Privacy Policy (GDPR)

Title
Privacy Policy (GDPR)

Effective date: 01.05.2026

1. GENERAL PROVISIONS

This Privacy Policy sets out the rules for the processing and protection of personal data of customers of the Hansa Wear online store operating at www.hansawear.com.

We respect your privacy and take every effort to keep your personal data safe.

2. DATA CONTROLLER

The controller of your personal data is:

MAMY TO Łukasz Chomyn
ul. Kochanowskiego 5/90
01-864 Warsaw, Poland
VAT ID: PL8811405812
REGON: 145938461
BDO: 000467176

Contact regarding personal data matters: via the contact form at www.hansawear.com

3. DATA WE PROCESS

We process the following categories of personal data:

3.1. Data provided when placing an order:

  • First and last name
  • Delivery address (street, number, postcode, city, country)
  • E-mail address
  • Phone number
  • Billing address (if different from delivery address)
  • Company details (for business purchases): name, VAT ID

3.2. Data collected automatically:

  • IP address
  • Device and browser information
  • Cookie data (details in the Cookie Policy)
  • Order history and browsing activity in the Store

3.3. Data collected via the Newsletter:

  • E-mail address
  • Open and click information (statistics)

4. PURPOSE AND LEGAL BASIS FOR PROCESSING

Purpose of processing Legal basis Retention period
Fulfilment of order and sales agreement Art. 6(1)(b) GDPR (performance of contract) For the duration of the contract and the limitation period for claims (6 years)
Issuing and storing invoices Art. 6(1)(c) GDPR (legal obligation) As required by tax regulations (5 years from the end of the year in which the invoice was issued)
Handling complaints and returns Art. 6(1)(b) GDPR (performance of contract) and (f) (legitimate interest) For the duration of the complaint/return process and the limitation period for claims
Direct marketing (Newsletter) Art. 6(1)(a) GDPR (consent) Until consent is withdrawn
Remarketing and analytics Art. 6(1)(a) GDPR (consent – cookies) or (f) (legitimate interest) In accordance with cookie settings (see Cookie Policy)
Pursuing and defending against claims Art. 6(1)(f) GDPR (legitimate interest) Limitation period for claims
Preventing fraud and abuse Art. 6(1)(f) GDPR (legitimate interest) Until the matter is resolved + limitation period

5. RECIPIENTS OF DATA

Your personal data may be shared with the following categories of recipients:

5.1. Processors acting on behalf of the Controller:

  • Shopify Inc. – e-commerce platform (hosting, order processing)
  • Shopify Payments (Stripe) and PayPal – payment processors
  • InPost S.A. – shipping operator (Poland)
  • DPD Polska Sp. z o.o. – international shipping operator
  • WygodneZwroty.pl – returns handling
  • IT and hosting service providers
  • Newsletter service providers (Shopify Email)

5.2. Other recipients:

  • Accounting firms (to the extent necessary for bookkeeping)
  • Public authorities (upon their request, to the extent required by law)

6. TRANSFERS OF DATA OUTSIDE THE EEA

Some processors (e.g. Shopify Inc., PayPal) may process data outside the European Economic Area (EEA).

Data transfers take place only to countries:

  • Covered by an adequacy decision of the European Commission, or
  • Under Standard Contractual Clauses approved by the European Commission, or
  • Under certification programmes recognised by EU authorities

7. YOUR RIGHTS

You have the following rights:

7.1. Right of access

You have the right to obtain information about what data we process about you.

7.2. Right to rectification

You may request the correction of inaccurate or completion of incomplete data.

7.3. Right to erasure ("right to be forgotten")

You may request the erasure of your data, unless processing is necessary due to:

  • Legal obligations (e.g. retention of invoices)
  • Pursuing or defending against claims

7.4. Right to restriction of processing

In certain circumstances you may request restriction of the processing of your data.

7.5. Right to data portability

You have the right to receive your data in a structured, commonly used format.

7.6. Right to object

You may object to the processing of your data for marketing purposes or on the basis of legitimate interest.

7.7. Right to withdraw consent

You may withdraw your consent to the processing of your data (e.g. for the Newsletter) at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

7.8. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority:

  • In Poland: President of the Personal Data Protection Office (www.uodo.gov.pl)
  • In the country of your habitual residence, if you live outside Poland

8. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights, please contact us via the contact form at www.hansawear.com or in writing to: MAMY TO Łukasz Chomyn, ul. Kochanowskiego 5/90, 01-864 Warsaw.

We will respond to your request without undue delay, no later than within one month.

9. DATA SECURITY

We apply appropriate technical and organisational measures to ensure data security:

  • SSL/TLS connection encryption
  • Secure Shopify servers
  • Restricted access to data
  • Regular backups
  • Security breach response procedures

10. COOKIES

Information about cookies can be found in the separate Cookie Policy.

11. NEWSLETTER

11.1. Voluntary nature

Subscribing to the Newsletter is entirely voluntary and requires your consent.

11.2. Unsubscribing

You may unsubscribe from the Newsletter at any time:

  • By clicking the "unsubscribe" link in every message
  • Via the contact form on the website
  • In writing to the Controller's address

11.3. Scope of data

For the Newsletter, we process:

  • E-mail address
  • Open and click statistics (anonymous/aggregated)

12. AUTOMATED DECISION-MAKING AND PROFILING

We do not make automated decisions, including decisions based on profiling, that produce legal effects or similarly significantly affect customers.

We may use basic personalisation (e.g. recommended products), but it does not significantly affect your rights.

13. CHANGES TO THE PRIVACY POLICY

We reserve the right to amend this Privacy Policy. The current version is always available at www.hansawear.com/privacy-policy

We will notify you of significant changes via a notice in the Store or by e-mail.

14. CONTACT

If you have any questions about the processing of your personal data, please contact us via the contact form at www.hansawear.com

Last updated: 01.05.2026