Privacy policy

This policy describes what personal data we collect in the zentea.shop store, why we process it and who we share it with.

Controller

The data controller is Eldar Kurseitov, aleja Grunwaldzka 69, 80-241 Gdańsk, Poland, VAT ID (NIP) 5842794144. For data protection matters: zentea.gdansk@gmail.com, phone +48 799 059 486.

We have not appointed a data protection officer — please write to the address above.

What data and on what basis

Fulfilling an order

Name, delivery address, email address, phone number and order details. Basis: Article 6(1)(b) GDPR — performance of a contract. Providing this data is voluntary, but without it we cannot fulfil the order.

Accounting and tax obligations

Data needed to issue and retain sales documents. Basis: Article 6(1)(c) GDPR — a legal obligation under tax and accounting law.

Shop account

Email address and order history, if you choose to create an account. Basis: Article 6(1)(b) GDPR. We delete accounts on request.

Contact form

The data you provide in the message. Basis: Article 6(1)(f) GDPR — our legitimate interest in replying.

Statistics and advertising

Data about how the site is used: pages visited, products viewed, items added to the basket, cookie identifiers, IP address, device and browser information. Basis: Article 6(1)(a) GDPR — your consent given in the cookie banner. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it.

Statistics and advertising work separately. Refusing marketing consent stops data being sent to Meta even if statistics consent remains given.

Legal claims

Order data to the extent needed to establish, pursue or defend claims. Basis: Article 6(1)(f) GDPR.

Who we share data with

Hosting provider — stores the shop and its database.
Courier company — data needed to deliver the parcel. Nothing is shared when you collect in person.
Bank — to the extent required to settle the transfer.
Payment operator — Autopay S.A., ul. Powstańców Warszawy 6, 81-718 Sopot — to the extent needed to process online payments (amount, email address, order identifier).
Accountancy office — in relation to accounting documents.
Google Ireland Limited — visit statistics (Google Analytics). Data is sent through our own server on the data.zentea.shop domain.
Meta Platforms Ireland Limited — advertising measurement. Contact details sent through the Conversions API are irreversibly hashed beforehand, so Meta does not receive your email address or phone number in readable form.

Entities processing data on our behalf do so under data processing agreements and only to the extent we specify.

Transfers outside the European Economic Area

Google and Meta may process data outside the EEA, including in the United States. This takes place on the basis of standard contractual clauses approved by the European Commission and the adequacy decision under the EU-US Data Privacy Framework.

How long we keep data

Order data — for the period required by tax law, as a rule 5 years counted from the end of the year in which the tax payment deadline fell.
Account data — until the account is deleted.
Correspondence — until the matter is closed, then for the limitation period of any claims.
Statistics and advertising data — until consent is withdrawn or the retention period set in the analytics tool expires.

Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it, and to object to processing based on legitimate interest. You may withdraw consent at any time.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

Cookies

Consent settings and the full list of cookies used are in the Cookie policy. Cookies strictly necessary for the shop to work, including keeping your basket and session, operate without consent because without them the shop does not function.

Automated decisions

We do not take decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. We do not profile in order to set prices.