Privacy Policy

§ 1 Introduction

This Privacy Policy describes the rules for processing personal data in the SNORFI online store, available at: www.snorfi.pl (hereinafter: "Store").
By using the Store, you agree to the data processing rules described herein.

§ 2 Data Controller

The controller of your personal data is:
SZYMON KOPACZ BLARK
ul. Tarnogórska 61, 42-674 Kamieniec
e-mail: kontakt.snorfi@gmail.com
NIP: 6452591296

The Controller processes data in accordance with applicable law, including GDPR, and applies technical and organizational measures to ensure their protection.

§ 3 Scope of data collected

The following data may be processed in connection with the operation of the Store:

  1. Order-related data – name and surname, delivery address, e-mail, phone number, invoicing data.

  2. Customer Account Data – name and surname, e-mail, encrypted password.

  3. Payment data – transferred to payment operators (Shopify Payments, Paynow); the Store does not have access to full card data.

  4. International shipping data – necessary for customs purposes in accordance with the regulations of the country of delivery.

  5. Data for returns and complaints – order number, description of the report, photos, e-mail correspondence.

  6. Technical and statistical data – IP address, device and browser information, cookies, analytical data regarding the use of the Store.

§ 4 Purposes and legal basis for processing

Personal data may be processed for the following purposes:

  • order fulfillment and sales agreements (Art. 6 sec. 1 lit. b GDPR),

  • handling returns and complaints (Art. 6 sec. 1 lit. c GDPR),

  • maintaining a Customer Account (Art. 6 sec. 1 lit. b GDPR),

  • contact in matters related to the Store (Art. 6 sec. 1 lit. f GDPR),

  • marketing activities – based on the consent or legitimate interest of the Controller,

  • analytics and statistics (Google Analytics, Meta Pixel, TikTok Pixel) based on legitimate interest,

  • fulfilling accounting and tax obligations (Art. 6 sec. 1 lit. c GDPR).

  • sending newsletters and marketing information electronically - based on user consent (Art. 6 sec. 1 lit. a GDPR), which can be withdrawn at any time.

Profiling is used solely to tailor advertising content and does not produce legal effects for the user.

§ 5 Data recipients

Your data may be shared only with entities necessary for the provision of services, including:

  • payment operators (Shopify Payments, Paynow),

  • courier and logistics companies,

  • accounting and legal entities,

  • analytical and marketing platforms (Google, Meta, TikTok),

  • state authorities to the extent required by law.

The Controller does not sell personal data to third parties.

§ 6 Transfer of data outside the EEA

Data may be transferred outside the European Economic Area only to entities ensuring adequate data protection, e.g., based on standard contractual clauses or programs approved by the European Commission. This applies, among others, to Shopify, Google, Meta, TikTok services.

§ 7 Data retention period

  • order data – 5 years (tax obligations),

  • Customer Account data – until its deletion,

  • complaint data – 3 years from the end of the case,

  • e-mail correspondence – 2 years,

  • marketing data – until consent is withdrawn or an objection is raised.

§ 8 Rights of data subjects

You have the right to:

  • access your data,

  • rectify it,

  • erase data,

  • restrict processing,

  • data portability,

  • object to processing,

  • withdraw consent at any time,

  • lodge a complaint with the President of the Personal Data Protection Office.

Please send requests to: kontakt.snorfi@gmail.com

§ 9 Voluntariness of providing data

Providing data is voluntary, but necessary for order fulfillment and complaint handling. Failure to provide data may prevent order fulfillment.

§ 10 Cookies

The Store uses cookies for:

  • purposes essential for website operation,

  • analytical purposes,

  • marketing purposes.

Analytical and marketing cookies are used only after obtaining user consent, which can be withdrawn at any time in the browser or Store settings.

§ 11 Data security

The Controller uses data protection measures, including:

  • SSL encryption,

  • system security measures,

  • password encryption,

  • limited data access for authorized persons.

§ 12 Changes to the Privacy Policy

The Controller may introduce changes to the Privacy Policy. The current version is always available on the Store's website. Significant changes will also be communicated to customers with an Account.