Privacy Policy

This Privacy Policy defines the rules for processing personal data obtained via the online store manufakturo.eu (hereinafter referred to as the "Online Store").

The owner of the Online Store and simultaneously the data controller is MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at (32-600), ul. Ogródkowa 10, entered in the register of entrepreneurs of the National Court Register maintained by District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register under KRS number 0001209973, with a share capital of 5,000 PLN, VAT ID: 5492487759, REGON: 543446089, hereinafter referred to as MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ.
Personal data collected by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ via the Online Store is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection natural persons in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also called GDPR.
MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ takes special care to respect the privacy of Customers visiting the Online Store.

§ 1 Type of processed data, purposes, and legal basis

MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ collects information concerning natural persons performing a legal act not directly related to their activity, natural persons conducting business activity on their own behalf or professional and natural persons representing legal persons, or organizational units without legal personality, to whom the act grants legal capacity, hereinafter collectively referred to as Customers.
Personal data of Customers is collected in the case of:
1. registering an account in the Online Store, to create an individual account and manage that account. Legal basis: necessity to perform a contract for the provision of the Account service (Art. 6(1)(b) GDPR);
2. placing an order in the Online Store, to perform a sales contract. Legal basis: necessity to perform a sales contract (Art. 6(1)(b) GDPR);
3. subscription to the informational newsletter (Newsletter), to perform a contract whose subject is a service provided electronically. Legal basis – consent of the data subject to perform the contract for the provision of the Newsletter service (Art. 6(1)(a) GDPR);
4. use of the contact form service in the Online Store to perform a contract provided electronically. Legal basis: necessity to perform a contract for the provision of the contact form service (Art. 6(1)(b) GDPR);
5. using the leave a review service for the purpose of performing a contract, the subject of which is a service provided electronically. Legal basis – necessity for the performance of the contract for the provision of the leave a review service (Art. 6(1)(b) GDPR).
When registering an account in the Online Store, the Customer provides:
1. email address.
When registering an account in the Online Store, the Customer independently sets an individual password to access their account. The Customer may change the password later under the terms described in §5.
When placing an order in the Online Store, the Customer provides the following data:
1. email address;
2. address data:
  1. postal code and city;
  2. country (state);
  3. street with house/apartment number.
3. first and last name;
4. phone number.
For Entrepreneurs, the above data scope is additionally extended by:
1. Entrepreneur's company name;
2. NIP number.
When using the Newsletter service, the Customer provides only their email address.
When using the contact form service, the Customer provides the following data:
1. email address;
2. first name;
3. phone number.
When using the leave a review service, the Customer provides only their pseudonym, nickname, or first name.
While using the Store's Website, additional information may be collected, in particular: the IP address assigned to the Customer's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.
Navigation data may also be collected from Customers, including information about links and references they decide to click on or other activities undertaken in the Online Store. Legal basis – legitimate interest (Art. 6(1)(f) GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
For the purpose of establishing, pursuing, and enforcing claims, some personal data provided by the Customer while using the functionalities in the Online Store may be processed, such as: first name, last name, data regarding the use of services if claims arise from the way the Customer uses the services, other data necessary to prove the existence of a claim, including the extent of the damage incurred. Legal basis – legitimate interest (Art. 6(1)(f) GDPR), consisting in establishing, pursuing, and enforcing claims and defending against claims in proceedings before courts and other state authorities.
Providing personal data to MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is voluntary in connection with concluded sales agreements or service provision via the Store's Website, with the reservation that failure to provide certain data specified in the Registration forms prevents Registration and the creation of a Customer Account, and in the case of placing an order without Customer Account Registration, it will prevent placing and fulfilling the Customer's order.

§ 2 To whom data is disclosed or entrusted and how long it is stored?

The Client's personal data is transferred to service providers used by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ in running the Online Store. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either follow the instructions of MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ regarding the purposes and methods of processing this data (processors), or independently determine the purposes and methods of processing (administrators).
1. Processors. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses providers who process personal data only on the instruction of MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ. These include, among others, providers offering hosting services, accounting services, marketing systems, systems for analyzing traffic in the Online Store, and systems for analyzing the effectiveness of marketing campaigns;
2. Administrators. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses providers who do not act solely on instruction and independently determine the purposes and methods of using Clients' personal data. They provide electronic payment and banking services.
Location. Service providers are based in Poland and other countries of the European Economic Area (EEA).
Clients' personal data is stored:
1. If the basis for processing personal data is consent, then the Client's personal data is processed by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ until the consent is withdrawn, and after withdrawal of consent for a period corresponding to the limitation period of claims that MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may raise and that may be raised against it. Unless a special provision states otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activities – three years.
2. If the basis for data processing is the performance of a contract, then the Client's personal data is processed by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ for as long as necessary to perform the contract, and after that for a period corresponding to the limitation period of claims. Unless a special provision states otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to business activities – three years.
In case of a purchase in the Online Store, personal data may be transferred to the courier company to deliver the ordered goods.
Navigation data may be used to provide Customers with better service, analyze statistical data, and adapt the Online Store to Customers' preferences, as well as to administer the Online Store.
If the Customer subscribes to the newsletter (Newsletter) to their email address, MANUFAKTURO LIMITED LIABILITY COMPANY will send electronic messages containing commercial information about promotions and new products available in the Online Store.
In case of a request, MANUFAKTURO LIMITED LIABILITY COMPANY provides personal data to authorized state authorities, in particular organizational units of the Prosecutor's Office, Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.

§ 3 Cookies mechanism, IP address

The Online Store uses small files called cookies. They are saved by MANUFAKTURO LIMITED LIABILITY COMPANY on the end device of the person visiting the Online Store, if the web browser allows it. A cookie file usually contains the domain name it comes from, its "expiration time," and an individual, randomly chosen number identifying this file. Information collected through such files helps to tailor the products offered by MANUFAKTURO LIMITED LIABILITY COMPANY to the individual preferences and actual needs of people visiting the Online Store. They also allow for the development of general statistics of visits to the products presented in the Online Store.
MANUFAKTURO LIMITED LIABILITY COMPANY uses two types of cookies:
1. Session cookies: after the session of a given browser ends or the computer is turned off, the saved information is removed from the device's memory. The session cookies mechanism does not allow the collection of any personal data or any confidential information from Customers' computers.
2. Persistent cookies: are stored in the memory of the Customer's end device and remain there until they are deleted or expire. The persistent cookies mechanism does not allow the collection of any personal data or any confidential information from Customers' computers.
MANUFAKTURO LIMITED LIABILITY COMPANY uses its own cookies for the purpose of:
1. Customer authentication in the Online Store and ensuring the Customer's session in the Online Store (after logging in), so that the Customer does not have to re-enter the login and password on every subpage of the Online Store;
2. analysis and research as well as viewership audit, in particular to create anonymous statistics that help understand how Customers use the Online Store Website, which enables improving its structure and content.
MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses external cookies for the purpose of:
1. promotion of the Online Store via the social networking service facebook.com (external cookie administrator: Meta Platforms Ireland Limited based in Ireland);
2. displaying on the Store's informational pages a map indicating the location of the MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ office, using the maps.google.com website (external cookie administrator: Google Inc based in the USA);
3. collection of general and anonymous statistical data via Google Analytics analytical tools (external cookie administrator: Google LLC based in the USA);
4. presentation of the Reliable Regulations Certificate via the website rzetelnyregulamin.pl (external cookie administrator: Rzetelna Grupa sp. z o.o. based in Warsaw).
The cookie mechanism is safe for the computers of Online Store Customers. In particular, it is not possible for viruses or other unwanted or malicious software to enter Customers' computers through this method. Nevertheless, Customers have the option in their browsers to limit or disable cookie access to their computers. If this option is used, using the Online Store will be possible, except for functions that by their nature require cookies.
Below we present how to change the settings of popular web browsers regarding the use of cookies:
1. browser Chrome and Chrome Mobile;
2. browser Facebook in-app Browser;
3. browser Internet Explorer;
4. browser Microsoft EDGE;
5. browser Mozilla Firefox;
6. browser Opera;
7. browser Safari and Safari Mobile;
8. browser Samsung Browser.
MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may collect Clients' IP addresses. An IP address is a number assigned to the computer of a person visiting the Online Store by their internet service provider. The IP number enables access to the Internet. In most cases, it is assigned dynamically to the computer, i.e., it changes with each internet connection. The IP address is used by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ for diagnosing technical problems with the server, creating statistical analyses (e.g., determining from which regions we record the most visits), as information useful for administering and improving the Online Store, as well as for security purposes and possible identification of unwanted automatic programs that overload the server by browsing the Online Store content.
The Online Store contains links and references to other websites. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is not responsible for the privacy policies applicable on those sites.

§ 4 Rights of data subjects

Right to withdraw consent – legal basis: Article 7(3) GDPR.
1. The Client has the right to withdraw any consent given to MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ.
2. Withdrawal of consent takes effect from the moment the consent is withdrawn.
3. Withdrawal of consent does not affect processing carried out by MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ lawfully before its withdrawal.
4. Withdrawal of consent does not entail any negative consequences for the Client but may prevent further use of services or functionalities that MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may lawfully provide only with consent.
Right to object to data processing – legal basis: Article 21 GDPR.
1. The Client has the right to object at any time – for reasons related to their particular situation – to the processing of their personal data, including profiling, if MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ processes their data based on a legitimate interest.
2. Resignation by email from receiving marketing communications regarding products or services will signify the Client's objection to the processing of their personal data, including profiling for these purposes.
3. If the Client's objection is justified and MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ has no other legal basis for processing the personal data, the Client's personal data subject to the objection will be deleted.
Right to delete data ("right to be forgotten") – legal basis: Art. 17 GDPR.
1. The Client has the right to request deletion of all or some personal data.
2. The Client has the right to request deletion of personal data if:
  1. personal data is no longer necessary for the purposes for which it was collected or processed;
  2. they withdrew a specific consent to the extent personal data was processed based on their consent;
  3. they objected to the use of their data for marketing purposes;
  4. personal data is processed unlawfully;
  5. personal data must be deleted to comply with a legal obligation;
  6. personal data was collected in connection with offering information society services.
3. Despite a request to delete personal data, due to objection or withdrawal of consent, MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ may retain certain personal data to the extent processing is necessary to establish, exercise, or defend claims, as well as to fulfill a legal obligation.
Right to restriction of data processing – legal basis: Art. 18 GDPR.
1. The Client has the right to request restriction of the processing of their personal data.
2. The Client has the right to request restriction of the use of personal data in the following cases:
  1. when the accuracy of their personal data is contested;
  2. when data processing is unlawful, and instead of deleting the data, the Client requests restriction of its use;
  3. when personal data is no longer necessary for the purposes for which it was collected or used but is needed by the Client to establish, exercise, or defend claims;
  4. when they have objected to the use of their data.
Right of access to data – legal basis: Art. 15 GDPR.
1. The Client has the right to obtain from the Administrator confirmation whether personal data is being processed, and if so, the Client has the right to:
  1. get access to your personal data;
  2. get information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of this data, the planned period of storing the Client's data or the criteria for determining this period, the rights granted to the Client under GDPR, the right to lodge a complaint with the supervisory authority, the source of this data, automated decision-making including profiling, and the safeguards applied in connection with the transfer of this data outside the European Union;
  3. get a copy of your personal data.
Right to data rectification – legal basis: art. 16 GDPR.
1. The Customer has the right to request the Administrator to immediately correct any inaccurate personal data concerning them.
Right to data portability – legal basis: art. 20 GDPR.
1. The Customer has the right to receive their personal data provided to the Administrator and then transfer it to another data controller of their choice.
In the event the Customer exercises the rights arising from the above, MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ fulfills or refuses the request immediately, but no later than within one month of receiving it.
The Customer may submit complaints, inquiries, and requests regarding the processing of their personal data and the exercise of their rights to the Administrator.
The Customer has the right to request from MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ a copy of the standard contractual clauses by sending an inquiry as indicated in §6 of the Privacy Policy.
The Customer has the right to file a complaint with the President of the Personal Data Protection Office regarding the violation of their rights to personal data protection or other rights granted under GDPR.

§ 5 Security management - password

MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ensures Customers a secure and encrypted connection when transmitting personal data and when logging into the Customer Account on the Service. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ uses an SSL certificate issued by one of the world’s leading companies in security and encryption of data transmitted over the Internet.
If a Customer with an account in the Online Store has lost their access password in any way, the Online Store allows generating a new password. MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ does not send password reminders. The password is stored in encrypted form, making it impossible to read. To generate a new password, enter the email address in the form available under the "Forgot your password" link provided at the login form for the Online Store account.
MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ never sends any correspondence, including electronic correspondence, requesting login data, especially the access password to the Customer's account.

§ 6 Changes to the Privacy Policy

The Privacy Policy may change, about which MANUFAKTURO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ will inform Customers 7 days in advance.
Questions related to the Privacy Policy should be directed to: office@manufakturo.eu
Last modified date: 05.01.2026