Privacy policy

The controller of personal data provided in the Shop sklep.artumbra.pl and its forms is Bożena Wojtanowska, trading as "Bożena Wojtanowska Umbra Design", ul. Ryglicka 66, 33-170 Tuchów, Poland, tax no. 993-007-48-65, REGON 121841869. Data contact: info@artumbra.pl.

No data protection officer has been appointed; please use the address above for all data matters.

The contact and order forms collect: full name, e-mail, optionally phone number, message content, and data needed to fulfil the order, collection and delivery (e.g. shipping address).

Purposes and legal bases (GDPR): (a) answering enquiries — Art. 6(1)(b) and (f); (b) conclusion and performance of the sales contract, including collection notices and shipping — Art. 6(1)(b); (c) tax and accounting duties — Art. 6(1)(c); (d) establishing or defending claims — Art. 6(1)(f); (e) the controller own marketing — only with separate, voluntary consent — Art. 6(1)(a).

Enquiry data is kept for as long as needed to respond and for any follow-up, then until claims become time-barred.

Data relating to concluded contracts and accounting is kept for the period required by tax law (as a rule 5 years) and until claims become time-barred. Data processed on the basis of consent — until consent is withdrawn.

Data may be entrusted to processors acting on the controller behalf, only as needed: the website hosting provider (Vercel Inc.) and e-mail providers, the form e-mail delivery provider, the electronic payment provider [TO BE COMPLETED], the courier [TO BE COMPLETED], the accounting office [TO BE COMPLETED], and the bank (for transfer settlement).

The hosting provider may process data on servers outside the EEA; in that case the transfer is based on standard contractual clauses or an EU adequacy decision (Data Privacy Framework). Data is not sold or used for marketing without separate consent.

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting prior lawfulness.

Providing data is voluntary but necessary to answer enquiries and to conclude and perform a contract. No automated decision-making or profiling is used.

You may lodge a complaint with the Polish DPA (UODO, ul. Stawki 2, 00-193 Warsaw).

The site does not use cookies for marketing or user tracking. Cart contents are stored only in the browser local storage on the Customer device and are not sent to the server until an order is placed.

Only technical mechanisms necessary for the site to work may be used. If analytics or non-essential cookies are introduced later, a consent banner will be added and this policy updated.