1. Personal data controller

The controller of your personal data is Iryna Mukosii with its registered office in Warsaw.

2. Personal Data Protection Officer

The Data Protection Officer appointed by Stark Sp. z o. o. can be contacted by writing to the postal address or email address – mukosiiiryna@wp.pl.

3. Purposes of personal data processing

The online store processes your personal data for the following purposes:

• implementation of rights and obligations arising from the contract with the Controller for the provision of services or delivery of goods
• issuance of an invoice/duplicate invoice and/or proof of payment
• the establishment, defense or pursuit of possible claims
• direct marketing

4. Legal basis for processing

The processing of personal data is carried out on the basis of:

• Art. 6(1)(b) GDPR – performance of a contract
• Art. 6(1)(c) GDPR – legal obligation (e.g. issuing an invoice)
• Art. 6(1)(f) GDPR – the controller’s legitimate interest
• Art. 6 para. 1 point a GDPR – consent (in the case of marketing)

5. Data retention period

Personal data will be stored for the period:

• necessary for the performance of the contract and the pursuit of claims arising from it
• required by law (e.g. tax regulations – 5 years)
• until consent is withdrawn (in the case of processing based on consent)

6. Rights of the data subject

You have the right to:

• access to your personal data
• correction of data
• erasure of data ("right to be forgotten")
• restriction of processing of data
• transfer of data
• to object to the processing
• withdrawal of consent at any time
• lodging a complaint with the President of the Personal Data Protection Office

7. Data recipients

Personal data may be transferred:

• entities providing courier/postal services
• entities handling electronic payments
• state authorities (on the basis of legal regulations)
• to IT systems providers

8. Voluntariness of providing data

Providing personal data is voluntary, but necessary for:

• conclusion and performance of the contract
• issuing a VAT invoice
• execution of delivery

Failure to provide the data will make it impossible to process the order.

9. Automated decision-making

Personal data will not be processed in an automated manner, including in the form of profiling, in a way that produces legal effects concerning you or similarly significantly affects your situation.