Privacy Policy

Privacy Policy (GDPR)

1. Data Controller

The controller of personal data is:
Elevendi Szymankiewicz Jędrej Spółka jawna
ul. Otmuchowska 72, 48-300 Nysa, Poland
E-mail: shop@elevendi.com

2. Purposes and legal basis of processing

  • Performance of a contract and order fulfillment – Art. 6(1)(b) GDPR
  • Customer service and complaint handling – Art. 6(1)(b) GDPR
  • Marketing and newsletter (with consent) – Art. 6(1)(a) GDPR
  • IT security and fraud prevention – Art. 6(1)(f) GDPR

3. Data categories

Name, address, e-mail, order data, payment data, IP address, browser data.

4. Data retention

Data is stored for the duration of the contract and thereafter for the period required by law, no longer than 10 years.

5. Data subject rights

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent at any time

6. Data transfers

Personal data is not transferred outside the EU, unless required by law or necessary for contract performance.

7. Contact

For data protection matters contact: shop@elevendi.com

Last update: 25.01.2026