Privacy Policy

Privacy and Cookie Policy
effective from 20 October 2026

Contents

1. Data controller

The controller of personal data is Manufaktura69 s.c. Małgorzata Żółtowska, Wojciech Żółtowski, Kaborno 64, 11-030 Purda, Poland, VAT ID (NIP) PL7393523513 (the “Controller”). For any matters concerning personal data, please write to meggy.bernhardt@gmail.com or to the postal address.

2. Purposes and legal bases

Purpose Data Legal basis (GDPR) Retention
Fulfilling the order and sales contract name, address, e-mail, phone, invoice details Art. 6(1)(b) – performance of a contract until the contract is completed and complaint periods have expired
Accounting and tax obligations data from invoices and sales records Art. 6(1)(c) – legal obligation 5 years from the end of the tax year
Complaints, withdrawals, pursuing claims order data and correspondence Art. 6(1)(f) – legitimate interest until claims become time-barred
Replying to messages or requests for quotation data provided in the form or e-mail Art. 6(1)(f) – legitimate interest until the correspondence ends, no longer than 3 years
Website security and visit statistics IP address, browser and device data Art. 6(1)(f) – legitimate interest up to 60 days (security logs)

Providing data is voluntary, but a contract cannot be concluded without the data needed to fulfil the order. Data is not used for automated decision-making or profiling.

3. Recipients of data

Data may be shared only with entities that help run the shop, and only to the extent needed for their task:

  • OVH Sp. z o.o. – website hosting;
  • Google Ireland Ltd. – e-mail (Gmail);
  • PayPro S.A. (Przelewy24) and PayPal (Europe) S.à r.l. et Cie, S.C.A. – electronic payments;
  • Mail Boxes Etc. and transport companies – delivery of shipments;
  • accounting office – bookkeeping;
  • the Controller’s bank – for bank transfer payments.

Data may be transferred outside the European Economic Area only by the e-mail (Google) and payment (PayPal) providers, on the basis of standard contractual clauses or a European Commission adequacy decision, in accordance with their privacy policies.

4. Your rights

You have the right to access your data, to rectify, erase or restrict its processing, to data portability, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) or with the data protection authority in your country of residence.

5. Cookies

The website uses only cookies that are necessary for it to work. It does not use advertising or tracking cookies.

Cookie Purpose Duration
woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_* cart contents and order processing up to 2 days
pll_language remembering the selected site language 1 year
sbjs_* source of the visit for an order (shop statistics, no cross-site tracking) up to 6 months
wordpress_*, wp-settings-* logging in to the admin panel (administrator only) session / up to 1 year

You can change cookie settings or delete cookies in your browser. Blocking necessary cookies may make it impossible to place an order.

6. Changes to this policy

This policy may be updated when the law or the tools used in the shop change. Effective from 20 October 2026.