Privacy without ambiguity
We explain what personal data we process, why we need it, who may receive it, and how you can exercise your rights and manage your choices.
Kids and Teens Sp. z o.o.
controller of your personal data
GDPR
the basis for protecting your data
1 month
usual time limit for replying to a request
The essentials come first. Details and exceptions are in the sections below.
Controller
Who is responsible for your data
The controller of your personal data is Kids and Teens Sp. z o.o., ul. Usługowa 6, 45-127 Opole, Poland, KRS 0000409129, NIP 7532429925. For privacy matters, contact sklep@meble4kids.pl.
Scope of data
What information we may process
- Identification and contact details provided with an order, account, form or newsletter subscription.
- Order, payment, delivery, return and complaint data.
- IP address, session identifiers, device and browser type, diagnostic data and consent records.
- The content of correspondence, reviews and other messages sent to the Shop.
Purposes and legal bases
Why we use personal data
- Fulfilling orders and providing account services — performance of a contract.
- Handling enquiries before a purchase — taking steps at the person's request before entering into a contract.
- Invoices, accounting and obligations towards public authorities — compliance with a legal obligation.
- Complaints, security, fraud prevention and the establishment, exercise or defence of claims — legitimate interests.
- Newsletter and analytics — consent, which may be withdrawn.
Recipients
Who helps us operate the shop
Personal data may be received by providers of hosting and infrastructure, payment services, carriers, e-mail and newsletter services, accounting and legal services, and analytics tools — only to the extent needed to perform their tasks.
The Shop uses, among others, Vercel and Supabase infrastructure, Brevo for sending messages and — after consent is given — Google Analytics.
International transfers
Data outside the European Economic Area
Some technology providers may process data outside the EEA. In that case, the transfer is based on a mechanism permitted by the GDPR, such as an adequacy decision or standard contractual clauses.
Retention
How long we keep personal data
- Order data and accounting documents — for the period required by law.
- Account data — until the account is deleted, and afterwards to the extent needed to protect legal claims.
- Correspondence, returns and complaints — until the matter is completed and for the applicable limitation period.
- Newsletter and analytics data — until consent is withdrawn or the data is no longer useful.
Your rights
You remain in control of your data
You may request access, rectification, erasure, restriction of processing and data portability, as well as object to processing and withdraw consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office, ul. Moniuszki 1A, 00-014 Warszawa, Poland.
Security and changes
How we protect information
We use organisational and technical measures appropriate to the risk, including access controls, encrypted connections and data minimisation. This policy may be updated when the law, technology or the way the Shop operates changes. The update date is shown at the top of the page.
Useful sources
The official material this description of your rights is based on.
Would you like to exercise your rights?
Write to sklep@meble4kids.pl. Describe your request and provide the information that allows us to verify your identity securely.