Privacy policy (GDPR)

§ 1. Data Controller

The Controller of your personal data collected via the ehub.sklep.pl online store is EHUB STUDIO, ul. Idzikowskiego 44/9, 54-129 Wrocław, Poland (NIP: 8943202520). Contact: ehub@ehub.studio or phone: +48 518 090 749.

§ 2. Purposes and legal basis for data processing

Customer data is processed for the following purposes:

1. Conclusion and execution of the Sales Agreement (Art. 6(1)(b) GDPR).
2. Handling electronic payments via PayU (Art. 6(1)(b) GDPR).
3. Fulfillment of legal obligations, in particular issuing invoices and accounting (Art. 6(1)(c) GDPR).
4. Handling returns and complaints and defending against claims (Art. 6(1)(f) GDPR).

§ 3. Data recipients

Data is transferred only to the necessary extent to:

• Payment system operators (PayU S.A.).
• Delivery companies (InPost, couriers).
• Accounting office and IT/hosting providers.

§ 4. Data retention period

1. Data processed for order fulfillment and accounting purposes is stored for 5 years from the end of the calendar year in which the tax payment deadline expired.
2. Data processed for defending against claims is stored until the claims are time-barred.

§ 5. Rights of data subjects

Every person has the right to:

• Access, rectify, delete, or limit the processing of their data.
• Object to processing and the right to data portability.
• Lodge a complaint with the President of the Personal Data Protection Office (PUODO) in Poland.

Providing data is voluntary but necessary to conclude a contract.