Privacy policy — principles of personal data processing

The administrator of your personal data is Konrad Dziadkowiak, trading as Dziadkowiak Capital & Network, Tax ID (NIP) 894 295 32 24, ul. Goleszan 14, 52-340 Wrocław [hereinafter also Agent]. You can get in touch with us in all matters concerning the processing of your data at the following e-mail address: agent@glassstories.art. If you type “personal data” in the subject line, it will be easier for us to process your request. A data controller is an entity that decides on the purposes and uses of your data, with responsibilities for securing them.

Your data came to us in one of the following ways:

• by sending an email to the email address in the glassstories.art domain or by using the contact form at www.glassstories.art,
• by speaking with an Agent by phone,
• by agreeing to send commercial information by e-mail (newsletter),
• by subscribing to the newsletter.

The Agent makes every effort to process your personal data securely, using, among other things, encryption, secure connection. Only authorized employees, trained in data protection, have access to the data.

We may transfer your data to entities processing them on our behalf, e.g. marketing agencies, subcontractors of our services, and entities entitled to obtain data on the basis of applicable law, e.g. courts or law enforcement agencies - when they make a request based on the relevant legal basis.

As part of placing orders, we will transfer your data to a transportation company. We transfer your data outside the EEA, as our websites have social media plug-ins: Facebook, Twitter, Instagram and LinkedIn. The providers of these services have their headquarters and servers outside the EEA. In addition, with all the entities to which we transfer your data, we have entered into appropriate contracts for the entrustment of personal data processing.

Order processing The data you provide is processed on the basis of and in connection with the fulfillment of your order and is necessary for us to provide our services (Article 6(1)(b) RODO). Your data may also be processed in connection with the implementation of point 2 of this privacy policy. In addition, we are required by law to process your data for tax and accounting purposes. Your data is processed until the expiration of the statute of limitations for claims related to the sales contract, as well as until the expiration of our public law obligations (taxes, accounting).

The retention period for this data is a maximum of 10 years after its completion. You have given your consent:

• To receive commercial information by e-mail: Your e-mail address allows us to send you commercial information by e-mail and inform you about our offer. You may withdraw this consent at any time through one of the means listed in Section 2 herein. The withdrawal of consent does not render the existing processing unlawful. Data will also not be processed after withdrawal of this service.
• For the processing of cookies: You can withdraw your consent at any time, withdrawal of consent does not affect the legality of the existing processing.
• Our legitimate interest: We also process your personal data for the purposes indicated below, on the basis of our so-called legitimate interest, which is the direct marketing of our services and for the purpose of contacting you in connection with better tailoring our offer. We may conduct analyses and statistics for the purpose of developing our business. Your data is also processed for the purposes of keeping in touch with you by email, telephone, and responding to your inquiries. Your data will be processed until the above-mentioned purpose exists, and after you delete your account, terminate/expire the contract, resolve any disputes, but no longer than until the expiration of the statute of limitations for claims, i.e. a maximum of 10 years from the date of completion of the contract.

In addition, in order for the Agent to fulfill the principle of accountability (to demonstrate that we have adequately fulfilled our obligations as a controller of your data) for the duration of the processing of your data.

To summarize:

We process the data for the purposes described in our policy, including to:

• process your orders,
• notify you of offers,
• match the content of the pages and their subject matter, including the subject matter of the materials appearing there to your interests,
• provide you with more secure services, including to detect possible bots, fraud or abuse,
• show you ads tailored to your needs and interests,
• take measurements that allow us to improve our services and make them as responsive to your needs as possible.

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area.

If you are a European resident, we are Data Controller of your data and you have the right to know how your personal information is processed, what we collected about you and to ask that this data to be corrected, updated, or deleted. Additionally, please note that your information may be transferred outside of Europe, including to Canada and the United States. Please contact us if you have any questions about your GDPR rights. For more information or complaints please contact your local data protection authority.

You have the right to request access to data, rectification, completion, deletion, restriction of processing and portability, to object.

• you can rectify when you notice that your data is incorrect or incomplete;
• you can demand erasure when your data are no longer necessary for the purposes for which they were collected, you withdraw your consent to data processing; you object to the processing of your data, or your data are processed unlawfully;
• you can request a restriction of data processing when you notice that your data is incorrect, for a period of time allowing you to check its correctness, or when your data is processed unlawfully, but you request that it be left, or when your data is no longer necessary, but can be used to defend your rights or assert your claims;
• restriction is also possible when you raise an objection to the processing of your data - until we determine whether we have a legitimate basis that overrides the grounds for the objection;
• with regard to a request for data portability: the processing of your data is based on your consent or contract and is carried out by automated means (e.g. computerized).

You have the right to file a complaint regarding our processing of your personal data to the President of the Office for Personal Data Protection, Stawki Street 2, 00-193 Warsaw.

You have the right to object to the processing of your personal data when:

• the processing of your personal data is carried out on the basis of a legitimate interest or for statistical purposes, and the objection is justified by your particular situation,
• processing concerns direct marketing, including profiling.

Yes, we process personal data by automated means, but this does not affect your rights. Profiling takes place in connection with your activity on our websites and in connection with purchases you make. This allows us to better tailor our offerings to your needs and interests.

The www.glassstories.art website uses cookies, among other things, to customize the service to the needs of users and for statistical purposes. We use cookies to collect information about how users use our site and to correctly configure the site, as well as to remember user settings (e.g. language, font size, etc.). We use cookies for analysis, research and audience auditing, and in particular to create anonymous statistics that show how users of the site use our site. This knowledge allows us to improve the structure and content of our sites. By accepting the use of cookies you allow the website to function properly.

We reserve the right to update or modify this Privacy Policy at anytime without prior notice. We will post these changes on this page so please review this document each time before you provide us with any personal information. This Policy is effective as of 2024/08/01. Last update: 2026/09/27. Your continued use of the Website after seven (7) days of any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy. We suggest that you check this Privacy Policy periodically if you are concerned about how your information is used.

By using our website, you hereby consent to our Privacy Policy and agree to its terms.