Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), we hereby inform you about the principles of processing your personal data.
1. DATA CONTROLLER
Szuuus sp. z o.o.
ul. Józefa Mireckiego 13A/7
05-300 Mińsk Mazowiecki
Poland
2. CONTACT
E-mail: info@mommybag.pl Phone: +48 888 776 910 Customer service hours: Monday – Friday, 9:00 AM – 5:00 PM
3. PURPOSES AND LEGAL BASES OF PROCESSING
Order fulfillment
(order acceptance, processing, delivery, payment)
Legal basis: Article 6(1)(b) GDPR — performance of a contract
Courier companies responsible for delivery depending on the destination country:
InPost (Poland), DHL.de (Germany, France), CTT Express (Spain), DHL.nl (Netherlands), PostNL (Denmark), DPD (Austria), Italian Post (Italy).
Banking institutions handling traditional bank transfers.
Hosting provider — Hostinger International Ltd.
Analytics provider — Google LLC (only with consent for analytical cookies).
Accounting office responsible for bookkeeping.
Data may also be disclosed to public authorities if required by applicable law.
5. TRANSFER OUTSIDE THE EEA
If you consent to analytical cookies, your data may be transferred to Google LLC (USA).
Google LLC participates in the EU-U.S. Data Privacy Framework, which ensures an adequate level of personal data protection.
6. DATA RETENTION PERIOD
We store personal data only for the period necessary to achieve the purposes described above:
Order data — until order completion plus the complaint period (2 years)
Invoices — 5 years from the end of the tax year
Claims — until the limitation period expires (maximum 6 years)
7. YOUR RIGHTS
You have the right to:
• access your personal data
• rectify incorrect data
• erase data
• restrict processing
• data portability
• object to processing
• withdraw consent at any time
• lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland
(ul. Stawki 2, 00-193 Warsaw).
8. VOLUNTARY PROVISION OF DATA
Providing personal data is voluntary but necessary to place and process an order.
Without providing data such as name, address, e-mail, and phone number, we cannot process the order.
9. PROFILING
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
10. MORE INFORMATION
Detailed information on the processing of personal data can be found in the Privacy Policy available on mommybag.pl.
SHORT VERSION (FOR ORDER FORM)
The controller of your personal data is Szuuus sp. z o.o. (ul. Józefa Mireckiego 13A/7, 05-300 Mińsk Mazowiecki, Poland, info@mommybag.pl).
Your data are processed for the purpose of order fulfillment (Article 6(1)(b) GDPR).
You have the right to access, rectify, erase, restrict processing, data portability, object, and lodge a complaint with the supervisory authority.
Providing data is voluntary but necessary to complete the order.
More details are available in the Privacy Policy.
CONTACT REGARDING PERSONAL DATA
Szuuus sp. z o.o.
ul. Józefa Mireckiego 13A/7
05-300 Mińsk Mazowiecki
Poland
