Privacy Policy – ROYAL DYWANY SP. Z O.O.

1. General Information

This Privacy Policy defines the principles of processing personal data and the use of cookies on the website available at: https://royaldywany.ploperated by ROYAL DYWANY SP. Z O.O., with its registered office in Warsaw, ul. Domaniewska 37/2.43, 02-672 Warsaw, Poland, entered into the National Court Register under number 0001155118, NIP: 5273151485, REGON: 54089305000000.

Contact email: biuro@royaldywany.pl

2. Personal Data Controller

The controller of personal data is ROYAL DYWANY SP. Z O.O. Personal data is processed in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

3. Purposes and Legal Basis for Data Processing

Personal data may be processed for the following purposes:

Registration and management of a user account (Article 6(1)(b) GDPR),
Order processing and delivery of goods (Article 6(1)(b) GDPR),
Customer communication (Article 6(1)(f) GDPR),
Accounting and tax obligations (Article 6(1)(c) GDPR),
Marketing activities and newsletters (with consent) (Article 6(1)(a) GDPR),
Analytics and statistics (with consent where required).

4. Data Recipients

Personal data may be transferred to:

IT and hosting service providers,
Courier and transport companies,
Payment service providers,
Accounting service providers.

Data is not transferred outside the European Economic Area unless required by service providers or when the user provides a delivery address outside the EU.

5. Data Retention Period

Personal data is stored for the duration of the user account and for the period required by applicable law (e.g., 5 years for accounting records). Data processed based on consent is stored until consent is withdrawn.

6. Data Subject Rights

Users have the right to:

Access their personal data,
Rectify inaccurate data,
Request deletion of data (“right to be forgotten”),
Restrict processing,
Data portability,
Object to processing,
Withdraw consent at any time (if processing is based on consent),
Lodge a complaint with the Polish Data Protection Authority (UODO).

7. Voluntary Provision of Data

Providing personal data is voluntary; however, it is necessary to create an account and process orders.

8. Profiling and Automated Decision-Making

Personal data is not subject to automated decision-making or profiling.

9. Cookies

The website uses cookies to ensure proper operation of the service and, where applicable, for analytical and marketing purposes (e.g., Google Analytics or Meta Pixel) after obtaining appropriate user consent.

Users may change cookie settings at any time in their web browser.

10. Google Sign-In and Google User Data

Our website allows users to log in using their Google account through the Google Sign-In service provided by Google LLC.

Data Accessed

When signing in with Google, we may access the following data (depending on the permissions granted by the user):

Full name,
Email address,
Google account unique identifier (Google ID),
Profile picture (if available).

Purpose of Use

This data is used solely for the following purposes:

creating and maintaining a user account in our store,
enable secure login,
user identification in the system.

Data obtained from Google is not used for marketing purposes or passed on to third parties, unless required by law.

Data storage

Data is stored on our secure servers for the duration of your account or until your account is deleted.

Data sharing

We do not sell or share data obtained from Google with third parties. The data is not used to train artificial intelligence models or machine learning systems.

Access revocation

You can revoke the app's access to your Google Account at any time through your Google Account security settings at: https://myaccount.google.com/permissions

11. Changes to the Privacy Policy

The Administrator reserves the right to make changes to this Privacy Policy. Any changes will be published on the website.