Skip to main content
Cart

PRIVACY POLICY

This Privacy Policy sets out the rules for the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR). 


1. DATA CONTROLLER

The controller of personal data is: Ewelina Dzienyńska Studio Projektowe ul. Wacława Iwaszkiewicza 29, 32-406 Zakliczyn, Poland NIP: 6322042533, REGON: 543367421 Contact: hello@plantcouture.shop

 

2. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING

Data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR) for the following purposes:

  • Order fulfillment and sales contract performance (Art. 6(1)(b) GDPR).

  • Compliance with legal obligations (invoicing, accounting documentation – Art. 6(1)(c) GDPR).

  • Handling returns and complaints (Art. 6(1)(b) and (c) GDPR).

  • Direct marketing / Newsletter (based on voluntary consent – Art. 6(1)(a) GDPR).

  • Analytics and store traffic statistics (legitimate interest – Art. 6(1)(f) GDPR).

 

3. DATA RECIPIENTS

Personal data may be transferred to the following third-party entities supporting the store's operations:

  • Store software provider: Dreamcommerce S.A. (Shoper platform).

  • Payment operators: PayPro S.A. (Przelewy24) and the bank maintaining the Controller's account.

  • Courier and logistics companies: InPost S.A., DPD Polska Sp. z o.o.

  • Analytical and marketing tools: Google Ireland Limited (Google Analytics, Google Ads), Meta Platforms Ireland Limited (Meta Pixel).

 

4. DATA RETENTION PERIOD

  • Order data: For a period of 5 years, starting from the end of the calendar year in which the tax payment deadline expired (legal requirement).

  • Customer account: Until a request for account deletion is submitted.

  • Newsletter: Until the User withdraws their consent.

 

5. USER RIGHTS

Every data subject has the right to:

  • Access their data and receive a copy.

  • Rectify (correct) their data.

  • Erasure of data ("right to be forgotten").

  • Restrict data processing.

  • Data portability.

  • Object to processing.

  • Lodge a complaint with the President of the Personal Data Protection Office (UODO).

 

6. ADDITIONAL INFORMATION

  • Providing data is voluntary but necessary to place and fulfill an order.

  • Data is not used for automated decision-making (profiling) that produces legal effects for the User.