Privacy Policy

PRIVACY POLICY

WILLOWS AND JAWS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

§1. General Information

  1. This Privacy Policy defines the rules for processing personal data of users of the online store available at www.willowsandjaws.com.

  2. The data controller is:

WILLOWS AND JAWS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Wiejska 10F
41-404 Mysłowice
Poland
REGON: 541845187
NIP (VAT ID): 2220932095
KRS: 0001175662
E-mail: jaws@willowsandjaws.com

  1. Personal data is processed in accordance with:

    • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR),

    • applicable Polish data protection laws,

    • other relevant legal provisions.

§2. Scope of Processed Data

The Controller may process the following categories of personal data:

  1. Identification data (first name, last name).

  2. Contact details (e-mail address, phone number).

  3. Address details (delivery address, billing address).

  4. Order-related information.

  5. Technical data (IP address, browser data, cookies).

  6. Marketing data (if consent has been given).

§3. Purposes of Data Processing

Personal data is processed for the following purposes:

  1. Performance of sales contracts and order fulfillment.

  2. Handling returns and complaints.

  3. Issuing accounting documents and complying with legal obligations.

  4. Responding to inquiries sent via contact forms or e-mail.

  5. Sending newsletters (if consent has been granted).

  6. Conducting marketing and remarketing activities.

  7. Analyzing website traffic and improving Store functionality.

§4. Legal Basis for Processing

Personal data is processed based on:

  1. Article 6(1)(b) GDPR – performance of a contract.

  2. Article 6(1)(c) GDPR – compliance with legal obligations (e.g., tax regulations).

  3. Article 6(1)(f) GDPR – legitimate interest (e.g., analytics, fraud prevention).

  4. Article 6(1)(a) GDPR – consent (e.g., newsletter, marketing).

§5. Data Recipients

Personal data may be shared with trusted partners cooperating with the Controller, including:

  • payment service providers (e.g., Przelewy24),

  • courier and logistics companies,

  • accounting service providers,

  • IT service providers,

  • analytics providers (e.g., Google Analytics),

  • advertising platforms (e.g., Meta / Facebook).

Personal data may be transferred outside the European Economic Area only where appropriate legal safeguards are in place.

§6. Data Retention Period

  1. Data related to contracts and orders – for the duration required by law (including tax and accounting regulations).

  2. Marketing data – until consent is withdrawn.

  3. Analytical data – according to the retention settings of the respective analytics tools.

§7. Data Subject Rights

Individuals whose data is processed have the right to:

  1. Access their data.

  2. Rectify inaccurate data.

  3. Request erasure of data (“right to be forgotten”).

  4. Restrict processing.

  5. Data portability.

  6. Object to processing.

  7. Withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal).

To exercise these rights, please contact the Controller.

You also have the right to lodge a complaint with the President of the Polish Data Protection Authority (UODO) or another competent supervisory authority within the EU.

§8. Newsletter

  1. The newsletter is sent only to users who have provided explicit consent.

  2. Consent may be withdrawn at any time by clicking the unsubscribe link in the newsletter or by contacting the Controller.

§9. Data Security

The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration.

§10. Cookies

Detailed information about cookies and similar technologies is available in a separate Cookies Policy.

§11. Final Provisions

The Controller reserves the right to amend this Privacy Policy. The current version is always available on the Store’s website.