Effective from 16 October 2026
§1. Controller of personal data
The controller of personal data is ZERIVA sp. z o.o., ul. Ogniowa 2/5, 02-495 Warszawa, Poland, NIP: 5223381852, REGON: 545511135, KRS: 0001261086, e-mail: info@falesiastore.com, phone +48 575 859 907. The controller has not appointed a data protection officer.
§2. Purposes and legal bases of processing
- conclusion and performance of the sales contract, maintaining the customer account, handling payment and delivery, order e-mails and information on the shipment status – Article 6(1)(b) GDPR,
- handling returns and complaints, and accounting and tax obligations – Article 6(1)(c) GDPR,
- replying to messages, store security, establishment, exercise and defence of legal claims – Article 6(1)(f) GDPR (legitimate interest of the controller),
- statistics, measuring the effectiveness of advertising and tailored advertising (cookies and tools of Google, Meta, TikTok) – Article 6(1)(a) GDPR (consent given in the cookie window),
- record of cookie decisions (proof of consent) – Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR.
§3. Scope of data processed
- first name, last name, delivery address, e-mail address, phone number,
- invoice data (company name, tax ID, address) – if you request an invoice,
- information about orders, payments, shipments, returns and complaints,
- bank account number – if you provide it for a refund,
- data on the use of the store: IP address, cookies, device identifiers, information about pages viewed and purchases.
§4. Recipients of data
- DHL eCommerce (Poland) sp. z o.o., ul. Osmańska 2, 02-823 Warszawa, Poland, KRS 0000631916 – delivery of parcels,
- Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands, KvK 30204462 – payment processing,
- provider of the system for handling orders and sending order e-mails (servers in Germany),
- provider of the shipment tracking service – shipment number,
- cyber_Folks S.A., ul. Wierzbięcice 1B, 61-569 Poznań, Poland, KRS 0000685595 – store hosting,
- e-mail service provider,
- with your consent: Google Ireland Limited (Google Analytics 4, Google Ads), Meta Platforms Ireland Limited (Meta pixel), TikTok Technology Limited (TikTok pixel); for the Meta and TikTok pixels we are joint controllers with these companies as regards the collection and transmission of data (Article 26 GDPR),
- public authorities entitled under the law.
Google, Meta and TikTok may process data outside the European Economic Area – Google LLC and Meta Platforms, Inc. on the basis of a decision of the European Commission finding an adequate level of protection (EU-U.S. Data Privacy Framework) or standard contractual clauses, TikTok (including the United States, Malaysia and Singapore) on the basis of standard contractual clauses.
§5. Data retention period
- order data – until the limitation period for claims under the contract expires,
- accounting and tax documents – 5 years from the end of the calendar year in which the tax payment deadline expired,
- customer account data – until the account is deleted,
- data processed on the basis of consent – until consent is withdrawn (cookie lifetimes: Cookie Policy),
- record of cookie decisions – 3 years from the decision.
§6. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest, to withdraw consent at any time (without affecting the lawfulness of processing before its withdrawal) and to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (the authority competent for us: the President of the Personal Data Protection Office, Poland). You can change or withdraw your cookie consents via the “Cookie settings” link in the page footer. To exercise your other rights, write to: info@falesiastore.com.
§7. Voluntary provision of data
Providing data is voluntary, but necessary to fulfil the order and create an account. Without them we cannot fulfil the order.
§8. Automated decisions
We do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you. After you consent to marketing, advertising tools may select ads based on your activity in the store.
Full information: Privacy Policy.