English
Polski
1. General information
This Privacy Policy sets out the rules for processing personal data by the Smakołak online store, operated by:
Smakołak Karolina Karwowska
ul. Siedlecka 66, 08-117 Wodynie
NIP: 5322118715
e-mail: kontakt@smakolak.pl
tel: 506 723 504
The Seller is the Controller of Customers' personal data.
2. Purposes and legal bases for data processing
Personal data is processed for the following purposes:
1) Order fulfilment
• data: first name, surname, e-mail address, telephone number, delivery address, invoice details
• legal basis: Article 6(1)(b) GDPR (contract)
2) Customer account management
• legal basis: Article 6(1)(b) GDPR
3) Issuing invoices, accounting
• legal basis: Article 6(1)(c) GDPR (legal obligation)
4) Delivery fulfilment
• data transferred to InPost
• legal basis: Article 6(1)(b) GDPR
5) Payment processing
• data transferred to the Przelewy24 payment operator
• legal basis: Article 6(1)(b) GDPR
6) Complaints
• legal basis: Article 6(1)(c) and (b) GDPR
7) Store marketing
• sending newsletters
• remarketing activities (Google Ads, Meta/Facebook)
• legal basis: Article 6(1)(a) GDPR (consent)
8) Analytics and statistics
• Google Analytics
• legal basis: Article 6(1)(a) GDPR
3. Recipients of data
Data may only be transferred to:
• the InPost courier company,
• the Przelewy24 payment operator (PayPro S.A.),
• the hosting provider,
• analytics tool providers (Google Ireland),
• Meta Platforms Ireland (Facebook Pixel),
• the accounting office.
The Controller does not sell data to third parties.
4. Data retention period
• order data - 6 years (tax requirements),
• account data - until the account is deleted by the user,
• newsletter data - until consent is withdrawn,
• complaint data - 1 year after the process is completed,
• marketing data - until consent is withdrawn.
5. User rights
Every person has the right to:
• access their data,
• rectification,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing,
• withdraw consent at any time,
• lodge a complaint with the President of the Personal Data Protection Office (UODO).
Withdrawal of consent does not affect the lawfulness of data processing carried out before its withdrawal.
6. Voluntary provision of data
Providing data is voluntary, but necessary for:
• order fulfilment,
• delivery,
• payment processing.
7. Profiling and automated decision-making
The user may be subject to marketing profiling (e.g. remarketing).
Profiling does not produce legal effects.
8. Cookies
The store uses cookies in accordance with the Cookie Policy (below)
COOKIE POLICY
1. What are cookies?
Cookies are small files stored on the user's device while using the www.smakolak.pl website.
2. Types of cookies used in the store
a) Essential cookies
They enable the store to function, including:
• shopping cart,
• login,
• order processing.
b) Analytics cookies
Google Analytics - collect anonymous statistical data.
c) Marketing cookies
• Google Ads (remarketing),
• Meta Pixel (Facebook Ads).
3. Legal basis
• essential cookies - Article 6(1)(f) GDPR
• analytics and marketing cookies - user consent (Article 6(1)(a))
4. Managing cookies
The user can independently change cookie settings in their browser or withdraw consent via the cookie banner.