1. Data controller
The controller of your personal data is [TO BE COMPLETED], address: [TO BE COMPLETED] (the Controller). For anything concerning your personal data, write to kontakt@jednozyczenie.pl.
2. What data we process
- ✦the details given in your order: full name, e-mail address, phone number, delivery address or the code of the chosen parcel locker;
- ✦the personalization: the name, date and wish to be engraved and the chosen light colour;
- ✦payment information passed on by the payment operator (payment status — we do not store card details);
- ✦the content of our correspondence, if you write to us.
3. Purposes and legal bases
- ✦fulfilling the order and the sales contract, including the engraving and delivery — Art. 6(1)(b) GDPR;
- ✦handling complaints and any claims — Art. 6(1)(f) GDPR (legitimate interest);
- ✦meeting legal obligations, e.g. accounting obligations where applicable — Art. 6(1)(c) GDPR;
- ✦replying to messages — Art. 6(1)(f) GDPR;
- ✦visit statistics that help us improve the site — Art. 6(1)(f) GDPR.
Providing data is voluntary, but without contact details and a delivery address we cannot fulfil the order.
4. Who we share data with
We share data only with parties that help us fulfil the order:
- ✦the payment operator (Stripe) — to process the payment;
- ✦InPost — to deliver the parcel;
- ✦the e-mail delivery provider (Resend) — to send the order confirmation;
- ✦the provider hosting the shop’s server, and network and security service providers (Cloudflare);
- ✦the visit analytics provider (Ahrefs Web Analytics) — to count visits to the site;
- ✦if payment takes place at the checkout at sklep.jednozyczenie.pl — the Shopify platform.
Some of these providers may process data outside the European Economic Area. This happens on the basis of mechanisms provided for in the GDPR, e.g. a European Commission adequacy decision or standard contractual clauses.
5. How long we keep data
We keep order data for the time needed to fulfil the order, and then for the limitation period for claims and the period required by law. Correspondence — for as long as needed to deal with the matter.
6. Your rights
You have the right to access your data, to rectify, erase or restrict its processing, to data portability and to object to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
7. Cookies and browser storage
The shop uses no advertising cookies. We use what is necessary for the site to work, plus lightweight visit analytics:
- ✦the NEXT_LOCALE cookie — remembers the language you last viewed the site in (used by the checkout);
- ✦browser storage (localStorage) jedno-zyczenie-cart — keeps your cart and engraving text on your device until you place the order;
- ✦the admin panel cookie — for shop staff only, not for customers;
- ✦visit analytics — we use Ahrefs Web Analytics (lightweight, no advertising profiles). The script from analytics.ahrefs.com records the URL, the Referer header, the browser language and an approximate location (country). Cookies with the prefix _ahrefs_.
The payment operator and the carrier may use their own cookies on their websites — their privacy policies describe the rules.
8. Changes to this policy
We will announce significant changes on this page and update the date at the top.