Privacy policy

Privacy Policy of the online store shop.pagedmeble.pl
1. General Information
This Privacy Policy sets out the rules for the collection, processing, and use of personal data obtained in connection with the use of the online store shop.pagedmeble.pl (the “Store”), including services such as: customer accounts, contact forms, newsletters, and the purchasing process.
The data controller of the personal data is Paged Meble sp. z o.o. with its registered office in Jasienica, ul. Cieszyńska 55, 43-385 Jasienica, Poland, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number: 0000850564, NIP: 573-24-25-575, REGON: 15159470, BDO: 000018731, share capital: PLN 897,800,000.00 (the “Controller”).
The Controller has appointed a Data Protection Officer (DPO). The DPO can be contacted via e-mail at: iod_meble@paged.pl.
The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), the Polish Act of 10 May 2018 on the Protection of Personal Data, and other relevant legal provisions.

2. Scope and Purposes of Data Processing
Customers' personal data may be processed for the following purposes:
Purpose of processing Legal basis Retention period
Conclusion and execution of the sales contract (purchases, payments, delivery) Art. 6(1)(b) GDPR 6 years from the termination of the contract (limitation period for claims)
Handling complaints, returns, and withdrawals Art. 6(1)(b) and (c) GDPR 6 years from the termination of the contract
Issuing and storing accounting documents Art. 6(1)(c) GDPR Period required by tax regulations
Maintaining the Customer's account in the Store Art. 6(1)(b) GDPR Until the account is deleted
Sending newsletters and marketing communication (GetResponse) Art. 6(1)(a) GDPR (consent) Until consent is withdrawn
Marketing and remarketing (Google Ads, Meta Pixel, newsletter) Art. 6(1)(a) and (f) GDPR Until consent is withdrawn / objection is raised
Analytics (Google Analytics 4, cookies) Art. 6(1)(a) GDPR Until consent is withdrawn
Establishment, exercise, or defense of claims Art. 6(1)(f) GDPR Until the limitation period for claims expires
Contact (forms, e-mail, telephone) Art. 6(1)(a) and (b) GDPR Until consent is withdrawn or the limitation period for claims expires

3. Data Recipients
Data may be transferred to entities cooperating with the Seller, in particular:
  • Payment service providers (Przelewy24),
  • Courier and transport companies,
  • Hosting and e-commerce platform providers (Shopify),
  • Analytical and marketing service providers (Google LLC, Meta Platforms Inc., GetResponse S.A.),
  • Entities providing legal, accounting, and advisory services.
These entities process data on the basis of data processing agreements and in accordance with the GDPR.

4. Data Transfers Outside the EEA
Personal data may be transferred to third countries (e.g., USA, Canada) in connection with the use of Shopify, Google, Meta, and GetResponse.
Data transfers take place in compliance with the GDPR, specifically:
  • On the basis of an adequacy decision by the European Commission (e.g., the EU–US Data Privacy Framework),
  • Subject to Standard Contractual Clauses (SCC).

5. Cookies and Tracking Technologies
The Store uses cookies for the following purposes:
  • Necessary: required for the proper functioning of the website,
  • Analytical: statistical analysis (Google Analytics 4),
  • Marketing: target audience segmentation (Google Ads, Meta Pixel, remarketing).
Upon their first visit, the User is presented with a cookie banner compliant with Google Consent Mode v2, allowing them to select their preferred cookie categories. The User may change their cookie settings at any time in their web browser or via the cookie banner.

6. Profiling
Personal data may be used for profiling purposes to tailor advertisements and marketing content (e.g., Google Ads, Meta Pixel, GetResponse newsletter). Profiling is conducted based on consent (marketing cookies) or the legitimate interest of the Controller. The User has the right to object to profiling.

7. Rights of Data Subjects
Every individual has the rights specified in the GDPR, in particular:
  • Right of access to data (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure ("right to be forgotten") (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to withdraw consent at any time (Art. 7(3) GDPR).
To exercise these rights, you can contact: iod_meble@paged.pl. Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).

8. Data Security
The Controller applies technical and organizational measures to ensure data security, including SSL encryption, access control procedures, authorization systems, and regular software updates.

9. Final Provisions
The Controller reserves the right to amend this Privacy Policy in the event of changes in legislation, technology, or data processing methods. Users will be informed of any changes in a visible and understandable manner on the Store's website. The current version of the Privacy Policy is always available at shop.pagedmeble.pl.