Privacy Policy – Hawkly Dominik Koterski

This Privacy Policy defines the rules for the processing and protection of personal data provided by users in connection with the use of services offered by the online store operated by “Hawkly Dominik Koterski,” based in Poland, NIP: 5932645442, REGON: 529975433 (hereinafter: the “Administrator”).
The Administrator places particular importance on the protection of user privacy and commits to processing personal data in accordance with the GDPR (General Data Protection Regulation) and other applicable laws concerning personal data protection.
The personal data controller is the entity operating the online store, located in Poland, in the town of Tczew (83-110), Pomeranian Voivodeship, at Władysława Jurgo 5a/8. Any inquiries or requests related to personal data processing may be directed to the above address or via the provided contact channels.
Users may contact the Administrator using the contact details provided on the store’s website, particularly via email.

The Administrator processes personal data necessary to provide the services offered in the online store, including in particular:
- First and last name,
- Email address,
- Home address or delivery address,
- Phone number,
- Billing information (company name, registered address, tax identification number),
- Payment information (collected via secure payment providers).
The Administrator may also process additional data voluntarily provided by the user during contact, such as messages or attachments sent in correspondence.

Users’ personal data is processed for the following purposes:

Order fulfillment – processing data necessary to conclude and perform a sales agreement, including delivering ordered products, issuing invoices, and contacting users regarding their orders.
Handling inquiries and communication – processing data provided via contact forms, emails, or phone calls in order to respond to inquiries and maintain communication.
Handling complaints – processing data related to complaints and post-sales support.
Direct marketing – with the user’s consent, data may be used to send newsletters, promotional offers, and marketing information.
Analytics and statistics – processing data for analytical and statistical purposes to optimize the store’s performance and improve service quality.
Security – data may be processed to ensure technical security, protect personal data, and prevent misuse.

Personal data will be stored for the period necessary to achieve the purpose for which it was collected, as well as for the period required by applicable law.
For data processed for direct marketing purposes, retention continues until the user withdraws consent.
Data processed for tax and accounting purposes will be stored for the period required by tax regulations.
After the retention period expires, data will be deleted or anonymized.

The Administrator may share users’ personal data with the following entities:
- Payment operators – to process payments for orders,
- IT and hosting service providers – to ensure proper operation of the store,
- Accounting office – for accounting purposes under a data processing agreement,
- Marketing service providers – only based on proper data processing agreements and to the extent necessary for marketing activities.
Personal data is not transferred outside the European Economic Area unless the Administrator implements appropriate data protection measures in accordance with GDPR requirements.

The user has the following rights regarding the processing of their personal data:

Right of access – the user has the right to know whether their data is processed and to obtain access to their personal data.
Right to rectification – the user may request correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) – the user may request deletion of personal data when it is no longer necessary for the purposes for which it was collected or when consent has been withdrawn.
Right to restrict processing – the user may request restriction of data processing in specific cases.
Right to data portability – the user may receive their data in a commonly used format and request its transfer to another controller.
Right to object – the user may object at any time to the processing of their data for direct marketing purposes.
Right to withdraw consent – the user may withdraw consent to data processing at any time; withdrawal does not affect the legality of processing prior to withdrawal.
Right to lodge a complaint with a supervisory authority – if the user believes their data is processed in violation of GDPR, they may file a complaint with the President of the Personal Data Protection Office.

The online store uses cookies, which are stored on the user’s device. Cookies are used for:
- Maintaining user sessions (so users do not need to re-enter login and password),
- Analyzing user behavior to optimize website content,
- Adjusting advertising content to user preferences.
The user has the right to manage and delete cookies through browser settings. However, disabling cookies may impact store functionality.

The Administrator applies appropriate technical and organizational measures to protect personal data from unauthorized access, loss, damage, or destruction.
Access to personal data is granted only to authorized persons and processors acting under appropriate agreements.
Data is protected using encryption, access security systems, and regular security audits.

The Administrator reserves the right to amend this Privacy Policy, particularly in the event of legal changes, implementation of new technologies, or improvements to data protection measures. Changes take effect upon publication on the store’s website.
Any questions or concerns regarding this Privacy Policy may be directed to the Administrator via the contact details provided on the store’s website.