Privacy policy

Effective date: October 12, 2026

1. Who we are

The controller of your personal data is Jan Śliwak, doing business as GroobaPaka Jan Śliwak, ul. Żwirki i Wigury 4/2, 47-224 Kędzierzyn-Koźle, Poland, Tax ID (NIP) 7492126560 (“we,” “us”). For any privacy questions, contact: prostyplan.kontakt@gmail.com.

2. What data we collect

  • Order information: email address, name, billing details (such as a billing address), and order and payment information. We do not store full payment card details — these are handled by payment providers.
  • Your email address if you sign up for new release notifications.
  • The content of messages you send us.
  • Technical data: IP address, device and browser information, and cookies.

3. Why we use your data and on what legal basis

  • To process your order, deliver your files, and contact you about your order — performance of a contract (Art. 6(1)(b) GDPR).
  • To issue sales documents and keep accounting records — legal obligation (Art. 6(1)(c) GDPR).
  • To handle complaints and establish, exercise, or defend legal claims — legitimate interest (Art. 6(1)(f) GDPR).
  • To send release notifications and newsletters — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • To reply to your messages — legitimate interest (Art. 6(1)(f) GDPR).
  • For store statistics and security and, with your consent, marketing using cookies — Art. 6(1)(f) and Art. 6(1)(a) GDPR.

4. Who we share data with

We may share data with companies that help us run the store: our store platform provider (Shopify International Limited, Ireland), payment providers, email and file hosting providers, our accounting office, and public authorities when required by law. We do not sell your personal information.

5. International transfers

Some providers (such as Shopify) may process data outside the European Economic Area, including in Canada and the United States. These transfers are based on European Commission adequacy decisions or standard contractual clauses.

6. How long we keep your data

  • Order data — for as long as required by tax and accounting laws (usually 5 years from the end of the tax year) and until legal claims expire.
  • Notification and newsletter data — until you withdraw your consent.
  • Messages — until the matter is resolved, and then until any potential claims expire.

7. Your rights

You have the right to access, correct, or delete your data, to restrict processing, to data portability, to object to processing, and to withdraw your consent at any time (this does not affect processing carried out before withdrawal). You may also lodge a complaint with the Polish data protection authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland). To exercise any of these rights, email us at the address above.

8. Is providing data required?

Providing your data is voluntary, but it is necessary to place an order and receive your files. Giving your email address for notifications is completely optional.

9. Cookies

Our store uses cookies that are necessary for it to work (for example, the cart and checkout) and, with your consent, analytics and marketing cookies. You can manage cookies in the cookie banner and in your browser settings.

10. Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that have legal effects.