Privacy policy

PRIVACY POLICY AND COOKIE USAGE POLICY OF MYHOYA.SHOP

Last updated: January 8, 2025

1. General Provisions

1. This document (hereinafter: "Policy") outlines the principles of personal data processing and cookie usage in the online store Arkadiusz Sobczyk (hereinafter: "Store").
2. The owner of the Store and the personal data administrator is Arkadiusz Sobczyk (hereinafter: "Administrator").
3. The Policy was developed to fulfill obligations arising from generally applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

2. Contact Details of the Administrator

1. The personal data administrator is Arkadiusz Sobczyk, conducting business under the name:

• Name: Arkadiusz Sobczyk
• Address: Tylna 4E/61, 90-364 Łódź
• Email Address: contact@myhoya.shop
• Phone: +48 695 106 673

You can contact the Administrator regarding personal data protection matters via the provided email address or by traditional mail sent to the business address.

3. Scope and Purpose of Personal Data Processing

1. The Administrator processes Users' personal data to the extent necessary to provide services available in the Store (e.g., order fulfillment, payment and delivery processing, handling complaints), to contact Users, and to fulfill legal obligations imposed on the Administrator.
2. Personal data may also be processed for the Administrator's legitimate purposes, such as:

• direct marketing (e.g., sending promotional and offer information),
• statistics and reporting,
• claims enforcement or defense,
• IT system security.

The required data scope is always indicated in the order form, contact form, or other Store locations where the User voluntarily provides their data.

4. Legal Basis for Data Processing

1. User data is processed based on:

• Article 6(1)(b) of GDPR – necessity for contract performance (e.g., order processing, payment, and delivery handling),
• Article 6(1)(c) of GDPR – compliance with a legal obligation (e.g., storing accounting and tax records),
• Article 6(1)(f) of GDPR – legitimate interests of the Administrator (e.g., direct marketing, handling inquiries, claims enforcement),
• Article 6(1)(a) of GDPR – consent for data processing for a specific purpose (e.g., subscribing to the newsletter).

Providing consent for personal data processing is voluntary, but lack of consent may prevent access to certain Store functionalities, such as receiving the newsletter.

5. Data Retention Period

1. Users' personal data is processed for the following periods:

• necessary for contract execution (e.g., order delivery) and any related claims,
• required by law (e.g., tax regulations mandate document retention for a specified period),
• necessary for the Administrator's legitimate purposes (e.g., marketing until consent withdrawal or objection),
• until consent withdrawal if processing is based on consent.

After these periods, data will be deleted or anonymized.

6. User Rights

1. Every User has the right to:

• access their data and obtain a copy,
• rectify data,
• delete data (“right to be forgotten”),
• restrict data processing,
• data portability,
• object to data processing,
• file a complaint with the supervisory authority (Personal Data Protection Office).

To exercise these rights, contact the Administrator – contact details are provided in section 2.