PRACOWNIA RZEŹBIARSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

Effective date: 19 September 2026
Last updated: 19 September 2026

1. General Information

This Privacy Policy explains how PRACOWNIA RZEŹBIARSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ collects, uses, stores and protects personal data in connection with the operation of our online Store.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable Polish data protection laws and other applicable legislation.

We are committed to processing personal data lawfully, fairly and transparently and to collecting only the data necessary for the purposes described in this Privacy Policy.

2. Data Controller

The controller of your personal data is:

PRACOWNIA RZEŹBIARSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

NIP: 7812117724
REGON: 545719798
VAT ID: PL7812117724

Registered address:
ul. Juliusza Słowackiego 25/15
60-822 Poznań
Poland

Contact:

Email:  pracowniarzezbiarskapl@gmail.com
Phone: +48 794 386 282

If you have any questions concerning the processing of your personal data or wish to exercise your rights, you may contact us using the details above.

3. What Personal Data We May Collect

Depending on how you interact with our Store, we may process the following categories of personal data:

•    first and last name;

•    billing and delivery address;

•    email address;

•    telephone number;

•    information relating to Orders and purchased Products;

•    payment and transaction information;

•    correspondence and communications with us;

•    information provided when submitting a return or complaint;

•    information necessary to provide customer support;

•    technical information relating to your use of the Store, such as IP address, browser type, device information and information concerning interactions with our website.

We only collect and process personal data that is relevant and necessary for the purposes for which it is used.

4. How We Collect Personal Data

We may collect personal data:

•    directly from you when you place an Order;

•    when you create or use an account, where such functionality is available;

•    when you contact us;

•    when you subscribe to our newsletter;

•    when you submit a return or complaint;

•    automatically through technologies used to operate the Store, including necessary cookies and similar technologies.

5. Purposes and Legal Bases for Processing

We may process your personal data for the following purposes.

5.1 Processing and fulfilling Orders

We process personal data necessary to process and fulfil your Order, including payment, preparation and delivery of the Product.

The legal basis for this processing is Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract with you or for taking steps at your request before entering into a contract.

5.2 Customer service and communication

We may process your contact details and correspondence in order to respond to enquiries, provide customer support and communicate with you concerning your Order.

Depending on the circumstances, the legal basis may be:

•    Article 6(1)(b) GDPR, where the communication concerns performance of a contract; or

•    Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests in providing customer service and managing communications.

5.3 Returns, refunds and complaints

We process personal data necessary to handle returns, refunds, complaints and other requests relating to Products purchased from us.

The legal basis may include:

•    Article 6(1)(b) GDPR, where processing is necessary for the performance of the contract;

•    Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation; and

•    Article 6(1)(f) GDPR, where processing is necessary for the establishment, exercise or defence of legal claims.

5.4 Accounting and legal obligations

We may process personal data in order to comply with tax, accounting, financial, consumer protection and other legal obligations applicable to us.

The legal basis is Article 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation.

5.5 Fraud prevention and security

We may process certain information to protect the Store, our business, Customers and transactions against fraud, abuse, unauthorised activity and security incidents.

The legal basis is generally Article 6(1)(f) GDPR, based on our legitimate interest in protecting our business, systems and Customers.

5.6 Newsletter and marketing communications

If you voluntarily subscribe to our newsletter, we may use your email address to send information about our Products, new releases, offers and activities of PRACOWNIA RZEŹBIARSKA.

The legal basis for processing for this purpose is your consent, where consent is required by applicable law.

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You may also object to the processing of your personal data for direct marketing purposes at any time.

6. Payment Processing

Payments in the Store are processed through Shopify Payments and payment methods made available through Shopify.

Payment service providers may process information necessary to complete and secure payment transactions.

We do not store your full payment card number or full payment card security details.

Payment-related information may be processed by the relevant payment service providers in accordance with their own privacy policies and applicable legal requirements.

7. Shopify

Our online Store is operated using Shopify.

Shopify provides the technical infrastructure required to operate the Store, including functions related to the website, shopping cart, checkout, Orders and other e-commerce functionality.

As part of providing these services, Shopify may process personal data on our behalf or independently where required for its own purposes.

Personal data processed through Shopify is subject to applicable data protection requirements and Shopify's own privacy documentation.

8. Data Recipients

Depending on the circumstances, personal data may be disclosed or made available to:

•    Shopify and service providers supporting the operation of the Store;

•    payment service providers;

•    delivery and logistics providers;

•    accounting and bookkeeping service providers;

•    IT and technical service providers;

•    legal, tax or professional advisers;

•    competent public authorities where disclosure is required by law.

We do not sell your personal data.

We only provide access to personal data to third parties where this is necessary for the purposes described in this Privacy Policy, required by law or otherwise permitted under applicable law.

9. International Transfers

Some service providers used in connection with the operation of the Store may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we take appropriate steps to ensure that the transfer is carried out in accordance with the GDPR.

Depending on the circumstances, appropriate safeguards may include an adequacy decision of the European Commission, Standard Contractual Clauses or another lawful transfer mechanism recognised under applicable data protection law.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Different categories of data may therefore be retained for different periods.

In particular:

•    Order and transaction information may be retained for the period required by applicable accounting, tax and legal requirements;

•    information relating to contracts may be retained for the duration of the contractual relationship and thereafter for the period necessary to establish, exercise or defend legal claims;

•    information relating to complaints, returns and disputes may be retained for the period necessary to handle the matter and protect legal rights;

•    newsletter data is generally retained until you withdraw your consent or unsubscribe, unless another legal basis for retention applies.

After the applicable retention period expires, personal data will be deleted or anonymised where reasonably possible.

11. Your Rights Under the GDPR

Subject to the conditions and limitations provided by applicable law, you have the right to:

•    obtain confirmation as to whether we process your personal data;

•    access your personal data;

•    request correction of inaccurate or incomplete personal data;

•    request deletion of your personal data;

•    request restriction of processing;

•    receive personal data concerning you in a structured, commonly used and machine-readable format and, where applicable, request its transfer to another controller;

•    object to processing based on our legitimate interests;

•    object at any time to processing of personal data for direct marketing purposes;

•    withdraw consent where processing is based on consent;

•    lodge a complaint with a competent data protection supervisory authority.

These rights do not apply in every situation and may be subject to conditions or limitations under applicable law.

12. Exercising Your Rights

To exercise your data protection rights, please contact us:

Email:  pracowniarzezbiarskapl@gmail.com
Phone: +48 794 386 282

We may need to verify your identity before processing certain requests in order to protect your personal data from unauthorised access.

We will respond to valid requests within the period required by applicable law.

13. Right to Lodge a Complaint

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)

You may contact the supervisory authority through its official channels.

14. Newsletter

If you subscribe to our newsletter, we will use the email address you provide to send you marketing communications concerning our Products, offers and activities.

Subscription is voluntary.

You may unsubscribe at any time by using the unsubscribe link contained in our marketing emails or by contacting us directly.

After unsubscribing, we will stop sending marketing communications based on your newsletter subscription, subject to any other lawful basis that may apply.

15. Cookies and Similar Technologies

Our Store uses cookies and similar technologies that are necessary for the proper functioning, security and operation of the website and the shopping process.

These technologies may be used, for example, to:

•    maintain your shopping cart;

•    remember necessary preferences;

•    enable checkout and payment functionality;

•    maintain website security;

•    ensure the proper operation of the Store.

At this time, we do not use Google Analytics or Meta/Facebook Pixel.

We do not use cookies for those services.

Where applicable law requires consent for a particular type of cookie or similar technology, such technology will only be used after obtaining the required consent.

16. Automated Decision-Making and Profiling

We do not make decisions concerning you that produce legal effects or similarly significantly affect you based solely on automated processing of your personal data.

We do not use your personal data for automated decision-making of this kind.

17. Children's Data

Our Products are collectible and decorative models and are not toys.

We do not knowingly collect personal data from children for the purpose of providing services or sending marketing communications.

If you believe that a child has provided us with personal data without appropriate authorisation, please contact us so that we can assess the situation and take appropriate action.

18. Data Security

We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

The measures used may include access controls, secure communication technologies and procedures designed to limit access to personal data to authorised persons and service providers.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time where necessary, including as a result of:

•    changes in applicable law;

•    changes to the Store;

•    changes to the services or technologies we use;

•    changes to our data processing activities; or

•    improvements or clarifications to this Privacy Policy.

The updated version will be made available through the Store.

The date of the latest update is shown at the beginning of this Privacy Policy.

20. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

PRACOWNIA RZEŹBIARSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

ul. Juliusza Słowackiego 25/15
60-822 Poznań
Poland

Email:  pracowniarzezbiarskapl@gmail.com


Phone: +48 794 386 282

Effective date: 19 September 2026
Last updated: 19 September 2026