1. Data Controller

The data controller responsible for your personal information is:

Hanna Yeulakova
StindyArt
Based in Lwowska 17/4, 00-660 Warszawa, Poland
Email: stindyart@gmail.com


2. What Personal Data We Collect

We may collect and process the following types of personal data:

  • Identification and contact details: name, email address, phone number, billing/shipping address

  • Order details: items purchased, order number, payment status

  • Communication data: emails, contact form submissions, messages

  • Technical data: IP address, browser type, device information, cookies


3. Purposes of Processing and Legal Basis

PurposeLegal Basis
Fulfilling and delivering your ordersContract necessity (Art. 6(1)(b) GDPR)
Communicating with youLegitimate interest (Art. 6(1)(f))
Invoicing, taxes, and accountingLegal obligation (Art. 6(1)(c))
Marketing and newslettersConsent (Art. 6(1)(a))
Handling returns and disputesContract necessity (Art. 6(1)(b))

4. Data Retention

We retain your personal data only as long as necessary for the purposes described above:

  • Order and invoice data: up to 6 years (for tax and accounting purposes)

  • Communication data: up to 12 months after last contact

  • Marketing data: until you withdraw consent

  • User account data: until your account is deleted or inactive for 24 months


5. Data Sharing

We only share your personal data with trusted third parties when necessary:

  • Payment providers (e.g., Stripe, PayPal)

  • Shipping carriers (e.g., DHL, InPost, Polish Post)

  • Accounting services

  • Website maintenance or hosting providers (e.g., Shopify, WordPress)

All processors are contractually obligated to protect your data under GDPR.


6. Your Rights Under the GDPR

You have the right to:

  • Access your personal data

  • Correct or update incorrect data

  • Request erasure ("right to be forgotten")

  • Restrict or object to data processing

  • Data portability (receive a copy of your data)

  • Withdraw your consent at any time

  • File a complaint with the data protection authority (UODO – https://uodo.gov.pl)

To exercise your rights, contact us at: stindyart@gmail.com


7. Cookies and Tracking

Our website uses cookies and similar tracking technologies to:

  • Ensure proper website functionality

  • Analyze visitor behavior (e.g., Google Analytics)

  • Personalize your browsing experience

You can manage cookie settings through your browser at any time.


8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. Your data is stored securely and accessed only by authorized individuals.


9. International Transfers

Your personal data may be transferred to and stored in countries outside the European Economic Area (EEA), but only with appropriate safeguards in place, such as standard contractual clauses or adequacy decisions.


10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal or operational requirements. The latest version will always be available on our website.

Last updated: August 1, 2025