Privacy policy
Draft document. Fields highlighted in yellow must be filled in before launch.
This is a translation for information only. The binding version is Polish: Polityka prywatności
§ 1. Data controller
- The controller of your personal data is Aleksandr Filippov, sole trader operating as DIGITAL SERVICES ALEKSANDR FILIPPOV, ul. Rembrandta 4a/39, 03-531 Warszawa, Poland, tax ID (NIP) 5273209871, REGON 544255888, entered in the Central Register and Information on Economic Activity (CEIDG) kept by the minister responsible for the economy.
- For anything about your personal data, write to kontakt@luxintim.eu or to ul. Rembrandta 4a/39, 03-531 Warszawa, Poland. We have not appointed a data protection officer.
§ 2. What data we collect
- When you order: your name, email address, phone number, delivery address or chosen pickup point, the products ordered, the amount and the payment method.
- For a price notification: your email address and the product whose price you want to hear about.
- When you contact us by email or post: whatever you include in your message.
- When you open the site, the hosting server processes your IP address and basic technical data (browser type, time of visit) to display the page and protect it from attacks. We also use the IP address to work out your country so we can show prices in złoty or euro straight away. We look the country up in a DB-IP database stored on our own server, so your IP address is not sent to anyone for this.
- We never receive your card details; the payment operator handles them. We do not collect your date of birth or copies of documents: the confirmation that you are 18 or over is stored only in your browser.
§ 3. Purposes and legal bases
- Fulfilling your order, delivery, contacting you about the order, returns and complaints - Article 6(1)(b) GDPR (performance of a contract).
- Bookkeeping, tax and replying to complaints within statutory deadlines - Article 6(1)(c) GDPR (legal obligation).
- Pursuing and defending legal claims and protecting the site from attacks - Article 6(1)(f) GDPR (the Seller's legitimate interest).
- Newsletter and price notifications - Article 6(1)(a) GDPR (consent). You can withdraw consent at any time using the link in the email or by writing to kontakt@luxintim.eu. Withdrawal does not affect the lawfulness of processing before it.
§ 4. Who receives your data
- The payment operator handling BLIK, cards and instant bank transfers - the data needed to take and refund payments.
- BL Logistics sp. z o.o. (ul. Czerska 8/10, 00-732 Warszawa, Poland, KRS 0000975638, NIP 5213971463), which runs the Base Courier platform we use to send parcels - your name, phone number, email and delivery address or pickup point, to create the shipment. The company processes this data on our behalf as a processor.
- InPost, ORLEN Paczka and DPD, the carriers delivering the parcel - your name, phone number, email and delivery address or pickup point.
- The hosting provider Hetzner Online GmbH (Germany) and the email service provider - as far as needed to run the site and send messages.
- Our accounting office - data from sales documents. Public authorities - only where the law requires it.
§ 5. Transfers outside the European Economic Area
- We do not pass your data to our supplier: we order only the goods from them and send your parcel ourselves from Poland.
- The site runs on Hetzner servers in the European Union, and hosting data does not leave the EEA.
§ 6. How long we keep data
- Order data and accounting records - 5 years from the end of the year in which the tax payment deadline passed (Polish tax law).
- Data needed to handle complaints and claims - until the limitation period for those claims expires.
- Newsletter - until you withdraw consent. Price notification - until we send it or you withdraw consent.
- Server logs (IP address, time of visit, browser type) - 14 days, then we delete them automatically.
§ 7. Your rights
- You have the right to access your data, have it corrected or erased, restrict its processing and receive it in a portable format, and to object to processing based on legitimate interest.
- To use these rights, write to kontakt@luxintim.eu. We will reply within one month.
- You can lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
- Giving us your data is voluntary, but without the details in the order form we cannot fulfil your order. We do not make automated decisions about you or profile you.
§ 8. Keeping your order private
- What you order may indirectly reveal information about your sex life. That is why only the people who fulfil orders can see them, and we do not ask for anything we do not need for shipping.
- The shop uses no advertising pixels or analytics tools. The site runs only over an encrypted HTTPS connection.