Document
Privacy policy
In force since 2026-08-21
We collect only the data without which we cannot produce and ship your order. Below we set out exactly what data, for what purpose, for how long and to whom we pass it on.
1Who is the controller
The controller of personal data is TechnOVO Sp. z o.o., NIP 8961596096, Domanice 69, 55-081 Domanice.
For matters concerning personal data write to biuro@stworzto.pl. We reply within one month at the latest, usually much sooner.
2Why we process data and on what basis
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Fulfilling the order — production, shipping, contact about the job | first name, surname, e-mail, phone, delivery address, design content and parameters | Article 6(1)(b) GDPR — performance of a contract | for the duration of fulfilment, then 6 years (limitation of claims) |
| Issuing and storing accounting documents | buyer's details, including company name and NIP | Article 6(1)(c) GDPR — legal obligation (the Polish Accounting Act, tax legislation) | 5 years from the end of the tax year |
| Handling complaints | contact details, order number, photos sent to us | Article 6(1)(c) and (f) GDPR | until the case is closed and the limitation period expires |
| Defending against and pursuing claims | order data and correspondence | Article 6(1)(f) GDPR — our legitimate interest | until claims become time-barred |
| Statistics and improving the configurator | anonymous data about the use of the website | Article 6(1)(a) GDPR — your consent in the cookie banner | until consent is withdrawn, max. 24 months |
| Newsletter and marketing activities | e-mail address, order history | Article 6(1)(a) GDPR — consent; Article 10 of the Polish Act on Providing Services by Electronic Means | until consent is withdrawn |
Providing the data needed to fulfil an order is voluntary, but without it the contract cannot be concluded or performed. Marketing consents are entirely voluntary and withholding them does not affect your ability to buy.
3Who we pass the data to
Data goes only to the entities without which we cannot fulfil an order:
- Carrier — first name, surname, address or parcel locker code, phone and e-mail for delivery notifications.
- Payment operator — the data needed to carry out and settle the transaction.
- Order management system provider — order data goes into the system in which we run production and shipping.
- Accounting office — data from invoices and receipts.
- Hosting and e-mail provider — as a processor, under a data processing agreement.
- Authorised public bodies — only where required by law.
We do not sell data and we do not share it with third parties for marketing purposes.
4Transfers outside the European Economic Area
Some of the tools we use (e.g. the payment operator or the analytics provider) may process data outside the EEA. This happens solely on the basis of the mechanisms provided for in Chapter V of the GDPR — a European Commission adequacy decision or standard contractual clauses. On request we will share information about the safeguard applied.
5Your rights
At any time you have the right to:
- access your data and obtain a copy of it,
- rectify incorrect data or complete incomplete data,
- erase data — to the extent that we do not have to keep it under tax legislation or to pursue claims,
- restrict processing,
- port data processed on the basis of a contract or consent,
- object to processing based on our legitimate interest,
- withdraw any consent given — without affecting the lawfulness of processing carried out before the withdrawal.
It is enough to send your request to biuro@stworzto.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
6Profiling and automated decisions
We do not take decisions about you based solely on automated processing that would produce legal effects. The price in the configurator is calculated algorithmically from the design parameters — material usage, printing time and the selected extras — but it is identical for everyone who enters the same parameters. We do not differentiate prices based on user data.
7Data stored in your browser
We keep the cart and saved designs in your browser's local storage, not on our servers. They do not reach us until you place an order. Clearing your browser data deletes them irreversibly. Details in the cookie policy.
8Security
The connection to the shop is encrypted. Access to order data is limited to the people who need it to perform their duties, and only to the extent they need. We do not store payment card data — that is handled by the payment operator.
The Polish version of this document is the binding one. Translations are provided for convenience only.
Do you have a question about this document? Write to biuro@stworzto.pl — we reply within one business day.