Introduction

The Privacy Policy is a document containing the rules for the processing of personal data and the use of cookies in connection with the use of the online store (Store) on the website www.darkshop.com.pl (Website).

The administrator of personal data is: BROWAR JURAND limited liability company, REGON: 541585020, NIP 5253045372, UL. RONDO ORGANIZACJI NARODÓW ZJEDNOCZONYCH 1, 00-124 WARSZAWA, e-mail: bok@mazurskamanufaktura.pl (Seller).

The legal basis for the processing of personal data is Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

The Seller processes the personal data of Buyers for the following purposes:

• performance of the sales contract and taking action at the Buyer's request to conclude it (Article 6(1)(b) of the GDPR),
• performance of a contract for the provision of electronic services (Article 6(1)(b) of the GDPR)
• marketing of the Seller's own products or services (Article 6(1)(f) of the GDPR)
• website traffic analysis www.darkshop.com.pl and maintaining statistics (Article 6(1)(f) of the GDPR)
• fulfillment of the Seller's legal obligations related to accounting (Article 6(1)(c) of the GDPR)
• the Seller's legitimate interest in processing data for the purpose of establishing, pursuing, or defending any claims (Article 6(1)(f) of the GDPR).

Buyers' personal data will be stored for the following period:

• data related to the Buyer's account – for the period of its maintenance in the Store and no longer than until a request for its deletion is submitted
• data related to order fulfillment – for a period of 5 years from the end of the year in which the sale was made, unless further storage is justified by the statute of limitations for claims
• providing the newsletter service – until you unsubscribe from the newsletter
• data related to the implementation of marketing activities – until objection is raised
• data related to responding to email, telephone, or live chat inquiries—until correspondence is completed or consent is withdrawn
• settlements, investigations, or defense against claims – for the period necessary to achieve this purpose
• opinion survey – for the period necessary to achieve this purpose
• in the case of the performance of a sales contract – for the duration of the contract and until the expiry of the limitation period for claims arising from that contract, currently 3 years
• in the case of marketing – until an objection to such processing is raised
• in the case of analyses and statistics – until an objection to such processing is lodged
• for the purposes of fulfilling accounting obligations – for a period of 5 years from the end of the calendar year in which the tax payment deadline expired or the financial year to which they relate.

The collected personal data is stored in paper or electronic form.

By agreeing to the use of cookies in accordance with the terms of this policy during your first visit to the Website, you allow the Seller to use cookies during each subsequent visit to the Website.

Collection of personal data

The following types of personal data of Buyers may be collected, stored, and used:

• information about your computer, including your IP address, geographic location, browser type and version, and operating system
• information about visits to the Website and its use, including the source of referrals, length of visit, number of views, navigation paths within the Website
• information provided during registration on the Website
• information entered when creating a profile, in particular first and last name, profile photos, gender, date of birth, relationship status, interests and hobbies, educational data, and employment data
• information provided for the purpose of setting up the Seller's email or newsletter subscriptions, in particular email address, first and last name
• information entered when using the services
• information generated during the use of the Website, in particular information about when, how often, and under what circumstances the Buyer uses it
• information regarding purchases made, services used, transactions made through the Website, in particular name, address, telephone number, email address, and credit card details
• information published on the Website, including username, profile photos, and content of posts
• information contained in any correspondence sent to the Seller by email or via the Website, including communication content and metadata
• any other personal data that the Buyer provides to the Seller.

If the Buyer discloses another person's personal data, they must obtain that person's consent to the disclosure and processing of their personal data in accordance with these rules.

Use of personal data

The seller uses the collected personal data in particular for the following purpose:

• administration of the Website and its activities
• personalizing the Website
• enabling the use of services available on the Website
• shipping goods purchased through the Website
• provision of services purchased through the Website
• sending statements, invoices, payment reminders to the Buyer, and receiving payments from the Buyer
• sending non-marketing commercial communications
• sending email notifications
• sending text messages
• sending newsletters by email and text message (you can unsubscribe from this newsletter at any time)
• sending SMS newsletters (you can unsubscribe from this newsletter at any time via the opt-out link in the SMS message)
• sending marketing information concerning the Seller's business or the activities of carefully selected third parties that may be of interest to Buyers, by post or email or other similar technology
• providing third parties with statistical information about users of the Website, on the assumption that these third parties will not be able to identify any specific user based on the information received
• handling inquiries, complaints, and claims
• ensuring the security of the Site and preventing fraud
• verifying compliance with the terms of use of the Website (including monitoring private messages sent via the messaging service)
• and other necessary applications.

Personal data submitted for publication on the Website will be published and used in other ways in accordance with the license granted to the Seller.

The Buyer's privacy settings can be used to limit the publication of their information on the Website and can be adjusted using the privacy controls on the Website.

Personal data will not be transferred to third parties or any other related third parties for direct marketing purposes without the express consent of the person concerned.

Data obtained as a result of subscribing to the email or SMS newsletter will be processed within the mailerlite.com system, which guarantees an adequate level of personal data protection by participating in the Privacy Shield program.

Rights of individuals whose personal data is processed

In connection with the processing of their personal data, buyers have the following rights:

• right of access to personal data
• right to rectify personal data
• the right to erasure of personal data,
• the right to restrict the processing of personal data
• the right to object to processing
• right to data portability
• the right to lodge a complaint with a supervisory authority.

The above rights may be exercised in accordance with the rules described in Articles 16–21 of the GDPR by contacting us at: bok@mazurskamanufaktura.pl.

Sharing personal data

Personal data may be transferred to entities entrusted by the Seller with the processing of personal data on the basis of agreements, and to entities authorized to obtain personal data on the basis of legal provisions.

In order to perform the contract concluded through the Store and to ensure the proper functioning of the Store, the Seller provides personal data in particular to entities providing services:

• postal, shipping, and courier services, as well as order processing
• electronic payments
• accounting
• hosting
• IT and software delivery
• marketing services related to online store management.

Personal data disclosed by the Seller:

• to the extent required by law
• in connection with ongoing or potential legal proceedings
• in order to establish, enforce, or defend our rights (including sharing information with other entities for fraud prevention purposes)
• the buyer (or potential buyer) of any business or assets that it sells (or is considering selling)
• any persons who, in the reasonable opinion of the Seller, may apply to a court or other competent authority for disclosure of such personal data, if there is a high probability that such court or authority will order disclosure of such personal data.

International data transfers

The seller transfers personal data only to entities within the European Economic Area and to countries that have been recognized as providing an adequate level of protection based on a decision by the European Commission.

If the processing involves the transfer of personal data to a country outside the EEA that has not been recognized as providing an adequate level of protection by a decision of the European Commission, the Seller undertakes to secure such transfer by means of one of the mechanisms specified by applicable law, including the mechanisms specified in Articles 46-49 of the GDPR.

Security of personal data

The Seller uses commercially reasonable technical and organizational security measures to protect personal data, in particular against theft, loss, or misuse.

The seller stores personal data on secure servers (protected by a password and firewall), which are not accessible without authorization.

All electronic financial transactions conducted via the Website are protected by TLS encryption technology secured with an Extended Validation certificate, guaranteeing the highest level of security and trust. The certificate was issued by the renowned company Unizeto Technologies S.A.

Amendments

These rules may be updated periodically by publishing a new version.

Third-party websites

The website contains hyperlinks to third-party websites and detailed information about them. The seller has no control over and is not responsible for the privacy policies and practices of third parties.

Cookies

This website uses cookies. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.

Cookies can be "persistent" or "session" cookies: persistent cookies will be stored by your web browser and will remain valid until their set expiry date, unless you delete them before the expiry date; session cookies expire at the end of the user's session when the web browser is closed.

Cookies do not usually contain any information that identifies the user, but the personal data processed by the Seller may be linked to the information stored in and obtained from cookies.

The Seller uses both session and persistent cookies on the Website.

The names of cookies used by the Seller on the Website and the purposes for which they are used are specified below:

files – Google Analytics, Google Ads, Google Tag Manager, Facebook Pixel, Shoper Pixel, and mailerlite.com code

purposes – recognizing the Buyer's computer in order to enable the use of the shopping cart on the Website, improving the usability of the Website, statistics on the use of the Website, preventing fraud, improving the security of the Website, personalizing the Website for each user, selecting advertisements.

Most browsers allow you to refuse cookies—for example:

• In Firefox (version 81) – you can block all cookies by clicking

Tools, Options, Privacy, selecting Use custom settings for history from the drop-down menu and unchecking Accept cookies from sites;

• In Chrome (version 86) – you can block all cookies by opening the "Customize and control" menu and selecting "Block all third-party cookies."

control" by clicking "Settings," "Show advanced settings," and "Content settings," then selecting "Block sites from setting any data" under the "Cookies" heading.

Blocking all cookies will have a negative impact on your ability to use many websites. If you block cookies, you will not be able to use all the features of the Website.

You can delete cookies already stored on your computer—for example:

In Firefox (version 81) – you can delete cookies by clicking "Tools," "Options," and "Privacy," then selecting "Use custom settings for history" and clicking

"Show cookies," then clicking "Delete all cookies"; in Chrome (version 86), you can delete all cookies by opening the menu

"Customize and control" by clicking "Settings," "Show advanced settings," and "Clear browsing data," then selecting "Delete cookies and other site and plug-in data" before clicking "Clear browsing data" orselectingwww.darkshop.com.pl and deleting only its data.

Deleting cookies from all websites will have a negative impact on the usability of many websites.

Privacy policy update date: September 15, 2025.

This document was created using a template from the law firm praKreacja.legal. (prakreacja.pl) and modified for the purposes of the Seller (www.darkshop.com.pl).