Privacy Policy

1. Data Controller

The controller of your personal data is Kwiaciarnia Pod Lipą, with its registered office at: ul. Przykładowa 15, 00-001 Warszawa.

For matters related to personal data processing you may contact us:

• Email: info@example.com
• Phone: +48 123 456 789

2. Purposes and legal bases of processing

We process your personal data only for specific purposes, observing the lawfulness principles set out in Article 6(1) GDPR:

2.1. Contact form

Data (name, email, phone, message content) is processed in order to respond to your inquiry. Legal basis: Article 6(1)(a) GDPR (consent) and Article 6(1)(f) GDPR (legitimate interest — responding to inquiry). Retention period: up to 90 days from last contact.

3. Recipients of data

Your personal data may be transferred to the following categories of recipients:

• PageForYou.pl — hosting and platform operator (Poland, servers in the EEA), acting as our processor under the data processing agreement (Article 28 GDPR) that forms an annex to the platform terms: data processing agreement (Polish); the operator's sub-processors: list of sub-processors.
• Public authorities — only when an obligation arises from the law (e.g. tax office, court, prosecutor).

We do not transfer your data to third countries outside the European Economic Area without your explicit consent and adequate safeguards (Article 46 GDPR).

4. Your rights

In connection with the processing of your personal data you have the following rights:

• Right of access to your data (Article 15 GDPR)
• Right to rectification of inaccurate data (Article 16 GDPR)
• Right to erasure — "right to be forgotten" (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to processing (Article 21 GDPR)
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
• Right to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) — the supervisory authority for the Operator. As an EU/EEA resident, you may alternatively lodge a complaint with your local supervisory authority.

To exercise your rights, please contact us at info@example.com. We respond without undue delay — at the latest within one month of receiving the request. If the request is particularly complex or there are many requests, we may extend this period by a further two months; in that case we will inform you within one month, giving the reason.

5. Automated decision-making

Your personal data is not subject to automated decision-making, including profiling, within the meaning of Article 22 GDPR.

6. Cookies

Our website uses cookies — small text files stored in your browser memory. We use the following categories of cookies:

• Essential — required for the website to function (session, cookie preferences). No consent required. Always on.

You may change cookie settings at any time via the "Cookie settings" option in the website footer or via your browser settings. Refusing optional cookies does not limit access to basic website functionality.

7. Data security

We apply adequate technical and organisational measures ensuring data security in accordance with Article 32 GDPR, including: connection encryption (HTTPS/TLS), access control, backups, security event monitoring.

8. Changes to this Privacy Policy

This Privacy Policy may be updated due to changes in law or our activities. We will inform you of significant changes in a visible manner on the website. The current version is always available at /dokumenty/polityka-prywatnosci (or the localised path).