Privacy policy

This Privacy policy describes how personal data of Customers and users of the artinspiro.pl online shop are processed, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1. Data controller

1.1. The controller of personal data is Justprint – Marek Nadolny, ul. Bartosza Głowackiego 10, 41-100 Siemianowice Śląskie, Poland, NIP: 6342389872, REGON: 276988977.

1.2. For matters concerning personal data, contact us by email at biuro@artinspiro.pl or by phone at +48 796 333 876.

2. What data we process and why

2.1. Fulfilling the order — name (or company name), delivery or pickup address, email address, phone number and, for individual orders, graphic files sent by the Customer and the order parameters. Legal basis: performance of a contract or steps taken at the Customer's request before entering into it (Art. 6(1)(b) GDPR).

2.2. Accounting and tax obligations — data on invoices and sales documents, stored for the period required by tax law. Legal basis: a legal obligation of the controller (Art. 6(1)(c) GDPR).

2.3. Contact and handling enquiries — data provided in the contact form, email or phone call. Legal basis: the controller's legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

2.4. Establishing, pursuing or defending claims — to the extent necessary, until any claims become time-barred. Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).

3. Who we share data with

3.1. Personal data may be shared with providers whose services we use to run the Shop and fulfil orders, to the extent necessary for their tasks:

a) hosting, CDN and file storage providers (Cloudflare, Inc.),

b) the order and shipping management system provider (BaseLinker),

c) the online payment provider — mElements S.A. (PayNow),

d) the transactional email provider used to send order-related emails,

e) courier companies delivering the ordered products.

3.2. We do not sell Customers' personal data or share it with third parties for marketing purposes without separate consent.

3.3. Some providers listed in section 3.1 may process data outside the European Economic Area. In such cases data are transferred with appropriate safeguards under the GDPR, including standard contractual clauses approved by the European Commission.

4. Cookies and data stored in the browser

4.1. The Shop uses Cloudflare Web Analytics to analyse website traffic. This tool does not use cookies or track users across websites.

4.2. The cart contents and the patterns chosen in the gallery are stored locally in the Customer's browser (localStorage) and are not sent to our servers until an order is placed. You can delete this data at any time by clearing your browsing data in the browser settings.

5. Data retention

5.1. Order data are kept for as long as necessary to fulfil the order and then for the period required by tax and accounting law.

5.2. Data from correspondence and enquiries are kept for as long as necessary to respond and until any related claims become time-barred.

6. Data subject rights

6.1. The Customer has the right to access their data, to rectification, erasure or restriction of processing, to data portability and to object to processing based on the controller's legitimate interest.

6.2. Where data are processed on the basis of consent, the Customer may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

6.3. The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, Poland) if they consider that the processing of their data violates the GDPR.

6.4. To exercise these rights, please contact biuro@artinspiro.pl.

7. Data security

7.1. Data are transmitted between the Customer's browser and the Shop over an encrypted connection (TLS/SSL).

7.2. Only persons and entities who need it to fulfil orders and run the Shop have access to personal data.

8. Changes to the Privacy policy

8.1. The controller reserves the right to amend this Privacy policy, in particular due to changes in the law or in the scope of services. The current version is always available at this address.