1. Data Controller
The personal data administrator is Puchalik spółka z ograniczoną odpowiedzialnością with its registered office in Krakow, ul. Kazimierza Morawskiego 5/127, 30-120 Kraków, NIP: 6772532651, KRS: 0001202554. Contact: kontakt@ekorolka.pl.
2. What data we process and why
1. Order fulfillment: name and surname, delivery address, e-mail, phone number, payment details. Basis: necessity for contract performance (Art. 6 section 1 lit. b GDPR).
2. Handling returns and complaints and accounting and tax obligations. Basis: legal obligation (Art. 6 section 1 lit. c GDPR).
3. Newsletter: e-mail address. Basis: consent (Art. 6 section 1 lit. a GDPR), which you can withdraw at any time by clicking the unsubscribe link in the message.
4. Analytics and marketing, including cookies. Basis: consent expressed in the cookie banner or legitimate interest of the controller (Art. 6 section 1 lit. f GDPR).
3. Data Recipients
We transfer data to entities supporting the store's operations: Shopify platform operator, payment operators, courier companies and suppliers of ordered goods (to the extent necessary for delivery, including outside the European Economic Area), providers of analytical and marketing tools, and the accounting office. The transfer of data outside the EEA is carried out with appropriate safeguards, e.g., standard contractual clauses.
4. Storage period
We store order-related data for the period required by tax and accounting regulations. Newsletter data until consent is withdrawn. Analytical data according to cookie settings.
5. Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, transfer it, object to its processing, and withdraw consent at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office.
6. Cookies
The store uses cookies necessary for its operation (e.g., shopping cart), and with your consent, also analytical and marketing cookies. You manage your consent in the cookie banner and in your browser settings.
7. Voluntariness of data provision
Providing data is voluntary but necessary to place an order or subscribe to the newsletter.