Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

SMREKI Twardoń Sierszulski spółka jawna
ul. Sprzeczna 27
62-002 Suchy Las
Poland

Email:  info@smreki.de

2. General Information on Data Processing

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

Personal data means any information relating to an identified or identifiable natural person.

3. Categories of Personal Data

Depending on how you use our website, we may process the following data:

  • Contact data (name, billing address, shipping address, email address)

  • Payment data (payment method, transaction details – payment processing is handled by external payment providers)

  • Order information

  • Communication data

  • Device and usage data (IP address, browser type, date and time of access)

4. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

a) Contract performance

To process and fulfill orders.
Legal basis: Article 6(1)(b) GDPR.

b) Compliance with legal obligations

To comply with tax and commercial law requirements.
Legal basis: Article 6(1)(c) GDPR.

c) Security and fraud prevention

To ensure IT security and prevent misuse.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).

d) Marketing and advertising

If you have provided consent, we may use your data for email marketing or personalized advertising.
Legal basis: Article 6(1)(a) GDPR.

5. Hosting and Shopify

Our website is hosted and technically operated via Shopify Inc. Shopify acts as a data processor pursuant to Article 28 GDPR.

Shopify may process data outside the European Economic Area. Any such transfer is carried out based on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses.

For more information, please see:
https://privacy.shopify.com

6. Cookies and Consent Management

Our website uses cookies and similar technologies.

Non-essential cookies (such as analytics or marketing cookies) are only used with your explicit consent.

You may withdraw or adjust your consent at any time via our consent management tool.

Legal basis for strictly necessary cookies: Article 6(1)(f) GDPR.
Legal basis for analytics and marketing cookies: Article 6(1)(a) GDPR.

If activated, services such as Google or Meta may be used for analytics or advertising purposes. In such cases, processing takes place exclusively on the basis of your consent.

7. Data Sharing

Personal data is shared only when necessary:

  • With payment providers for payment processing

  • With shipping providers for order delivery

  • With IT and hosting providers

  • Where required by law

No further sharing takes place without your consent.

8. Data Retention

We store personal data only for as long as necessary for the respective purposes.

  • Contract and invoicing data: in accordance with statutory retention obligations (generally 5–10 years)

  • Customer account data: until the account is deleted

  • Marketing data: until consent is withdrawn

  • Server log files: generally up to 30 days

9. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Article 15 GDPR)

  • Right to rectification (Article 16 GDPR)

  • Right to erasure (Article 17 GDPR)

  • Right to restriction of processing (Article 18 GDPR)

  • Right to data portability (Article 20 GDPR)

  • Right to object (Article 21 GDPR)

  • Right to withdraw consent at any time (Article 7(3) GDPR)

To exercise your rights, please contact us at:
 info@smreki.de

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

The competent authority for our company is:

President of the Personal Data Protection Office (UODO)
ul. Stawki 2
00-193 Warsaw
Poland

11. International Data Transfers

Where personal data is transferred to countries outside the European Economic Area, such transfer is carried out only in accordance with Articles 44 et seq. GDPR and subject to appropriate safeguards.

12. Updates to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in legal requirements or in our services.