1. Privacy and Cookie Policy for the AGD Lipiecki Online Shop
The controller of the personal data of users of the AGD Lipiecki online shop is:
WYTWARZANIE ARTYKUŁÓW Z TWORZYW SZTUCZNYCH “MAREK” DANIEL LIPIECKI
4 Drwali Street, 04-840 Warsaw, Poland
Tax Identification Number (NIP): 9521274839
National Business Registry Number (REGON): 012323171
email: biuro@agdlipiecki.pl
The Controller ensures that personal data are processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (GDPR).
2. Purposes and Scope of Data Processing
The personal data of online shop users are processed for the following purposes:
- processing and fulfilling orders,
- creating and maintaining customer accounts,
- processing payments and arranging deliveries,
- handling complaints, returns and correspondence,
- sending newsletters, where consent has been given,
- conducting marketing and remarketing activities,
- compiling statistics and analysing website traffic,
- complying with legal obligations, including tax and accounting requirements.
The personal data processed may include, among other information: full name, email address, telephone number, delivery address, billing details and IP address.
3. Legal Bases for Processing Personal Data
Personal data are processed on the following legal bases:
- Article 6(1)(b) of the GDPR – processing necessary for the performance of a contract, for example the sale of products,
- Article 6(1)(c) of the GDPR – processing necessary for compliance with legal obligations,
- Article 6(1)(f) of the GDPR – processing necessary for the purposes of the legitimate interests pursued by the Controller, for example marketing activities or the establishment, exercise or defence of legal claims,
- Article 6(1)(a) of the GDPR – the user’s consent, for example consent to receive a newsletter.
4. Recipients of Personal Data
Personal data may be disclosed to:
- courier companies and postal service providers,
- payment service providers,
- IT and hosting service providers,
- the Controller’s accounting service provider,
- public authorities – only where disclosure is required by law.
5. Data Retention Periods
- data related to order fulfilment – for up to six years after the end of the business relationship, corresponding to the applicable limitation period for legal claims,
- tax and accounting data – for the period required by applicable law,
- data processed on the basis of consent – until that consent is withdrawn.
6. Rights of Data Subjects
Every user has the right to:
- access their personal data,
- have their personal data rectified,
- have their personal data erased, also known as the “right to be forgotten”,
- restrict the processing of their personal data,
- data portability,
- object to the processing of their personal data,
- withdraw their consent at any time.
To exercise any of these rights, please contact the Controller at: biuro@agdlipiecki.pl
Users also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO).
7. Cookies
7.1. What Are Cookies?
Cookies are small text files stored on the user’s device when they visit and use a website. They are not used to identify the user directly, but to recognise the device being used.
7.2. What Types of Cookies Do We Use?
- Strictly necessary cookies – enable the online shop to function correctly, including features such as the shopping basket and customer login.
- Analytics cookies – allow us to collect statistical information about how visitors use the website, for example through Google Analytics.
- Functional cookies – remember the user’s preferences, such as the selected language or website layout.
- Marketing cookies – enable personalised advertising to be displayed, for example through Google Ads remarketing or Facebook Ads.
7.3. Managing Cookies
Users can change their cookie settings in their web browser at any time. However, restricting the use of cookies may affect the functionality of the online shop.
8. Automated Decision-Making
Users’ personal data are not used for automated decision-making, including profiling within the meaning of the GDPR.
9. Data Security
The Controller implements appropriate technical and organisational measures to protect personal data, including SSL encryption, server security systems and internal control procedures.
10. Final Provisions
- The Controller reserves the right to update this Privacy and Cookie Policy in order to ensure its compliance with applicable law.
- The current version of this document is always available on the online shop’s website.
