Privacy Policy

§ 1

Personal data controller

The controller of your personal data is PPHU „SPIN" Konrad Kiersztyn, with its registered office at ul. Okólna 8/10, 95-020 Janówka, Andrespol municipality, Poland, Tax ID (NIP): 7262375638.

In all matters relating to the processing of personal data you can contact us:

• e-mail: [email protected]
• phone: +48 42 212 22 15
• correspondence address: Okólna 8/10, 95-020 Janówka, Andrespol municipality, Poland

§ 2

Purpose and legal basis of data processing

We process your personal data only for specific purposes and on an appropriate legal basis:

• Handling enquiries and orders – we process data in order to reply to messages sent via the contact form or e-mail and to fulfil orders (Art. 6(1)(b) or (f) GDPR).
• Provision of services – data necessary for the production and delivery of medals, trophies, pins and keychains (Art. 6(1)(b) GDPR).
• Marketing of our own products – informing you about the Spinfactory offer, only with your consent or on the basis of legitimate interest (Art. 6(1)(a) or (f) GDPR).
• Legal obligations – storing accounting documents and invoices in accordance with tax regulations (Art. 6(1)(c) GDPR).

§ 3

Scope of processed data

Depending on the purpose of processing, we may collect the following data:

• Full name or company name
• E-mail address
• Phone number
• Delivery address
• IP address and data on activity on the website (cookies, server logs)
• Invoicing data (tax ID, company address) – only for the purpose of fulfilling an order

We do not process special categories of data (sensitive data) within the meaning of Art. 9 GDPR.

§ 4

Recipients of personal data

Your data may only be transferred to trusted entities with which we cooperate:

• IT and hosting service providers – for the technical maintenance of the website and e-mail
• Courier and transport companies – to the extent necessary to deliver orders
• Google LLC – as part of analytics tools (Google Analytics), in accordance with Google's privacy policy
• Accounting service providers – to the extent necessary to handle invoices and settlements

Data is not transferred to third countries outside the EEA without appropriate safeguards (including standard contractual clauses).

§ 5

Data retention period

• Contact form data – stored until the enquiry has been answered or until consent is withdrawn
• Data related to order fulfilment – for the duration of the contract and up to 3 years after its termination (civil claims)
• Accounting documents – for 5 years from the end of the tax year, in accordance with tax regulations
• Analytics data (cookies) – a maximum of 26 months, in accordance with the Google Analytics configuration

§ 6

Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access – you can obtain information about what data we process and for what purpose
• Right to rectification – you can request the correction of inaccurate data or the completion of incomplete data
• Right to erasure – you can request the deletion of data when it is no longer needed for the purpose for which it was collected
• Right to restriction of processing – you can request that data processing be suspended in certain cases
• Right to data portability – you can receive your data in a machine-readable format
• Right to object – you can object to the processing of data for marketing purposes or processing based on legitimate interest
• Right to withdraw consent – you can withdraw your consent to data processing at any time, without affecting the lawfulness of processing before withdrawal

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, if you believe that the processing of your data violates the GDPR.

To exercise the above rights, contact us at [email protected]. We will reply within 30 days.

§ 7

Cookies

The spinfactory.eu website uses cookies – small text files saved on your device by your web browser.

We use the following types of cookies:

• Necessary – ensure the website works properly; do not require consent
• Analytics – allow us to analyse traffic and user behaviour (Google Analytics); require consent

You can manage cookies through your web browser settings. Disabling cookies may limit the functionality of the website.

§ 8

Analytics tools

We use the following tools on the website:

• Google Analytics 4 – an analytics tool from Google LLC. Data is sent to Google's servers using standard contractual clauses. You can block tracking by installing the Google Analytics Opt-out browser add-on.

Detailed information on how Google processes data can be found in Google's privacy policy.

§ 9

Changes to the Privacy Policy

We reserve the right to update this Privacy Policy in connection with changes in the law, the development of the services we offer or technical requirements.

We will inform you of any significant change by updating the date at the top of this document. We encourage you to review the Policy regularly.

§ 10

Contact regarding personal data

Please contact us in all matters relating to the protection of personal data.