Privacy & Cookies Policy

What are your rights?

You have the right to access and correct your personal data, as well as to request its deletion. You also have the right to object to the processing of your personal data or request that its processing be restricted.

Providing the required personal data is voluntary, but it is necessary for us to provide certain services to you. We do not make any decisions about you based solely on automated processing, including profiling, that would have legal effects or otherwise significantly affect you.

My website uses an SSL certificate to ensure that your data is encrypted.

Below you’ll find all the key information about how your personal data is processed on my website.

Who is the administrator of the website and your personal data?

The website and your personal data are administered by Rememo Aleksandra Staszewska, Annopole 9a, 63-000 Środa Wlkp., Poland, Tax ID (NIP): 7861726854, email: rememo.art@gmail.com.

What is the legal basis for processing personal data?

Personal data is collected and processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), commonly known as the GDPR. The processing of personal data is also governed by the Polish Personal Data Protection Act of 10 May 2018 (consolidated text: Journal of Laws of 2019, item 1781).

For what purposes do I process your personal data?

I process your personal data only to the extent necessary for the operation of my website and store it for the period described in the “How long do I keep your data?” section below.

For the purpose of entering into and performing a contract, I may process personal data such as your first and last name, home address, body measurements, Tax ID (NIP), telephone number, email address, and bank account number. This data is processed on the basis of Article 6(1)(b) of the GDPR, where processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.

In the case of email correspondence, I process personal data such as your first and last name, email address, and telephone number. This processing is based on Article 6(1)(f) of the GDPR, where it is necessary for the purposes of the legitimate interests pursued by the data controller or a third party, and on Article 6(1)(b) of the GDPR, where processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request before entering into a contract.

For direct marketing purposes, I process personal data such as your first and last name, email address, telephone number, and address. This processing is based on Article 6(1)(a) of the GDPR, where you have given your consent to the processing of your personal data for one or more specific purposes.

For the purposes of complying with legal obligations and establishing or pursuing claims, I process personal data such as your first and last name, home address, Tax ID (NIP), email address, telephone number, and IP address. This processing is based on Article 6(1)(c) of the GDPR, where processing is necessary to comply with a legal obligation to which the data controller is subject.

How long do I keep your personal data?

I retain data related to sales contracts and accounting documents (such as invoices) for five years from the end of the tax year in which the transaction took place, in accordance with applicable tax regulations. Data necessary for establishing or pursuing potential claims is retained for six years, in accordance with the general limitation period for claims. Data processed on the basis of marketing consent is retained until that consent is withdrawn.

Who do I share your personal data with?

I share personal data with third parties only to the extent necessary to perform a contract, where you have consented to the processing of your data, or where it is necessary for the legitimate interests pursued by the data controller. These third parties may include online payment providers, banks, courier and postal service providers (such as InPost, DPD and Polish Post) to the extent necessary to deliver your order, as well as marketing service providers. When commonly used marketing tools are used, anonymised cookie data may be transferred to the United States, including to Google LLC and Meta Platforms Inc. Such transfers are made on the basis of the European Commission’s adequacy decision under the EU–US Data Privacy Framework for organisations certified under the programme, including Google LLC and Meta Platforms Inc.

What rights do you have regarding the processing of your personal data?

You have the right to:

– request access to your personal data,
– request the correction of your personal data,
– object to the processing of your personal data,
– request the deletion of your personal data,
– request the restriction of the processing of your personal data,
– request the transfer of your personal data,
– obtain information about automated decision-making, including profiling, as well as the safeguards applied when your data is transferred outside the EU,
– obtain information about the purposes of processing, the categories of personal data processed, and the recipients or categories of recipients of your data,
– lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing of your personal data violates the GDPR,
– obtain information about how long your data will be stored or the criteria used to determine that period, as well as the source of the data,
– obtain a copy of your personal data.

If you wish to exercise any of the rights listed above, please contact me. I will provide you with information about the actions taken in response to your request without undue delay.

You can withdraw your consent to the processing of your personal data at any time. To do so, please contact me by email.

Cookies Policy

Cookies are small text files commonly used by websites to identify the software you are using, tailor content to your preferences, and ensure that websites function properly. They are stored on the device you use and contain information such as the domain name, storage duration, and a specific value. The cookies used on this website are safe and can be divided into session cookies and persistent cookies. Session cookies are stored only until you close your browser. Persistent cookies remain on your device until they are deleted. You can change your cookie preferences or delete persistent cookies at any time through your web browser settings.

I obtain your consent to the use of cookies that are not essential for the website to function, such as analytics and marketing cookies, through a consent banner displayed when you first visit the website. You can change your cookie preferences at any time using the cookie settings available on the website (via the link in the footer) or through your browser settings.

What do I use cookies for?

I use cookies to ensure that the website functions properly and to help promote it. This includes creating analyses and statistics that help me better understand my customers’ needs and analysing user activity through analytics tools provided by companies such as Google LLC ([https://policies.google.com/privacy](https://policies.google.com/privacy)) and Meta Platforms Inc. ([https://www.facebook.com/privacy/policy/](https://www.facebook.com/privacy/policy/)). These tools are widely used, and you can find information about the privacy policies of the companies mentioned above at the links provided. I may use services provided by Google LLC, including Google Analytics, Universal Analytics, Google Tag Manager, Google Ads (formerly Google AdWords), and Google AdSense, as well as the Meta Pixel provided by Meta Platforms Inc. These services help me analyse website traffic based on collected data processed in an anonymised form.