Privacy Policy

Privacy Policy

This Privacy Policy defines the methods of using and protecting the personal data of Customers,

using the website www.ewodd.com, hereinafter referred to as the “Ewodd website”.

1. Personal Data Controller

The personal data controller for Customers of the Ewodd website is HandCraft Polska Sp. z o.o., with its registered office in Stary Sącz, at ul. Węgierska 12B, entered into the register of entrepreneurs of the National Court Register under KRS number 0000276567; holding NIP 7343221135; REGON 120422171; with a share capital of PLN 100,000, hereinafter referred to as “Ewodd”.

2. On what grounds and for what purpose do we process your personal data?

The provided data is processed on the basis of Article 6(1)(a), (b), (c) and (f) of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “General Data Protection Regulation” or “GDPR”).

Therefore, personal data processing is carried out based on the following legal grounds and purposes:

1. Personal data processing is necessary for the conclusion and performance of a contract (provision of services by electronic means) or for taking steps prior to entering into a contract, including in particular for the purpose of:
   • creating and managing an Account;
   • handling and fulfilling Orders;
   • carrying out the payment process;
   • ensuring the proper functioning and use of the service and the quality of services;
   • settling concluded contracts and services provided by Ewodd within the service and by the Seller;
   • handling complaints and requests submitted via the contact form;
   • establishing contact in connection with the performance of the contract (provision of service);
2. Personal data processing is necessary for compliance with legal obligations incumbent on the Data Controller, e.g., tax, accounting, warranty, and guarantee obligations;
3. Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
4. Your personal data is processed for purposes related to transactions carried out within the www.ewodd.com service and for purposes resulting from the legitimate interests pursued by the Controller, as well as based on the Customer’s consent – for purposes specified in the content of the granted consent, including for commercial and marketing purposes;
5. Your personal data is processed for purposes related to transactions carried out within the www.ewodd.com service and for purposes resulting from the legitimate interests pursued by the Controller, as well as based on the Customer’s consent – for purposes specified in the content of the granted consent, including for commercial and marketing purposes;
   • data archiving and documenting compliance with personal data protection obligations;
   • handling requests not directly related to contract performance;
   • ensuring the security of provided services and a high level of Customer service;
   • debt collection and claims pursuit;
   • preparing internal statistics and analyses for marketing and service development purposes,
   • preparing promotional offers for regular Customers and Users,
   • personal data processing is carried out based on the consent of Users or Customers, given voluntarily and consciously in relation to a specific data processing purpose clearly and specifically indicated in the content of that consent.
6. Your personal data is processed for purposes related to transactions carried out within the www.ewodd.com service and for purposes resulting from the legitimate interests pursued by the Controller, as well as based on the Customer’s consent – for purposes specified in the content of the granted consent, including for commercial and marketing purposes;

Some system functions are available only to registered users. During the registration process, we will ask you for your email address and the password you will use in our store. Additionally, you will need to declare the account type (private or business) and provide the following data: first name, last name, street, house number, apartment number, postal code, city, and phone number, and if you run a business, additionally its company name and NIP number. The final step of account registration will be accepting the terms and conditions of using the www.ewodd.com store.

The personal data indicated above is necessary for the conclusion and performance of the contract. Providing additional data is voluntary and equivalent to expressing consent for its processing by the Data Controller for the purpose of concluding or performing the contract, provided that the Data Controller has the right to delete it if it deems that this data is not necessary for the conclusion or performance of the contract.

5. Orders placed without User registration

It is possible to place an order without creating a User Account. In such a case, the aforementioned data required during registration must be entered into the order form and the order form must be sent to the Data Controller via the www.ewodd.com service.

6. Orders placed by phone and email

It is possible to place an order by phone and email. In such a case, a www.ewodd.com employee accepts the order from the Buyer placed by phone or email, and then, with the Buyer’s consent and at their express request, enters the data into the system. Depending on the type of goods and the specifics of the order, the Seller’s employee then decides whether the Buyer should confirm the placed order or not. Depending on the above, the Buyer will receive an electronic request to confirm, cancel, or possibly change the order.

7. Data collected during purchase

Before you can make a transaction, i.e., purchase goods in our service, we will ask you for your first name, last name, address (for shipping), and phone number. To make a purchase, you will need to accept the terms and conditions of using the www.ewodd.com service, available on the website www.ewodd.com//regulamin/.

8. Data we collect when you contact us

When you contact us using the contact form, you provide us with data such as the content of the message, your name, and the email address to which we should send a reply. This data is used only for contact in the given matter, for the time necessary to handle the request, and is not collected or processed by the Data Controller.

To ensure a higher level of personal data protection, in connection with the GDPR regulations, each User has the option to set an individual password for telephone contact, which will be required during the conversation for an employee to provide any information about the order. For security purposes, this password should not be the same as the password used for logging into the service.

The User should not share the telephone contact password with third parties. If the User shares the telephone contact password with a third party, that person will be authorized by the User to obtain information regarding the fulfillment of current orders, and such authorization expires when the User changes the telephone contact password via their Account.

9. Automatically collected data

During your visit to our website, data regarding your visit, e.g., your IP address, domain name, browser type, operating system type, etc., are automatically collected. This data will be used exclusively for statistical purposes to adapt the www.ewodd.com store to the needs and requirements of Customers.

Data about users of the www.ewodd.com service is collected for statistical research. The basis for processing this data is the legitimate interest of the data controller. These studies aim to improve the functionality of the service and facilitate its use for potential customers. This data is collected automatically from every user visiting the service website (www.ewodd.com).

10. How do we process your personal data?

Personal data processing is carried out in accordance with applicable regulations in this regard, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”) and national regulations, including the Act of 10 May 2018 on Personal Data Protection.

11. To whom do we transfer your data?

The Data Controller will not resell the personal data of our Customers to third parties. Data collected during registration will be processed solely to enable you to log into our system, make a possible purchase, and for the purpose of contract fulfillment.

The Controller informs that, for the purpose of contract fulfillment, personal data is transferred to its trusted partners to the necessary extent.

For the purpose of contract performance, your data may be transferred in particular to:

1. Payment service providers indicated by the Buyer for the purpose of charging the Buyer’s credit card or making online payments. The data transfer will take place based on a personal data processing entrustment agreement concluded between the Data Controller and the selected payment service provider. Providing this data is mandatory if the Buyer wishes to make an electronic payment for purchased products.
2. A shipping company that will be responsible for delivering the ordered products to the address provided during purchase. The data transfer will take place based on a personal data processing entrustment agreement concluded between the Data Controller and the selected shipping company. If the Buyer has chosen the option of order delivery by one of the shipping companies, transferring data to this company is necessary to fulfill the order.
3. The manufacturer or distributor of a given product, for the purpose of fulfilling the order, in particular its shipment directly from the manufacturer’s or distributor’s premises. The data transfer will take place based on a personal data processing entrustment agreement concluded between the Data Controller and the given manufacturer.
4. In the event that the Customer decides to purchase insurance, their personal data will be transferred to the entity providing insurance services, in particular regarding money-back guarantees. The data transfer will take place based on a personal data processing entrustment agreement concluded between the Data Controller and the insuring entity.

If you have purchased goods, you may receive messages from us regarding the status of your order and occasional advertising and promotional messages related to the www.ewodd.com store’s offer, if you have previously consented to receive such information. We may also contact you by phone if we have important information regarding your order and it is necessary for its fulfillment.

13. Newsletter

With your consent, we will also process your data to provide additional services such as a newsletter (promotional bulletin). You can obtain more information about promotional offers after subscribing to the newsletter.

14. Newsletter subscription

If you have subscribed to our newsletter, or otherwise consented to receive it, you will receive our newsletter (advertising and promotional messages regarding the www.ewodd.com l offer) via email. You can unsubscribe from the newsletter at any time by withdrawing your previously given consent. To unsubscribe from the newsletter, you can click the “unsubscribe” link in the footer of each bulletin or send an email requesting to unsubscribe to info@ewodd.com.

15. Protection of privacy and personal data

By concluding the contract, the Customer consents to the processing of personal data contained in the order by the Data Controller in accordance with the applicable provisions of the General Data Protection Regulation and the Personal Data Protection Act of May 10, 2018.
Personal data placed in the Data Controller’s database is processed solely for its needs and is not and will not be made available to other external entities.

The User has the right to:

1. the right to access their data and receive a copy thereof;
2. the right to rectification (correction) of their data;
3. the right to erasure of data, restriction of data processing;
4. the right to object to data processing;
5. the right to data portability;

For this purpose, please contact us at: info@ewodd.com.

The Customer also has the right to withdraw consent to the processing of their personal data at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;

The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office if the Customer considers that the processing of their personal data violates legal provisions;

15. How long will your data be stored?

Personal data will be stored for the period necessary for the execution of transactions on the www.ewodd.com service and the consideration of complaints, and is processed for the period during which the Customer has an account on the www.ewodd.com service.

If the Customer makes transactions without creating an account on the www.ewodd.com service, the data is processed for a period of 10 years from the date of contract performance.

In the case of personal data processing based on the Customer’s consent – data is stored until consent is withdrawn, and after withdrawal of consent, for a 10-year limitation period for potential claims.

15. Protection of privacy and personal data

By concluding the contract, the Customer consents to the processing of personal data by the Data Controller.