Tel: +48 721 506 234

Ozzi Design company logo

Privacy Policy

Store address: https://ozzidesign.eu

Controller:

OZZI DESIGNE Dominik Ozga,
Świętojańska 101, 35-304 Rzeszów, Poland,
VAT EU: PL8133870856,
e-mail: shop@ozzidesign.eu,
Tel.:
+48 667 634 678 (PL)
+48 721 506 234 (EN)

1) Zakres dokumentu i powiązania

This document describes the processing of personal data in the Store and communication channels (forms, e-mail, phone, newsletter, customer account). Cookie rules are described in a separate Cookie Policy.

2) Categories of data

  1. Identification data;
  2. contact data; order data;
  3. account data; marketing data (with consent);
  4. technical data (logs, device identifiers – details in the Cookie Policy).

3) Purposes and legal bases

  1. Order fulfillment and contract performance – Art. 6(1)(b) GDPR.
  2. Customer account management – Art. 6(1)(b) GDPR.
  3. Contact and handling inquiries – Art. 6(1)(b/f) GDPR.
  4. Newsletter/marketing – Art. 6(1)(a) GDPR (consent) and/or Art. 6(1)(f) GDPR (legitimate interest) in compliance with electronic communications regulations.
  5. Analysis and statistics – Art. 6(1)(f) GDPR (analytics/marketing tools activated after consent in the cookie banner).
  6. Legal claims and archiving – Art. 6(1)(f) GDPR.
  7. Legal obligations (accounting, taxes) – Art. 6(1)(c) GDPR.

4) Data recipients

  1. Payment operators and banks;
  2. courier/transport companies; IT/hosting providers and mailing tool providers;
  3. accounting office;
  4. analytics/marketing tool providers (after consent in the cookie banner); service partners.

5) Transfers of data outside the EEA (international transfers)

We may transfer your personal data to third countries (outside the European Economic Area) when it is necessary to provide services (e.g., cloud providers, mailing systems, analytics). In such cases, we apply appropriate safeguards required by GDPR, in particular:
  1. adequacy decisions issued by the European Commission (Art. 45 GDPR), if applicable to the given country/recipient;
  2. standard contractual clauses of the European Commission (Art. 46 GDPR) and – where necessary – additional technical and organizational safeguards;
  3. exceptionally – if the safeguards under Art. 46 cannot be applied – one of the exceptions provided in Art. 49 GDPR (e.g., necessity for contract performance or your explicit consent, about which you will be informed before the transfer).
Example categories of recipients outside the EEA (subject to change):
  1. cloud/hosting and CDN providers;
  2. e-mail and newsletter tool providers;
  3. analytics/marketing tool providers (activated only after your consent in the cookie banner).
You can always obtain a copy of the applied safeguards (e.g., standard contractual clauses) – contact us at shop@ozzidesign.eu. Information about specific recipients is available upon request or in our Cookie Policy (when it concerns online tools).

6) Data retention periods

  1. Transaction data – for the duration of the contract and the limitation period for claims, as well as the period required by accounting and tax regulations;
  2. Customer account – until the account is deleted;
  3. Newsletter/marketing – until consent/objection is withdrawn;
  4. Correspondence – until the matter is resolved and for the necessary archiving period;
  5. Cookies – according to the periods specified in the Cookie Policy.

7) Rights of data subjects

  1. Right of access to data;
  2. Right to rectification of data;
  3. Right to erasure of data;
  4. Right to restriction of processing;
  5. Right to data portability;
  6. Right to object (including objection to marketing),
  7. Right to withdraw consent at any time;
  8. Right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
How to exercise your rights? Contact us at shop@ozzidesign.eu or by mail to the Controller’s address. We respond without undue delay – within a maximum of 1 month (with the possibility of extension in complex cases).

8) Obligation to provide data

Providing data is voluntary but necessary to conclude and perform the contract. Data for marketing/newsletter purposes is voluntary and you may withdraw your consent at any time.

9) Automated decisions and profiling

We do not make decisions producing legal effects based solely on automated processing. Marketing profiling may be applied only with your consent – with the possibility to withdraw it.

10) Commercial information

Sending newsletters and marketing messages requires consent and we provide an easy way to unsubscribe (link in the footer or STOP for SMS).

11) Policy changes

We may update this Policy, in particular due to changes in law, tools, and processes. Changes will be announced on the website.