Privacy policy

This policy explains what personal data we process in the shop https://splot.presta.show/en, why, for how long and what rights you have. It applies from 2026-11-04.

Controller

1. The controller of your personal data is Splot – sklep demonstracyjny, ul. Przykładowa 1, 00-001 Warszawa, Poland, NIP (tax ID) 000-000-00-00, REGON 000000000, KRS 0000000000.
2. For any matter concerning personal data, write to [email protected] or to the controller's postal address.
3. The controller has appointed a data protection officer, who can be contacted at [email protected].

Purposes and legal bases

Providing data is voluntary, but without the data needed to fulfil an order we cannot accept or ship it. Invoice details are required by tax law if you want an invoice.

Recipients

Your data may be shared only with parties that help us run the shop, and only as far as their tasks require:

• courier companies and the postal operator – for delivery,
• the online payment operator – for processing payments,
• providers of hosting, e-mail and IT services,
• the accounting office and law firm,
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – provider of Google Analytics, acting as a processor on our behalf (see the “Google Analytics” section),
• public authorities where the law requires it.

We transfer data outside the European Economic Area only in the cases described in this policy.

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

Google Analytics

1. We use Google Analytics 4 to measure shop traffic and sales performance. The service is provided by Google Ireland Limited as a processor on our behalf, under the Google Analytics Terms of Service and the Google Ads Data Processing Terms.
2. The Google Analytics code loads on every page of the shop, but until you give consent it runs in a mode that does not set or read cookies. During that time it sends Google only information without an identifier: your consent status, a random number generated on each page load, data the browser sends automatically (time, browser type, the page you came from) and whether the visit came from an ad. The legal basis for this processing is our legitimate interest in aggregate traffic measurement (Art. 6(1)(f) GDPR).
3. Google Analytics cookies (_ga, _ga_<id>) are set, and full usage data is sent, only after you consent to analytics cookies in the cookie banner.
4. Google Analytics does not store the IP addresses of users in the European Union – it uses them only to derive an approximate location on servers in the EU and then discards them.
5. Google may transfer data to Google LLC in the United States. The transfer is based on Commission Implementing Decision (EU) 2023/1795 on the adequate level of protection under the EU-U.S. Data Privacy Framework, in which Google LLC participates, and, where it does not apply, on the standard contractual clauses adopted by the European Commission. Information on the safeguards used and how to obtain a copy of them is available by writing to [email protected].
6. We keep user-level and event-level data covered by the Google Analytics data retention setting for 14 miesięcy (14 months). This setting does not cover standard aggregated reports. Withdrawing consent stops the processing based on that consent; we delete personal data where there is no other basis for further processing and no statutory exception applies.
7. If you want us to delete Google Analytics data linked to your device, write to [email protected].
8. We also report each order (number, value, Products, delivery method) to Google Analytics from the shop's server, regardless of cookie consent, so that sales statistics are complete. If you have not consented, the order is marked with a random identifier. With the order we send your e-mail address, first name and last name as SHA-256 hashes, not in plain text. The legal basis is our legitimate interest in measuring sales performance (Art. 6(1)(f) GDPR); you can object by writing to [email protected].

Your rights

1. You have the right to access your data, to rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interest.
2. Where we process data on the basis of consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before it. You can unsubscribe from the newsletter using the link in each message, by unticking the newsletter consent in your Account details, or by writing to [email protected].
3. You can view, download and delete some of your data yourself in your Account, in the personal data section.
4. You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warszawa (uodo.gov.pl).

Cookies

1. Cookies are small files stored in your browser. The shop uses them to make the cart, sign-in and language choice work and – if you agree – for statistics and marketing.
2. Cookies that are necessary to provide the service you request (e.g. cart, session, remembering your cookie choice) are used without consent. Other cookies are stored only after you consent in the cookie banner.
3. You can change or withdraw your consent at any time in the cookie banner settings. You can also block or delete cookies in your browser settings – some shop features may then stop working.

Security and changes

1. We use technical and organisational measures to protect data, including an encrypted connection (HTTPS) and restricted access to data.
2. We may update this policy when the law or the way the shop works changes. The current version is always available on this page.