๐ง 1. Who are we and what are we responsible for?
The entity responsible for the simplymade.pl website and the processing of your data is:
Simplymade. Piotr Biaลek
ul. Pogodna 16, 43-376 Godziszka, Poland
Tax ID (NIP): 5532278715, REGON: 241197036
In this context, we are the so-called "Data Controller." This means we decide what happens to your data and are responsible for it โ in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
ย
๐พ 2. What data do we collect โ and when?
๐น Technical data โ collected automatically
When you visit our website, your browser sends us information such as:
- Your device's IP address,
- Browser type (e.g., Chrome, Safari),
- Operating system (e.g., Windows, Android),
- Language and regional settings,
- Time of access,
- Clicks on links and tabs,
- Information about the website you arrived from.
This data is collected automatically using cookies and analytical tools (e.g., Google Analytics). We do not see your name or surname here โ the data is anonymized.
๐น Data provided voluntarily by you
When you use the order form, contact form, or register an account, you provide, among others:
- First and last name,
- Email address,
- Phone number,
- Delivery address,
- Company details (for VAT invoices),
- The content of your inquiry (if you send a message).
We need this information to fulfill your order, answer your questions, or ship your package.
ย
๐๏ธ 3. Why do we process your data?
๐ฆ a) Order Fulfillment โ from acceptance and payment to delivery and invoicing.
๐ง b) Customer Support โ so we can respond to your questions.
๐งพ c) Compliance with Legal Obligations โ e.g., storing accounting documents for 5 years.
๐ d) Analytics โ improving website performance, optimizing the cart, and improving efficiency (anonymous data).
โ๏ธ e) Marketing โ only with your explicit consent (e.g., newsletter, special offers).
ย
โ๏ธ 3a. Legal Basis and Purpose of Processing
The purpose of the Seller processing the Buyer's data, provided in connection with purchases in the Store, is order fulfillment.
The legal basis for processing personal data is:
- The sales contract or actions taken at the Buyer's request leading to its conclusion (Art. 6(1)(b) GDPR),
- A legal obligation incumbent on the Seller related to accounting (Art. 6(1)(c) GDPR),
- The Seller's legitimate interest, consisting of processing data for the purpose of establishing, pursuing, or defending possible claims (Art. 6(1)(f) GDPR).
ย
๐ค 4. To whom do we entrust the data?
Your data may only be shared with entities that help us run the store, such as:
- Courier companies (InPost, DPD, GLS, FedEx, UPS),
- Payment operators (PayPal, Przelewy24),
- Accounting office,
- Hosting and IT service providers,
- Analytical services (Google Analytics โ anonymized data).
We do not sell your data. We do not share it with third parties without a legal basis.
ย
๐ 5. Data outside the EU
Some services (e.g., Google) have servers outside the EU. Data may only be transferred in accordance with the security mechanisms provided for in the GDPR (e.g., standard contractual clauses).
ย
๐ 6. How long do we store the data?
- Order fulfillment data โ until the contract is completed + the statutory warranty/claims period.
- Accounting data โ 5 years.
- Contact form data โ until the matter is resolved (max. 6 months).
- Marketing data โ until you unsubscribe or the campaign ends.
ย
๐ 7. How do we secure your data?
- SSL Certificate (encryption),
- Strong passwords and restricted access to systems,
- Regular updates,
- Security monitoring.
Remember: no system on the Internet is 100% immune to attacks โ therefore, take care of your passwords and use trusted devices.
ย
โ๏ธ 8. Your Rights (GDPR)
You have the right to:
- Access your data,
- Rectification (correction),
- Erasure ("the right to be forgotten"),
- Restriction of processing,
- Data portability,
- Object to processing,
- Withdraw consent (if previously given),
- Lodge a complaint with the President of the Personal Data Protection Office (UODO).
Contact regarding your data:
๐ง biuro@simplymade.pl
ย
๐ 9. External Links
The website may contain links to other services (e.g., YouTube, Instagram). Once clicked, the privacy policy of that specific service applies โ we encourage you to check them.