Shopping Cart
There are no more items in your cart
Privacy Policy and GDPR Compliance
1. General Provisions
The controller of your personal data collected via the online store
For any data protection matters, you can contact us via email at [email protected] or by mail to our registered address.
Your personal data is processed strictly in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
2. Purpose, Legal Basis, and Data Retention
-
Order Processing and Sales Contracts:
-
Legal basis: Art. 6(1)(b) GDPR (necessary for contract performance).
-
Retention period: Time required to process the order plus the statute of limitations for potential claims.
-
-
Customer Account Management:
-
Legal basis: Art. 6(1)(b) GDPR (electronic services).
-
Retention period: Until account deletion by the user or after 24 months of inactivity.
-
-
Complaints and Returns:
-
Legal basis: Art. 6(1)(c) GDPR (legal obligation).
-
Retention period: Duration of the complaint process as required by law.
-
-
Accounting and Tax Obligations:
-
Legal basis: Art. 6(1)(c) GDPR (tax regulation compliance).
-
Retention period: 5 years from the end of the tax year in which the tax was due.
-
-
Customer Contact and Support:
-
Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Administrator).
-
Retention period: Until correspondence is resolved or an objection is raised.
-
3. Data Recipients
To process your orders seamlessly, data may be shared with:
-
Shipping and Logistics Providers: DPD, DHL, Poczta Polska / Pocztex, AmbroExpress.
-
Payment Gateways: PayU, installment payment processors.
-
IT and Hosting Providers: Platform operators and warehouse system providers.
-
Accounting Services: Licensed accounting partners handling tax records.
We do not sell or share personal data with third parties for marketing purposes.
4. Your Rights
Under the GDPR, you have the right to:
-
Access your personal data and request copies.
-
Rectify inaccurate or incomplete data.
-
Erase data ("right to be forgotten").
-
Restrict data processing.
-
Data portability.
-
Object to processing based on legitimate interest.
-
File a complaint with a supervisory authority (UODO in Poland).
5. Voluntary Provision of Data
Providing personal data is voluntary but necessary to complete purchases, customize custom-cut products, and execute delivery.
6. Cookie Policy
Dorolet.com.pl uses cookies for:
-
Essential Purposes: Session maintenance, cart memory, checkout processing.
-
Analytics: Store optimization and performance improvement.
You can adjust your cookie settings at any time via your browser settings.