Privacy Policy

This Privacy Policy defines the rules for processing personal data obtained via the online store manufakturo.eu (hereinafter referred to as the "Online Store").
  2. The owner of the Online Store and at the same time the data administrator is MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in (32-600), ul. Ogródkowa 10, entered into the register of entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, XII Commercial Division of the National Court Register under the number KRS 0001209973, with a share capital of 5,000 PLN, NIP: 5492487759, REGON: 543446089, hereinafter referred to as MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ.
  3. Personal data collected by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ via the Online Store are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also referred to as GDPR.
  4. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ takes special care to respect the privacy of Clients visiting the Online Store.
§ 1 Type of processed data, purposes, and legal basis
  1. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ collects information concerning natural persons performing a legal act not directly related to their activity, natural persons conducting business or professional activity on their own behalf, and natural persons representing legal persons or organizational units without legal personality but granted legal capacity by law, hereinafter collectively referred to as Clients.
  2. Clients' personal data are collected in the case of:
  a) registering an account in the Online Store, for the purpose of creating an individual account and managing that account. Legal basis: necessity for the performance of the contract for the provision of the Account service (Art. 6(1)(b) GDPR);
  b) placing an order in the Online Store, for the purpose of performing the sales contract. Legal basis: necessity for the performance of the sales contract (Art. 6(1)(b) GDPR);
  c) subscription to the informational newsletter (Newsletter), for the purpose of performing the contract, the subject of which is a service provided electronically. Legal basis - consent of the data subject for the performance of the contract for the provision of the Newsletter service (Art. 6(1)(a) GDPR);
  d) use of the contact form service in the Online Store for the purpose of performing the contract provided electronically. Legal basis: necessity for the performance of the contract for the provision of the contact form service (Art. 6(1)(b) GDPR);
  e) use of the review service for the purpose of performing the contract, the subject of which is a service provided electronically. Legal basis - necessity for the performance of the contract for the provision of the review service (Art. 6(1)(b) GDPR).
  3. In case of registering an account in the Online Store, the Client provides:
  a) email address.
  4. During account registration in the Online Store, the Client independently sets an individual password to access their account. The Client may change the password later, under the terms described in §5.
  5. When placing an order in the Online Store, the Client provides the following data:
  a) email address;
  b) address data:
  a. postal code and city;
  b. country (state);
  c. street with house/apartment number.
  c) first and last name;
  d) phone number.
  6. In the case of Entrepreneurs, the above data scope is additionally extended by:
  a) Company name of the Entrepreneur;
  b) tax identification number (NIP).
  7. When using the Newsletter service, the Client provides only their email address.
  8. When using the contact form service, the Client provides the following data:
  a) email address;
  b) first name;
  c) phone number.
  9. When using the "post a review" service, the Client provides only their pseudonym, nickname, or first name.
  10. While using the Online Store Website, additional information may be collected, in particular: the IP address assigned to the Client's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
  11. Navigation data may also be collected from Clients, including information about links and references they decide to click on or other activities undertaken in the Online Store. Legal basis - legitimate interest (Art. 6(1)(f) GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
  12. For the purpose of establishing, pursuing, and enforcing claims, some personal data provided by the Client in connection with the use of functionalities in the Online Store may be processed, such as: first name, last name, data regarding the use of services, if the claims arise from the way the Client uses the services, other data necessary to prove the existence of the claim, including the extent of the damage incurred. Legal basis - legitimate interest (Art. 6(1)(f) GDPR), consisting in establishing, pursuing, and enforcing claims and defending against claims in proceedings before courts and other state authorities.
  13. Providing personal data to MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is voluntary, in connection with concluded sales agreements or service provision via the Online Store Website, with the reservation that failure to provide certain data specified in the Registration forms prevents Registration and the creation of a Client Account, and in the case of placing an order without Client Account Registration, it will prevent placing and fulfilling the Client's order.
§ 2 To whom data is disclosed or entrusted and how long it is stored?
  1. The Client's personal data is transferred to service providers used by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ in running the Online Store. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either follow the instructions of MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ regarding the purposes and methods of processing this data (processors), or independently determine the purposes and methods of their processing (administrators).
  a) Processors. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses providers who process personal data only on the instruction of MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ. These include, among others, providers offering hosting services, accounting services, marketing systems, systems for analyzing traffic in the Online Store, and systems for analyzing the effectiveness of marketing campaigns;
  b) Administrators. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses providers who do not act solely on instruction and independently determine the purposes and methods of using Clients' personal data. They provide electronic payment and banking services.
  2. Location. Service providers are based in Poland and in other countries of the European Economic Area (EEA).
  3. Clients' personal data is stored:
  a) In cases where the basis for processing personal data is consent, the Client's personal data is processed by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ as long as the consent is not withdrawn, and after the withdrawal of consent for a period corresponding to the limitation period of claims that MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may assert and that may be asserted against it. Unless a special provision states otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activities - three years.
  b) If the basis for data processing is the performance of a contract, then the Client's personal data is processed by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ as long as it is necessary to perform the contract, and after that period for the duration corresponding to the limitation period of claims. Unless a special provision states otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to conducting business activity - three years.
  4. In the case of making a purchase in the Online Store, personal data may be transferred to the courier company for the purpose of delivering the ordered goods.
  5. Navigation data may be used to provide Clients with better service, analyze statistical data, and adapt the Online Store to Clients' preferences, as well as to administer the Online Store.
  6. If the Client subscribes to the newsletter (Newsletter) at their email address, MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ will send electronic messages containing commercial information about promotions and new products available in the Online Store.
  7. In the event of a request, MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ provides personal data to authorized state authorities, in particular organizational units of the Prosecutor's Office, Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.
§ 3 Cookies mechanism, IP address
  1. The Online Store uses small files called cookies. They are saved by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ on the end device of the person visiting the Online Store, if the web browser allows it. A cookie file usually contains the domain name from which it originates, its "expiration time," and an individual, randomly chosen number identifying this file. Information collected through such files helps to tailor the products offered by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ to the individual preferences and actual needs of the persons visiting the Online Store. They also provide the possibility to develop general statistics of visits to the products presented in the Online Store.
  2. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses two types of cookies:
  a) Session cookies: after the end of the given browser session or turning off the computer, the saved information is deleted from the device's memory. The session cookies mechanism does not allow the collection of any personal data or any confidential information from the Clients' computers.
  b) Persistent cookies: are stored in the memory of the Client's end device and remain there until they are deleted or expire. The persistent cookies mechanism does not allow the collection of any personal data or any confidential information from the Clients' computers.
  3. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses own cookies for the purpose:
  a) authenticating the Customer in the Online Store and providing the Customer's session in the Online Store (after logging in), thanks to which the Customer does not have to re-enter login and password on each subpage of the Online Store;
  b) analysis and research as well as audience auditing, in particular to create anonymous statistics that help understand how Customers use the Online Store Website, which enables improving its structure and content.
  4. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses external cookies for the purpose of:
  a) promotion of the Online Store via the social network facebook.com (external cookie administrator: Meta Platforms Ireland Limited based in Ireland);
  b) displaying on the Store's informational pages a map indicating the location of the office of MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, via the website maps.google.com (external cookie administrator: Google Inc based in the USA);
  c) collection of general and anonymous statistical data via Google Analytics analytical tools (external cookie administrator: Google LLC based in the USA);
  d) presentation of the Reliable Regulations Certificate via the website rzetelnyregulamin.pl (external cookie administrator: Rzetelna Grupa sp. z o.o. based in Warsaw).
  5. The cookie mechanism is safe for the computers of Online Store Customers. In particular, it is not possible through this method for viruses or other unwanted or malicious software to enter Customers' computers. Nevertheless, Customers have the option in their browsers to limit or disable cookie access to their computers. If this option is used, using the Online Store will be possible, except for functions that by their nature require cookies.
  6. Below we present how to change the settings of popular web browsers regarding the use of cookies:
  a) browser Chrome and Chrome Mobile;
  b) browser Facebook in-app Browser;
  c) browser Internet Explorer;
  d) browser Microsoft EDGE;
  e) browser Mozilla Firefox;
  f) browser Opera;
  g) browser Safari and Safari Mobile;
  h) browser Samsung Browser.
  7. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may collect Clients' IP addresses. An IP address is a number assigned to the computer of a person visiting the Online Store by the internet service provider. The IP number enables internet access. In most cases, it is assigned dynamically to the computer, i.e., it changes with each internet connection. The IP address is used by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ for diagnosing technical problems with the server, creating statistical analyses (e.g., determining from which regions we record the most visits), as information useful in administering and improving the Online Store, as well as for security purposes and possible identification of unwanted automatic programs burdening the server by browsing the content of the Online Store.
  8. The Online Store contains links and references to other websites. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is not responsible for the privacy policies applicable on those sites.
§ 4 Rights of data subjects
  1. Right to withdraw consent - legal basis: Art. 7(3) GDPR.
  a) The Client has the right to withdraw any consent given to MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ.
  b) Withdrawal of consent takes effect from the moment the consent is withdrawn.
  c) Withdrawal of consent does not affect processing carried out by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ in accordance with the law before its withdrawal.
  d) Withdrawal of consent does not entail any negative consequences for the Client but may prevent further use of services or functionalities that MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may lawfully provide only with consent.
  2. Right to object to data processing - legal basis: Art. 21 GDPR.
  a) The Client has the right at any time to object - for reasons related to their particular situation - to the processing of their personal data, including profiling, if MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ processes their data based on a legitimate interest, e.g. marketing of MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ products and services, conducting statistics on the use of individual functionalities of the Online Store, facilitating the use of the Online Store, as well as satisfaction surveys.
  b) Resignation in the form of an email message from receiving marketing communications regarding products or services will constitute the Client's objection to the processing of their personal data, including profiling for these purposes.
  c) If the Client's objection is justified and MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ has no other legal basis for processing the personal data, the Client's personal data, in respect of which the objection was raised, will be deleted.
  3. Right to erasure ("right to be forgotten") - legal basis: Art. 17 GDPR.
  a) The Client has the right to request the deletion of all or some personal data.
  b) The Client has the right to request the deletion of personal data if:
  a. personal data are no longer necessary for the purposes for which they were collected or processed;
  b. has withdrawn a specific consent to the extent that personal data were processed based on their consent;
  c. has objected to the use of their data for marketing purposes;
  d. personal data are processed unlawfully;
  e. personal data must be deleted in order to fulfill a legal obligation provided for by Union law or the law of a Member State to which MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is subject;
  f. personal data were collected in connection with the offering of information society services.
  c) Despite the request to delete personal data, in connection with raising an objection or withdrawing consent, MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may retain certain personal data to the extent that processing is necessary to establish, pursue, or defend claims, as well as to fulfill a legal obligation requiring processing under Union law or the law of a Member State to which MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is subject. This particularly concerns personal data including: first name, last name, email address, which are retained for the purposes of handling complaints and claims related to the use of MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ's services, as well as additionally residential/correspondence address, order number, which are retained for the purposes of handling complaints and claims related to concluded sales contracts or service provision.
  4. Right to restriction of data processing - legal basis: Art. 18 GDPR.
  a) The Client has the right to request the restriction of the processing of their personal data. Submitting the request, until it is considered, prevents the use of certain functionalities or services, the use of which would involve the processing of data covered by the request. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ will also not send any communications, including marketing ones.
  b) The Client has the right to request the restriction of the use of personal data in the following cases:
  a. when the Client contests the accuracy of their personal data – then MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ restricts its use for the time necessary to verify the accuracy of the data, but no longer than 7 days;
  b. when the processing of data is unlawful, and instead of deleting the data, the Client requests the restriction of its use;
  c. when the personal data is no longer necessary for the purposes for which it was collected or used but is needed by the Client for the establishment, exercise, or defense of legal claims;
  d. when they have objected to the use of their data – then the restriction applies for the time needed to consider whether – due to the particular situation – the protection of the Client's interests, rights, and freedoms outweighs the interests pursued by the Administrator in processing the Client's personal data.
  5. Right of access to data - legal basis: Art. 15 GDPR.
  a) The Client has the right to obtain from the Administrator confirmation as to whether personal data concerning them is being processed, and if so, the Client has the right to:
  a. to access their personal data;
  b. to obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of such data, the planned period of storage of the Client's data or the criteria for determining that period (when specifying the planned period of data processing is not possible), the rights granted to the Client under the GDPR and the right to lodge a complaint with the supervisory authority, the source of this data, automated decision-making including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
  c. to obtain a copy of their personal data.
  6. Right to rectification - legal basis: Art. 16 GDPR.
  a) The Client has the right to request from the Administrator the immediate rectification of their personal data that is inaccurate. Taking into account the purposes of processing, the Client whose data is concerned has the right to request the completion of incomplete personal data, including by providing an additional statement, by sending a request to the email address in accordance with §6 of the Privacy Policy.
  7. Right to data portability - legal basis: Art. 20 GDPR.
  a) The Client has the right to receive their personal data provided to the Administrator and then send it to another data controller of their choice. The Client also has the right to request that the personal data be sent directly by the Administrator to such a controller, if technically feasible. In such a case, the Administrator will send the Client's personal data in a csv file format, which is a commonly used format, suitable for machine reading and allowing the transfer of the received data to another data controller.
  8. In the event the Customer exercises a right arising from the above rights, MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ shall fulfill the request or refuse to fulfill it immediately, but no later than within one month of its receipt. However, if - due to the complex nature of the request or the number of requests - MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ cannot fulfill the request within one month, it will fulfill it within the next two months, informing the Customer in advance within one month of receiving the request about the intended extension of the deadline and its reasons.
  9. The Customer may submit complaints, inquiries, and requests regarding the processing of their personal data and the exercise of their rights to the Administrator.
  10. The Customer has the right to request from MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ a copy of the standard contractual clauses by sending an inquiry in the manner indicated in §6 of the Privacy Policy.
  11. The Customer has the right to file a complaint with the President of the Personal Data Protection Office regarding the violation of their rights to personal data protection or other rights granted under GDPR.
§ 5 Security management - password
  1. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ensures Customers a secure and encrypted connection during the transmission of personal data and when logging into the Customer Account in the Service. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses an SSL certificate issued by one of the leading global companies in the field of security and encryption of data transmitted over the Internet.
  2. If a Customer with an account in the Online Store has lost their access password in any way, the Online Store allows generating a new password. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ does not send password reminders. The password is stored in encrypted form, making it impossible to read. To generate a new password, the email address must be provided in the form available under the "Forgot your password" link, given at the login form to the account in the Online Store. The Customer will receive an email sent to the address provided during registration or saved in the last profile change of the account, containing a redirect to a dedicated form available on the Store's Website, where the Customer will be able to set a new password.
  3. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ never sends any correspondence, including electronic correspondence, requesting login data, especially the access password to the Customer's account.
§ 6 Changes to the Privacy Policy
  1. The Privacy Policy may change, about which MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ will inform Customers 7 days in advance.
  2. Questions related to the Privacy Policy should be directed to: office@manufakturo.eu
  3. Date of last modification: 05.01.2026