Privacy and cookies policy

You can access our websites without providing your personal data. Each time you call up the website, the server automatically saves only the so-called server logs, which include the name of the file requested, your IP address, the date and time of the call, the amount of data transferred, and the Internet service provider submitting the query (access data), documenting the fact that the website was accessed.

This data is analyzed solely to ensure the proper functioning of the website and to improve our offer. As part of the assessment of interests, this serves to safeguard our legitimate interest in the proper presentation of our product offer (Art. 6(1)(f) GDPR). Access data is deleted within seven days of the end of your visit to the website.

We collect personal information when you provide it to us to place an order or contact us (e.g., by e-mail or using a contact form). Mandatory fields are marked as such because they concern data that we need to fulfill a contract or resolve the issue you are contacting us about. You cannot place an order or contact us without providing this information. The types of data collected result directly from the forms into which it is entered. We use the data you provide to fulfill the contract and to answer your inquiries. Once the contract has been fulfilled, the processing of your data will be restricted, and after the data retention periods required under relevant tax and accounting regulations expire, your data will be deleted, unless you expressly consent to its further use or we reserve the right to its further use in cases permitted by law, of which we inform you in this privacy policy.

To fulfill the contract, we provide your data to the courier company handling the shipping, provided it is necessary to deliver the ordered goods. Depending on the payment service provider you choose when placing the order, we transfer the payment data collected for this purpose to the credit institution handling the payment and possibly to the payment service provider chosen by us or by you (e.g., PayU / PayPal). Some payment service providers collect data themselves if you create an account with them. In such cases, as part of the order, you must log into your payment service provider account using your access data. The privacy policy of the respective payment service provider also applies.

Some shippers and payment service providers that work with us are based in non-EU countries. Personal data will only be transferred to these companies if it is necessary for contract fulfillment or based on appropriate safeguards.

3.1. Providing data to courier companies

If you give us your express consent to do so when placing an order or afterwards, we will provide your e-mail address and phone number to the selected courier company so they can contact you before delivery to issue a notice or arrange the delivery details.

The above consent may be revoked at any time by sending an appropriate message to our contact address provided in the "Our contact details and your rights" section or by sending a message directly to the courier company: General Logistics Systems Poland Sp. z o.o. (ul. Tęczowa 10, Głuchów, 62-052 Komorniki) or DPD Polska Sp. z o.o. (ul. Mineralna 15, 02-274 Warsaw). Once you have withdrawn your consent, we will delete the data provided for this purpose unless you expressly consent to its continued use for other purposes.

3.2. Transfer of data for the purpose of collecting reviews (Trustindex)

To examine shopping satisfaction, verify service quality, and enable you to add a review of your fulfilled order, we may transfer your personal data to an external review management service – Trustindex Kft. based in Hungary (2724 Újlengyel, Nyári Pál utca 15., registration number: 13-09-223096).

• Verification of reviews (Omnibus Directive): Published reviews are verified. Invitations to leave a review are sent automatically via email exclusively to customers who have actually made a purchase in our store. This ensures that product and service ratings come from real buyers.
• Scope of data and retention: We transfer only your e-mail address, first name, and internal order number (to link the review to the transaction). This data is processed only for the time necessary to send a single invitation or until consent is successfully withdrawn / an objection is raised.
• Legal basis: This activity is based on a data processing agreement and serves our legitimate interest (Art. 6(1)(f) GDPR) in surveying customer satisfaction and presenting reliable reviews. You have the right to object to the processing of your data for this purpose at any time by contacting us directly or using the unsubscribe link at the bottom of the email sent by Trustindex.

Advertising sent by e-mail after subscribing to the newsletter
If you subscribe to our newsletter, we will use the data necessary for this purpose or provided by you separately to regularly send you our newsletter electronically based on your consent.

You can unsubscribe from the newsletter at any time by sending us a relevant message or by using the unsubscribe link included in the newsletter. Once you have unsubscribed, we will delete your e-mail address from our mailing list, unless you expressly consent to the continued use of your data for other purposes.

The newsletter is sent as part of the outsourcing of data processing to a specialized service provider with a registered office in a country belonging to the European Union or the European Economic Area.

You have the right to obtain free information about your personal data stored by us, as well as the right to rectify, restrict processing, erase ("right to be forgotten"), or request the portability of your data.

If you have any questions regarding the collection, processing, and use of your personal data, or if you wish to revoke your consent or object to the processing of certain data, please contact the data controller: Drukarnia Piga.pl Sp. z o.o., ul. Mysłowicka 1, 43-100 Tychy, Poland, e-mail: [email protected].

Additionally, you have the right to lodge a complaint with the relevant supervisory authority responsible for data protection (e.g., the President of the Personal Data Protection Office in Poland – PUODO, or the Information Commissioner's Office – ICO in the UK).

If we process personal data to safeguard our legitimate interests (Art. 6(1)(f) GDPR) in the manner described in this privacy policy, you may object to such processing at any time, with effect for the future, on grounds relating to your particular situation.

If the processing takes place for direct marketing purposes, you can exercise your right to object unconditionally at any time. In such a case, we will immediately cease processing your personal data for this purpose.

On our websites, third parties place information in the form of cookies and other similar technologies on your end device (e.g., computer, smartphone) and access it. These are our trusted partners with whom we constantly cooperate to adapt advertisements on our and their websites to your needs and interests, measure traffic, and provide integrated services. Such trusted partners include entities within the Wirtualna Polska capital group.