Privacy policy

This Privacy policy sets out the key rules for processing the personal data we collect in connection with the use of the online store at clayzo.pl.

We make every effort to protect the collected personal data and to use it only in accordance with the law, in particular the GDPR, the Polish Personal Data Protection Act, the Act on Providing Services by Electronic Means and telecommunications law.

I. Definitions

1. Policy — this Privacy policy of the clayzo.pl website.
2. GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
3. Website — the online store at clayzo.pl.
4. User — any natural person visiting the Website, including a Customer placing an order.
5. Product — a ceramic tool (mold, cutter, stamp, roller and other items in the offer) made to individual order based on the Customer's configuration.

II. Data controller

The controller of your personal data is Piotr Włodarczyk, ul. Pasteura 6a/33, Warsaw, Poland.

• e-mail: sklep@clayzo.pl
• phone: +48 602 755 522

III. Purposes and legal bases

1. Visiting the Website

We process Users' data in order to provide content and to ensure the security and correct operation of the Website — under Article 6(1)(b) and (f) GDPR (performance of the service and the controller's legitimate interest).

2. Configurator and saved projects

When using the design studio you can save your own tool projects. We store them together with an account or session identifier so that you can return to your work and place an order — Article 6(1)(b) GDPR.

3. User account

When creating an account we process your e-mail address and login data (including from external sign-in, e.g. Google or Apple, to the extent shared by the provider) — Article 6(1)(b) GDPR.

4. Orders, payments and shipping

When placing an order we process your first and last name, delivery address, e-mail address, phone number and the data required for settlement (including invoice details). The legal bases are Article 6(1)(b) GDPR (performance of the contract) and Article 6(1)(c) GDPR (tax and accounting obligations — accounting documents are kept for 5 years from the end of the tax year). A phone number is required because carriers use it for delivery notices.

5. Contact

When you contact us by e-mail or phone, we process the data contained in your message in order to reply — Article 6(1)(f) GDPR.

6. Marketing

We send marketing messages (e.g. about new designs) only after you have given your consent — Article 6(1)(a) GDPR. Consent can be withdrawn at any time by clicking the unsubscribe link in the message or writing to sklep@clayzo.pl.

7. Claims

We may also process order data to establish, pursue or defend claims — Article 6(1)(f) GDPR, for the limitation period of such claims.

IV. Data recipients

Recipients of your data may in particular include:

1. IT infrastructure and hosting providers, including the application backend and database provider, as well as the e-mail delivery provider;
2. online payment operators — to the extent necessary to process the transaction;
3. carriers and postal operators delivering the order;
4. the accounting office and legal advisers;
5. authorities entitled under the law (tax offices, courts, law enforcement agencies).

Descriptive content and visualisations generated on the Website may be processed by external AI model providers. We only send them project parameters — we do not send contact details or order data.

V. Your rights

1. the right to access your data;
2. the right to rectification;
3. the right to erasure (the "right to be forgotten");
4. the right to restriction of processing;
5. the right to data portability;
6. the right to object to processing based on legitimate interest;
7. the right to withdraw consent at any time;
8. the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland).

VI. Retention period

Account data and saved projects are stored until the account is deleted. Order data is stored for the period required by tax law and until claims become time-barred. Data processed on the basis of consent — until consent is withdrawn.

VII. Automated processing

We do not take decisions about Users based solely on automated processing that would produce legal effects or similarly significantly affect them.

VIII. Security

We apply appropriate technical and organisational measures ensuring a level of security appropriate to the risk, including transmission encryption and access control.

IX. Transfers outside the EEA

Some of the services we use (hosting, e-mail, AI models) may involve transferring data to countries outside the European Economic Area. This only happens on the basis of mechanisms provided for in the GDPR, in particular standard contractual clauses.

X. Cookies

We use the following types of cookies on the Website:

1. Necessary — required for the Website to work, for sessions, sign-in and the cart.
2. Functional — remember chosen settings, e.g. preview preferences in the design studio.
3. Analytical — help us understand how you use the Website.

You can change cookie settings in your browser at any time. Restricting necessary cookies may make it impossible to place an order.

XI. Other websites

The Website may contain links to sites run by other entities. Those sites operate independently and are not supervised by the controller.

XII. Changes to the Policy

We review the Policy on an ongoing basis and reserve the right to update it. The sales rules are described separately in the terms of sale.