§1 Data Controller
The controller of personal data is Marta Trojanowska Studio Impress, ul. Kleszczowa 41/14, 02-485 Warsaw, Poland, VAT ID (NIP) 5272464331, e-mail: info@martatrojanowska.com, tel.: +48 733 663 633.
Data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and applicable legal provisions.
§2 Scope of Processed Data
1. Data provided by the Customer
- first and last name,
- e-mail address,
- phone number,
- delivery address,
- billing details,
- content of correspondence,
- data provided in forms.
2. Data related to made-to-measure orders
In the case of products manufactured according to individual specifications, additional data may be processed, including measurements and information necessary to fulfil the order.
3. Data collected automatically
- IP address,
- cookie identifiers,
- device and browser data,
- information about activity on the website.
§3 Purposes and Legal Bases for Processing
- order fulfilment – Article 6(1)(b) GDPR,
- made-to-measure production – Article 6(1)(b) GDPR,
- handling inquiries – Article 6(1)(b) or (f) GDPR,
- accounting obligations – Article 6(1)(c) GDPR,
- newsletter – Article 6(1)(a) GDPR,
- marketing – Article 6(1)(a) or (f) GDPR.
§4 Cookies
The website uses:
- essential cookies,
- analytical cookies (Google Analytics 4),
- marketing cookies (Google Ads, Meta Pixel).
Analytical and marketing cookies are activated only after consent is given. The website uses a consent management mechanism compliant with Google Consent Mode v2.
§5 Data Recipients
Data may be transferred to entities processing data on the basis of data processing agreements, in particular:
- hosting providers,
- mailing system providers,
- accounting service providers,
- courier companies.
In the case of electronic payments, data is transferred to payment operators (e.g. tpay, PayPal), who act as separate data controllers with respect to payment data.
§6 Transfers Outside the EEA
Due to the use of tools such as Google, Meta, and PayPal, data may be transferred outside the European Economic Area on the basis of appropriate legal mechanisms (e.g. the EU–US Data Privacy Framework or standard contractual clauses).
§7 Data Retention Period
- data related to contracts – for the duration of the contract and the limitation period for claims,
- accounting data – in accordance with tax regulations,
- marketing data – until consent is withdrawn.
§8 Rights of the Data Subject
- the right of access to data,
- the right to rectification,
- the right to erasure,
- the right to restriction of processing,
- the right to object,
- the right to withdraw consent,
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
§9 Changes to the Policy
This Policy may be amended in the event of changes in law or in the manner of data processing. The version applicable at the time of data collection shall apply to data collected before any amendment.