Privacy
Policy

GDPR and Data Controller

Since 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) has been in force, introducing new provisions regarding the rights of customers.

The controller of personal data for bobogna.store is:
Agnieszka Litworowska
Winiary 280, 32-420 gm. Gdów, Poland
Tax ID (NIP): 5732619322

You have the following rights in connection with the processing of your data:

• the right to request access to your personal data, its rectification, erasure, or restriction of processing
• the right to object to processing
• the right to data portability
• the right to withdraw consent to the processing of personal data for a specific purpose
• the right to lodge a complaint with a supervisory authority

You may exercise these rights in accordance with Articles 16–21 GDPR by contacting us at: kontakt@bobogna.store.

Purpose and Legal Basis for Processing

We process your personal data in particular for the purposes of:

• registering an account and handling transactions on bobogna.store
• handling enquiries and requests submitted to us
• contacting you in connection with the provision of services
• processing data for tax and accounting purposes
• providing payment processing services

Based on your consent, we process data for the purposes of: storing cookies, organising promotional campaigns and competitions, and sending newsletters.

You may withdraw your consent to data processing at any time by sending an email to: kontakt@bobogna.store.

Recipients of Personal Data

Your data may be processed by the following entities:

• Vercel Inc. – server hosting and infrastructure; data stored exclusively in the EU (Ireland)
• Supabase Inc. – database and user data storage; data stored exclusively in the EU (Ireland)
• PayPro S.A. (Przelewy24) – payment processing
• accounting firms providing financial and bookkeeping services
• entities providing IT services and software

We may transfer your personal data to public authorities combating fraud and abuse.

How Long Do We Store Your Data?

We store your personal data for the duration of the agreement concluded with you, and after its termination:

• to fulfil obligations arising from tax and accounting regulations
• for statistical and archiving purposes
• for a maximum period of 10 years from the date of completion of the agreement
• invoices containing your data are stored for 5 years from the end of the tax year in which the tax obligation arose

Transfer of Data Outside the EEA

Personal data processed by Vercel Inc. and Supabase Inc. is stored exclusively in the EU (Ireland). No transfer of personal data outside the European Economic Area takes place.

Your personal data is not processed automatically (including by profiling) in a way that affects your rights.

User Account

To create an account, you must provide: your email address, first and last name, address, and phone number. Data is processed on the basis of the agreement for the provision of electronic services (Article 6(1)(b) GDPR) for the duration of the account.

You may change, correct, or delete the data in your account at any time. You have the right to data portability as set out in Article 20 GDPR.

Newsletter

By subscribing to the newsletter, you provide us with your email address. The legal basis for processing is your consent given by ticking the relevant box when subscribing.

You may unsubscribe from the newsletter at any time, which will result in the deletion of your data from the database. You have the right to data portability (Article 20 GDPR).

Orders and Invoices

To place an order, you must provide: your first and last name, billing address, email address, and phone number. Data is processed for the purpose of fulfilling the order (Article 6(1)(b) GDPR), issuing an invoice (Article 6(1)(c) GDPR), and for archiving and statistical purposes (Article 6(1)(f) GDPR).

Order data is processed for the time necessary to fulfil the order, and thereafter until the expiry of the limitation period for claims arising from the agreement.

Complaints and Withdrawal from Agreement

Data provided in connection with a complaint or withdrawal from an agreement (first and last name, address, phone number, email address, bank account number) is used solely for the purpose of handling the complaint or withdrawal procedure (Article 6(1)(c) GDPR).

In accordance with Article 38 of the Consumer Rights Act, the right of withdrawal does not apply to digital content (PDF files) that has already been downloaded by the consumer.

Cookies

The bobogna.store website does not use any third-party cookies or tracking technologies. We use only browser localStorage for technically necessary purposes:

• Language preference (key: lang) — remembers your chosen interface language.

For traffic analytics we use Vercel Analytics, a privacy-friendly service that uses no cookies and collects no personal data. All data is processed in aggregated, anonymised form.

Server Logs

Using our website involves sending requests to the server. Each request is recorded in the server logs and includes, among other things: IP address, date and time, browser and operating system information.

Data stored in server logs is not associated with specific individuals using the website and is not used for the purpose of identifying users. It serves solely as auxiliary material for website administration.

Final Provisions

We reserve the right to amend this Privacy Policy. Users will be notified of any changes with at least 7 days' notice. Each new version will be published with a new date.

If you have any questions, please contact us at: kontakt@bobogna.store.