Privacy Policy

This Privacy Policy defines the rules for processing and protection of personal data of customers of OLARI Atelier – Aleksandra Pozorska, in accordance with Regulation (EU) 2016/679 (GDPR).

Controller of personal data

The controller of personal data is:

OLARI Atelier – Aleksandra Pozorska

Poland

E-mail: contact@olari-atelier.com

Personal data

Personal data means any information relating to an identified or identifiable natural person.

Scope and source of data

Personal data are obtained directly from the Customer when placing an order, making an inquiry, or contacting via the website.

The Controller processes the following data:

– name and surname

– address

– e-mail address

– telephone number

Purpose of data processing

Personal data are processed for the following purposes:

– processing and fulfillment of orders

– communication with the Customer

– issuing invoices and fulfilling legal obligations

– handling complaints and claims

Providing personal data is voluntary but necessary to conclude and perform the contract.

Data retention period

Personal data are stored:

– for the duration of the contract

– and thereafter for the period required by law (e.g. accounting regulations)

– no longer than necessary for the purposes for which they were collected

Recipients of data

Personal data may be shared with entities necessary for order fulfillment, including:

– hosting and website provider (Webnode AG)

– payment operators

– shipping companies / couriers

Data may also be processed by analytics tools such as Google Analytics.

Data are not sold or shared for marketing purposes.

Customer rights

The Customer has the right to:

– access their personal data

– rectify data

– delete data

– restrict processing

– object to processing

– data portability

– withdraw consent at any time

To exercise these rights, contact: Aleksandra_pozorska@wp.pl

The Customer has the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office in Poland).

Data security

The Controller applies appropriate technical and organizational measures to ensure data protection, including secured systems and limited access to data.

Final provisions

This Privacy Policy may be updated. The current version is always available on the website. This Privacy Policy is effective from: 04.04.2026.

This Privacy Policy reflects the principles applied since 2019.