Effective from 8 October 2026.
Controller
The controller of your personal data is Paweł Polak, a sole trader operating as PHU Paweł Polak, ul. Kazimierza Pużaka 26, 38-400 Krosno, Poland, tax ID (NIP) PL 6772025546. For data protection matters, write to kontakt@memoriaarte.com.
Purposes, legal bases and retention
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Concluding and performing the contract, including personalisation and shipping | Art. 6(1)(b) | until the contract is fulfilled |
| Invoicing and accounting | Art. 6(1)(c) | 5 years from the end of the tax year |
| Complaints and legal claims | Art. 6(1)(f) | until claims become time-barred |
| Replying to messages and enquiries | Art. 6(1)(f) (Art. 6(1)(b) for quote requests) | until the correspondence ends, max. 1 year |
| Newsletter (MailerLite) | Art. 6(1)(a) (consent confirmed by e-mail) | until consent is withdrawn |
| Visitor statistics (Google Analytics) | Art. 6(1)(a) (consent in the cookie banner) | until consent is withdrawn, max. 14 months |
| Business cooperation | Art. 6(1)(b) and (f) | duration of cooperation and limitation period |
Data we process
Name, delivery and billing address, e-mail, phone, company name and VAT number (for invoices), order history, item number and configuration code, and the personalisation text given in the order.
Personalisation text, such as the name and dates of the deceased, is used only to make the urn and handle complaints. We do not ask for information about health or cause of death; please do not provide it.
Newsletter
Subscribing is voluntary and must be confirmed via a link in an e-mail. We send few messages. Each contains an unsubscribe link. We pass your name, e-mail, country and site language to the newsletter service.
Recipients
We share data only as needed for each purpose: with the couriers DPD and DHL and the shipping broker Apaczka, the payment providers ING Bank Śląski S.A. (imoje) and PayPal, the order management system Base.com, our hosting provider Zenbox, our accounting office, MailerLite Limited (Ireland) for the newsletter, and Google (Analytics, with your consent). We have data processing agreements with our processors.
Transfers outside the EEA
Google, PayPal and MailerLite may process data in the United States. Such transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
You may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, or with the supervisory authority in your country of residence.
Is providing data required
Providing data is voluntary, but without it we cannot fulfil an order or reply to a message. We do not make automated decisions or profile customers.
Cookies
Our use of cookies is described in the Cookie policy.