Privacy Policy

This Privacy Policy sets out the rules for processing and protecting personal data provided by Users in connection with the use of the online store available at vezanna.com (hereinafter: the “Store”).

The controller of personal data is: VE&ZANNA Zuzanna Adamczyk Tax ID (NIP): 9691678903 Address: Żernica 44-144, Radosna 9 E-mail contact for data protection matters: info@vezanna.com (hereinafter: the “Controller”).

Data protection is carried out in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data.

The Controller processes Users’ personal data for the following purposes:

• fulfilling orders placed in the Store, including issuing sales documents and delivering ordered products (legal basis: Article 6(1)(b) GDPR — performance of a contract);
• processing online payments (legal basis: Article 6(1)(b) GDPR);
• creating and maintaining a User account, if the User decides to create one (legal basis: Article 6(1)(b) GDPR);
• fulfilling the Controller’s legal obligations, e.g. accounting and tax obligations (legal basis: Article 6(1)(c) GDPR);
• establishing, pursuing, or defending against claims (legal basis: Article 6(1)(f) GDPR — the Controller’s legitimate interest);
• contacting the User regarding matters related to order fulfilment (legal basis: Article 6(1)(b) and (f) GDPR).

Depending on how the Store is used, the Controller may process the following data:

• identification and contact data: first name, last name, e-mail address, phone number;
• delivery address: street, house/apartment number, postal code, city, country;
• order-related data: purchase history, value and subject of the order;
• account data (if the User decides to create an account): e-mail address and password (stored in hashed form);
• billing data necessary to process payment — processed directly by the payment operator Stripe (see point 5).

The Store allows purchases to be made both by Users with an account and in “guest” checkout mode, without the need for registration.

Providing personal data is voluntary but necessary to place and fulfil an order and — in the case of a decision to register — to create an account in the Store. Failure to provide the required data may prevent the order from being fulfilled.

In connection with the provision of the Store’s services, Users’ personal data may be disclosed to the following categories of recipients:

• Stripe, Inc. — provider of online payment processing services; Stripe processes billing data (including payment card data) under the terms of its own privacy policy available at stripe.com;
• cloud infrastructure and authentication service providers — providing database infrastructure and user account authentication systems, used to store order data and account data;
• courier companies / postal operators — to the extent necessary to deliver the shipment (first name, last name, delivery address, phone number);
• hosting and IT service providers — to the extent necessary to maintain and secure the Store’s infrastructure;
• public authorities — in cases provided for by law.

Some of the service providers listed in point 5 (including Stripe and our cloud infrastructure providers) may process personal data on servers located outside the European Economic Area (including in the United States). In such cases, the data is transferred on the basis of appropriate mechanisms ensuring compliance with the GDPR, in particular standard contractual clauses approved by the European Commission. Detailed information is available in the respective providers’ privacy policies.

Personal data is retained for a period:

• necessary to fulfil the order and for the period resulting from accounting and tax obligations (as a general rule, 5 years counted from the end of the year in which the tax obligation arose);
• of having an account in the Store — until it is deleted by the User or the Controller;
• necessary to pursue potential claims — until they become time-barred in accordance with civil law provisions.

Every User has the right to:

• access their personal data;
• rectify (correct) their data;
• erase their data (the “right to be forgotten”), to the extent this does not conflict with the Controller’s legal obligations;
• restrict the processing of their data;
• data portability;
• object to processing based on Article 6(1)(f) GDPR;
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal;
• lodge a complaint with the President of the Personal Data Protection Office (PUODO) if the User believes that the processing of their data violates the GDPR.

To exercise the above rights, please contact us at: info@vezanna.com.

The Store may use cookies necessary for the proper functioning of the website, including maintaining the User’s session and the contents of the shopping cart. These files are not used for marketing purposes or profiling.

Users can manage their cookie settings independently through their web browser settings, including blocking or deleting saved files — however, this may affect the proper functioning of some of the Store’s features.

The Controller applies appropriate technical and organizational measures to ensure the protection of processed personal data, including encryption of data transmission (SSL/TLS protocol) and the use of trusted third-party service providers that apply appropriate security measures.

Users’ personal data is not used for automated decision-making, including profiling, that produces legal effects or similarly significantly affects the User.

The Controller reserves the right to make changes to this Privacy Policy, in particular in connection with changes in the law, technology, or the scope of services provided. The current version of the Privacy Policy is always available on the Store’s website.

If you have any questions regarding this Privacy Policy or the processing of personal data, please contact:

VE&ZANNA Zuzanna Adamczyk Żernica 44-144, Radosna 9 E-mail: info@vezanna.com