Privacy Policy of Cozey Handmade (cozeyhandmade.pl)

Dear User,

I care about your privacy and want you to feel comfortable while using my services. Below, you will find the most important information regarding how I process your personal data and use cookies on my website. This information has been prepared in accordance with the GDPR (General Data Protection Regulation).

Data Controller

Marta Herda, running a non-registered business at ul. Krakowska 35/30, 38-400 Krosno, Poland.

If you wish to contact me regarding the processing of your personal data, please write to: shop@cozeyhandmade.pl

Your Rights

You have the right to request:

• Access to your personal data, including a copy of your data (Art. 15 GDPR or, if applicable, Art. 13(1)(f) GDPR)

• Rectification (Art. 16 GDPR)

• Deletion (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability to another controller (Art. 20 GDPR)

You also have the right to:

• Object at any time to the processing of your data for reasons related to your particular situation, when the processing is based on our legitimate interests (Art. 21(1) GDPR)

• Object to the processing of personal data for direct marketing purposes (Art. 21(2) GDPR)

To exercise your rights, please contact me. You can also manage cookies via your browser settings.

If you believe your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office.

Personal Data and Privacy

Below is detailed information on how your data is processed depending on your actions.

Placing an Order via the Website

• Purpose: Order fulfillment

• Legal basis: Sales agreement (Art. 6(1)(b) GDPR) and legal obligations regarding accounting (Art. 6(1)(c) GDPR)

• Retention period: For the duration of the agreement, and until any legal accounting obligations expire. Additionally, your data may be retained until the period for potential claims has expired.

Contacting Me (e.g., for inquiries)

• Purpose: Responding to your inquiries or requests

• Legal basis:

  • Contract or actions taken at your request to enter into a contract (Art. 6(1)(b) GDPR) – if related to a contract

  • My legitimate interest in communicating with you (Art. 6(1)(f) GDPR) – if not related to a contract

• Retention period: For the duration of the contract, or until the period for potential claims expires, or until your objection to processing is respected.

If you do not provide the required data, I may not be able to respond to your inquiry.

Browser Settings or Similar Analytical Actions

• Purpose: Analyzing your use of the website to improve functionality

• Legal basis: My legitimate interest (Art. 6(1)(f) GDPR)

• Retention period: Until cookies used for analytics expire or are deleted by you

• Consequence of not providing data: Your website activity will not be included in analytics.

Actions Leading to Potential Claims

• Purpose: Establishing, pursuing, or defending potential claims related to contracts or services

• Legal basis: My legitimate interest (Art. 6(1)(f) GDPR)

• Retention period: Until the statute of limitations for claims expires or your objection is respected

• Consequence of not providing data: Inability to establish, pursue, or defend claims

Analytical Activities

On Cozey Handmade, I conduct analytical activities to improve website usability and user experience — with your consent. Analysis may include time spent on pages and clicks. This helps optimize layout, content, and functionality.

Data Security

I implement organizational and technical measures in compliance with applicable law, including SSL encryption, to protect your data.

Cookies

Like most websites, Cozey Handmade uses cookies:

• Stored on your device (computer, phone, etc.)

• Do not modify your device settings

Cookies on this website are used for:

• Session management

• Statistics and analytics

To manage cookies or disable them, consult your browser’s help files (press F1) or the following resources:

• Google Chrome

• Opera

• Safari

• Mozilla Firefox

• Microsoft Edge

You can remove or block cookies at any time. If blocked, I will no longer process them.

External Services / Data Recipients

I use external service providers who process data on my documented instructions:

• Website software provider (Shoper)

• Analytics provider (Google Analytics)

• Courier companies delivering your orders

• Business management software providers

• Standard office software providers (including email services)

• Relevant public authorities, as required by law