Privacy policy

• For the Owner of this website, protecting Users’ personal data is of utmost importance. The Owner makes every effort to ensure that Users feel safe when entrusting their personal data while using the website.
• A User is an individual, legal entity, or organizational unit without legal personality granted legal capacity by law, using the electronic services available on the website.
• This privacy policy explains the principles and scope of processing the User’s personal data, the rights of the User, the obligations of the data controller, and information on the use of cookies.
• The Administrator applies the latest technical means and organizational solutions to ensure a high level of protection for the processed personal data and to prevent unauthorized access.

I. DATA CONTROLLER

The data controller is Wallcraft s.c. Robert Stodulski, Radosław Stodulski, Krzysztof Stodulski, located at ul. Kaszubska 45, 76-200 Słupsk, NIP: 8393234494, REGON 524037374 (hereinafter referred to as “Owner”).

II. PURPOSE OF PERSONAL DATA PROCESSING

1. The Administrator processes the User’s personal data for the following purposes:
   • Using the contact form. Personal data is processed based on Article 6(1)(f) GDPR as a legitimate interest of the Owner.
   • Signing up for the Newsletter to send commercial information electronically. Personal data is processed with separate consent based on Article 6(1)(a) GDPR.
2. This means that this data is specifically necessary for:
   • concluding a contract;
   • making payments;
   • delivering ordered goods or providing services to the User;
   • enabling the User to exercise all consumer rights (e.g., withdrawal, warranty).
3. The User may also consent to receive information about news and promotions, which will lead the Administrator to process personal data to send commercial information to the User about, among others, new products or services, promotions, or sales.
4. Personal data is also processed in fulfilling the legal obligations incumbent on the data controller and performing tasks in the public interest, including tasks related to security and defense or keeping tax records.
5. Personal data may also be processed for the purposes of direct marketing of products, securing and pursuing claims or protecting against claims by the User or third parties, as well as for marketing third-party services and products or the Owner’s non-direct marketing.

III. TYPES OF DATA

1. The Administrator processes the following personal data, which is necessary to:
   • Make purchases via the website:
     • Name and surname;
     • Delivery address;
     • Phone number;
     • Email address;
   • Data provided optionally by the User:
     • Date of birth;
     • PESEL number (in case of a request for an invoice);
     • NIP number (in case of a request for an invoice for a business).
2. In the case of contract withdrawal or claims, where refunds are made directly to the User’s bank account, we also process information regarding the bank account number to facilitate the refund.

IV. LEGAL BASIS FOR PERSONAL DATA PROCESSING

1. Personal data is processed in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1–88, hereinafter referred to as “GDPR.”
2. The Administrator processes personal data only after obtaining the User’s consent when confirming a transaction made on the website.
3. Consent to process personal data is entirely voluntary; however, its absence prevents making purchases through the website.

V. USER RIGHTS

1. The User may request information at any time from the Administrator about the scope of personal data processing.
2. The User may request at any time to correct or rectify their personal data.
3. The User may withdraw consent for personal data processing at any time without providing a reason. The request for data non-processing may apply to a specific processing purpose (e.g., withdrawing consent for receiving commercial information) or all processing purposes. Withdrawal of consent for all processing purposes will result in the deletion of the User’s account on the website, along with all previously processed personal data of the User. Withdrawal of consent does not affect already performed actions.
4. The User may request at any time, without providing a reason, that the Administrator deletes their data. A request for data deletion will not affect previously performed actions. Deleting data means simultaneously deleting the User’s account, along with all personal data recorded and processed so far by the Administrator.
5. The User may object at any time to the processing of personal data, either for all personal data processed by the Administrator or in a limited scope, e.g., objecting to data processing for a specific purpose. The objection will not affect previously performed actions. Submitting an objection will result in the deletion of the User’s account, along with all personal data recorded and processed so far by the Administrator.
6. The User may request the restriction of personal data processing, either for a specific period or without a time limit but within a specified scope, which the Administrator must comply with. This request will not affect previously performed actions.
7. The User may request that the Administrator transfer the User’s processed personal data to another entity. For this, the User should write a request to the Administrator, specifying to which entity (name, address) the personal data should be transferred and what specific data the User wishes to transfer. Upon confirmation from the User, the Administrator will transfer the User’s personal data to the specified entity in electronic form. The User’s request confirmation is necessary for data security and to ensure the request originates from an authorized person.
8. The Administrator informs the User about actions taken within a month of receiving any of the requests mentioned above.

VI. PERIOD OF PERSONAL DATA STORAGE

1. Personal data is generally stored only as long as necessary to fulfill contractual or legal obligations for which it was collected. This data will be deleted immediately when its storage is no longer required for legal evidence, civil law, or statutory data retention obligations.
2. Information regarding the contract is stored for evidence purposes for three years, starting from the end of the year in which the business relationship with the User ended. Data deletion will occur after the expiration of the statutory limitation period for contractual claims.
3. Additionally, the Administrator may retain archival information on transactions, as data retention is associated with the User’s rights, e.g., warranty.
4. If no contract has been concluded between the User and the Owner, the User’s personal data is stored until the User’s account deletion on the website. Account deletion may occur as a result of the User’s request, withdrawal of consent for personal data processing, or objection to data processing.

VII. DATA PROCESSING OUTSOURCING TO OTHER ENTITIES

1. The Administrator may entrust the processing of personal data to cooperating entities, necessary to perform transactions, e.g., for the preparation of ordered goods and delivery or for sending commercial information from the Administrator (this applies to Users who have consented to receive commercial information).
2. Personal data of website Users is not transferred outside the European Union.
3. This Privacy Policy complies with the provisions arising from Article 13(1) and (2) of the GDPR.

VIII. COOKIES

1. The website uses cookies or similar technology (collectively referred to as “cookies”) to gather information about the User’s access to the website (e.g., via computer or smartphone) and their preferences. They are used for advertising and statistical purposes and to tailor the website to the User’s needs.
2. Cookies are pieces of information that contain a unique reference code that the website sends to the User’s device for storage, sometimes tracking information about the device in use. Typically, they do not allow for the identification of the User.
3. Some cookies on the website are available only for the duration of a particular internet session and expire after closing the browser. Others serve to remember the User upon returning to the website and are stored for a more extended period.
4. Cookies used on this website include:
   • Persistent cookies, which allow us to recognize the browser upon the next visit to the Store.
   • Some cookies are deleted after closing the browser session.
5. All cookies on this website are set by the Administrator.
6. All cookies used by this website comply with applicable European Union law.
7. Most Users and some mobile browsers automatically accept cookies. If the User does not change the settings, cookies will be saved in the device memory.
8. The User may change preferences regarding cookie acceptance or modify the browser settings to receive notifications each time cookies are set. To adjust cookie acceptance settings, the User should change the browser settings.
9. Blocking or deleting cookies may prevent full use of the website.
10. Cookies will be used for essential session management, including:
    • Create a special login session for the User, allowing the site to remember the User’s logged-in status and to process requests efficiently, securely, and consistently.
    • Recognize Users who have previously visited the site, which enables the identification of unique Users and ensures sufficient site capacity for new Users.
    • Determine if a visitor to the site is a registered User, which influences personalization and customization of content.
    • Record data from User devices, including cookies, IP address, and browser information, to diagnose technical issues, manage the site, and monitor User activity.
    • Adjust visual elements and website content based on User preferences, enabling a more personalized experience on the site.
    • Collect statistical information on how the User interacts with the site to improve site features and identify the most popular sections, optimizing the site to better meet User needs.