🔐 PRIVACY POLICY

§1 Data Controller

The controller of personal data is:

Tivanno
Address: Baranowo Szmaragdowa 16 62-081
Tax ID (NIP): [insert]
E-mail: info@tivanno.pl

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§2 Scope of Collected Data

When using the Store, we may process the following personal data:

  • full name

  • delivery address

  • e-mail address

  • phone number

  • billing details (if applicable)

  • IP address

  • data contained in correspondence

Providing personal data is voluntary, but necessary to conclude and perform the sales contract.

§3 Purpose of Data Processing

Personal data is processed for the following purposes:

  1. processing orders and performing the sales contract

  2. handling returns and complaints

  3. fulfilling accounting and tax obligations

  4. responding to inquiries submitted via contact forms or e-mail

  5. marketing of our own products (if consent has been given)

§4 Legal Basis for Processing

Personal data is processed on the basis of:

  • Article 6(1)(b) GDPR – performance of a contract

  • Article 6(1)(c) GDPR – compliance with a legal obligation

  • Article 6(1)(f) GDPR – legitimate interest of the Controller

  • Article 6(1)(a) GDPR – consent (for marketing activities)

§5 Data Recipients

Personal data may be transferred to entities cooperating with the Controller, in particular:

  • courier and shipping companies

  • electronic payment operators

  • accounting service providers

  • hosting service providers

  • analytics and marketing tool providers (e.g., Google Analytics, Meta)

Personal data is not sold to third parties.

§6 Data Retention Period

Personal data is stored:

  • for the duration of the contract,

  • for the period required by tax and accounting regulations (generally 5 years),

  • until consent is withdrawn (in the case of marketing).

§7 Rights of the Data Subject

Every data subject has the right to:

  • access their personal data,

  • rectify inaccurate data,

  • request erasure (“right to be forgotten”),

  • restrict processing,

  • data portability,

  • object to processing,

  • withdraw consent at any time (where processing is based on consent).

To exercise these rights, please contact the Controller via e-mail.

The data subject also has the right to lodge a complaint with the competent data protection authority.

§8 Cookies

The Store uses cookies for the following purposes:

  • ensuring proper operation of the website,

  • processing orders,

  • statistical analysis,

  • marketing activities.

Users may manage cookie preferences through their browser settings.

Where required by law, cookies are used based on the User’s consent.

§9 Transfer of Data Outside the EU

If tools such as Google or Meta are used, personal data may be transferred outside the European Economic Area (EEA).

Such transfers are carried out on the basis of appropriate legal safeguards, including Standard Contractual Clauses approved by the European Commission.

§10 Data Security

The Controller applies appropriate technical and organizational measures to ensure the security and protection of personal data against unauthorized access, loss, or unlawful processing.

Shopping Basket