Privacy Policy of the falesiastore.com Store

Effective from 16 October 2026

§1. Data controller

The controller of your personal data is ZERIVA sp. z o.o., ul. Ogniowa 2/5, 02-495 Warszawa, Poland, KRS 0001261086, NIP 5223381852, REGON 545511135 – the seller in the falesiastore.com store (Falesia Lima brand). Contact in personal data matters: info@falesiastore.com, phone +48 575 859 907 or by post to the company’s address. We have not appointed a data protection officer.

§2. What data we process, why and on what legal basis

Order and delivery. Data: full name, delivery address, e-mail, phone number, ordered products, payment data (amount, status, transaction ID), shipment number. Purpose: conclusion and performance of the sales contract, including e-mails about the order and information on the shipment status. Legal basis: Article 6(1)(b) GDPR.
Customer account. Data: e-mail, password in encrypted form, addresses, order history. Purpose: maintaining the account. Legal basis: Article 6(1)(b) GDPR.
Returns, exchanges and complaints. Data: as for the order, content of the request, photos, bank account number – if you provide it. Purpose: fulfilling our obligations under consumer law. Legal basis: Article 6(1)(c) GDPR.
Accounting and tax documents. Data: data from the proof of purchase or invoice. Purpose: obligations under accounting and tax law. Legal basis: Article 6(1)(c) GDPR.
Contact (e-mail, phone, contact form). Data: name, e-mail or phone number, content of the message. Purpose: answering your question. Legal basis: Article 6(1)(f) GDPR – our legitimate interest in handling enquiries, and where the question concerns an order – Article 6(1)(b) GDPR.
Establishment, exercise and defence of legal claims. Data: order data and correspondence. Legal basis: Article 6(1)(f) GDPR.
Statistics, measuring the effectiveness of advertising and tailored advertising (remarketing). Data: cookie and device identifiers, IP address, information about pages viewed and purchases (order value and products). Legal basis: Article 6(1)(a) GDPR – your consent to the “Statistics” or “Marketing” category given in the cookie window. Before your decision and after you refuse, we do not load these tools and do not pass any data to them. Details: Cookie Policy.
Record of cookie decisions. Data: a random decision identifier (also stored in the so_zgoda cookie in your browser), the selected categories, date and time, the version of the cookie window text, language and page address – without the IP address and without data that allow us to identify you. Purpose: demonstrating that consent was given or refused. Legal basis: Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR.
Security and operation of the store. Data: IP address, server logs, strictly necessary cookies. Legal basis: Article 6(1)(f) GDPR.

§3. Do you have to provide data

Providing data is voluntary, but the data marked in the order form are necessary to conclude and perform the contract – without them we cannot fulfil the order.

§4. Who we share data with

Data are received only by entities that help us run the store, to the extent needed for their task:

carrier: DHL eCommerce (Poland) sp. z o.o., ul. Osmańska 2, 02-823 Warszawa, Poland, KRS 0000631916 – full name, delivery address, phone number, e-mail – delivery of the parcel;
payment operator: Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands, Chamber of Commerce (KvK) no. 30204462 – transaction data – processing of card payments;
provider of the system for handling orders and sending order e-mails (servers in Germany) – order and delivery data, e-mail address;
provider of the shipment tracking service – shipment number – to inform you about the status of your shipment;
store hosting provider: cyber_Folks S.A., ul. Wierzbięcice 1B, 61-569 Poznań, Poland, KRS 0000685595 – the store’s server;
e-mail service provider – handling of e-mail correspondence;
with your consent – providers of statistics and advertising tools: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland (Google Analytics 4, Google Ads), Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Meta pixel), TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (TikTok pixel);
public authorities – where required by law.

When collecting data with the Meta pixel and the TikTok pixel and transmitting them to these providers, we are joint controllers with Meta Platforms Ireland Limited and TikTok Technology Limited (Article 26 GDPR). These companies are responsible for the further processing of the data, including for displaying advertising, in accordance with their privacy policies. Apart from this, we do not share data with other controllers for marketing purposes.

§5. Transfers of data outside the European Economic Area

Providers of statistics and advertising tools may also process data outside the European Economic Area. Google LLC and Meta Platforms, Inc. in the United States participate in the EU-U.S. Data Privacy Framework – the transfer is based on Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 finding an adequate level of protection and, to the extent it does not apply, on standard contractual clauses approved by the European Commission. TikTok also processes data on servers in the United States, Malaysia and Singapore on the basis of standard contractual clauses approved by the European Commission (Article 46 GDPR). You can obtain a copy of the safeguards by writing to info@falesiastore.com.

§6. How long we keep data

order data and related correspondence – until the limitation period for claims under the contract expires (as a rule 6 years, counted to the end of the calendar year);
accounting and tax documents – 5 years from the end of the calendar year in which the tax payment deadline expired;
account data – until the account is deleted;
enquiries not related to an order – up to 12 months from the end of the correspondence;
data collected on the basis of consent – until consent is withdrawn; the lifetime of individual cookies is given in the Cookie Policy;
record of cookie decisions – 3 years from the decision (the period in which we may need proof of consent).

After these periods we delete or anonymise the data.

§7. Your rights

You have the right to: access your data and obtain a copy, rectification, erasure, restriction of processing, data portability, object to processing based on our legitimate interest, and withdraw consent at any time (withdrawal does not affect the lawfulness of processing before the withdrawal). You can change or withdraw your cookie consents at any time via the “Cookie settings” link in the page footer. To exercise your other rights, write to info@falesiastore.com.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work or where the alleged infringement took place. The supervisory authority competent for us is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland, https://uodo.gov.pl).

§8. Automated decisions and profiling

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. If you consent to marketing cookies, the advertising tools of Google, Meta and TikTok may select the ads shown to you based on your activity in the store.

§9. Where we get data from

We receive data from you. We receive information about the payment status from the payment operator, and information about the status and delivery of the shipment from the carrier and the shipment tracking service provider.

§10. Security

We use encrypted connections, restrict access to data to authorised persons, make backups and keep software up to date.

§11. Changes

We announce changes to the privacy policy on this page, and inform account holders by e-mail. Please send questions about personal data to: info@falesiastore.com.