Privacy policy

1. General Provisions

This Privacy Policy governs the processing of personal data and the use of cookies within the online store and registration for ceramic workshops, operated at: www.lvvia.com by Sylwia Turkot Lvvia, ul. Widok 18/1U, 31-564 Kraków, NIP PL6793289581 ("Controller").

The Controller processes personal data in accordance with applicable law, in particular: Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR"), the Personal Data Protection Act, and the Telecommunications Law.

2. Personal Data Controller

The Controller of personal data is:
Sylwia Turkot Lvvia,
address: ul. Widok 18/1U, 31-564 Kraków, Poland. Widok 18/1U, 31-564 Kraków,
e-mail: cudalepianki@gmail.com

3. Scope and Purposes of Data Processing

Personal data may be processed for the following purposes:

Order fulfillment – data such as: first name, last name, address, email address, telephone number, billing and delivery details.

Registration for workshops – first name, last name, email address, telephone number, and possibly billing details.

Maintaining a user account in the store – login, email address, identification data.

Handling inquiries via contact forms.

Marketing and newsletter – after the user has given consent.

Accounting and tax obligations arising from law.

Exercising and defending against claims.

4. Legal Basis for Data Processing

The Controller processes personal data based on:

Article 6, paragraph 1, letter b of the GDPR (sales or service provision contract),

Article 6, paragraph 1, letter c of the GDPR (contract for the provision of services), c GDPR (legal obligations, e.g., tax obligations),

Article 6, paragraph 1, letter f GDPR (legitimate interest of the Controller, e.g., marketing of own products, pursuing claims),

Article 6, paragraph 1, letter a GDPR (consent – e.g., to a newsletter).

5. Data Recipients

Personal data may be shared with:

courier companies and postal operators (delivery),

payment operators (e.g., PayU, Przelewy24, PayPal),

accounting offices,

IT service providers (hosting, website management, newsletter system).

The Controller ensures that the recipients process the data in accordance with the GDPR.

6. Data Retention Period

Data related to the performance of the contract – for its duration and the period required by tax and accounting regulations (at least 5 years).

Data processed based on consent – until its withdrawal.

Marketing Data – until the filing of an objection.

Data required to pursue claims – until the statute of limitations expires.

7. Rights of Data Subjects

Every person has the right to:

access their data,

rectify, erase, restrict processing,

port data,

object to processing,

withdraw consent at any time (if data is processed based on consent),

file a complaint with the President of the Personal Data Protection Office (PUODO).

8. Cookies

The online store uses cookies to ensure the proper operation of the website, facilitate use, maintain statistics, and conduct marketing activities.

Cookies may be first-party cookies (the Administrator) or third-party cookies (e.g., Google Analytics, Facebook Pixel).

The user can manage cookie settings in their web browser. Restricting the use of cookies may affect some website functions.

9. Data Security

The Administrator uses appropriate technical and organizational measures to protect personal data against loss, theft, unauthorized access, and unlawful processing.

10. Changes to the Privacy Policy

The Administrator reserves the right to change this Privacy Policy to adapt it to changes in law or technology. Users will be notified of any changes via the store's website.