Privacy policy
Controller
The data controller is Tadeusz Chłoń, Tadeusz Chłoń Dźwięk, ul. Zdrojowa 69, 02-297 Warsaw, Poland, tax ID (NIP) 9522211605. Contact regarding personal data: kontakt@soakupsound.pl.
What data and why
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Fulfilling the order and delivery | full name, e-mail, phone, address, parcel locker code | Art. 6(1)(b) GDPR (contract) | until the contract is performed |
| Receipts, invoices, accounting | as above, plus tax ID | Art. 6(1)(c) GDPR (legal obligation) | 5 years from the end of the tax year |
| Complaints, returns, pursuing claims | as above, plus correspondence | Art. 6(1)(f) GDPR (legitimate interest) | until claims are time-barred |
| Answering questions by e-mail | e-mail and message content | Art. 6(1)(f) GDPR | until the matter is closed |
Providing the data is voluntary, but without it we cannot fulfil the order.
Who we share data with
- Stripe Payments Europe Ltd (Ireland): payment processing. Stripe may transfer data outside the EEA on the basis of standard contractual clauses.
- InPost sp. z o.o.: parcel delivery.
- Base.com (BaseLinker sp. z o.o., pl. Solny 15, 50-062 Wrocław, Poland): order handling, receipts, invoices and order e-mails.
- E-mail and website hosting provider: Hetzner Online GmbH (Germany, servers in the EU).
- Our accountant and public authorities, where required by law.
Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, port it, and object to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw) or with the supervisory authority in your country. We do not make automated decisions and do not profile.
Cookies
This website does not use cookies or analytics tools, and fonts are loaded from our own server. The parcel locker map loads from InPost’s servers only on the checkout page. The Stripe payment form runs on Stripe’s side, which uses its own cookies necessary for a secure payment; they are described in Stripe’s privacy policy.