Privacy Policy (GDPR)

1. Data Controller
The personal data controller is:
VARCH Sp. z o. o
. ul. Pociągów Pancernych 1D, 32-005 Niepołomice
NIP: 6793152735 | KRS: 0000685918 | REGON: 367770370
contact: varchamazon@gmail.com

2. Scope and purpose of processing
We process data for the following purposes:

• order fulfillment,
  
  

• handling complaints and returns,
  
  

• customer contact,
  
  

• accounting and tax obligations.
  
  

3. Legal basis

• Article 6(1)(b) of the GDPR – performance of the contract,
  
  

• Article 6(1)(c) of the GDPR – legal obligations,
  
  

• Article 6(1)(f) of the GDPR – legitimate interest (e.g. own marketing).
  
  

4. Data recipients

• IT service and hosting providers,
  
  

• payment operators,
  
  

• courier companies,
  
  

• accounting office.
  
  

5. User rights
You have the right to:

• access to data,
  
  

• their rectification, deletion, restriction of processing,
  
  

• data transfer,
  
  

• filing an objection,
  
  

• complaints to the President of the Personal Data Protection Office.
  
  

6. Cookies
Detailed information can be found in the Cookies Policy.