This Privacy and Cookie Policy sets out the rules for processing personal data and using cookies and similar technologies in connection with the use of the SZARBI Store available at https://sklep.szarbi.net.
§ 1. Controller and definitions
- The controller of personal data is: Papaja Martyna Jaworska, Złota 75A/7, 00-819 Warszawa, NIP (Tax ID): 7962807028, e-mail: [email protected].
- Store / Website – the website available at https://sklep.szarbi.net.
- User – any person using the Store or contacting the Controller.
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
§ 2. Purposes, legal bases and period of data processing
1. Order fulfilment and conclusion of the contract
Data provided in the order form is processed in order to accept and fulfil the order, handle payment and delivery, communicate regarding the order and perform the contract. The legal basis is Art. 6(1)(b) GDPR. Providing data is voluntary but necessary to conclude and perform the contract.
Order-related data may subsequently be stored for the period required by tax and accounting regulations and until any claims become time-barred.
2. Customer account
If the User creates an Account in the Store, their data is processed in order to create and maintain the Account and to provide access to the history and features assigned to the Account. The legal basis is Art. 6(1)(b) GDPR. Data is processed until the Account is deleted and thereafter – to the extent necessary – until any potential claims become time-barred.
3. Contact and handling of enquiries
Data sent via the contact form, e-mail, telephone, instant messenger or social media profile is processed in order to respond and conduct correspondence. The legal basis is the Controller's legitimate interest, i.e. handling enquiries and communicating with Users – Art. 6(1)(f) GDPR.
Data is processed until the correspondence ends and thereafter – where justified – until any potential claims become time-barred.
4. Tax and accounting obligations
Data contained in accounting documents, invoices and sales-related documentation is processed in order to fulfil the legal obligations incumbent on the Controller. The legal basis is Art. 6(1)(c) GDPR in conjunction with the applicable tax and accounting regulations.
5. Establishing and defending claims
Data may be processed in order to establish, pursue or defend against claims. The legal basis is the Controller's legitimate interest – Art. 6(1)(f) GDPR. Data is processed until the claims become time-barred.
6. Newsletter and direct marketing
If the User subscribes to the newsletter or consents to receiving commercial information, data may be processed in order to send such content on the basis of the relevant consent and the regulations on electronic communications. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
7. Analytics and online marketing
If the User consents to the relevant categories of cookies or similar technologies, data on the use of the Store may be processed for the purposes of compiling statistics, analysing traffic, measuring the effectiveness of marketing activities, personalising ads and creating audiences. Depending on the configuration, the Store may use, among others, Google Analytics and Meta tools, including Meta Pixel (Facebook Pixel).
Analytics and marketing technologies that are not necessary for the proper functioning of the Store are activated only after obtaining the User's required consent.
§ 3. Data recipients
- Data may be transferred to entities whose services the Controller uses in connection with running the Store, in particular hosting and IT infrastructure providers, e-commerce software providers, payment processors, courier companies and postal operators, the accounting office, e-mail providers, analytics and marketing tool providers, and entities providing technical or legal support.
- Data is transferred only to the extent necessary to achieve specific purposes and on the basis of an appropriate legal basis or data processing agreement.
- In connection with the use of technology providers' services, data may be transferred outside the European Economic Area. In such cases, the transfer takes place only using mechanisms provided for by the GDPR, e.g. an adequacy decision, the EU–US Data Privacy Framework where applicable, or standard contractual clauses.
§ 4. Rights of data subjects
To the extent provided by the GDPR, the User may have:
- the right to access data and obtain a copy,
- the right to rectification of data,
- the right to erasure of data,
- the right to restriction of processing,
- the right to data portability,
- the right to object to processing based on Art. 6(1)(f) GDPR,
- the right to withdraw consent at any time, where processing is based on consent,
- the right to lodge a complaint with the President of the Personal Data Protection Office.
To exercise these rights, please contact the Administrator at [email protected].
§ 5. Voluntary provision of data
Providing data is, as a rule, voluntary. If the data are necessary to conclude or perform a contract, issue an accounting document or fulfil a legal obligation, failure to provide them may make it impossible to carry out the given activity.
§ 6. Data security
- The Administrator applies appropriate technical and organisational measures to protect data against loss, unauthorised access, disclosure or modification.
- Access to data is granted only to persons and entities for whom it is necessary to perform specific tasks.
§ 7. Cookies and similar technologies
- The Shop uses cookies, i.e. small pieces of information stored on the User's device, and may use other similar technologies.
- Cookies may be used, among other things, to ensure the proper functioning of the Shop, maintain the session and shopping cart, remember settings, ensure security, compile statistics, analyse traffic and carry out marketing activities.
- The Shop may use:
- essential cookies – necessary for the operation of the Shop or the provision of a service requested by the User; they may be used without separate consent to the extent permitted by law,
- analytics cookies – used to measure and analyse how the Shop is used,
- marketing cookies – used, among other things, to measure advertising, create audiences and personalise marketing communications.
- An up-to-date list of the cookies used, their providers, purposes and retention periods is available in the consent management tool / cookie banner displayed in the Shop.
- The User may accept or reject individual categories of cookies, except for those essential for the operation of the Shop. Consent should be given through an affirmative action.
- The User may change or withdraw their consent at any time using the cookie settings available in the Shop. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
- The User may also manage cookies through their browser settings. However, blocking certain cookies may affect the operation of selected features of the Shop.
§ 8. Google Analytics and Meta tools
- Subject to appropriate consent, the Shop may use Google Analytics to analyse statistics and how the Website is used.
- Subject to appropriate consent, the Shop may use Meta tools, including Meta Pixel (Facebook Pixel), to measure advertising effectiveness, create audiences and carry out marketing activities.
- Data collected by these tools may include, among other things, online identifiers, device and browser information, IP address, information about activity in the Shop and interactions with advertisements – depending on the configuration of the specific tool.
- Detailed information about active tools and cookies is presented in the cookie consent settings.
§ 9. Server logs
Using the Shop may involve recording events in server logs. Information such as the IP address, date and time of the request, and information about the browser, operating system or technical errors may be used for administrative, security, diagnostic and abuse-prevention purposes.
§ 10. Changes to the Policy
- The Policy may be updated, in particular in the event of changes in legislation, the way the Shop operates, the scope of data processed or the tools used.
- The current version of the Policy is published in the Shop.
- For privacy-related matters, please contact us at [email protected].
Version effective from: 21 September 2026
