Privacy policy

1. General Information

  1. This Privacy Policy sets out the rules for processing personal data and the use of cookies in connection with the online store available at www.kaaskas.com (hereinafter: the “Store”).

  2. The controller of personal data is:

KAASKAS
conducting business activity under the name: KAASKAS Katarzyna Skórzyńska
Tax ID (NIP): PL7010183810
E-mail: studio@kaaskas.com
(hereinafter: the “Controller”).

  1. Personal data is processed in accordance with:

  • General Data Protection Regulation (GDPR),

  • the Polish Personal Data Protection Act of 10 May 2018,

  • the Polish Act on Providing Services by Electronic Means.

2. Scope of Collected Data

Depending on how you use the Store, the Controller may process the following data:

a) When placing an order:

  • first and last name,

  • delivery/billing address,

  • company name (if applicable),

  • VAT number (if applicable),

  • e-mail address,

  • phone number,

  • order details.

b) When creating an account:

  • first and last name,

  • e-mail address,

  • password (encrypted).

c) When subscribing to the newsletter:

  • e-mail address,

  • name (if provided).

d) Automatically collected data:

  • IP address,

  • browser type,

  • device information,

  • website activity data,

  • cookies identifiers.

Providing personal data is voluntary but necessary to place an order or subscribe to the newsletter.

3. Purposes and Legal Basis for Processing

Personal data is processed for the following purposes:

1. Order fulfillment

Legal basis: Article 6(1)(b) GDPR – performance of a contract.

2. Account management

Legal basis: Article 6(1)(b) GDPR.

3. Accounting and tax obligations

Legal basis: Article 6(1)(c) GDPR – legal obligation.

4. Handling complaints and returns

Legal basis: Article 6(1)(b) and 6(1)(f) GDPR – legitimate interest.

5. Newsletter and direct marketing

Legal basis: Article 6(1)(a) GDPR – consent.

6. Remarketing and personalized advertising

Legal basis: Article 6(1)(a) GDPR – consent to marketing cookies.

4. Newsletter

  1. Users may subscribe to the newsletter by providing their e-mail address.

  2. The newsletter is sent only after obtaining explicit consent (double opt-in, if applied).

  3. Consent may be withdrawn at any time by clicking the unsubscribe link included in each message.

5. Analytical and Marketing Tools

The Store uses third-party tools, including:

Analytics

  • Google LLC – including Google Analytics (traffic analysis)

Advertising and Remarketing

  • Meta Platforms, Inc. – including Meta Pixel (Facebook/Instagram Ads)

These tools may process data such as:

  • IP address,

  • cookie identifiers,

  • browsing behavior,

  • viewed products,

  • interaction with advertisements.

Personal data may be transferred outside the European Economic Area (e.g., to the United States) based on Standard Contractual Clauses or other lawful safeguards.

6. Data Recipients

Personal data may be shared with:

  • accounting service providers,

  • hosting providers,

  • payment service providers (e.g., Stripe, Przelewy24 – if applicable),

  • courier and shipping companies,

  • e-mail marketing system providers,

  • IT and marketing service providers.

Personal data is not sold to third parties.

7. Data Retention Period

Personal data is stored:

  • for the duration of the contract and thereafter as required by accounting and tax regulations (typically 5 years),

  • until consent is withdrawn (newsletter),

  • until an objection to marketing processing is raised,

  • until the limitation period for potential claims expires.

8. Data Subject Rights

Under the GDPR, you have the right to:

  • access your personal data,

  • rectify inaccurate data,

  • request erasure of data,

  • restrict processing,

  • data portability,

  • object to processing,

  • withdraw consent at any time,

  • lodge a complaint with a supervisory authority.

Supervisory authority in Poland:
Urząd Ochrony Danych Osobowych

9. Cookies

The Store uses cookies for:

  1. Essential purposes – proper functioning of the website.

  2. Analytical purposes – website traffic statistics.

  3. Marketing purposes – personalized advertising.

Users can manage cookie preferences through the cookie banner or browser settings.

10. Security Measures

The Controller applies appropriate technical and organizational measures to ensure personal data protection, including SSL encryption and restricted data access.

11. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. The current version is always available at www.kaaskas.com