PRIVACY POLICY OF THE ONLINE STORE
Version dated: April 21, 2026
§ 1. GENERAL PROVISIONS
The controller of personal data collected via the online store is Vincent Van sp. z o.o., with its registered office at Aleja Grunwaldzka 2, 82-300 Elbląg, entered into the register of entrepreneurs under NIP number: 5783175579 (hereinafter referred to as the “Controller”).
You may contact the Controller regarding personal data protection at the following email address: [email protected].
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
§ 2. PURPOSE AND LEGAL BASIS FOR DATA PROCESSING
We process your data for the following purposes:
- Fulfillment of orders and sales contracts – pursuant to Article 6(1)(b) GDPR (necessity for the performance of a contract).
- Management of a user account in the WooCommerce system – pursuant to Article 6(1)(b) GDPR.
- Compliance with legal obligations (issuing invoices, accounting) – pursuant to Article 6(1)(c) GDPR.
- Establishment, exercise, or defense of legal claims – pursuant to Article 6(1)(f) GDPR (legitimate interest).
- Handling inquiries submitted via the contact form – pursuant to Article 6(1)(f) GDPR.
§ 3. DATA RECIPIENTS
In order to ensure the proper functioning of the store and delivery of products, the Controller uses services of external entities to whom your data may be transferred:
- Payment providers: Stripe – for processing non-cash payments for orders.
- Courier companies: DPD and InPost (including parcel locker services) – for delivery of ordered goods.
- Hosting provider: The company maintaining the store on a server (access to data for technical purposes).
- Accounting office: For settlement of transactions (if applicable).
§ 4. DATA RETENTION PERIOD
- Data necessary for order fulfillment is stored until the expiration of claims arising from the sales contract.
- Accounting and tax data is stored for 5 years, calculated from the end of the calendar year in which the tax payment deadline expired.
- Data processed for contact purposes is stored until the end of correspondence.
§ 5. USER RIGHTS
Every data subject has the right to:
- Access their data and receive a copy of it.
- Rectify (correct) their data.
- Request deletion of data (“right to be forgotten”).
- Restrict data processing.
- Data portability to another controller.
- Object to data processing.
- Lodge a complaint with the President of the Personal Data Protection Office (PUODO).
§ 6. COOKIES AND WOOCOMMERCE TECHNOLOGY
The store uses cookies to ensure the proper functioning of the WooCommerce system. These are necessary for:
- Remembering products added to the cart.
- Maintaining the session of a logged-in user.
- Ensuring transaction security.
The user may change cookie settings in their browser at any time; however, this may affect the proper functioning of the store.
§ 7. FINAL PROVISIONS
The Controller applies technical and organizational measures to ensure the protection of processed personal data appropriate to the risks and the categories of data being protected.