Effective from [STORE LAUNCH DATE].
1. Who controls your data
Your personal data is controlled by Beata Padzik, conducting business under the name B&P Beata Padzik, ul. Kolejowa 6, 05-119 Michałów-Reginów, Poland, NIP (tax ID) 5361001331, REGON 543520012 (the “Controller”). For any matters concerning personal data, you can write to hello@revs.zone or to the Controller’s postal address.
2. What data we collect, why and on what legal basis
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Concluding and performing the sales contract, including delivery | first name, last name, email, phone, delivery address or selected Parcel Locker, order details | Art. 6(1)(b) – necessary for the performance of a contract | until the contract is fulfilled, then for the period indicated below |
| Issuing proof of sale and bookkeeping | order data, invoice details (including company name and tax ID) | Art. 6(1)(c) – legal obligation under tax and accounting law | 5 years from the end of the calendar year in which the tax payment deadline expired |
| Handling withdrawals and complaints | order and request data, correspondence | Art. 6(1)(c) – obligations under the Consumer Rights Act | until the matter is closed, then until claims become time-barred |
| Establishing, pursuing and defending claims | order and correspondence data | Art. 6(1)(f) – the Controller’s legitimate interest | until claims become time-barred |
| Replying to messages | email, message content and any data you provide in it | Art. 6(1)(f) – legitimate interest (communicating with you) | until the matter is closed, no longer than 1 year |
| Asking for a review of a purchased Product | first name, email, purchased Product | Art. 6(1)(f) – legitimate interest (verifying and collecting reviews) | until you object or the review is deleted |
| Newsletter (if you sign up) | email, optionally first name | Art. 6(1)(a) – your consent | until you withdraw consent |
| Analytics and advertising (if you consent in the cookie banner) | cookie identifiers, device information and activity in the Store | Art. 6(1)(a) – your consent | until you withdraw consent or the cookie expires |
Providing the data needed to fulfil an order is voluntary, but we cannot fulfil the order without it. We need your phone number because the carrier sends notifications and the collection code to it.
3. Who we share data with
We share data only to the extent necessary for a given purpose:
- carriers – InPost sp. z o.o. (Parcel Locker, courier);
- the payment operator – [OPERATOR NAME, e.g. PayPro S.A. – Przelewy24], which processes payment data as a separate controller;
- IT service providers that process data on our behalf: our hosting and email provider cyber_Folks S.A., the BaseLinker order and shipping management system, our invoicing system [NAME], our newsletter provider MailerLite;
- public authorities, where required by law.
We do not sell your data. As a rule, we do not transfer data outside the European Economic Area. If any provider (e.g. of analytics or advertising tools) processes data outside the EEA, this is based on a European Commission adequacy decision (e.g. the EU-US Data Privacy Framework) or standard contractual clauses.
4. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectify your data,
- have your data erased,
- restrict processing,
- data portability for data we process on the basis of a contract or consent,
- object to processing based on legitimate interest,
- withdraw consent at any time – without affecting the lawfulness of processing before withdrawal,
- lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa).
To exercise your rights, write to hello@revs.zone. We do not make decisions about you based solely on automated processing, including profiling, that would have legal effects.
5. Cookies
- The Store uses cookies (small files saved on your device) and similar technologies.
- Essential – they make the cart, checkout, login and security work. We use them without consent because the Store cannot work without them.
- Analytics and marketing – Google Analytics 4 (Google Ireland Limited) – we use them only after you consent in the cookie banner. You can change your consent at any time on the page Cookie Policy.
- When you choose a Parcel Locker, we display a map provided by InPost. When it loads, your browser connects to InPost servers, which may receive your IP address.
- You can also delete or block cookies in your browser settings; blocking essential cookies may prevent you from placing an order.
6. Security
The connection to the Store is encrypted (SSL). Payment details such as your card number or BLIK code are entered directly with the payment operator – they never reach the Store.
7. Changes to this policy
We may update this policy, e.g. when our service providers or the law change. The current version is always available on this page.