PRIVACY POLICY (GDPR) – iSELLER

PRIVACY POLICY (GDPR) – iSELLER

Validity date: 01/03/2026
Version: 1.0

1. Data controller

The personal data controller is Daryna Vodolazkina , NIP 5253074209 , REGON 543707822 , operating at the following address: ul. Żurawia 32/34, lok. 29, 00-515 Warsaw, Poland (hereinafter referred to as the "Controller", "Seller").

Contact:

2. Scope and purposes of data processing

We process personal data for the following purposes:

  1. Fulfillment of orders and sales contracts (basket management, payments, deliveries, contact regarding the order).

    • Data: name and surname/company name, delivery address, email, telephone number, invoicing details (including Tax Identification Number, if applicable), order details.

  2. Handling returns and complaints (non-conformity of goods with the contract, correspondence, settlements).

    • Data: as above + data regarding complaints, proof of purchase, correspondence.

  3. Contact and customer service (questions, support before and after purchase).

    • Data: e-mail, telephone number, message content.

  4. Conducting tax/accounting settlements and obligations .

    • Data: invoice/bill data, transaction documentation.

  5. Security and fraud prevention (e.g. detection of payment fraud, securing claims).

    • Data: transactional data, technical data, order identifiers.

  6. Marketing (optional) – only if you consent or if the law allows it (e.g. information about similar products within the limits permitted by law).

    • Data: email/phone (depending on the channel), preferences.

3. Legal basis for processing (Article 6 GDPR)

We process data on the basis of:

  1. Article 6(1)(b) of the GDPR – performance of a contract or actions prior to its conclusion (order).

  2. Article 6(1)(c) of the GDPR – legal obligation (taxes, accounting).

  3. Article 6(1)(f) of the GDPR – legitimate interest of the Controller (customer service, pursuit/defense of claims, security).

  4. Article 6(1)(a) GDPR – consent (e.g. marketing, if required).

4. Data recipients (to whom we can transfer data)

Data may be transferred to entities that help us run the Store, in particular:

  • store platform (Shopify and entities technically supporting the Store),

  • payment operators (e.g. Przelewy24 and others available in the basket),

  • courier companies and logistics operators (e.g. InPost, own courier in Warsaw),

  • IT service providers (hosting, email, security, integration),

  • accounting/bookkeeping office ,

  • entities authorized under the law (e.g. public authorities).

We only transfer data to the extent necessary to achieve the purpose.

5. Transfer of data outside the EEA

Due to the IT tools used (e.g., the store platform), data may be transferred outside the European Economic Area. In such cases, appropriate safeguards required by law are applied, in particular standard contractual clauses (SCCs) or other mechanisms compliant with the GDPR.

6. Data storage period

We store data:

  • for the duration of the contract and order processing,

  • then for the period required by law (taxes/accounting),

  • and for the time necessary to pursue or defend claims (usually until the expiry of the limitation periods),

  • in the case of marketing data – until consent is withdrawn or an objection is raised (depending on the basis).

7. Rights of the data subject

You have the right to:

  • access to data,

  • rectification of data,

  • deletion of data (“the right to be forgotten”) – when the conditions are met,

  • processing restrictions,

  • data transfer,

  • object to processing based on legitimate interest,

  • withdraw consent at any time (if processing is based on consent) – without affecting the lawfulness of processing before withdrawal.

To exercise your rights, write to: info@iseller.com.pl .

8. Right to file a complaint

You have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (PUODO) , if you believe that the processing violates the provisions of the GDPR.

9. Is providing data mandatory?

Providing data is voluntary, but necessary for:

  • placing and processing an order (without your data we will not be able to process the contract),

  • issuing an invoice (if you request an invoice),

  • handling complaints/returns.

10. Automated decision-making and profiling

We do not make decisions that have legal effects on the Client solely through automated means, and we do not use profiling within the meaning of the GDPR, which would have such effects. We may use basic statistics and sales analytics.

11. Cookies and similar technologies

The store uses cookies and similar technologies to:

  • ensuring the proper functioning of the website (essential cookies),

  • remembering preferences,

  • statistics and analytics,

  • (optional) marketing and advertising performance measurement – ​​if you provide consent where required.

You can manage cookies in your browser settings. Restricting cookies may affect the Store's performance.

12. Privacy Contact

In matters concerning personal data, contact the Administrator:
info@iseller.com.pl , tel. +48 732 554 136 .