Privacy Policy

Flexi Design Jarosław Zakrzewski – online store e-sklep.flexidesign.eu

Last updated: 8 March 2026

1. General provisions

This Privacy Policy explains the principles of processing personal data of users of the online store available at https://e-sklep.flexidesign.eu/ (hereinafter: the “Store” or the “Service”) by Flexi Design Jarosław Zakrzewski.

2. Data controller

Flexi Design Jarosław Zakrzewski

ul. Stefana Żeromskiego 1 lok. 409

01-887 Warsaw

Poland

NIP (Tax ID): 8381761147

REGON: 367711923

Contact e-mail and contact for data protection matters: e-sklep@flexidesign.eu

3. Scope and purposes of data processing

The Controller processes users’ personal data in particular for the purpose of:

creating and maintaining a Customer Account,

accepting and fulfilling orders for digital products,

providing downloadable files and handling licenses,

providing paid technical support services,

processing payments via the external payment operator Tpay,

issuing accounting documents and fulfilling tax obligations,

contacting the Customer regarding orders, complaints, or support,

analyzing traffic and visit statistics,

conducting marketing activities if the user has given appropriate consent,

ensuring the security of the Service and preventing abuse.

4. Legal basis for processing

Personal data are processed on the basis of:

Article 6(1)(b) GDPR – for the purpose of concluding and performing a contract, including order fulfillment, Customer Account management and technical support,

Article 6(1)(c) GDPR – for compliance with legal obligations, in particular accounting and tax obligations,

Article 6(1)(f) GDPR – for the purposes of the legitimate interests of the Controller, including ensuring security, pursuing claims, handling complaints, analytics and basic communication with the user,

Article 6(1)(a) GDPR – based on consent, if it concerns marketing activities, certain cookies or similar technologies.

5. Scope of collected data

The Controller may collect in particular the following data:

first and last name,

company name,

billing address,

Tax Identification Number (NIP),

e-mail address,

phone number,

information about ordered products, licenses and payments,

information necessary to provide technical support,

data related to the use of the Customer Account,

technical data such as IP address, device type, browser type, operating system, date and time of the visit, and server logs.

6. Customer Account and file access

If a Customer Account is created, the Controller processes the data necessary to create and maintain it. Purchased files may be made available in the Customer Account for a period of 1 year from the date of purchase, unless the offer for a specific product states otherwise.

7. Database and e-mail communication

User and order data may be stored in a database used to operate the Store and may be sent to the e-mail address e-sklep@flexidesign.eu for the purpose of order processing, customer contact, complaint handling, and providing technical support.

E-mail messages may be transmitted using secure connections, if supported by the configuration of the server and mail services.

8. Data recipients and processors

Personal data may be entrusted or disclosed only to entities supporting the Controller in operating the Store, in particular:

hosting providers, server providers and IT service providers,

providers of store software and administrative tools,

the payment operator Tpay,

entities providing accounting, legal or advisory services,

providers of analytical and marketing tools, if used in accordance with applicable law and on the appropriate legal basis,

authorized public authorities if the obligation to disclose data results from legal provisions.

9. Transfer of data outside the EEA

In connection with the use of certain analytical, marketing or cloud tools, data may be transferred outside the European Economic Area if the provider of a given tool uses infrastructure located outside the EEA. In such cases, the Controller applies appropriate legal mechanisms required by the GDPR, in particular standard contractual clauses or other legally compliant safeguards.

10. Data retention period

Personal data are stored for the period necessary to fulfill the purpose for which they were collected, and then for the period required by law or necessary for the establishment, defense or enforcement of claims.

In particular:

data related to orders and accounting documents – for the period required by tax and accounting regulations,

Customer Account data – for the duration of the account and thereafter for a period justified by archival needs and potential claims,

data processed on the basis of consent – until the consent is withdrawn or the purpose of processing ceases to exist.

11. Rights of data subjects

The data subject has the right to:

access their data,

rectify their data,

erase their data,

restrict processing,

data portability,

object to processing,

withdraw consent at any time if the processing is based on consent.

To exercise these rights, you may contact the Controller at: e-sklep@flexidesign.eu.

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office.

12. Cookies and analytical tools

The Store uses cookies and similar technologies, including essential, analytical and marketing tools.

The Controller plans to use or uses in particular:

Google Analytics,

Facebook Pixel,

TikTok Pixel,

Google Search Console / Webmaster Tools,

a cookie consent management mechanism provided by Cookiebot.

Cookies may be used to ensure the proper functioning of the Store, maintain user sessions, analyze visit statistics, measure the effectiveness of marketing campaigns, and personalize advertising activities – depending on the scope of granted consents.

The user may manage cookie preferences via the consent banner, Cookiebot settings, and browser settings.

13. Security measures

The Controller implements technical and organizational measures appropriate to the risk of infringement of the rights or freedoms of natural persons, including in particular access control, system security mechanisms, backups, and solutions protecting data against unauthorized access, loss, destruction or unauthorized modification.

14. Changes to the Privacy Policy

The Controller may update this Privacy Policy, in particular in the event of changes in legal regulations, the operation of the Store, or the scope of the tools used. The current version of the Policy will be published in the Store together with the update date.

15. Contact

Any questions regarding the processing of personal data should be sent to: e-sklep@flexidesign.eu.

Controller address: ul. Stefana Żeromskiego 1 lok. 409, 01-887 Warsaw, Poland.