Privacy Policy
PRIVACY POLICY OF THE ONLINE STORE WWW.MANDRAGORASTORE.PL
I. General Provisions
- This Privacy Policy governs the processing of personal data collected through the online store www.mandragorastore.pl.
- The administrator of the personal data is:
Martyna Śledzik conducting business under the name Martyna Śledzik Concept Store
address: 144/3 Trakt Lubelski Street, 04-790 Warsaw
NIP: 1231495746
REGON: 389195947
e-mail address: biuro@mandragorastore.pl
Hereinafter referred to as the Administrator. - The Administrator processes personal data in accordance with applicable law, in particular in accordance with the RODO Regulation.
- Contact regarding personal data matters is possible via e-mail: biuro@mandragorastore.pl
II. Scope of personal data collected
The administrator may process the following personal data:
- name
- mailing and delivery address
- email address
- phone number
- Invoice data (Tax ID, company)
- IP address
- payment data (processed by payment operators)
- order number, purchase history
- The content of correspondence with the customer.
III. Purposes and basis of data processing
Personal data is processed for the following purposes:
- performance of the sales contract - Article 6(1)(b) of the RODO
- fulfillment of legal obligations (issuance of receipts, invoices, archiving) - Article 6(1)(c) RODO
- handling of returns and complaints - Article 6(1)(b) and (c) of the RODO
- Maintenance of the customer's account - Article 6(1)(b) of the RODO
- Replies to inquiries - Article 6(1)(f) RODO
- Investigation of claims - Article 6(1)(f) RODO
The administrator does not run a newsletter. Data is not processed for marketing purposes without separate consent from the user.
IV. Voluntariness of providing data
Provision of personal data is voluntary, but necessary for the conclusion of a sales contract, execution of an order or contact from the Administrator.
V. Data sharing
Personal data may be shared with the following entities:
- courier companies (InPost, DPD, DHL)
- payment operators (Przelewy24, PayPal)
- software and hosting providers
- accounting offices and accounting service providers
- law firms in the event of a claim
- State bodies, if required by law.
Data is not sold or shared with third parties without a legal basis.
VI. Data retention period
- Data related to the fulfillment of orders - up to 5 years from the end of the year in which the purchase was made.
- Data related to correspondence and inquiries - up to 3 years.
- Accounting data - for the period required by tax law.
- Data necessary for the investigation of claims - until their statute of limitations.
VII. Rights of data subjects
Each user is entitled to:
- access to your personal data
- rectification of data
- deletion of data (right to be forgotten)
- restrictions on processing
- object to the processing
- data portability
- lodge a complaint with the President of the Office for Personal Data Protection.
VIII. Data security
The Administrator uses technical and organizational measures to ensure data protection, including:
- SSL connection encryption
- server and store system security
- data access control
- regular backups.
IX. Transfers of data outside the EEA
Personal data is not transferred outside the European Economic Area, except for analytics or payment tools that use servers in the US (e.g. PayPal), in which case standard contractual clauses approved by the European Commission are used.
X. Cookies
The store uses cookies to ensure proper operation of the site. Detailed information about cookies can be found in the Cookies Policy.
XI. Profiling
Data in the store is not used for automated decision-making or profiling of users.
XII. Final Provisions
- The Administrator reserves the right to change the Privacy Policy.
- Changes take effect upon publication on the store's website.
- In matters not regulated, the provisions of RODO and Polish law shall apply.