Privacy Policy
Dear User! We care about your privacy and want you to feel comfortable when using our services. Below, we present the most important information about the principles governing our processing of your personal data. This information has been prepared in accordance with the GDPR, i.e. the General Data Protection Regulation. Information about the cookies we use can be found in a separate Cookie Policy.
Personal data controller
JAKUB STEFAŃCZYK, an entrepreneur conducting business under the name KAJAWIS JAKUB STEFAŃCZYK, entered in the Central Register and Information on Economic Activity maintained by the minister responsible for economic affairs (the Minister of Finance and Economy), NIP 6572694722, REGON 360548325, ul. Graniczna 16, 25-649 Kielce.
If you wish to contact us regarding our processing of your personal data, please email us at: info@kajawis.pl.
Your rights
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Article 15 GDPR),
- their rectification (Article 16 GDPR),
- erasure (Article 17 GDPR),
- restriction of processing (Article 18 GDPR),
- data portability to another controller (Article 20 GDPR).
As well as the right to object at any time to the processing of your data:
- for reasons relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR, i.e. on our legitimate interests (Article 21(1) GDPR);
- where personal data are processed for direct marketing purposes, insofar as the processing is related to such direct marketing (Article 21(2) GDPR).
Contact us if you wish to exercise your rights. If you consider that your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office.
Personal data and privacy
Below you will find detailed information on the processing of your data depending on the actions you take.
Providing personal data is voluntary. At the same time, providing the data necessary to fulfil an order, create an account or contact us is required — without it, we will not be able to provide the relevant service.
Scope of data processed
Depending on how you use the Shop, we may process, in particular: your first and last name, delivery address, email address, telephone number, order and payment details, and, in the case of an invoice, also the company name, NIP and billing address.
1. Placing an order in the Store
| For what purpose? | fulfilment of your order |
|---|---|
| On what basis? | sales contract (Article 6(1)(b) GDPR); legal obligation related to accounting (Article 6(1)(c) GDPR) |
| For how long? | for the duration of the contract; until the expiry of our legal obligation relating to accounting; and also until the expiry of the period during which claims may be pursued |
| Is providing data voluntary? | yes; providing data is voluntary; however, the data necessary to fulfil the order is required to place it and perform the contract |
| What happens if you do not provide the data? | you will not be able to place an order |
2. Creating an account in the Store
| For what purpose? | performance of the contract for the provision of the Store account service |
|---|---|
| On what basis? | service provision agreement (Article 6(1)(b) GDPR) |
| For how long? | until the account is deleted by you or by us at your request; furthermore, until the expiry of the period during which claims may be pursued |
| What happens if you do not provide the data? | you will not be able to create an account and use its features, such as viewing your order history or checking your order status |
3. Contacting us (e.g. to ask a question)
| For what purpose? | handling your enquiries or requests |
|---|---|
| On what basis? | the contract or steps taken at your request prior to entering into it (Article 6(1)(b) GDPR), where your enquiry concerns a contract; our legitimate interest in communicating with you (Article 6(1)(f) GDPR), where the enquiry is not related to a contract |
| For how long? | for the duration of the contract binding us, until the expiry of the limitation period for claims, or until we uphold your objection to processing |
| What happens if you do not provide the data? | we will not be able to respond to your enquiry or request |
4. Consent to the use of marketing cookies
| For what purpose? | conducting marketing activities, in particular displaying Google Ads and measuring their effectiveness |
|---|---|
| On what basis? | Your consent, given through the cookie settings in the Shop (Article 6(1)(a) GDPR) |
| For how long? | until you withdraw your consent; remember that you may withdraw it at any time in cookie settings |
| What happens if you do not give your consent? | no; the Shop will operate normally, and we will not use cookies for marketing purposes |
5. Taking action or failing to act which may give rise to claims
| For what purpose? | the establishment, pursuit or defence of potential claims related to the concluded agreement or services provided |
|---|---|
| On what basis? | our legitimate interest (Article 6(1)(f) of the GDPR) |
| For how long? | until the expiry of the limitation period for claims or until we uphold your objection to processing |
| What happens if you do not provide the data? | inability to establish, pursue or defend claims |
6. Visiting the Shop (statistics)
| For what purpose? | compiling aggregate statistics on visits to the Shop in order to develop it and improve its operation; for this purpose, we use Google Analytics in a cookieless mode, which does not save anything on your device and does not allow us to identify you |
|---|---|
| On what basis? | our legitimate interest (Article 6(1)(f) of the GDPR) |
| For how long? | we store statistical data in aggregated form, with no possibility of linking it to you |
| What happens if you do not provide the data? | nothing; the statistics are aggregated and do not affect how the Shop operates for you |
Profiling
The Shop does not use personal data for User profiling. We do not make automated decisions concerning you that would produce legal effects or similarly significantly affect you (Article 22 GDPR).
Data security
When processing your personal data, we apply organisational and technical measures in accordance with the relevant legal provisions, including encrypting the connection using an SSL certificate. Your account password is stored only in encrypted form.
External services / data recipients
We use the services of third parties that support us in conducting our business. We entrust your data to them for processing; these entities process the data solely on our documented instructions.
| Action | Data recipients |
|---|---|
| any action in connection with the Store | entity providing Store hosting services; provider of software supporting order processing |
| placing an order with online payment | ING Bank Śląski S.A., provider of the ING Pay payment service; in the case of deferred payment via PayPo: PayPo sp. z o.o. |
| placing an order with delivery | the carrier delivering by the method selected by you (InPost, DPD or Orlen Paczka) |
| consenting to marketing cookies | Google Ireland Limited (Google Ads service); Google may transfer data to countries outside the European Economic Area on the basis of appropriate legal safeguards, including standard contractual clauses |
| visits to the Store (statistics) | Google Ireland Limited (Google Analytics service in cookie-free mode); the same rules for transferring data outside the European Economic Area apply as above |
In addition, your data may be disclosed to the relevant public authorities to the extent that we are required to disclose it under the law.
Cookies
Information on which cookies the Store uses and how you can manage them can be found in Cookie Policy.