GDPR Information Clause
Kwiaciarnia Pod Lipą
Jurisdiction notice: The Data Controller is established in the Republic of Poland. The supervisory authority is the Polish DPA (UODO). EU/EEA residents may alternatively lodge complaints with their local supervisory authority.
1. Data Controller
The controller of your personal data is Kwiaciarnia Pod Lipą, with its registered office at ul. Przykładowa 15, 00-001 Warszawa.
Contact for data protection matters:
- email: info@example.com
- phone: +48 123 456 789
- address: ul. Przykładowa 15, 00-001 Warszawa
2. Purposes and legal bases of processing
We process your personal data for the following purposes and on the following legal bases:
| Purpose | Legal basis (Article 6 GDPR) | Period |
|---|---|---|
| Responding to contact form inquiry | (1)(a) consent or (1)(f) legitimate interest | up to 90 days |
3. Data recipients
Your data may be transferred to:
- the hosting and platform operator (PageForYou.pl) — as a processor, under the data processing agreement (Article 28 GDPR) annexed to the platform terms (agreement, sub-processors),
- public authorities — only in cases arising from law.
4. Third countries
Your data is processed within the European Economic Area (EEA). We do not transfer data to third countries outside the EEA without your consent and adequate safeguards (Article 46 GDPR).
5. Your rights
You have the right to:
- access your data (Article 15 GDPR),
- rectification of data (Article 16 GDPR),
- erasure of data — "right to be forgotten" (Article 17 GDPR),
- restriction of processing (Article 18 GDPR),
- data portability (Article 20 GDPR),
- object to processing (Article 21 GDPR),
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with your local EU/EEA supervisory authority.
6. Voluntariness of providing data
Providing data is voluntary, but in some cases necessary to use the service:
- in the contact form — failure to provide data results in inability to respond,
7. Automated decisions
Your personal data is not subject to automated decision-making, including profiling, within the meaning of Article 22 GDPR.