Privacy Policy
Privacy Policy of the Woodcarver Store
https://woodcarver.pl
(‘Store’)
Dear User,
We care about your privacy and want you to feel comfortable while using our services. That is why below we present the most important information about how we process your personal data and about the cookies used by our Store. This information has been prepared with regard to the GDPR, i.e. the General Data Protection Regulation.
PERSONAL DATA CONTROLLER
Daniel Nalepka, an entrepreneur running a business under the business name Woodcarver Daniel Nalepka, entered in the Central Register and Information on Economic Activity (CEIDG) kept by the minister competent for the economy and for maintaining the Central Register and Information on Economic Activity (CEIDG), Tax ID (NIP) 9930680198, REGON (statistical number) 387887167, Łokietka 71, 33-160 Ryglice, Poland.
If you wish to contact us regarding our processing of your personal data, write to us at: biuro@woodcarver.pl.
YOUR RIGHTS
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Art. 15 GDPR),
- its rectification (Art. 16 GDPR),
- its erasure (Art. 17 GDPR),
- restriction of its processing (Art. 18 GDPR),
- the transfer of your data to another controller (Art. 20 GDPR).
You also have the right:
- to object at any time to the processing of your data:
- on grounds relating to your particular situation – to the processing of personal data concerning you based on Art. 6(1)(f) GDPR (i.e. on the legitimate interests we pursue) (Art. 21(1) GDPR);
- where personal data are processed for direct marketing purposes, to the extent that the processing is related to such direct marketing (Art. 21(2) GDPR).
Contact us if you wish to exercise your rights. You can object to our use of cookies (described below) in particular through the appropriate browser settings.
If you believe that your data are being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (UODO) or with the supervisory authority in the European Union country of your habitual residence or place of work or where the infringement took place (Art. 77 GDPR).
PERSONAL DATA AND PRIVACY
Below you will find detailed information on how your data are processed, depending on the actions you take.
1. Placing an order in the Store
| For what purpose? | |
|---|---|
| fulfilling your order | |
| On what legal basis? | |
| sales contract (Art. 6(1)(b) GDPR) | a legal obligation related to accounting that requires us to process your personal data (Art. 6(1)(c) GDPR) |
| For how long? | |
| for the term of the above contract | until the legal obligation related to accounting that applies to us expires |
| in addition, your data will be processed until the end of the period in which claims may be pursued – by you or by us (more information on this can be found in the last table of this section) |
|
| What happens if you do not provide your data? | |
| you will not be able to place an order | |
2. Creating an account in the Store
| For what purpose? |
|---|
| performance of the contract for the provision of the Store account service |
| On what legal basis? |
| contract for the provision of services (Art. 6(1)(b) GDPR) |
| For how long? |
| until the account is deleted by you, or by us at your request |
| in addition, your data will be processed until the end of the period in which claims may be pursued – by you or by us (more information on this can be found in the last table of this section) |
| What happens if you do not provide your data? |
| you will not be able to create an account and use its features, such as viewing your order history or checking the status of an order |
3. Contacting us (e.g. to ask a question)
| For what purpose? | |
|---|---|
| handling your enquiries or requests | |
| On what legal basis? | |
| a contract or steps taken at your request prior to entering into it (Art. 6(1)(b) GDPR) – where your enquiry or request concerns a contract to which we are or may become a party | our legitimate interest in processing your data in order to communicate with you (Art. 6(1)(f) GDPR) – where your enquiry or request is not related to a contract |
| For how long? | |
| for the term of the contract binding us or – if no contract is concluded – until the end of the period for pursuing claims – see the last table of this section* | until the end of the period for pursuing claims – see the last table of this section – or until we uphold your objection to the processing* |
| in addition, your data will be processed until the end of the period in which claims may be pursued – by you or by us (more information on this can be found in the last table of this section) |
|
| What happens if you do not provide your data? | |
| we will not be able to respond to your enquiry or request | |
4. Browser settings or a similar action allowing analytical activities
| For what purpose? | |
|---|---|
| analysing how you use and navigate the Store website in order to adapt the website to the needs and behaviour of Users (you can read more about this in the ‘Analytical activities’ and ‘Cookies’ sections of the Privacy Policy) |
|
| On what legal basis? | |
| our legitimate interest in processing data for the above purpose (Art. 6(1)(f) GDPR) | |
| For how long? | |
| until the cookies used for analytical purposes expire or are deleted by you* | |
| What happens if you do not provide your data? | |
| we will not take your preferences regarding the use of the Store into account when developing it |
5. Your consent to receiving marketing content from us (e.g. information about special offers)
| For what purpose? |
|---|
| sending marketing information, in particular special offers |
| On what legal basis? |
| your consent to our marketing activities (Art. 6(1)(a) GDPR) |
| For how long? |
| until you withdraw your consent – remember, you can withdraw your consent at any time. Processing of data before you withdraw your consent remains lawful. |
| in addition, your data will be processed until the end of the period in which claims may be pursued – by you or by us (more information on this can be found in the last table of this section) |
| What happens if you do not provide your data? |
| you will not receive our marketing materials, including information about our special offers |
6. Newsletter subscription
| For what purpose? | |
|---|---|
| sending the newsletter | |
| On what legal basis? | |
| contract for the provision of the newsletter service (Art. 6(1)(b) GDPR) | |
| For how long? | |
| until you unsubscribe from our newsletter | |
| in addition, your data will be processed until the end of the period in which claims may be pursued – by you or by us (more information on this can be found in the last table of this section) |
|
| What happens if you do not provide your data? | |
| you will not be able to receive information about the Store and our services |
7. An action or omission that may give rise to claims related to the Store or our services
| For what purpose? | |
|---|---|
| establishing, pursuing or defending any claims related to the contract concluded or the services provided | |
| On what legal basis? | |
| our legitimate interest in processing personal data for the purpose stated above (Art. 6(1)(f) GDPR) | |
| For how long? | |
| until the limitation period for claims expires or until we uphold your objection to the processing* | |
| What happens if you do not provide your data? | |
| it will not be possible to establish, pursue or defend claims |
ANALYTICAL ACTIVITIES
In the Store we carry out analytical activities aimed at making it more intuitive and accessible – this will apply to you if you allow such activities. As part of the analysis, we will take into account the way you move around the Store – e.g. how much time you spend on a given page or where in the Store you click. This allows us to adapt the layout and appearance of the Store and its content to the needs of Users.
DATA SECURITY
When processing your personal data, we apply organisational and technical measures in line with the applicable laws, including encryption of the connection using an SSL certificate.
COOKIES
Like most websites, our Store uses cookies. These files:
- are stored in the memory of your device (computer, phone, etc.);
- do not change the settings of your device.
In this Store, cookies are used for:
- statistical purposes
- marketing purposes
To find out how to manage cookies, including how to disable them in your browser, you can use your browser’s help file. You can view this information by pressing the F1 key in your browser. You will also find relevant instructions on the following pages, depending on the browser you use:
Below you will find information on the functions of the cookies we process and their validity period.
| cookie name | cookie validity period | cookie function |
|---|---|---|
| _ga | approx. 13 months | Google Analytics: distinguishing users in traffic statistics |
| _ga_<identifier> | approx. 13 months | Google Analytics: storing the session state |
| _gid | 24 hours | Google Analytics: distinguishing users in traffic statistics |
| _clck | 1 year | Microsoft Clarity: analysing how the website is used |
| _clsk | 1 day | Microsoft Clarity: linking page views within a single visit |
| MUID | approx. 13 months | Microsoft: browser identifier in the Microsoft Clarity and Microsoft Advertising services |
| MR, SM, ANONCHK, SRM_B | from the duration of the session to approx. 13 months | Microsoft: technical cookies of the Microsoft Clarity and Microsoft Advertising services |
| _uetsid | 1 day | Microsoft Advertising: measuring ad performance |
| _uetvid | approx. 13 months | Microsoft Advertising: measuring ad performance |
| _gcl_au | 90 days | Google Ads: measuring ad performance |
| IDE | approx. 13 months | Google Ads: displaying and measuring ads |
| _fbp | 90 days | Meta (Facebook, Instagram): displaying and measuring ads |
| fbe_conversion_allow | 1 year | Meta (Facebook, Instagram): supporting the measurement of ad performance |
| gaVisitorUuid | 1 year | GetResponse: handling newsletter sign-up forms and measuring visits |
| gaDomain-<identifier> | duration of the session | GetResponse: handling newsletter sign-up forms and measuring visits |
| ea_uuid | approx. 13 months | Onet (Ringier Axel Springer Polska): displaying and measuring ads |
| acc_segment, acc_segment_ts | 1 year | Onet (Ringier Axel Springer Polska): displaying and measuring ads |
Using the relevant options in your browser, you can at any time:
- delete cookies,
- block the use of cookies in the future.
In such cases, we will no longer process them.
You can find more information about cookies on Wikipedia.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities that support us in running our business. We entrust them with the processing of your data – these entities process data only on our documented instructions.
Below you will find a list of the recipients of your data:
| ACTIVITY | DATA RECIPIENTS | TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION |
|---|---|---|
| any activity related to the Store | operator of the online sales platform | does not take place |
| browsing the Store website with settings that allow marketing activities | entity providing marketing services | takes place – to the USA, on the basis of a European Commission decision finding an adequate level of protection (EU-US Data Privacy Framework) or standard contractual clauses |
| browsing the Store website with settings that allow analytical activities | entity enabling analytical activities on the website | takes place – to the USA, on the basis of a European Commission decision finding an adequate level of protection (EU-US Data Privacy Framework) or standard contractual clauses |
| placing an order in the Store | payment provider | does not take place |
| provider of software that facilitates running the business (e.g. accounting software) | does not take place | |
| provider of standard office software (including email mailboxes) | does not take place | |
| accounting office | does not take place | |
| entity providing an instalment payment system | does not take place | |
| courier companies and the postal operator delivering the order | does not take place | |
| entity sending, on our behalf, a request for a review of your purchase | does not take place | |
| your use of services provided to us in connection with the Store by social networking sites | social networking sites | does not take place |
| taking part in a satisfaction survey about our services or products | entities enabling reviews of the Store or products to be posted and compared | does not take place |
| contacting us (e.g. asking a question) | provider of standard office software (including email mailboxes) | does not take place |
| newsletter subscription (Woodcarver Club) | provider of the newsletter sending and email automation system | does not take place |
In addition:
the relevant public authorities, to the extent that we are required to disclose data to them.
Content generated using artificial intelligence
When presenting our offer, we may use visual materials (including product visualisations and arrangements) generated or processed, in part or in full, using artificial intelligence tools. These materials are for illustrative purposes only and are not photographs of real, existing interiors or places. Where we use an AI-generated image depicting an identifiable person or reproducing a specific, existing place, this will be stated directly next to the material concerned.