Privacy policy

Privacy Policy and GDPR – Belleza D’or

  1. Data Controller

1.1. The controller of the personal data of Customers of the Belleza D’or store is:

Przemysław Kowalczyk Faktoria Handlowa "Kowalczyk"
Address: Wspólna 22, 34-434 Harklowa, Poland
Tax Identification Number/NIP: 7352903207
E-mail: kowalczyk.oficjalnie@gmail.com
Phone: 0048 507 115 361

1.2. The Data Protection Officer may be contacted at the following e-mail address: kowalczyk.oficjalnie@gmail.com

  1. Purposes and Legal Basis for Data Processing

2.1. Customers’ personal data is processed for the following purposes:

fulfilment of orders and provision of services, pursuant to Article 6(1)(b) of the GDPR,

handling complaints and returns,

contacting the Customer in matters related to the order,

sending newsletters or marketing offers, if the Customer has given consent, pursuant to Article 6(1)(a) of the GDPR,

conducting sales analyses and statistics in order to improve services, pursuant to Article 6(1)(f) of the GDPR – the legitimate interest of the data controller.

2.2. Data is processed only to the extent necessary to achieve the above purposes.

  1. Scope of Processed Data

3.1. Depending on the type of service, Belleza D’or may process the following data:

first and last name,

correspondence address and shipping address,

e-mail address, phone number,

payment details, including account number and payment method; financial data is not stored by the store and is transmitted securely through the payment operator,

preferences regarding products and services,

order history.

  1. Transfer of Personal Data

4.1. Customer data may be transferred to entities cooperating with Belleza D’or only to the extent necessary to fulfil orders, including:

carriers and courier companies,

electronic payment operators,

entities handling complaints and product servicing.

4.2. Data is not transferred to third countries outside the European Union without ensuring an adequate level of data protection.

  1. Customer Rights

Each Customer has the right to:

access their personal data,

rectify incorrect or incomplete data,

request deletion of data, also known as the “right to be forgotten”,

restrict the processing of data,

transfer data to another controller,

object to the processing of data for marketing purposes,

lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office.

  1. Data Retention Period

6.1. Personal data processed for the purpose of fulfilling orders is stored until the limitation period for possible claims arising from the contract expires.

6.2. Data processed for marketing purposes is stored until the Customer withdraws their consent.

  1. Cookies

7.1. The website of the Belleza D’or store uses cookies for the following purposes:

ensuring the proper functioning of the website,

analysing website traffic,

personalising offers and advertisements.

7.2. The Customer may manage cookie settings in their web browser at any time or opt out of using cookies. Disabling cookies may limit the functionality of the website.

  1. Newsletter and Marketing Consents

8.1. A Customer who subscribes to the newsletter voluntarily consents to the processing of their personal data for the purpose of receiving commercial information.

8.2. Consent may be withdrawn at any time by using the link in the footer of the e-mail or by contacting the data controller.

  1. Security Measures

9.1. Belleza D’or applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure to unauthorised persons.

9.2. Financial data is processed exclusively by certified payment operators.

  1. Final Provisions

10.1. Use of the Belleza D’or store constitutes acceptance of this Privacy Policy and GDPR provisions.

10.2. The store reserves the right to amend this Privacy Policy. The new rules apply from the moment they are published on the store’s website.

10.3. In matters not regulated by this Policy, the provisions of Polish law shall apply, including the GDPR and the Polish Personal Data Protection Act.