Privacy Policy & Cookies
Privacy and Cookie Policy for ZdunekKnives.com
This document sets out the rules for processing personal data and using cookies and similar technologies in connection with the use of the ZdunekKnives.com website.
1. General Provisions
This Privacy and Cookie Policy sets out the rules for processing personal data and using cookies and similar technologies in connection with the use of the website at ZdunekKnives.com.
This document is provided for informational purposes and fulfills the obligations arising from the GDPR and applicable regulations on electronic communications, cookies, and similar technologies.
2. Data Controller
The controller of your personal data is Revasdomo sp. z o.o., ul. F. Klimczaka 17 lok. 80, 02-797 Warsaw, Poland, KRS: 0000352727, NIP: 5213559751, REGON: 142330760.
You can reach the Controller by email at info@revasdomo.pl or by phone at +48 608 432 705.
The Controller has not appointed a Data Protection Officer. For any matters related to data protection and privacy, you can contact the Controller directly.
3. Purposes, Legal Bases, and Scope of Processing
3.1. Handling correspondence and the contact form
If you contact us by email, phone, contact form, or social media, we process your data to respond to you, continue the correspondence, handle your inquiry, and archive the communication to document what was agreed and to defend against potential claims.
- Legal basis: Art. 6(1)(f) GDPR, and where contact is aimed at entering into a contract or relates to pre-contractual steps, also Art. 6(1)(b) GDPR.
- Scope of data: first and last name, email address, phone number, social media handle, message content, contact history, and any other data you voluntarily provide.
3.2. Managing business relationships and the sales process (CRM)
For quote requests, order discussions, negotiations, and cooperation history, we may process data in a CRM system.
- Legal basis: Art. 6(1)(f) GDPR, and to the extent necessary to take steps before entering into a contract or to perform it, Art. 6(1)(b) GDPR.
- Scope of data: identification data, contact data, data on interest in the offer, contact history, business arrangements, and information necessary to fulfill an order.
3.3. Order fulfillment and contract performance
If you make a purchase or place an order, we process your data to enter into and perform the contract, prepare the product for shipping, communicate about order fulfillment, deliver the product, and settle the order.
- Legal basis: Art. 6(1)(b) GDPR.
- Scope of data: first and last name, email address, phone number, shipping address, invoicing data, and other data necessary to fulfill the order.
3.4. Invoicing and accounting/tax obligations
In connection with your order, we process data necessary to issue accounting documents and fulfill obligations arising from tax and accounting law.
- Legal basis: Art. 6(1)(c) GDPR.
- Scope of data: identification, address, and billing data, invoicing data, and tax ID number, where applicable.
3.5. Complaints, returns, and withdrawal from the contract
If you file a complaint, exercise your right of withdrawal, or contact us about a product defect or a billing matter, we process your data to handle that matter.
- Legal basis: Art. 6(1)(b), Art. 6(1)(c), and Art. 6(1)(f) GDPR.
- Scope of data: identification and contact data, order data, billing data, and data included in the complaint or request.
3.6. Newsletter and email marketing
If you sign up for the newsletter, we'll process your email address, and optionally your name, to send you news about products, the workshop, new releases, and content related to the Zdunek Knives brand.
- Legal basis: Art. 6(1)(a) GDPR.
- You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
- As part of the newsletter, we may analyze basic sending statistics, such as open rates or link clicks, if such features are provided by our email service provider.
3.7. Establishing, pursuing, and defending legal claims
We may also process your data when necessary to establish, pursue, or defend claims related to our business activities, an order, a complaint, or contact with us.
- Legal basis: Art. 6(1)(f) GDPR.
3.8. Analytics, security, and proper functioning of the website
In connection with using the website, technical data and information stored in cookies or server logs may be processed to ensure the site works properly, increase security, detect errors and abuse, compile statistics, and improve the site's functionality.
- Legal basis: Art. 6(1)(f) GDPR, and where use of specific analytics tools requires user consent, Art. 6(1)(a) GDPR.
4. Where the data comes from
We receive personal data primarily directly from you — when you contact us, submit an inquiry, order a product, sign up for the newsletter, file a complaint or a withdrawal notice, or contact us through social media.
Some technical information may be collected automatically while you use the site, such as your IP address, device, browser, and operating system data, the source that brought you to the site, on-site activity, and data from cookies and server logs.
5. Is providing your data mandatory?
Providing your data is generally voluntary, but in some cases it may be necessary to achieve a specific purpose.
Providing contact details is necessary if you expect a reply to your message or want us to prepare a quote. Providing the data necessary to fulfill an order is required to enter into and perform the contract. Providing invoicing details is required if you want to receive an accounting document. Providing your email address for the newsletter is voluntary, but necessary to receive marketing messages.
Not providing this data may prevent us from responding to you, preparing a quote, fulfilling an order, issuing an invoice, or sending the newsletter.
6. Recipients of the data
Your data may be shared with parties whose services we use in operating our business and the website, in particular: hosting providers, email providers, technical and IT support providers, CRM system providers, including Pipedrive, mailing and newsletter system providers, including MailerLite, our accounting office, law firms or advisors supporting the Controller, courier and logistics companies, and parties entitled to receive it under applicable law.
Data is shared only to the extent necessary to achieve the relevant purpose.
7. Data transfers outside the European Economic Area
In connection with the use of certain tools by the Controller, in particular systems provided by companies with an organizational or technical base outside the EEA, your data may be transferred to third countries, including the United States. This may in particular concern solutions such as Pipedrive, MailerLite, and Google Analytics 4.
In such cases, the Controller ensures that the transfer is carried out lawfully, in particular on the basis of a European Commission adequacy decision, standard contractual clauses approved by the European Commission, or other appropriate safeguards provided for by the GDPR.
You can ask the Controller for further information about the safeguards used for transfers outside the EEA.
8. Data retention period
We retain your data for no longer than necessary to fulfill the purpose of processing, and afterward for a period resulting from legal requirements or the need to defend against claims.
Data from correspondence and contact forms is retained for as long as necessary to handle the matter, and then until the statute of limitations for claims expires, or for a period justified by the need to archive what was agreed. CRM data is generally retained for up to 3 years from the last contact, unless longer retention is justified by ongoing cooperation or the defense of claims.
Data related to order fulfillment is retained for as long as necessary to perform the contract and provide after-sales support. Accounting and tax data is retained for the period required by law, generally 5 years from the end of the calendar year in which the tax payment deadline fell.
Data related to complaints, returns, and withdrawal from the contract is retained for as long as necessary to handle the matter and until the statute of limitations for claims expires. Data processed on the basis of consent, including the newsletter, is retained until consent is withdrawn or the purpose of processing ceases to apply.
Technical data and server logs are retained for as long as necessary to ensure the security and proper operation of the site. Data from cookies is retained for the lifespan of the relevant cookie or until it's deleted by the user, subject to the settings of the consent management tool.
9. Your rights
In connection with the processing of your personal data, you have the right to: access your data, correct your data, delete your data, restrict processing, data portability, object to processing based on Art. 6(1)(f) GDPR, withdraw your consent at any time where processing is based on consent, and file a complaint with the President of the Polish Data Protection Authority (UODO).
To exercise your rights, you can contact the Controller at info@revasdomo.pl.
10. Automated decision-making and profiling
As a rule, your data is not used to make decisions about you in a way that is solely automated and would produce legal effects concerning you or similarly significantly affect you.
If the website uses analytics or marketing tools that allow for compiling statistics, analyzing the effectiveness of activities, or audience segmentation, data may be processed in a partially automated way, but without making decisions that produce significant legal effects concerning you.
11. Cookies and Similar Technologies
11.1. What are cookies
Cookies are small pieces of text information stored on your device in connection with using a website. They may be read by the Controller's IT systems or by the systems of third parties whose technologies are used on the site.
11.2. Types of cookies that may be used
The site may use the following types of cookies and similar technologies:
- Necessary — required for the site to function correctly and for basic features to work;
- Functional — allowing selected settings to be remembered and improving your experience on the site;
- Analytics — used to measure traffic, compile statistics, analyze how the site is used, and improve its performance;
- Marketing — used to run promotional activities, measure campaign effectiveness, and tailor marketing communications, where such tools have been implemented.
11.3. Legal basis for using cookies
Necessary cookies may be used without your consent when they're required for the site to function properly.
Functional and analytics cookies that aren't necessary are used in accordance with the settings of the consent management tool implemented on the site. You can accept, reject, or customize the scope of your consent in the cookie banner.
If the site has implemented Google solutions related to traffic measurement and consent, including Google Analytics 4, they may operate according to the technical configuration of the consent mechanism, including Google Consent Mode. This means that how the analytics scripts behave may depend on your current consent settings and the site's technical configuration.
11.4. Google Analytics 4
The site uses Google Analytics 4 to analyze traffic and usage statistics. This tool may process, among other things, your IP address, online identifiers, device, browser, and operating system data, the source that brought you to the site, approximate geolocation data, and information about your activity on the site.
Google Analytics 4 may use cookies or similar technologies and consent management solutions. The exact scope of data processing depends on the tool's technical configuration and the consent settings you've chosen.
11.5. Managing cookies
You can manage your cookie settings from the banner or consent management panel available on the site, through your web browser's settings, and by deleting cookies stored on your device.
Restricting the use of cookies may affect certain features of the site.
11.6. Third-party cookies
If the site uses third-party solutions — in particular mailing systems, embedded content, or analytics or marketing tools — those parties may set their own cookies or access information stored on your device, but only in accordance with applicable law and, where required, in line with the choices you've made in the consent management tool.
11.7. Newsletter and tracking technologies in emails
The newsletter emails we send may contain technologies that let us check whether the message was opened and whether the links in it were clicked, if such features are offered by our email service provider. This data is used to analyze the effectiveness of our sends and improve the quality of our communications.
12. Server Logs
Using the site involves sending requests to the server where the site is hosted. Each such request may be recorded in server logs.
Logs may include, in particular, your IP address, the server's date and time, information about your browser and operating system, the URL of the page you visited previously, and information about technical errors.
Data stored in server logs is not used by the Controller to identify users in the ordinary course of using the site, but serves technical, administrative, security, and diagnostic purposes.
13. Social Media
If we maintain brand profiles on social media and you contact us through them, we may process your data to respond to your message, carry on the communication, handle your inquiry, promote the brand, and build a community around the brand.
The scope of data depends on what information you share on your profile and in the content of your message. Use of social media is also subject to the privacy rules of the platforms themselves.
14. Changes to the Privacy Policy
The Controller reserves the right to update this Privacy Policy, in particular in the event of changes in the law, changes in the scope of its business, the implementation of new tools or technologies, or changes in how data is processed. The current version of the Policy is published on the site.
Aktualna wersja Polityki jest publikowana w serwisie.
15. Contact
If you have questions about this Privacy Policy or about the processing of personal data, you can contact the Controller at: info@revasdomo.pl, tel. +48 608 432 705.