Privacy Policy
Dear User! We care about your privacy and want you to feel comfortable when using our services. Below, we present the most important information about the principles governing our processing of your personal data. This information has been prepared in accordance with the GDPR, i.e. the General Data Protection Regulation. Information about the cookies we use can be found in a separate Cookie Policy.
Personal data controller
JAKUB STEFAŃCZYK, an entrepreneur conducting business under the name KAJAWIS JAKUB STEFAŃCZYK, entered in the Central Register and Information on Economic Activity maintained by the minister responsible for economic affairs (the Minister of Finance and Economy), NIP 6572694722, REGON 360548325, ul. Graniczna 16, 25-649 Kielce.
If you wish to contact us regarding our processing of your personal data, please email us at: info@kajawis.pl.
Your rights
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Article 15 GDPR),
- their rectification (Article 16 GDPR),
- erasure (Article 17 GDPR),
- restriction of processing (Article 18 GDPR),
- data portability to another controller (Article 20 GDPR).
As well as the right to object at any time to the processing of your data:
- for reasons relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR, i.e. on our legitimate interests (Article 21(1) GDPR);
- where personal data are processed for direct marketing purposes, insofar as the processing is related to such direct marketing (Article 21(2) GDPR).
Contact us if you wish to exercise your rights. If you consider that your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office.
Personal data and privacy
Below you will find detailed information on the processing of your data depending on the actions you take.
Providing personal data is voluntary. At the same time, providing the data necessary to fulfil an order, create an account or contact us is required — without it, we will not be able to provide the relevant service.
Scope of data processed
Depending on how you use the Shop, we may process, in particular: your first and last name, delivery address, email address, telephone number, order and payment details, and, in the case of an invoice, also the company name, NIP and billing address.
1. Placing an order in the Store
| For what purpose? | fulfilment of your order |
|---|---|
| On what basis? | sales contract (Article 6(1)(b) GDPR); legal obligation related to accounting (Article 6(1)(c) GDPR) |
| For how long? | for the duration of the contract; until the expiry of our legal obligation relating to accounting; and also until the expiry of the period during which claims may be pursued |
| Is providing data voluntary? | yes; providing data is voluntary; however, the data necessary to fulfil the order is required to place it and perform the contract |
| What happens if you do not provide the data? | you will not be able to place an order |
2. Creating an account in the Store
| For what purpose? | performance of the contract for the provision of the Store account service |
|---|---|
| On what basis? | service provision agreement (Article 6(1)(b) GDPR) |
| For how long? | until the account is deleted by you or by us at your request; furthermore, until the expiry of the period during which claims may be pursued |
| What happens if you do not provide the data? | you will not be able to create an account and use its features, such as viewing your order history or checking your order status |
3. Contacting us (e.g. to ask a question)
| For what purpose? | handling your enquiries or requests |
|---|---|
| On what basis? | the contract or steps taken at your request prior to entering into it (Article 6(1)(b) GDPR), where your enquiry concerns a contract; our legitimate interest in communicating with you (Article 6(1)(f) GDPR), where the enquiry is not related to a contract |
| For how long? | for the duration of the contract binding us, until the expiry of the limitation period for claims, or until we uphold your objection to processing |
| What happens if you do not provide the data? | we will not be able to respond to your enquiry or request |
4. Taking action or failing to act in a way that may give rise to claims
| For what purpose? | the establishment, pursuit or defence of potential claims related to the concluded agreement or services provided |
|---|---|
| On what basis? | our legitimate interest (Article 6(1)(f) of the GDPR) |
| For how long? | until the expiry of the limitation period for claims or until we uphold your objection to processing |
| What happens if you do not provide the data? | inability to establish, pursue or defend claims |
Signing in with Google or Apple
If you choose to sign in with Google or Apple, we receive the information needed to create your Account or sign you in from your chosen provider: your email address and, if shared, your first and last name. For Apple sign-in, we also store your account identifier from that provider. If you choose Apple's Hide My Email option, we receive a forwarding email address. We use this information to provide your Account. We do not receive your Google or Apple password. Use of these services is also subject to your chosen provider's privacy practices.
We also store encrypted sign-in tokens and technical connection identifiers so we can disconnect Google or Apple when you delete your Account. After account deletion, credentials needed solely to retry disconnection are retained for up to 7 days and deleted sooner when disconnection finishes. If automatic disconnection is unavailable, we provide instructions for removing the connection in Google or Apple settings.
Profiling
The Shop does not use personal data for User profiling. We do not make automated decisions concerning you that would produce legal effects or similarly significantly affect you (Article 22 GDPR).
Data security
When processing your personal data, we apply organisational and technical measures in accordance with the relevant legal provisions, including encrypting the connection using an SSL certificate. Your account password is stored only in encrypted form.
External services / data recipients
We use the services of third parties that support us in conducting our business. We entrust your data to them for processing; these entities process the data solely on our documented instructions.
| Action | Data recipients |
|---|---|
| any action in connection with the Store | entity providing Store hosting services; provider of software supporting order processing |
| placing an order with online payment | ING Bank Śląski S.A., provider of the ING Pay payment service; in the case of deferred payment via PayPo: PayPo sp. z o.o. |
| placing an order with delivery | the carrier delivering by the method selected by you (InPost, DPD or Orlen Paczka) |
In addition, your data may be disclosed to the relevant public authorities to the extent that we are required to disclose it under the law.
Cookies
Information on which cookies the Store uses and how you can manage them can be found in Cookie Policy.