This translation is provided for information only. The Polish version is legally binding. Polski ↗
Privacy policy
1. Data controller
The controller of your personal data is Kamila Dynak, conducting business under the name Kamila Dynak, tax ID (NIP) 7511745259, REGON 523720809, ul. Rogowska 40/20, 53-440 Wrocław, Poland (the “Controller”). For any matters concerning personal data, please write to domlyoffice@gmail.com.
2. What data we process
When you place an order: your full name, e-mail address, phone number, delivery address, the code of the chosen pickup point (InPost parcel locker, DPD Pickup, ORLEN Paczka) and, if you want an invoice, the company name and tax ID (NIP). We also process any order notes, your order history and the IP address from which the order was placed (to prevent abuse). When you contact us by e-mail – the data contained in the correspondence.
Providing data is voluntary but necessary to conclude and perform the sales contract.
3. Purposes and legal bases of processing
- fulfilling your order and the sales contract, including delivery, contact about the order and handling withdrawals – Article 6(1)(b) GDPR;
- issuing sales documents and keeping accounts – Article 6(1)(c) GDPR in conjunction with tax and accounting legislation;
- handling complaints – Article 6(1)(c) GDPR in conjunction with the Polish Consumer Rights Act;
- establishing, pursuing or defending claims and preventing abuse of the Shop (e.g. limiting the number of orders from one IP address) – the Controller’s legitimate interest, Article 6(1)(f) GDPR;
- replying to messages – Article 6(1)(f) GDPR.
We do not make decisions about you based solely on automated processing, including profiling, and we do not send marketing communications.
4. Recipients of data
We entrust or disclose your data only to the extent necessary to fulfil your order:
- Apilo sp. z o.o. – provider of the order and warehouse management system;
- carriers delivering parcels, depending on the chosen delivery method: InPost sp. z o.o., DPD Polska sp. z o.o., ORLEN Paczka sp. z o.o.;
- PayPro S.A. (operator of Przelewy24) – for online payments: name, e-mail address, phone number, address, order number and amount, to the extent necessary to process the payment; PayPro S.A. processes this data as a separate controller under its own privacy policy;
- the hosting provider on which the Shop and its database run;
- Google – provider of the e-mail service (Gmail) we use for correspondence;
- our accounting office and bank (for bank transfer payments or refunds);
- public authorities – only where required by law.
5. Transfers outside the EEA
Using Google services (e-mail and the Google Fonts loaded by the website) may involve transferring data, including your IP address, to the USA. Google LLC participates in the EU–U.S. Data Privacy Framework, on the basis of which the European Commission has found an adequate level of data protection (Article 45 GDPR).
6. Retention period
- order-related data – for the limitation period for contractual claims (generally 6 years; for claims for non-conformity of goods sold to a consumer – 2 years from delivery), counted to the end of the calendar year;
- accounting documents – for 5 years from the end of the year in which the tax payment deadline expired;
- correspondence – until it is concluded, and then for the limitation period of any claims;
- the IP address recorded with an order – up to 12 months.
7. Your rights
You have the right to: access your data and receive a copy, rectify your data, have your data erased, restrict processing, data portability, and object to processing based on the Controller’s legitimate interest. To exercise these rights, write to domlyoffice@gmail.com.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
8. Cookies and browser storage
The Shop does not use analytics or advertising cookies and does not track your activity. The contents of your cart are stored only in your browser’s storage (localStorage) – this data is not sent to us until you place an order, and you can delete it at any time by clearing your browser data or emptying your cart.
The details you type into the order form are kept by your browser until you close the tab (sessionStorage), so they are not lost if the page reloads. If you tick “Remember my details on this device”, after you place an order your contact details and address are saved in this browser’s storage (localStorage) and fill in the form on your next purchase. This data is not sent to us except as part of an order you place. You can delete it by unticking this option on your next order or by clearing your browser data.
The website loads fonts from Google Fonts servers, so your browser passes your IP address to Google. Product pages display images loaded from upload.cdn.baselinker.com.
9. Changes to this policy
We may update this policy if the law or the way the Shop operates changes. The current version is always available on this page.