PRIVACY POLICY
Effective date: September 25, 2026
1. General Provisions
1. This Privacy Policy sets out the rules for the processing of personal data of individuals using the Lustra Design online store, available at lustra-design.pl, as well as the rules for the use of cookies and similar technologies.
2. The personal data controller is KWAPISZ-GLASS Dawid Kwapisz, with its registered office in Krążkowy 88b, 63-600 Kępno, Poland, NIP (Tax ID): 6192054169, REGON: 3894562185, e-mail address: sklep@lustra-design.pl (hereinafter referred to as the 'Owner').
3. The Controller processes personal data in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council ('GDPR').
4. The Controller makes every effort to ensure that personal data is processed lawfully, fairly, transparently, and solely to the extent necessary to achieve specified purposes.
2. Scope of Processed Data
Depending on how the Store is used, the Controller may process in particular:
· a) First name and last name,
· b) Delivery address,
· c) E-mail address,
· d) Phone number,
· e) Data required for issuing an invoice,
· f) Data concerning the placed order,
· g) Data regarding complaints, contract withdrawals, or other notices,
· h) Customer account data – if the customer has an account,
· i) IP address and data regarding the use of the Store,
· j) Information saved in cookies and similar technologies.
3. Purposes and Legal Bases for Data Processing
Personal data may be processed in particular for the following purposes:
· a) Managing user registration – based on Art. 6(1)(b) GDPR;
· b) Accepting and fulfilling orders, as well as executing sales contracts – based on Art. 6(1)(b) GDPR;
· c) Contacting the customer regarding order fulfillment – based on Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR, and Art. 6(1)(c) GDPR;
· d) Keeping accounting and tax records – based on Art. 6(1)(c) GDPR in conjunction with Art. 74(2) of the Polish Accounting Act and other relevant accounting regulations;
· e) Handling complaints, returns, and other notifications – based on Art. 6(1)(b) or (c) GDPR, depending on the nature of the matter;
· f) Conducting marketing activities requiring consent – based on Art. 6(1)(a) GDPR.
4. Data Retention Period
Personal data is stored for the duration necessary to achieve the purpose for which it was collected, and subsequently for the period required by applicable laws or necessary to establish, pursue, or defend against legal claims.
Data processed on the basis of consent is stored until the consent is withdrawn, unless further data processing is grounded on another legal basis.
5. Recipients of Data
Personal data may be transferred to entities supporting the Controller in operating the Store, in particular:
· a) Courier companies and carriers delivering orders;
· b) Payment processing operators;
· c) Hosting and IT service providers;
· d) Entities providing accounting services;
· e) System providers for store management, order processing, and customer communication;
· f) Providers of analytical and marketing tools, if used by the Store;
· g) Other entities if the obligation to share data results from legal regulations.
6. Data Subject Rights
In accordance with the GDPR, the data subject has the following rights:
· a) Right of access to personal data;
· b) Right to rectification of data;
· c) Right to erasure ('right to be forgotten');
· d) Right to restriction of processing;
· e) Right to data portability;
· f) Right to object to data processing;
· g) Right to withdraw consent at any time, if processing is based on consent;
· h) Right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).
7. Cookie Policy
1. We use cookies on our website (Legal basis: Art. 6(1)(f) GDPR).
2. While browsing the Online Store, 'cookies' (small text files) are saved on the Customer's end device in connection with the use of the Store. Their use aims to ensure the proper functioning of the Online Store.
3. Cookies used by the Controller are safe for the Customer's devices. In particular, viruses or other unwanted software cannot enter Customers' devices through this route. These files allow identifying the software used by the Customer and customizing the Store for each Customer individually.
4. The Controller uses three types of cookies:
· Session cookies: stored on the Customer's device until the browser session ends. The saved information is then permanently removed from device memory.
· Persistent cookies: stored on the Customer's device until deleted. Ending a browser session or turning off the device does not remove them.
· Analytical cookies: enable a better understanding of how the Customer interacts with the Store's content and help structure its layout. They collect aggregated data to generate usage statistics.
5. Cookies may be used by advertising networks, particularly the Google network, to display advertisements tailored to the way the Customer uses the Online Store.
6. Regarding information about Customer preferences collected by Google, the Customer can view and edit information at: https://www.google.com/ads/preferences/html/blocked-cookies.html.
7. The Customer can independently change settings regarding cookies at any time in their web browser.
8. Detailed information on managing cookies is available in the browser help section (F1 key) or dedicated pages for Firefox, Chrome, Safari, Internet Explorer / Edge.
9. The Customer can delete cookies at any time using browser settings.
10. Restricting the use of cookies may affect certain functionalities available on the Online Store website.
8. Final Provisions
The Controller reserves the right to make changes to this Privacy Policy due to legal, technical, or operational updates.
In matters related to personal data protection, contact is possible via email at sklep@lustra-design.pl or by mail: KWAPISZ GLASS - Dawid Kwapisz, Krążkowy 88b, 63-600 Kępno, Poland.