
Privacy Policy of the online store witrazelampy.pl
1. General Provisions
1.1. This Privacy Policy pertains to the processing of personal data of users of the online store available at www.witrazelampy.pl (hereinafter referred to as the “Store”).
1.2. The data controller is Pracownia Witraży ARTEX Franciszek Obuchowski, with its registered office at 82-500 Kwidzyn, ul. Rzemieślnicza 8, NIP: 5811155259, REGON: 170107499 (hereinafter referred to as the “Controller”).
1.3. Contact with the Controller is possible via email at witrazelampy@gmail.com or by phone at 552794959 / 601671416.
1.4. By using the Store, users agree to the processing of their personal data in accordance with this Privacy Policy.
2. Scope of Personal Data Processing
2.1. The Controller processes personal data voluntarily provided by users during their use of the Store, including but not limited to:
• Name and surname
• Email address
• Phone number
• Shipping address
• For Entrepreneurs, additionally the company name and NIP number
• Transaction data (e.g., bank account number, purchase history)
2.2. Additionally, data related to user activity on the Store’s website (e.g., IP address, browser data, shopping preferences) may be processed to improve Store functionality and tailor the offer.
3. Purpose and Legal Basis for Data Processing
3.1. Personal data of users are processed for the following purposes:
• Processing orders placed in the Store (including delivery, invoicing)
• Responding to user inquiries (customer service)
• Sending order status updates
• Sending marketing materials, if the user has given consent
• Fulfilling legal obligations, including archiving documentation and tax settlements
3.2. The legal basis for data processing is:
• User consent (for marketing, newsletters, etc.)
• Contract concluded with the user (for order fulfillment)
• Legal obligations of the Controller (e.g., tax regulations)
4. Sharing Personal Data
4.1. The Controller does not share users’ personal data with third parties except in cases provided for by law or to fulfill the order.
4.2. To execute orders, personal data may be transferred to:
• Courier and postal companies for delivery
• Online payment service providers
• Accounting offices or auditing firms, to the extent necessary for tax and accounting obligations
4.3. With the user’s consent, data may also be shared for marketing purposes.
5. Data Storage
5.1. Personal data will be stored for the period necessary to fulfill the order and for archiving purposes resulting from the Controller’s legal obligations (e.g., tax retention).
5.2. After data processing concludes, the user may request its deletion unless legal regulations require its retention.
6. User Rights
6.1. Users have the right to:
• Access their personal data
• Rectify their data
• Delete their data (“right to be forgotten”)
• Restrict data processing
• Data portability
• Withdraw consent to data processing (if processing was based on consent)
6.2. To exercise these rights, users can contact the Controller using the contact details provided in section 1.3.
7. Data Security
7.1. The Controller undertakes all necessary measures to protect personal data against unauthorized access, modification, disclosure, or destruction.
7.2. Appropriate technical and organizational measures are applied, such as data encryption, IT system security, and regular security audits.
8. Cookies
8.1. The Store uses cookies that enable proper website functioning, content personalization, activity analysis, and customization of the Store’s offer.
8.2. Users can change cookie settings at any time via their web browser; however, restricting cookies may affect certain Store functionalities.
8.3. More information about cookies is available in the Store’s Cookie Policy accessible on the website.
9. Changes to the Privacy Policy
9.1. The Controller reserves the right to modify this Privacy Policy at any time. Users will be informed of any changes via the Store’s website.
9.2. Changes take effect upon publication on the Store’s website.
10. Final Provisions
10.1. This Privacy Policy is effective from January 17, 2025.
10.2. All questions regarding personal data processing should be directed to the email address: witrazelampy@gmail.com.