§ 1. Data controller
The controller of personal data of customers and users of the online store available at https://br-konie.pl/ is Animalia.pl S.C., ul. Lotnicza 3, 05-816 Michałowice, Poland, tax ID (NIP): 9512204271, e-mail: br@animalia.pl, telephone: +48 512 479 680. You can contact us about personal data using these details.
§ 2. Purposes, legal bases and retention of data
We process personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
- Handling the order and the sales contract (name, delivery and invoice address, e-mail, telephone, tax ID if provided, order data) – Art. 6(1)(b) GDPR. We keep the data until the contract is performed and then until claims become time-barred.
- Meeting tax and accounting obligations – Art. 6(1)(c) GDPR. We keep the data for 5 years from the end of the tax year in which the tax obligation arose.
- Customer account and wishlist (name, e-mail, encrypted password, addresses, order history) – Art. 6(1)(b) GDPR. We keep the data until the account is deleted.
- Contacting us (contact form, e-mail, telephone) and complaints and returns – Art. 6(1)(b) and (f) GDPR (our legitimate interest in answering messages and handling requests). We keep the data until the matter is closed and then until claims become time-barred.
- Establishing, pursuing and defending claims and ensuring the security of the store (including IP address and technical data stored in server logs) – Art. 6(1)(f) GDPR. We keep the data for the period necessary for these purposes.
- Newsletter (e-mail address) – Art. 6(1)(a) GDPR (consent). We process the data until consent is withdrawn.
- Product availability notification (e-mail address) – Art. 6(1)(a) GDPR (consent). We process the data until the notification is sent or consent is withdrawn.
- Product reviews (name or nickname, content of the review) – Art. 6(1)(a) GDPR (consent). We process the data until the review is deleted.
Providing data is voluntary, but for an order it is necessary to conclude and perform the contract and to issue an invoice; without it an order cannot be placed. Providing data for other purposes is voluntary.
§ 3. Recipients of data
We share data only to the extent necessary for the purposes above, with: the hosting provider (Hetzner), the payment operator (PayU), courier and parcel locker companies (GLS, InPost), the e-mail delivery provider (Vercom), providers of accounting, legal and IT services, and authorities entitled to receive data by law.
§ 4. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, and to object to processing based on our legitimate interest. Where we process data based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, contact us (details in § 1). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
We do not take automated decisions and do not profile users.
§ 5. Cookies
The store uses only cookies necessary for its operation, such as maintaining the session, cart and login, language and currency selection and security. We do not use analytics or marketing cookies. Consent is not required for the cookies we use. You can block cookies in your browser settings, but the store may then stop working properly.
§ 6. Changes to this policy
The current version of the Privacy Policy is published on the store website. It is effective from 1 November 2026.