{"id":3,"date":"2026-10-03T15:00:17","date_gmt":"2026-10-03T13:00:17","guid":{"rendered":"https:\/\/morasy.pl\/?page_id=3"},"modified":"2026-10-04T10:27:33","modified_gmt":"2026-10-04T08:27:33","slug":"polityka-prywatnosci","status":"publish","type":"page","link":"https:\/\/morasy.pl\/en\/polityka-prywatnosci\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h2>Privacy Policy of the morasy.pl shop<\/h2>\n<p>This policy explains how we process the personal data of Customers and visitors to the online store morasy.pl, in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter: <strong>RODO (GDPR)<\/strong>). Effective from <strong>25 October 2026<\/strong>.<\/p>\n<h2>1. Data controller<\/h2>\n<p>The controller of your personal data is Joanna Szyda, conducting business under the name <strong>Morasydladzieci Joanna Szyda<\/strong>, ul. Tucholska 41, 64-920 Pi\u0142a, NIP (tax ID): 7641658760, REGON: 300611355 (hereinafter: <strong>Controller<\/strong> or <strong>we<\/strong>).<\/p>\n<p>For matters concerning personal data, you can contact us:<\/p>\n<ul>\n<li>by email: <a href=\"mailto:morasydladzieci@interia.pl\">morasydladzieci@interia.pl<\/a>,<\/li>\n<li>by phone: <a href=\"tel:+48888973899\">+48 888 973 899<\/a> (every day),<\/li>\n<li>in writing to the Controller's address given above.<\/li>\n<\/ul>\n<p>The Controller has not appointed a data protection officer, as it is not required to do so.<\/p>\n<h2>2. Purposes and legal bases of processing<\/h2>\n<table>\n<thead>\n<tr>\n<th>Purpose of processing<\/th>\n<th>Legal basis<\/th>\n<th>Retention period<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Conclusion and performance of the sales contract: accepting and fulfilling the order, payment, delivery, contact regarding the order, handling withdrawal from the contract<\/td>\n<td>art. 6(1)(b) RODO (GDPR) (contract)<\/td>\n<td>until the contract is performed, and then for the limitation period for claims and the period required by tax regulations (see below)<\/td>\n<\/tr>\n<tr>\n<td>Maintaining the Customer Account in the Shop<\/td>\n<td>Art. 6(1)(b) RODO (GDPR) (agreement for the provision of an electronic service)<\/td>\n<td>until the Account is deleted<\/td>\n<\/tr>\n<tr>\n<td>Handling complaints (non-conformity of goods with the contract) and fulfilling other obligations under the ustawa o prawach konsumenta (Polish Consumer Rights Act)<\/td>\n<td>Art. 6(1)(c) GDPR (legal obligation)<\/td>\n<td>for the period of the Seller's liability and the limitation period for claims<\/td>\n<\/tr>\n<tr>\n<td>Issuing sales receipts and invoices, keeping accounting and tax records and documentation<\/td>\n<td>Art. 6(1)(c) GDPR in conjunction with tax and accounting regulations<\/td>\n<td>5 years from the end of the calendar year in which the tax payment deadline expired<\/td>\n<\/tr>\n<tr>\n<td>Establishing, pursuing or defending against claims<\/td>\n<td>Art. 6(1)(f) RODO (GDPR) (legitimate interest of the Controller)<\/td>\n<td>until the expiry of the limitation period for claims arising from the contract (at most 6 years, counted to the end of the calendar year in which the limitation period expires)<\/td>\n<\/tr>\n<tr>\n<td>Responding to messages sent by e-mail, by phone or via the contact form<\/td>\n<td>art. 6(1)(f) RODO (GDPR) (legitimate interest \u2013 communication with people who contact us); art. 6(1)(b) RODO (GDPR), if the message concerns the conclusion or performance of a contract<\/td>\n<td>until the matter is closed, and then for a maximum of 12 months, unless the correspondence concerns a contract<\/td>\n<\/tr>\n<tr>\n<td>Publishing Product reviews and verifying that the review was submitted by a purchaser of the Product<\/td>\n<td>Art. 6(1)(f) GDPR (legitimate interest \u2013 providing reliable information to other Customers) and Art. 6(1)(c) GDPR (obligation to provide information on review verification)<\/td>\n<td>until the review or Account is deleted<\/td>\n<\/tr>\n<tr>\n<td>Ensuring the security and proper functioning of the Shop (server logs, protection against abuse)<\/td>\n<td>Art. 6(1)(f) GDPR (legitimate interest)<\/td>\n<td>14 days<\/td>\n<\/tr>\n<tr>\n<td>Statistics and analysis of traffic in the Shop (Google Analytics 4)<\/td>\n<td>Art. 6(1)(a) RODO (GDPR) (consent given in the cookie banner)<\/td>\n<td>until consent is withdrawn; data in Google Analytics is stored for 14 months<\/td>\n<\/tr>\n<tr>\n<td>Marketing and measuring ad effectiveness (Google Ads, remarketing)<\/td>\n<td>Art. 6(1)(a) RODO (GDPR) (consent given in the cookie banner)<\/td>\n<td>until consent is withdrawn, no longer than the cookie lifetime described in the <a href=\"https:\/\/morasy.pl\/en\/polityka-cookies\/\">Cookie Policy<\/a><\/td>\n<\/tr>\n<tr>\n<td>Remembering your cookie choice<\/td>\n<td>Art. 6(1)(c) RODO (GDPR) in conjunction with Art. 399 of the ustawa \u2013 Prawo komunikacji elektronicznej (Polish Electronic Communications Law) and Art. 6(1)(f) RODO (GDPR) (accountability)<\/td>\n<td>6 months<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>If data is processed for several purposes, we retain it until the longest of the periods expires.<\/p>\n<h2>3. What data we process<\/h2>\n<ul>\n<li><strong>Order:<\/strong> first and last name, delivery address, email address, phone number, selected pickup point and, if an invoice is requested, company name and NIP (tax ID); data on the ordered Products and payment (excluding payment card details, which go exclusively to the payment operator).<\/li>\n<li><strong>Account:<\/strong> email address, password (stored in encrypted form, not visible to us), address details saved by the Customer, Order history.<\/li>\n<li><strong>Personalized products:<\/strong> the lettering (e.g., first name, surname, rank) provided for making a name tape or patch.<\/li>\n<li><strong>Reviews:<\/strong> display name, rating, review content, verified purchase information.<\/li>\n<li><strong>Technical data:<\/strong> IP address, browser and device information, cookie data \u2013 to the extent described in <a href=\"https:\/\/morasy.pl\/en\/polityka-cookies\/\">Cookie Policy<\/a>.<\/li>\n<\/ul>\n<h2>4. Data Recipients<\/h2>\n<p>We share your data only to the extent necessary to achieve the purposes described above. The recipients of the data are:<\/p>\n<h3>Entities processing data on our behalf<\/h3>\n<ul>\n<li><strong>Amazon Web Services EMEA SARL<\/strong> (Luxembourg) \u2013 Shop hosting; data is stored on servers located in Frankfurt am Main (Germany).<\/li>\n<li><strong>Amazon Web Services EMEA SARL \u2013 Amazon SES service<\/strong> \u2013 sending emails related to orders and the Account (confirmations, statuses, tracking numbers).<\/li>\n<li><strong>Google Ireland Limited<\/strong> (Dublin, Ireland) \u2013 Google Analytics 4 and Google Ads; only after you give your consent in the cookie banner. With respect to certain advertising data, Google may act as a separate controller \u2013 details: <a href=\"https:\/\/business.safety.google\/privacy\/\">business.safety.google\/privacy<\/a>.<\/li>\n<li><strong>Accounting office<\/strong> \u2013 accounting and tax services: Zaufana Ksi\u0119gowa, pl. Konstytucji 3 Maja 9\/21, 64-920 Pi\u0142a.<\/li>\n<li>Providers of IT services and technical support for the Shop \u2013 to the extent necessary to maintain and service the Shop \u2013 a person or company providing technical administration of the Shop, under a data processing agreement.<\/li>\n<\/ul>\n<h3>Entities with which we share data as separate controllers<\/h3>\n<ul>\n<\/p>\n<li><strong>Autopay S.A.<\/strong> based in Sopot \u2013 electronic payment operator (BLIK, payment cards, fast bank transfers, Google Pay, Apple Pay); receives the data necessary to process payments.<\/li>\n<p><\/p>\n<li><strong>Carriers<\/strong> \u2013 depending on the selected delivery method: InPost sp. z o.o. (Paczkomaty and Kurier InPost), DPD Polska sp. z o.o., Poczta Polska S.A.; they receive your first name and surname, address or pickup point, phone number, and email address in order to deliver the shipment and send notifications.<\/li>\n<li>The bank maintaining the Seller's account \u2013 in the case of payment by traditional bank transfer or a refund.<\/li>\n<li>Public authorities (e.g., the tax office, courts, the Police) \u2013 only when the obligation to disclose data arises from the law.<\/li>\n<\/ul>\n<h2>5. Transfers of data outside the European Economic Area<\/h2>\n<p>The Shop's data is stored in the European Union (Frankfurt). The use of Google services and \u2013 to a limited extent (e.g., technical support, security) \u2013 Amazon Web Services may involve the transfer of data to entities within these providers' groups in the United States. The basis for such a transfer is the European Commission decision finding an adequate level of protection under the <strong>EU-US Data Privacy Framework<\/strong> (Google LLC and Amazon.com, Inc. participate in this program) and, additionally, <strong>standard contractual clauses<\/strong> approved by the European Commission (art. 46(2)(c) RODO (GDPR)). You can obtain a copy of the safeguards applied by contacting us.<\/p>\n<h2>6. Your rights<\/h2>\n<p>In connection with the processing of your data, you have the right to:<\/p>\n<ul>\n<li><strong>access<\/strong> to your data and to obtain a copy of it (art. 15 RODO (GDPR)),<\/li>\n<li><strong>rectification<\/strong> (correction) of data (art. 16 RODO (GDPR)) \u2013 you can change some of your data yourself in your Account,<\/li>\n<li><strong>erasure<\/strong> of data (art. 17 RODO (GDPR)), if there are no grounds for further processing (e.g. an accounting obligation),<\/li>\n<li><strong>restriction of processing<\/strong> (Art. 18 GDPR),<\/li>\n<li><strong>data portability<\/strong> for data processed on the basis of a contract or consent (Art. 20 RODO (GDPR)),<\/li>\n<li><strong>objection<\/strong> to processing based on legitimate interest (Art. 21 GDPR),<\/li>\n<li><strong>withdrawal of consent<\/strong> at any time \u2013 without affecting the lawfulness of processing carried out before its withdrawal; you can change your consent to analytics and marketing cookies by clicking <a href=\"#\" class=\"morasy-cookie-settings\">Cookie Settings<\/a>,<\/li>\n<li>lodge <strong>a complaint with the President of the Personal Data Protection Office (Prezes Urz\u0119du Ochrony Danych Osobowych, PUODO)<\/strong> (ul. Stawki 2, 00-193 Warszawa, <a href=\"https:\/\/uodo.gov.pl\/\">uodo.gov.pl<\/a>), if you believe that we are processing your data unlawfully.<\/li>\n<\/ul>\n<p>To exercise your rights, write to <a href=\"mailto:morasydladzieci@interia.pl\">morasydladzieci@interia.pl<\/a>. We will respond without undue delay, no later than within one month. To protect your data, we may ask you to confirm your identity (e.g. a message from the email address associated with your Account or Order).<\/p>\n<h2>7. Voluntary Provision of Data<\/h2>\n<p>Providing data is voluntary. However, providing the data marked as required in the forms is necessary to conclude and perform the contract (without it, we cannot accept and deliver the order) or to create an Account. Providing invoice data is necessary if you wish to receive an invoice. Consent to analytics and marketing cookies is entirely voluntary and does not affect your ability to make purchases.<\/p>\n<h2>8. Automated decision-making and profiling<\/h2>\n<p>We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you. If you consent to marketing cookies, Google may tailor the ads shown to you to your interests (remarketing) \u2013 this does not produce legal effects for you.<\/p>\n<h2>9. Customer Account<\/h2>\n<p>Creating an Account is voluntary \u2013 you can also place an order as a guest. In the Account, we store your address details and order history to make future purchases easier and to enable you to add verified reviews. You may request deletion of your Account at any time by writing to <a href=\"mailto:morasydladzieci@interia.pl\">morasydladzieci@interia.pl<\/a>. After the Account is deleted, we retain data related to placed orders only to the extent and for the period required by law or for defense against claims.<\/p>\n<h2>10. Product reviews<\/h2>\n<p>A review may only be added by a logged-in Customer who has purchased the given Product. To this end, we compare the Account email address with the order history. A published review shows the display name provided by the author (this may be a pseudonym or just a first name), the date, the rating and the \u201cverified purchase\u201d label. The author's email address is not published. You may request deletion of your review at any time.<\/p>\n<h2>11. Cookies<\/h2>\n<p>The Store uses cookies necessary for its operation and \u2013 only with consent \u2013 analytics and marketing cookies. Details can be found in the <a href=\"https:\/\/morasy.pl\/en\/polityka-cookies\/\">Cookie Policy<\/a>.<\/p>\n<h2>12. Security<\/h2>\n<p>We apply technical and organizational measures appropriate to the risk, in particular an encrypted connection (HTTPS), access control to the administration panel, regular backups, and software updates.<\/p>\n<h2>13. Changes to the privacy policy<\/h2>\n<p>The policy may be updated, e.g., in the event of changes in the law or in service providers. The current version is always available on this page, and we will announce any significant changes on the Shop's website.<\/p>","protected":false},"excerpt":{"rendered":"<p>Polityka prywatno\u015bci sklepu morasy.pl Niniejsza polityka wyja\u015bnia, w jaki spos\u00f3b przetwarzamy dane osobowe Klient\u00f3w i os\u00f3b odwiedzaj\u0105cych sklep internetowy morasy.pl, zgodnie z Rozporz\u0105dzeniem Parlamentu Europejskiego i Rady (UE) 2016\/679 z dnia 27 kwietnia 2016 r. (dalej: RODO). Obowi\u0105zuje od dnia . 1. Administrator danych Administratorem Twoich danych osobowych jest , prowadz\u0105ca dzia\u0142alno\u015b\u0107 gospodarcz\u0105 pod firm\u0105&#8230;<\/p>","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/morasy.pl\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/morasy.pl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/morasy.pl\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/morasy.pl\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":5,"href":"https:\/\/morasy.pl\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":4967,"href":"https:\/\/morasy.pl\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/4967"}],"wp:attachment":[{"href":"https:\/\/morasy.pl\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}