Data Controller
The administrator of the personal data of the online store’s Customers is: Justyna Rychłowska, Address: ul. Mickiewicza 24, 74-100 Gryfino, Email: mamofaktura1@gmail.com, Phone: 503-693-230
Contact for matters related to personal data protection: mamofaktura1@gmail.com
What data do we collect
When using the store and placing orders, we may collect the following personal data:
- first and last name,
- shipping address,
- email address,
- phone number,
- information about orders and payments,
- technical data about the device and browser (e.g. IP, cookies) – for the proper functioning of the store.
3. Purposes of data processing
Customers’ personal data are processed for the following purposes:
- performance of the sales contract – shipment of products, contact with the Customer, payment processing,
- handling complaints and returns,
- conducting marketing activities (e.g. newsletter) – only with the Customer’s consent,
- ensuring the security of the store and monitoring transactions,
- fulfillment of legal obligations (e.g. accounting, taxes).
4. Legal basis for processing
We process personal data based on:
- art. 6 ust. 1 lit. b RODO – necessity of data for the performance of a contract,
- art. 6 ust. 1 lit. c RODO – the legal obligation of the controller (e.g. tax regulations),
- art. 6 ust. 1 lit. a RODO – the Customer’s consent to the processing of data for marketing purposes,
- art. 6 ust. 1 lit. f RODO – the legitimate interests of the controller (e.g. system security, sales analysis).
5. Data recipients
Data may be shared only with:
- courier companies for the purpose of fulfilling orders,
- online payment operators,
- entities processing data on behalf of the controller (e.g. IT companies supporting the store),
- public authorities, if required by law.
6. Data retention period
- Data related to order fulfillment is stored for the period necessary to perform the contract and any claims arising from warranty or guarantee,
- Accounting data are stored in accordance with tax regulations (5 years),
- Marketing data (newsletter) is stored until the Customer withdraws consent.
7. Rights of data subjects
Each Customer has the right to:
- access to their data and its rectification,
- erasure of data (“right to be forgotten”),
- restriction of data processing,
- data portability to another controller,
- object to the processing of data for marketing purposes,
- withdrawal of consent to data processing at any time (this does not affect the lawfulness of processing carried out before its withdrawal).
8. Profiling and automated decision-making
We do not use automated decision-making or profiling of Customers.
9. Cookies
The website uses cookies in order to:
- proper functioning of the store,
- analyze traffic on the website,
- personalization of content and advertisements.
The Customer may change cookie settings in the browser or opt out of certain cookies.
10. Data Security
Customers’ data are stored using appropriate technical and organizational measures that ensure security, including protection against unauthorized access, loss, or destruction of data.
11. Complaints and contact
In the event of a violation of rights related to the processing of personal data, the Customer has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).