{"id":138,"date":"2026-08-02T15:33:22","date_gmt":"2026-08-02T15:33:22","guid":{"rendered":"https:\/\/piercingdonut.com\/?page_id=138"},"modified":"2026-08-12T09:35:57","modified_gmt":"2026-08-12T09:35:57","slug":"polityka-prywatnosci","status":"publish","type":"page","link":"https:\/\/piercingdonut.com\/en\/polityka-prywatnosci\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

1. This Privacy Policy sets out the rules governing the processing of personal data collected via the website\u00a0piercingdonut.<\/strong>com, hereinafter referred to as: \u201ethe Website\u201d.<\/p>\n\n\n\n

2. The owner of the website and, at the same time, the Data Controller is Piercing Donut Maria Lidak, Tax Identification Number (NIP): 8881624005, hereinafter referred to as the Data Controller.<\/p>\n\n\n\n

3. Personal data collected by the Controller via the Website is processed in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council<\/strong> of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation<\/strong>), also known as GDPR<\/strong>.<\/p>\n\n\n\n

4. The Data Controller takes particular care to respect the privacy of Customers visiting the Website.<\/p>\n\n\n\n

\u00a7 1 Type of data processed, purposes and legal basis<\/h2>\n\n\n\n

1.<\/strong> The data controller collects information concerning natural persons carrying out a legal transaction not directly related to their business activities, natural persons carrying out business or professional activities in their own name, and natural persons representing legal persons or organisational units which are not legal persons but to which the law confers legal capacity, carrying out business or professional activities in their own name, hereinafter collectively referred to as Clients<\/strong>.<\/p>\n\n\n\n

2.<\/strong> The Controller processes Customers\u2019 personal data in connection with the use of the contact form on the Website to the extent necessary for the performance of a contract or for taking steps prior to entering into a contract \u2013 the legal basis for processing is Article 6(1)(b) of the GDPR<\/p>\n\n\n\n

3.<\/strong> When using the contact form, the Customer provides the following details:<\/p>\n\n\n\n

    \n
  • email address<\/strong><\/li>\n\n\n\n
  • first name<\/strong><\/li>\n\n\n\n
  • telephone number<\/strong><\/li>\n<\/ul>\n\n\n\n

    4.<\/strong> Whilst using the Website, additional information may be collected, in particular: the IP address assigned to the Customer\u2019s computer or the external IP address of the internet service provider, the domain name, browser type, time of access and operating system type. Navigation data may also be collected from Customers, including information about the links and hyperlinks they choose to click on or other actions undertaken on the Website for purposes related to the provision of services, as well as for technical, administrative, analytical and statistical purposes \u2013 in this respect, the legal basis for processing is also Article 6(1)(f) of the GDPR, i.e. necessity for the purposes arising from the Controller\u2019s legitimate interest, which is to ensure IT security and the management of the Website, as well as to improve the functionality of the Website and the services provided.<\/p>\n\n\n\n

    \u00a7 2 Recipients of the data<\/h2>\n\n\n\n

    1.<\/strong> The Customer\u2019s personal data is disclosed to service providers used by the Controller in the operation of the Website. The service providers to whom personal data is disclosed, depending on contractual arrangements and circumstances, either follow the Controller\u2019s instructions regarding the purposes and methods of processing such data (data processors<\/strong>) or determine for themselves the purposes and means of processing (administrators<\/strong>).<\/p>\n\n\n\n

      \n
    • 1.1. Data processors.<\/strong> The Controller uses service providers who process personal data solely on the Controller\u2019s instructions. These include, amongst others, providers of hosting services, accounting services, marketing systems, website traffic analysis systems and systems for analysing the effectiveness of marketing campaigns<\/li>\n\n\n\n
    • 1.2. Administrators.<\/strong> The Data Controller uses service providers who do not act solely on its instructions and who themselves determine the purposes and means of processing Customers\u2019 personal data. They provide electronic payment and banking services.<\/li>\n<\/ul>\n\n\n\n

      2. Location.<\/strong> Service providers are mainly based in Poland and in other countries within the European Economic Area (EEA).<\/p>\n\n\n\n

      3. Where a request is made, the Controller shall disclose personal data to the competent state authorities, in particular to organisational units of the Public Prosecutor\u2019s Office, the Police, the President of the Office for Personal Data Protection, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.<\/p>\n\n\n\n

      \u00a7 3 Data retention period<\/h2>\n\n\n\n

      1.<\/strong> Customers\u2019 personal data is stored:<\/p>\n\n\n\n

        \n
      • 1.1. Where the basis for the processing of personal data is consent, the Customer\u2019s personal data shall be processed by the Controller until such time as the consent is withdrawn, and, following the withdrawal of consent, for a period corresponding to the limitation period for claims that the Controller may bring and that may be brought against it. Unless otherwise provided for by a specific provision, the limitation period is six years, and for claims relating to periodic payments and claims arising from the conduct of business activities \u2013 three years.<\/li>\n\n\n\n
      • 1.2. Where the basis for data processing is the performance of a contract, the Customer\u2019s personal data shall be processed by the Controller for as long as is necessary to perform the contract, and thereafter for a period corresponding to the limitation period for claims. Unless otherwise provided for by a specific provision, the limitation period is six years, and three years for claims relating to periodic payments and claims arising from the conduct of business activities.<\/li>\n<\/ul>\n\n\n\n

        \u00a7 4 Cookies and IP addresses<\/h2>\n\n\n\n

        1. The website uses small files known as cookies. These are stored by the Administrator on the end-user\u2019s device when they visit the website, provided that their web browser permits this. A cookie usually contains the name of the domain from which it originates, its \u201eexpiry time\u201d and a unique, randomly generated number identifying the cookie. The information collected using such files helps to tailor the products offered by the Administrator to the individual preferences and actual needs of visitors to the website<\/p>\n\n\n\n

        2. The controller uses two types of cookies:<\/p>\n\n\n\n

          \n
        • 2.1. Session cookies:<\/strong> Once the browser session has ended or the computer has been switched off, the stored information is deleted from the device\u2019s memory. The mechanism of session cookies does not allow any personal data or confidential information to be retrieved from customers\u2019 computers.<\/li>\n\n\n\n
        • 2.2. Persistent cookies:<\/strong> They are stored in the memory of the Customer\u2019s device and remain there until they are deleted or expire. The mechanism of persistent cookies does not allow any personal data or confidential information to be retrieved from the Customer\u2019s computer.<\/li>\n<\/ul>\n\n\n\n

          3. The Data Controller uses first-party cookies for the following purposes:<\/p>\n\n\n\n

            \n
          • 3.1. analyses, research and audience audits, and in particular to compile anonymous statistics that help us understand how Customers use the Website, thereby enabling us to improve its structure and content.<\/li>\n<\/ul>\n\n\n\n

            4. The controller uses third-party cookies for the following purposes:<\/p>\n\n\n\n

              \n
            • 4.1. displaying, on the Website\u2019s information pages, a map showing the location of the Controller\u2019s office, using the maps.google.com website (third-party cookie controller: Google Inc, based in the USA)<\/li>\n<\/ul>\n\n\n\n

              5. The use of cookies is safe for the computers of Customers visiting the Website. In particular, it is not possible for viruses, other unwanted software or malware to enter Customers\u2019 computers via this method. However, customers can restrict or disable the use of cookies on their computers via their web browsers. If this option is selected, the Website can still be used, with the exception of features which, by their very nature, require cookies.<\/p>\n\n\n\n

              6. The Data Controller may collect Clients\u2019 IP addresses. An IP address is a number assigned to a visitor\u2019s computer by their internet service provider when they visit the Website. An IP address enables access to the internet. In most cases, it is assigned to a computer dynamically, i.e. it changes with every connection to the internet and is therefore generally regarded as non-personally identifiable information. The IP address is used by the Administrator to diagnose technical problems with the server, to compile statistical analyses (e.g. to determine from which regions we receive the most visits), as information useful for administering and improving the Website, as well as for security purposes and the potential identification of unwanted automated programmes that place a load on the server whilst browsing the Website\u2019s content.<\/p>\n\n\n\n

              \u00a7 5 Rights of data subjects<\/h2>\n\n\n\n

              Data subjects have the right to:<\/p>\n\n\n\n

              1. The right to withdraw consent to the processing of data at any time:<\/strong><\/p>\n\n\n\n

                \n
              • 1.1. The customer has the right to withdraw any consent they have given<\/li>\n\n\n\n
              • 1.2. The withdrawal of consent takes effect from the moment consent is withdrawn<\/li>\n\n\n\n
              • 1.3. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal<\/li>\n\n\n\n
              • 1.4. Withdrawing consent does not entail any adverse consequences for the Customer; however, it may prevent the Customer from continuing to use services or features which, by law, the Controller may only provide with the Customer\u2019s consent<\/li>\n<\/ul>\n\n\n\n

                2. The right to object to the processing of data:<\/strong><\/p>\n\n\n\n

                  \n
                • 2.1. The data subject has the right at any time to object \u2013 on grounds relating to their particular situation \u2013 to the processing of their personal data based on Article 6(1)(e) or (f) of the GDPR, including profiling carried out on the basis of those provisions. The controller may no longer process such personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.<\/li>\n\n\n\n
                • 2.2. Opting out by email of marketing communications relating to products or services shall constitute the Customer\u2019s objection to the processing of their personal data, including profiling, for these purposes<\/li>\n<\/ul>\n\n\n\n

                  3. The right to erasure (\u201ethe right to be forgotten\u201d):<\/strong><\/p>\n\n\n\n