Privacy policy

  1. I. GENERAL PROVISIONS

    1. The Privacy Policy defines how Users’ personal data necessary for providing electronic services via the website tapisatelier.pl are collected, processed, and stored. 

    2. The Website collects only such personal data as are necessary to provide and develop the services it offers. 

    3. Personal data collected via the Website are processed in compliance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 (“GDPR”) and the Personal Data Protection Act of 10 May 2018. 

    II. DATA CONTROLLER

    The controller of the personal data collected through the Website is BORUGS Borys Szewczyk, address: Rokiciny-Kolonia, ul. Łódzka 14a, 97-221, NIP: 9820387793, REGON: 522998951; email: kontakt@tapisatelier.pl. 

    III. PURPOSES OF PERSONAL DATA PROCESSING

    1. Personal data are used for purposes including:

      • registration of an account and identity verification,

      • enabling login to the Website,

      • execution of contracts on services/e-services,

      • communication with the User (e.g., live chat, contact form),

      • sending newsletters (with the User’s consent),

      • managing comment systems,

      • providing social media services,

      • promoting the Administrator’s offer,

      • marketing, remarketing, affiliation,

      • personalizing the Website’s content,

      • analytical and statistical activities,

      • debt recovery,

      • pursuing or defending claims. 

    2. Providing personal data is voluntary, but necessary to conclude a contract or use other functionalities of the Website. 

    IV. TYPES OF PERSONAL DATA PROCESSED

    The Administrator may process personal data such as: first and last name, date of birth, residence address, e-mail address, phone number, and NIP (if provided). 

    V. PERIOD OF DATA PROCESSING

    Personal data will be processed for:

    • as long as required for contract performance, i.e., until claims expire following execution;

    • if based on consent — until consent is withdrawn, and after such withdrawal, until claims expire.
      In both cases, the statutory limitation period is 6 years, and 3 years for periodic performance or business-related claims, unless law specifies otherwise. 

    VI. SHARING PERSONAL DATA

    1. Users’ personal data may be shared with: affiliated entities, subcontractors, partners such as e-payment providers, courier/post services, legal and accounting firms. 

    2. Personal data will not be transferred outside the European Economic Area (EEA). 

    VII. USERS’ RIGHTS

    1. Users have the right to: access their personal data, request correction, deletion, restriction of processing, data portability, object to processing, and withdraw consent at any time — without affecting the lawfulness of processing based on consent before its withdrawal. 

    2. Such requests should be sent to kontakt@tapisatelier.pl. 

    3. The Administrator shall comply with or refuse such a request without undue delay, but not later than within one month of receipt. 

    4. Users also have the right to lodge a complaint with the President of the Personal Data Protection Office if they believe their data is being processed in violation of GDPR. 

    VIII. COOKIES

    1. The Website collects information via cookies — including session, persistent, and third-party cookies. 

    2. Cookies support the proper functioning of services on the Website and serve statistical purposes. 

    3. Users may set the scope of cookies’ access in their browser settings. 

    IX. AUTOMATED DECISION-MAKING AND PROFILING

    1. Users’ data are not processed in an automated manner that results in decisions affecting them. 

    2. With the User’s consent, data may be profiled to customize content and personal offers. 

    X. FINAL PROVISIONS

    1. The Administrator may update the Privacy Policy — without limiting Users’ rights. 

    2. Any changes will be communicated via a message displayed on the Website. 

    3. Matters not regulated in this Policy are governed by GDPR and Polish law.