Privacy Policy and Cookies

This document defines the rules for processing personal data and using cookies in connection with Users’ use of the Retrowood.pl website, operated by:

  • Data Controller: RETROWOOD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
  • Registered Address: ul. Malborska 41, 03-286 Warsaw, Poland
  • Tax ID (NIP): 5372622841
  • REGON: 061360194
  • KRS: 0000404880
  • Contact: biuro@retrowood.pl, tel. 885 966 966

1. Purposes and Legal Basis for Processing Personal Data

Personal data is processed for the following purposes:

  • order fulfillment and service provision – Art. 6(1)(b) GDPR,
  • managing the customer account – Art. 6(1)(b) GDPR,
  • handling complaints – Art. 6(1)(b) GDPR,
  • tax and accounting purposes – Art. 6(1)(c) GDPR,
  • customer satisfaction surveys – Art. 6(1)(f) GDPR,
  • direct marketing – Art. 6(1)(f) GDPR or consent – Art. 6(1)(a) GDPR,
  • analytical and statistical purposes – Art. 6(1)(f) GDPR,
  • establishing and pursuing claims – Art. 6(1)(f) GDPR.

2. Categories of Processed Data

The administrator processes, among others, name, surname, address, email, phone number, IP address, and data contained in cookies.

3. Data Recipients

Data may be transferred to entities supporting the Administrator’s activities, such as:

  • courier and logistics companies,
  • payment service providers,
  • accounting offices,
  • providers of analytical and marketing tools (e.g., Google, Facebook),
  • IT and hosting service providers.

4. Transfer of Data Outside the EEA

Data may be transferred outside the European Economic Area in connection with the use of tools such as Google Analytics or Meta Ads. The Administrator ensures an adequate level of data protection (e.g., through standard EU contractual clauses).

5. Data Retention Period

  • account-related data – until the account is deleted,
  • order-related data – for the period required by law (e.g., tax law),
  • data processed based on consent – until consent is withdrawn,
  • data necessary to defend claims – until the claims expire.

6. Rights of Data Subjects

Every individual has the right to:

  • access their data,
  • correct their data,
  • delete their data,
  • restrict processing,
  • data portability,
  • object to processing,
  • file a complaint with the President of UODO (Polish Data Protection Authority).

7. Voluntariness of Providing Data

Providing personal data is voluntary but necessary to use certain features of the website, including placing orders and contacting the Administrator.

8. Cookies Policy

  • The website uses cookies to ensure proper operation, conduct statistics, and marketing.
  • During the first visit, the user consents to cookies or may refuse them according to browser settings or the cookie banner.
  • Cookies can be deleted or blocked via browser settings.
  • Detailed information about the cookies used is available in your browser settings and the privacy policies of external service providers.

9. Changes to the Privacy Policy

The Administrator reserves the right to change this privacy policy and will inform users on the website at least 7 days in advance.