Privacy policy

The controller of personal data is Monika Mazurek, [TO COMPLETE: legal form of the business, full address], [TO COMPLETE: tax identification number (NIP)]. Contact regarding data: kontakt@twojeolejki.pl.

twojeolejki.pl does not keep user accounts and does not store order data on the server. The contact form and the order summary only compose the text of a message, which you then send to us yourself — by e-mail or through Messenger.

1. The data you give us in a message: your name, e-mail address or phone number, delivery address, and the content of the message.
2. Technical data collected by the analytics tool, if you consent to it — see point 6.

1. Answering an enquiry and corresponding about the choice of products — art. 6(1)(b) GDPR (steps towards concluding a contract) or (f) (legitimate interest: handling correspondence).
2. Fulfilling an order, delivery and handling complaints — art. 6(1)(b) GDPR.
3. Tax and accounting obligations — art. 6(1)(c) GDPR.
4. Site visit statistics — art. 6(1)(a) GDPR (your consent), which you may withdraw at any time.

1. The e-mail provider and Meta Platforms (Messenger), if you choose that channel — limited to the content you send us.
2. Courier companies and the parcel-locker operator — limited to the data needed to deliver the parcel.
3. Hosting Ukraine LTD (ukraine.com.ua) — the hosting provider for this site, limited to standard server logs. The servers are located in Ukraine, that is, outside the European Economic Area.
4. An accounting office — limited to sales documents, [TO COMPLETE: if applicable].

We keep correspondence for as long as it is needed to handle the matter, and then for the limitation period for any claims. Sales documents are kept for the period required by tax law.

The site stores in your browser the technical data it needs to work — the contents of the cart, the wishlist, and your choice about consenting to statistics. That data stays in your browser only and is not sent to us.

Visit statistics are switched on only after consent is given in the banner. The analytics tool collects data in aggregate form (page views, referral source, device type) and is not used to identify individuals. You can withdraw consent by clearing the site data in your browser settings.

1. The right of access to your data and to receive a copy of it.
2. The right to rectification, erasure or restriction of processing.
3. The right to data portability.
4. The right to object to processing based on legitimate interest.
5. The right to withdraw consent at any time — without affecting the lawfulness of processing before its withdrawal.
6. The right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Providing the data is voluntary, but necessary in order to answer an enquiry and to fulfil an order. The data is not used for automated decision-making or profiling.