PRIVACY POLICY OF THE ONLINE STORE

WWW.PRIVATEDREAMBOX.COM

§ 1 GENERAL PROVISIONS

The administrator of personal data collected via the online store available at www.privatedreambox.com is Piotr Paweł Skrzypczak, conducting business activity under the business name PIOTR SKRZYPCZAK MANUFAKTURA MEBLI, entered in the Central Register and Information on Economic Activity of the Republic of Poland, kept by the minister competent for economic affairs, with the place of business activity and address for service at:
ul. Morawa 47, 40-353 Katowice, Poland,
NIP: PL6442791869, REGON: 240193059,
e-mail address: contact@privatedreambox.com,
telephone number: +48 516 878 894,
hereinafter referred to as the “Administrator”, who is also the “Service Provider”.
Personal data collected by the Administrator via the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).
All capitalized terms used in this Privacy Policy shall be understood in accordance with the definitions contained in the Regulations of the Online Store www.privatedreambox.com.

§ 2 TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

1. Purpose of processing and legal basis

The Administrator processes Users’ personal data in the following cases:

1.1. Registration of an Account – for the purpose of creating and managing an individual account (Article 6(1)(b) GDPR).
1.2. Placing an order – for the purpose of performing a sales contract (Article 6(1)(b) GDPR).
1.3. Use of the Contact Form – for communication with the Administrator (Article 6(1)(f) GDPR – legitimate interest).

2. Type of personal data processed

The User provides the following data:

2.1. Account: first and last name, login, address, e-mail address, telephone number.
2.2. Order: first and last name, address, Tax Identification Number (NIP), e-mail address, telephone number.
2.3. Contact Form: first name, e-mail address.

3. Personal data retention period

3.1. Data processed for contract performance are stored for the duration of the contract and thereafter for the limitation period for claims (generally 6 years; 3 years for business-related claims).

3.2. Data processed based on consent are stored until consent is withdrawn and subsequently for the limitation period for claims.

4. Additional data collection

When using the Store, additional data may be collected, including:

IP address
domain name
browser type
access time
operating system

5. Marketing consent

With separate consent (Article 6(1)(a) GDPR), data may be used for:

electronic marketing communication
telephone marketing
in accordance with applicable electronic communications law.

6. Profiling

Profiling may be used to tailor advertising content to the User.

7. Definition of profiling

Profiling means automated processing of personal data to evaluate personal aspects such as preferences, interests, behavior, or location. It does not produce legal effects or significantly affect the User.

8. Navigation data

Navigation data (e.g. clicked links, activity) may be collected based on the Administrator’s legitimate interest (Article 6(1)(f) GDPR).

9. Voluntary data provision

Providing personal data is voluntary but necessary for:

concluding a sales contract
using Store services

10. Data protection principles

The Administrator ensures that data are:

10.1. Processed lawfully
10.2. Collected for legitimate purposes
10.3. Accurate and adequate
10.4. Stored only as long as necessary

§ 3 DISCLOSURE OF PERSONAL DATA

Personal data may be shared with service providers, including:

delivery companies
payment providers
accounting services
hosting providers
business software providers
mailing system providers
online store operation software providers

These entities may act either:

as data processors (on behalf of the Administrator), or
as independent data controllers

Data are stored within the European Economic Area (EEA), subject to exceptions.
Data may be transferred outside the EEA (e.g. to the USA) using Standard Contractual Clauses (Article 46 GDPR).

§ 4 USER RIGHTS

The User has the right to:

access data
rectification
erasure
restriction of processing
data portability
objection
withdrawal of consent

Legal bases:

Access – Article 15 GDPR
Rectification – Article 16 GDPR
Erasure – Article 17 GDPR
Restriction – Article 18 GDPR
Portability – Article 20 GDPR
Objection – Article 21 GDPR
Withdrawal of consent – Article 7(3) GDPR

Requests can be sent to: contact@privatedreambox.com
The Administrator responds within 1 month (extendable to 3 months if necessary).
Complaints may be submitted to the President of the Personal Data Protection Office.

§ 5 COOKIES

The website uses cookies.
Cookies are necessary for proper operation and statistics.
Types of cookies:

Session cookies – temporary
Persistent cookies – stored until deleted or expired

Own cookies are used for analytics.
External cookies (e.g. Google Analytics) are also used.
Cookies may be used for advertising personalization.
Users can manage cookies by:

cookie consent banner
browser settings

§ 6 ADDITIONAL SERVICES

The Administrator uses remarketing tools such as Google Ads, based on cookies from Google LLC.
Users can control consent via cookie settings.

§ 7 FINAL PROVISIONS

The Administrator applies appropriate technical and organizational measures to protect personal data.
Safeguards prevent unauthorized access, modification, or loss.
In matters not regulated, GDPR and Polish law apply.
The Privacy Policy may be updated. Changes will be published at least 7 days before entry into force or communicated via e-mail to Users with active Accounts.