Privacy Policy

1. General provisions

  1. This Privacy Policy sets out the rules for the processing of personal data and the use of cookies within the online store and registration for ceramic workshops, operated at: www.lvvia.com by Sylwia Turkot Lvvia, Widok 18/1U Street, 31-564 Kraków, NIP PL6793289581 ("Administrator").

  2. The Administrator processes personal data in accordance with applicable law, in particular: Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR"), the Personal Data Protection Act and the Telecommunications Law.

2. Personal data administrator

The personal data administrator is:
Sylwia Turkot Lvvia,
address: Widok Street 18/1U, 31-564 Krakow,
e-mail: cudalepianki@gmail.com

3. Scope and purposes of data processing

Personal data may be processed for the following purposes:

  1. Order fulfillment – ​​data such as: name, surname, address, e-mail, telephone number, invoice and delivery details.

  2. Workshop registration – name, surname, e-mail, telephone number, and possibly billing details.

  3. Maintaining a user account in the store – login, e-mail address, identification data.

  4. Handling inquiries via contact forms .

  5. Marketing and newsletter – after the user has given consent.

  6. Accounting and tax obligations arising from the law.

  7. Claims enforcement and protection against claims .

4. Legal basis for data processing

The Administrator processes personal data on the basis of:

  • Article 6(1)(b) of the GDPR (sales or service provision contract),

  • Article 6(1)(c) of the GDPR (legal obligations, e.g. tax obligations),

  • Article 6(1)(f) of the GDPR (legitimate interest of the Controller, e.g. marketing of own products, pursuing claims),

  • Article 6(1)(a) of the GDPR (consent – ​​e.g. to the newsletter).

5. Data recipients

Personal data may be shared:

  • courier companies and postal operators (delivery),

  • payment operators (e.g. PayU, Przelewy24, PayPal),

  • accounting office,

  • IT service providers (hosting, website maintenance, newsletter system).

The Administrator ensures that recipients process data in accordance with the GDPR.

6. Data storage period

  • Data related to the performance of the contract – for its duration and the period required by tax and accounting regulations (at least 5 years).

  • Data processed on the basis of consent – ​​until it is withdrawn.

  • Marketing data – to object.

  • Data necessary to pursue claims – until the statute of limitations expires.

7. Rights of data subjects

Every person has the right to:

  • access to your data,

  • rectification, deletion, restriction of processing,

  • data transfer,

  • object to processing,

  • withdraw consent at any time (if data is processed on its basis),

  • submitting a complaint to the President of the Personal Data Protection Office (PUODO).

8. Cookies

  1. The online store uses cookies to ensure the proper functioning of the website, facilitate use, conduct statistics and conduct marketing activities.

  2. Cookies may be first-party (Administrator) or third-party (e.g. Google Analytics, Facebook Pixel).

  3. Users can manage cookie settings in their web browser. Restricting the use of cookies may affect some website features.

9. Data security

The Administrator uses appropriate technical and organizational measures to protect personal data against loss, theft, access by unauthorized persons and unlawful processing.

10. Changes to the privacy policy

The Administrator reserves the right to amend this Privacy Policy to adapt it to changes in the law or technology. Users will be notified of any changes via the store's website.