Template — to be reviewed by the store owner and legal counsel before going live.
1. Controller
The controller responsible for processing your personal data is Mar-Mot sp. z o.o., Wrzosowa 16, 87-410 Kowalewo Pomorskie, Poland, [email protected], +48 56 684 28 23. Data protection contact (if appointed): [DATA PROTECTION OFFICER CONTACT].
2. Personal data we collect
Checkout
When you place an order: first and last name, email address, phone number, delivery address (country, address, apartment/suite, city, postal code), optional order notes, the products ordered, prices, currency, delivery method and any promo code.
Contact form
Your name, email address, optional order number and your message.
Browser storage
Your cart, wishlist, selected currency and cookie preferences are stored locally in your browser and are not sent to our servers except when you place an order. See our Cookie Policy.
3. Purposes and legal bases
- Processing and delivering orders — performance of a contract (Art. 6(1)(b) GDPR).
- Answering enquiries — performance of a contract or pre-contractual steps, or our legitimate interest in responding (Art. 6(1)(b)/(f)).
- Accounting and tax obligations — legal obligation (Art. 6(1)(c)).
- Optional analytics/marketing cookies — your consent (Art. 6(1)(a)); not used unless you opt in.
4. Retention
Order data is kept for as long as necessary to fulfil the order and to meet statutory retention obligations (for example tax and commercial record-keeping) [RETENTION PERIODS]. Contact enquiries are deleted when no longer needed.
5. Processors and recipients
We use service providers who process data on our behalf under data processing agreements, including hosting and database infrastructure, email delivery (once configured) and delivery carriers for shipping your order. [LIST OF PROCESSORS].
6. International transfers
Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as an adequacy decision or the European Commission's Standard Contractual Clauses. [DETAILS OF TRANSFERS].
7. Security
We use technical and organisational measures to protect your data, including encrypted connections, restricted server-side access to order data and access controls that prevent customers' data being read by other visitors.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise your rights, contact [email protected].
9. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement. [COMPETENT SUPERVISORY AUTHORITY].
10. Changes
We may update this policy. The current version is always available on this page.