As of July 2, 2025
This document defines the rules for processing personal data and using cookies within the website https://aniaodogarniania.pl/
The controller of personal data is:
Ania od Ogarniania Anna Koper
ul. Kowieńska 12/14/9, 94-017 Łódź
NIP: 7272887475
REGON: 541258840
Legal form: sole proprietorship
Contact: kontakt@aniaodogarniania.pl
2.1. Personal data is collected during:
placing an order (contract performance – Art. 6(1)(b) GDPR),
contact through the form (legitimate interest – Art. 6(1)(f) GDPR),
newsletter subscription (consent – Art. 6(1)(a) GDPR),
website activity (legitimate interest – Art. 6(1)(f) GDPR).
2.2. Scope of processed data:
| Processing purpose | Data scope | Legal basis | Mandatory/Voluntary | Consequences of not providing data |
|---|---|---|---|---|
| Order processing | Name, surname, email address, address, phone, NIP (invoice) | Art. 6(1)(b) GDPR | Mandatory | Unable to place an order |
| Contact through form | Name, email, inquiry content | Art. 6(1)(f) GDPR | Voluntary | Unable to receive a response |
| Newsletter | Name, email address | Art. 6(1)(a) GDPR | Voluntary | Unable to receive the newsletter |
| Statistics/marketing | IP address, browser data, cookies, analytical data | Art. 6(1)(f) GDPR | Voluntary | Limited website functions, no personalization |
2.3. Data transfer outside the EEA
Data may be transferred to countries outside the European Economic Area only under appropriate safeguards, such as standard contractual clauses compliant with GDPR.
Personal data may be transferred to processors acting on behalf of the Controller, including:
payment operator: Autopay S.A.,
hosting provider: LH,
email service providers (MailerLite)
analytical services: Google (Analytics), Meta (Pixel),
IT and technical support companies (Social Apes Marketing sp. z o.o.
These entities process data based on data processing agreements compliant with Art. 28 GDPR.
| Processing purpose | Retention period |
|---|---|
| Order processing | For the duration of order fulfillment + 6 years (accounting obligations) |
| Contact through form | Up to 1 year from the last contact |
| Newsletter | Until consent withdrawal or newsletter termination |
| Statistics/marketing | Up to 3 years or until objection is raised |
Every person has the right to:
access their data,
rectify their data,
erase their data (“right to be forgotten”),
restrict processing,
data portability,
object to processing,
withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal),
lodge a complaint with the President of the Personal Data Protection Office.
To exercise these rights, please contact the Controller at: kontakt@aniaodogarniania.pl
6.1. Types and purposes of cookies:
| File type | Purpose | Storage time |
|---|---|---|
| Technical (necessary) | Ensuring website functionality | Session / up to 1 year |
| Analytical | Statistics, improving website performance (Google Analytics) | Up to 2 years |
| Marketing | Remarketing, ad personalization (Meta Pixel) | Up to 2 years |
6.2. Cookie management:
Users can change their cookie settings in their browser at any time. Detailed instructions are available on browser help pages:
6.3. Cookie consent:
On their first visit, users have the option to consent to cookies. Consent can be changed or withdrawn at any time.
The Controller implements technical and organizational measures to ensure the security of processed personal data, in particular:
SSL encryption,
data access only by authorized persons,
backup systems and server monitoring,
antivirus protection and firewalls.
Personal data is not processed in an automated way that would produce legal effects concerning the user (profiling). If such actions are introduced, the user will be informed and given the right to object.
9.1. The Controller reserves the right to make changes to this Privacy Policy.
9.2. Users will be informed of any changes through a message on the website or by email (if applicable).
9.3. The current version of the document is always available at: https://aniaodogarniania.pl/polityka-prywatnosci
9.4. This Privacy Policy comes into effect on July 2, 2025.