Privacy Policy
Last updated: 25 April 2025
This is a translation provided for convenience. The Polish-language version is binding.
This Privacy Policy defines the rules for processing personal data and the use of cookies in connection with the use of the website www.cremebar.pl.
1. General provisions
The data controller is Creme Bar Bjorn Lieske, registered in Radomierzyce, ul. Różana 1, 55-010 Radomierzyce, entered in CEIDG, Tax ID (NIP): 8951687495, REGON: 381330222.
The Controller can be contacted by email at: biuro@cremebar.pl.
Personal data is processed in accordance with the law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
2. Scope of processed data
The Controller may process the following personal data:
- first and last name,
- email address,
- phone number,
- delivery address,
- billing details, including Tax ID (NIP) and company name,
- data related to orders,
- data related to the user account,
- data on activity on the website.
Providing personal data is voluntary but necessary to carry out services or conclude an agreement.
3. Purposes and legal basis for processing
Personal data is processed in order to:
- fulfil orders and conclude a sales agreement,
- operate the user account,
- handle complaints,
- contact the Customer,
- perform legal obligations (e.g. accounting),
- pursue or defend against claims,
- carry out marketing activities, if the Customer has given consent.
The legal basis for processing data is:
- performance of an agreement or actions taken before its conclusion,
- a legal obligation incumbent on the Controller,
- the legitimate interest of the Controller,
- the Customer's consent.
4. Data recipients
Personal data may be transferred to entities cooperating with the Controller, in particular:
- courier companies,
- payment operators, including Stripe,
- accounting offices,
- IT service providers.
Data may be transferred outside the European Economic Area, in particular in connection with the use of Stripe services, in accordance with applicable regulations and with appropriate safeguards in place.
5. Data retention period
Personal data is stored for the period:
- necessary to perform the agreement,
- required by law (e.g. tax law),
- until claims become time-barred,
- until consent is withdrawn - in the case of data processed on its basis.
6. Rights of the data subject
The Customer has the right to:
- access their data,
- rectify their data,
- erase their data,
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time.
The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office.
To exercise the above rights, please contact us: biuro@cremebar.pl.
7. Profiling
Personal data may be processed in an automated manner, including in the form of profiling, to tailor the offer to the Customer's preferences.
Profiling does not produce legal effects nor does it significantly affect the Customer's situation.
8. Cookies
The website uses cookies in order to:
- ensure proper operation of the website,
- analyse traffic,
- carry out marketing activities.
The Customer can manage cookies via browser settings.
9. Data security
The Controller applies appropriate technical and organisational measures ensuring the protection of personal data.
Only authorised persons have access to the data.
10. Final provisions
The Controller reserves the right to make changes to the Privacy Policy.
Changes take effect upon publication on the website.