in accordance with Article 13 of the GDPR
Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), I hereby inform you that:
1. Data Controller The controller of your personal data is Renata Kucharska Malarstwo i Ty, registered at ul. A. i Z. Pronaszków 8, 30-498 Kraków, Poland, VAT No. 9440000664.
2. Purpose and Legal Basis for Processing Your personal data will be processed: for the purpose of fulfilling the contract for the sale of physical and digital products, to manage membership and access to exclusive content, to contact you regarding your order, payment or service access, based on Article 6(1)(a) (consent), (b) (performance of a contract), and (c) (legal obligation) of the GDPR.
3. Data Recipients Your data may be shared with: entities providing hosting services, electronic payment service providers (e.g. Stripe), public authorities where required by law.
4. Data Transfers Outside the EU Your personal data may be transferred outside the European Union and the European Economic Area, particularly to the United States, in connection with services provided by entities such as Stripe. Such transfers are carried out in accordance with applicable legal mechanisms, including Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework, which has been approved by the European Commission as a secure data transfer mechanism .
5. Data Retention Period Your data will be stored for the duration of the contract and for the period required by applicable laws (e.g. tax and accounting regulations).
6. Your Rights You have the right to: access your data, rectify, erase or restrict the processing of your data, object to the processing of your data, withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal), lodge a complaint with the President of the Personal Data Protection Office (Poland) or your local supervisory authority.
7. Withdrawal of Consent Withdrawal of consent must be submitted in writing to the email address provided in the Privacy Policy.