Privacy policy

Privacy Policy

This policy explains how Avelunessa processes personal data under the EU General Data Protection Regulation (GDPR) and the Polish Personal Data Protection Act. The controller is:

Avelunessa
Górki 14, 61-001 Poznań, Poland
Email: breve-adept.3z@icloud.com
Phone: +48 692 684 516

What we collect and why

To process an order we collect your name, delivery and billing address, email address, phone number and order details. The legal basis is performance of the sales contract (Art. 6(1)(b) GDPR). Payment is handled by our payment providers; we do not see or store your full card number. We keep accounting records for as long as Polish accounting law requires (generally six years), which is a legal obligation (Art. 6(1)(c)).

If you contact us, we process the details you give us to answer you (our legitimate interest, Art. 6(1)(f)). If you opt in, we send occasional email about our products on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time.

Who processes it

Your data is shared only with the processors needed to run the shop: our e-commerce platform (Shopify), our payment providers, and the carriers who deliver your order. Where a provider is outside the EU/EEA, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.

Cookies

The store uses cookies necessary for the basket and checkout to work, and, only with your consent, cookies for analytics. You can manage non-essential cookies through the banner and in your browser.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. You may withdraw consent at any time. To exercise any of these, email breve-adept.3z@icloud.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, uodo.gov.pl).