Privacy Policy

1. GENERAL INFORMATION

1.1. This Privacy Policy is provided for informational purposes and does not constitute a source of obligations for Website users or Customers. It explains how personal data is processed on the Website, including the purposes, legal bases, retention periods, and the rights of individuals whose data is processed.

1.2. The controller of personal data collected via the Website is:

Quality Media Marta Rydzynska
Tax number (VAT ID): PL7532335472
Address: Ul. Szkolna 9, 55-040 Tyniec Maล‚y, Poland
E-mail: [email protected]

Hereinafter referred to as the โ€œControllerโ€, who is also the Service Provider and Seller operating the Website.

1.3. Personal data is processed in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

1.4. Use of the Website is voluntary. Providing personal data is also voluntary, except where:

  • it is necessary to conclude or perform a sales or electronic service agreement, or
  • it is required by law (e.g. accounting or tax obligations).

Failure to provide required data may prevent the conclusion or execution of an agreement.

1.5. The Controller ensures that personal data is:

  • processed lawfully and fairly,
  • collected for specific and legitimate purposes,
  • accurate and relevant,
  • stored no longer than necessary,
  • secured against unauthorised access, loss, or misuse.

1.6. Appropriate technical and organisational safeguards are applied to protect personal data, including measures preventing unauthorised access to electronically transmitted data.

1.7. Capitalised terms used in this Privacy Policy shall have the meaning assigned to them in the Websiteโ€™s Terms and Conditions.

2.1. Personal data is processed where at least one of the following legal bases applies:

  • consent of the data subject,
  • necessity for the performance of a contract,
  • compliance with a legal obligation,
  • legitimate interests pursued by the Controller, provided these do not override the rights and freedoms of the data subject.

2.2. Each processing activity is based on at least one of the above grounds, specified in detail in Section 3.

Personal data may be processed for the following purposes:

Performance of sales or electronic service agreements
Legal Basis: Art. 6(1)(b) GDPR
Retention Period: For the duration of the contract and its settlement

Direct marketing
Legal Basis: Art. 6(1)(f) GDPR
Retention Period: Until objection or expiry of limitation period

Marketing based on consent
Legal Basis: Art. 6(1)(a) GDPR
Retention Period: Until consent is withdrawn

Customer reviews
Legal Basis: Art. 6(1)(a) GDPR
Retention Period: Until consent is withdrawn

Accounting and tax obligations
Legal Basis: Art. 6(1)(c) GDPR
Retention Period: 5 years as required by law

Establishment or defence of claims
Legal Basis: Art. 6(1)(f) GDPR
Retention Period: Until claims are time-barred

Website operation and maintenance
Legal Basis: Art. 6(1)(f) GDPR
Retention Period: For the duration of legitimate interest

Website statistics and analytics
Legal Basis: Art. 6(1)(f) GDPR
Retention Period: For the duration of legitimate interest

4.1. To ensure proper Website operation, the Controller may cooperate with external service providers such as hosting companies, IT providers, couriers, payment operators, and accounting or legal advisors.

4.2. Data may be transferred outside the EU only where adequate data protection standards are ensured, in accordance with GDPR.

4.3. Personal data is shared only to the extent necessary to fulfil a specific processing purpose.

4.4. Recipients may include:

  • courier companies,
  • electronic and card payment operators,
  • instalment payment providers,
  • review and opinion platforms,
  • IT, hosting, and software providers,
  • accounting, legal, and advisory firms,
  • social media platforms (e.g. Facebook Ireland Ltd.) where social plugins are used.

5.1. The Controller may use profiling for marketing purposes, such as personalised offers or reminders.

5.2. Profiling does not produce legal effects nor significantly affect the data subject.

5.3. Profiling is based on automated analysis of user behaviour on the Website.

5.4. The data subject has the right not to be subject to decisions based solely on automated processing.

Data subjects have the right to:

  • access their data,
  • rectify inaccurate data,
  • delete data (โ€œright to be forgottenโ€),
  • restrict processing,
  • object to processing,
  • data portability.

They may also withdraw consent at any time and lodge a complaint with the Polish Data Protection Authority (PUODO).

Requests may be submitted via e-mail or the contact form available on the Website.

7.1. The Website uses cookies to ensure proper functioning, improve usability, analyse traffic, and conduct marketing activities.

7.2. Cookies may be:

  • session or persistent,
  • first-party or third-party,
  • essential, functional, analytical, or marketing.

7.3. Cookies are used for:

  • user authentication,
  • shopping cart functionality,
  • saving preferences,
  • anonymous statistics,
  • personalised advertising.

7.4. Users can manage or disable cookies through browser settings. Limiting cookies may affect Website functionality.

7.5. The Website may use:

  • Google Analytics (Google Ireland Ltd.),
  • Facebook Pixel (Facebook Ireland Ltd.).

Users may opt out of Google Analytics tracking via browser add-ons.

8.1. The Website may contain links to external websites. This Privacy Policy applies only to the Website operated by the Controller.

8.2. The Controller reserves the right to update this Privacy Policy in accordance with applicable laws.