1. Data Controller

The personal data controller is:
Filip Kulbicki
Address: –
Tax ID (NIP): –
Contact email: kontakt@filipport.com

2. Scope of Processed Data

While using the website and store, the following data may be processed:

• Full name
• Email address
• Shipping address
• Phone number
• Technical data (cookies, IP address, device information)
• Data necessary for payment processing

3. Purposes and Legal Basis for Data Processing

Your data may be processed for the following purposes:

3.1 Order fulfillment (contract)

• Acceptance and processing of orders
• Product shipment
• Payment processing
• Legal basis: Article 6(1)(b) GDPR

3.2 Contact via form or email

• Legal basis: Article 6(1)(f) GDPR

3.3 Invoicing / Accounting

• Legal basis: Article 6(1)(c) GDPR

3.4 Website traffic statistics and analysis

— via analytics tools
Legal basis: Article 6(1)(f) GDPR

3.5 Marketing

Legal basis: Your consent, Article 6(1)(a) GDPR

4. Data Sharing

• Your data may be shared with:
• Shipping company / courier
• Online payment operator
• Hosting provider maintaining the website server
• Accounting services
• Data is not sold to third parties.

5. Cookies

The website uses cookies for:

• Proper functioning of the website and store
• Remembering user settings
• Traffic analytics
• Optional marketing purposes
• Users can manage cookie settings in their browser.

6. Data Retention Period

Data will be stored as follows:

• Order data — for the period required by law
• Contact data — until the correspondence ends
• Marketing data — until consent is withdrawn
• Cookies — according to browser settings and site configuration

7. Rights of the Data Subject

You have the right to:

• Access your data
• Rectify your data
• Delete your data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent (if given)
• Requests can be sent at any time to: kontakt@filipport.com
  You also have the right to file a complaint with the President of the UODO (Polish Data Protection Authority).

8. Automated Decision-Making

Data is not used for profiling or automated decision-making.

9. Data Security

The data controller applies appropriate technical and organizational measures to protect data from unauthorized access, loss, or disclosure.

10. Changes to the Privacy Policy

The administrator may update this policy in case of legal changes or changes in store operation. The current version is always available on the website.