Skip to main content
English / $
Close search engine Clear Search
Products in the cart: 0. See details

Your cart is empty

Privacy policy

INFORMATION ON THE PROCESSING OF YOUR PERSONAL DATA
BY CZERWONY KAPTUR WERONIKA KUTNER

Starting 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (known as “GDPR”), enters into force.

This notice explains how Czerwony Kaptur Weronika Kutner will process your personal data as of that date and the rules that apply.
You may withdraw your consent to data processing at any time.

1. Data Controller

Your personal data will be processed by:
Czerwony Kaptur Weronika Kutner
Registered address: ul. Surowieckiego 8/12, 02-785 Warsaw, Poland.
The Data Controller is Weronika Kutner.

2. Contact for Data Protection

For any matters related to the processing or protection of your personal data, please contact us:

  • Email: deadfaceplugs@gmail.com

  • Postal mail: Czerwony Kaptur Weronika Kutner, ul. Surowieckiego 8/12, 02-785 Warsaw, Poland

3. Purpose and Legal Basis of Processing

Your personal data may be processed in connection with:

a. Performance of a sales contract you enter into at www.deadfaceplugs.pl, including communication necessary for its execution.
Legal basis: Art. 6(1)(b) GDPR; Polish Civil Code of 23 April 1964.

b. Tax and accounting obligations related to any purchase you make.
Legal basis: Art. 6(1)(c) GDPR; Art. 86 §1 of the Polish Tax Ordinance Act of 29 August 1997.

4. Processing on the Basis of Legitimate Interests

We may also process your data for legitimate interests, including:

  • handling payment services,

  • responding to email or phone inquiries not directly linked to a contract,

  • correspondence and contact for marketing with your consent,

  • organization of contests, loyalty programs, and promotions (with your separate consent),

  • service security and fraud prevention,

  • archiving and backup,

  • ensuring legal accountability.

5. Data Recipients

Access to your data may be granted to:

  • the Data Controller and staff involved in order fulfillment and marketing,

  • processors providing accounting, IT, hosting, postal, or courier services,

  • independent controllers such as banks or payment institutions for processing payments and refunds,

  • authorized public authorities (courts, law enforcement) if required by law.

6. Transfer to Third Countries

Your data will not be transferred outside the European Economic Area.

7. Data Retention

  • Registered customers who made purchases: data retained for the life of the business and for the statutory limitation period for tax obligations, unless you exercise your rights to shorten this period.

  • Registered but no purchase: data retained for up to 12 months to allow future purchases without re-registration, then deleted.

  • Purchases without registration: data retained until the tax obligation limitation period expires.

  • Contests, promotions, loyalty programs: data retained for 30 days after the event, unless a longer period is communicated in the specific terms.

  • Other consent-based processing: retention period will be communicated when processing begins.

You may request earlier deletion or restriction of your data at any time (see Sections 8 and 9).

8. Your Rights

You have the right to:

  • access and obtain a copy of your personal data,

  • correct or rectify your data,

  • request deletion or restriction of processing,

  • object to processing,

  • withdraw consent at any time,

  • request transfer of your data to another controller.

Contact details for exercising these rights are provided in Section 2.

9. Right to Withdraw Consent

You may withdraw consent for processing at any time without affecting the lawfulness of processing based on consent before its withdrawal.

10. Right to Lodge a Complaint

You may lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (PUODO)
(currently replacing the former GIODO)
Address: ul. Stawki 2, 00-193 Warsaw, Poland
Website: https://uodo.gov.pl

11. Requirement to Provide Data

a. Providing personal data when registering at www.deadfaceplugs.pl is a legal requirement necessary to make purchases.
Legal basis: Art. 6(1)(b) GDPR.

b. Consent to receive informational or promotional materials (e.g., newsletter) is voluntary and does not affect your ability to shop.

c. Participation in contests, loyalty programs, or promotions requiring personal data is voluntary; without data you cannot participate.

12. Automated Decision-Making

Your personal data will not be processed through automated decision-making or profiling.