1. Data controller

The controller of personal data collected through dogdeco.com is:

ABV Kornelia Synator-Kawka
ul. K.I. Gałczyńskiego 2
55-200 Oława, Poland
VAT ID: PL8942401602
REGON: 365610968
Telephone: +48 781 976 555
E-mail: my@dogdeco.com

For any question about your data or to exercise your rights, write to my@dogdeco.com.

Processing is governed by Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data.

2. Access data and hosting

You can browse our pages without providing any personal data. On each visit the server automatically records your IP address, the date and time of the request, the page requested, the volume of data transferred, the browser and operating system used, and the page you came from.

These data serve only the operation, security and stability of the site. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. Server logs are kept for no more than thirty days and are then deleted.

The site is hosted by Smarthost sp. z o.o., ul. Partyzantów 1, 42-217 Częstochowa, Poland, acting as a processor under a data processing agreement.

We also use LiteSpeed Cache to speed up page loading and Wordfence to protect against attacks. Both process IP addresses for security and performance purposes on the basis of our legitimate interest.

3. Data processed to perform the contract

When you place an order we collect your first and last name, delivery and billing address, e-mail address, telephone number and, for businesses, the company name and VAT number.

These data are used to process the order, manufacture and deliver the furniture, issue the invoice and provide after-sales service. The legal basis is Article 6(1)(b) GDPR — performance of a contract.

We pass your contact details to the carrier handling the delivery, only to the extent necessary for transport. Accounting records are kept for the period required by Polish tax law, that is five years from the end of the tax year concerned.

4. Customer account

Creating an account is optional. It gives you access to your order history and lets you save addresses. Account data are kept until deletion, which you can request at any time at my@dogdeco.com. The legal basis is Article 6(1)(b) GDPR.

5. Contact form

The form on the Contact page runs on the Contact Form 7 plugin. We process the data you enter — name, e-mail address and message — in order to answer your enquiry, on the basis of Article 6(1)(b) or (f) GDPR depending on the subject.

Messages are sent through WP Mail SMTP and kept for as long as needed to deal with the enquiry, then deleted unless they relate to an order.

6. Payments

We neither process nor store card details. Payments are executed by independent providers, each responsible as a controller for its own processing:

  • Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland — cards, Apple Pay, Google Pay, Link, Klarna, EPS, Bancontact, iDEAL, SEPA direct debit.
  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg — PayPal and PayPal Pay Later.
  • PayPro S.A. (Przelewy24), ul. Pastelowa 8, 60-198 Poznań, Poland — online transfers and BLIK.

These providers receive the data needed to execute the payment: amount, order number, name and e-mail address. The legal basis is Article 6(1)(b) GDPR. Their own privacy policies apply to their processing.

Deferred payment offered by Klarna or PayPal may involve a creditworthiness check carried out by that provider on its own responsibility.

7. Cookies and similar technologies

A cookie is a small file placed on your device when you visit a website. We distinguish two categories.

Necessary cookies. They make the site work: they remember the basket, the login session, the language and currency selection and your consent preferences. Without them the shop does not function. Legal basis: Article 6(1)(f) GDPR.

Measurement and advertising cookies. These are set only after you give consent, which you may withdraw at any time. Legal basis: Article 6(1)(a) GDPR.

You can change cookie settings in your browser. Disabling necessary cookies will prevent you from using the shop.

8. Analytics and advertising

We use Google Tag Manager to manage measurement tags. The tool itself collects no personal data; it triggers the services described below.

Google Analytics 4 helps us understand how the shop is used: which pages are viewed, where visits come from, which devices are used and how the purchase journey unfolds. IP addresses are truncated before storage. This processing takes place only with your consent.

Google Merchant Center receives our product catalogue through an automated feed generated by the Product Feed Manager plugin. The feed contains no personal data, only information about furniture, prices and availability.

The controller for these services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to the United States under the EU-US Data Privacy Framework.

9. Wishlist

The wishlist stores the products you select in a cookie or, if you are logged in, in your customer account. These data serve only to display your list and are not shared with anyone.

10. Recipients of the data

Your data may be shared with the hosting provider, the payment service providers, the carrier handling delivery, our accounting office in connection with tax obligations, and technical service providers maintaining the shop. Each receives only the data necessary for its task.

We do not sell or rent your data to third parties.

11. Retention periods

  • Server logs — 30 days.
  • Order and accounting data — 5 years from the end of the tax year.
  • Customer account — until deleted at your request.
  • Correspondence — for as long as the enquiry is being handled, unless it relates to an order.
  • Analytics data — as configured in Google Analytics, no more than 14 months.

12. Your rights

You have the right of access, rectification, erasure, restriction of processing, objection and data portability. Where processing is based on your consent, you may withdraw it at any time; this does not affect the lawfulness of processing carried out beforehand.

To exercise these rights, write to my@dogdeco.com. We reply within one month.

You also have the right to lodge a complaint with a supervisory authority: in Poland with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), or with the supervisory authority of the EU or EEA country in which you reside.

13. Security

The site uses an SSL certificate that encrypts the traffic between your browser and our server. Access to the shop administration is restricted and protected by the Wordfence firewall. Technical maintenance is carried out remotely through the MainWP tool, with access limited to authorised persons.

14. Changes to this policy

This policy may change as the site develops, as new tools are introduced or as the law evolves. The version published on this page is the one that applies.