Privacy policy

• Orders - name, e-mail address, telephone number, delivery country and address or the chosen pickup point (InPost Paczkomat parcel locker or DPD Pickup point) and, for a company invoice (only for delivery to Poland), also the company name, tax identification number and address. Purpose: concluding and performing the sales contract, delivery, payment, handling returns and complaints (Art. 6(1)(b) GDPR), and issuing invoices, meeting tax obligations and keeping the sales records required by law (Art. 6(1)(c) GDPR).
• Order messages - confirmation, payment reminder, shipping notice (Art. 6(1)(b) GDPR).
• Contact form and correspondence - name, e-mail address, order number and message content; purpose: replying to your message (Art. 6(1)(f) GDPR - our legitimate interest is handling enquiries).
• Newsletter - e-mail address; purpose: sending news and promotions based on your consent (Art. 6(1)(a) GDPR).
• Claims - establishing, pursuing and defending legal claims (Art. 6(1)(f) GDPR).
• Statistics and advertising - only with your consent given in the cookie banner (Art. 6(1)(a) GDPR); details in the Cookie policy.
• Language version and delivery country - when you visit the shop, we use your IP address to determine the country your browser connects from, so that we can show the shop in the right language and, in the English version of the shop, also preselect the delivery country, which determines the currency, prices and delivery methods (you can always change the language and the delivery country yourself). We use a local database on our server - the IP address is not passed on to anyone and we do not store it for this purpose. Legal basis: Art. 6(1)(f) GDPR - our legitimate interest is showing the shop in a language you understand and with the offer for your country. Database: IP Geolocation by DB-IP (CC BY 4.0 licence).
• Pickup point map - if the shop shows a map of DPD Pickup points and you open it, your browser downloads map tiles from the Mapy.com servers (Seznam.cz, a.s.), which receive your device's IP address and the map area you view. The place near which you search for a point (an address you type or - with your permission in the browser - your device's location) is used only to find the nearest points. Legal basis: Art. 6(1)(b) GDPR (choosing the place of delivery) and Art. 6(1)(f) GDPR - our legitimate interest is showing pickup points on a map.

Providing data is voluntary, but without the data needed to fulfil an order we cannot accept and deliver it. Signing up for the newsletter and consenting to statistics and marketing cookies are entirely voluntary.

We share data only with parties that help us run the shop, and only to the extent necessary:

• PayU S.A. - online payment processing (PayU is a separate controller of payment data),
• InPost - delivery of parcels to Paczkomat parcel lockers and by courier,
• for delivery outside Poland, if the shop offers it: Apaczka - an intermediary for ordering courier shipments, and DPD Polska and the DPD network companies in the country of delivery - delivery of parcels to DPD Pickup points and lockers and by DPD courier,
• Seznam.cz, a.s. (Mapy.com) - the pickup point map in the order form, if the shop shows it,
• providers of order management (Sellasist) and invoicing (Fakturownia) systems,
• shop hosting and e-mail providers,
• our accounting office and authorities entitled by law,
• with your consent to cookies: Google Ireland Limited (Google Analytics), Meta Platforms Ireland Limited (Meta pixel), TikTok Technology Limited (TikTok pixel) - if the shop uses these tools.

Providers of statistics and advertising tools (Google, Meta, TikTok) may also process data outside the European Economic Area, in particular in the USA - on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. This applies only if you consent to statistics and marketing cookies.

• order data - for the duration of the contract and then until the limitation periods for claims expire and for the period required by tax law (usually 5 years from the end of the year in which the tax liability arose; for sales with delivery to another European Union country reported under the VAT One-Stop Shop (OSS) scheme, 10 years from the end of the year in which the sale took place),
• correspondence and contact form messages - up to 3 years from the last message,
• newsletter - until you withdraw your consent, and proof that consent was given - until the limitation period for claims expires,
• cookies - as described in the Cookie policy.

You have the right to access your data and receive a copy of it, to rectification, erasure, restriction of processing and data portability, and to object to processing based on our legitimate interest. You can withdraw your consent at any time - this does not affect the lawfulness of processing before the withdrawal. Just write to biuro@shinely.pl. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw) or with the data protection authority of the EU country where you have your habitual residence or place of work or where the infringement took place - in the Czech Republic this is the Úřad pro ochranu osobních údajů, in Slovakia the Úrad na ochranu osobných údajov Slovenskej republiky.

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

The shop works only over an encrypted connection (HTTPS). We do not create customer accounts and do not store payment card details - payments are handled by PayU. Only the people who need access to data to fulfil orders have it.

We update this policy when the law or the way the shop works changes. The current version is always available on this page. This policy is available in Polish, Czech, Slovak and English - the versions in languages other than Polish are translations, and in the event of any discrepancy the Polish version prevails.