Privacy Policy

Providing personal data, as well as consenting to its processing, is completely voluntary. All personal data provided to us is processed solely to the extent and for the purpose for which you have given your consent. In the event that you decide not to provide the data necessary to fulfill the order and do not consent to its processing, we will unfortunately be unable to process your order.

Please remember that you have the right to update or completely delete your personal data at any time. You can do this yourself or by using our assistance, which we will be happy to provide.

Our company adheres to a restrictive personal data security policy. Your personal data is safe with us, and we make every effort to ensure that this level of security increases year by year. We believe that reading our privacy policy will allow you to feel secure and enjoy shopping at crafdeco.com (formerly kuzniadrewna.pl).

I. Personal Data Administrator

The administrator of personal data for crafdeco.com (hereinafter ADO), responsible for ensuring the security of your personal data, is:

Crafdeco sp. z o.o. Nowy Świat 1 33-130 Radłów NIP: 8733298040 REGON: 529538939

II. Personal Data Protection System

The ADO has implemented technical and organizational measures to ensure the protection of processed data in accordance with the requirements set out in the applicable regulations on the protection of personal data. In particular, the following were taken into account: the Regulation of the Minister of Interior and Administration of April 29, 2004, regarding the documentation of personal data processing and the technical and organizational conditions to be met by devices and IT systems used for processing personal data (Journal of Laws No. 100, item 1024); guidelines of the Inspector General for Personal Data Protection; Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).

The most important elements of the implemented personal data protection system include:

SSL Certificate, which guarantees that communication between your computer and the website is encrypted with a 256-bit key.
We collect and process only necessary personal data and for the shortest possible time; any actions not related to the implementation of the purchase-sale agreement require your separate consent.
Access to your personal data is granted only to authorized persons trained in the field of personal data protection, guaranteeing their security.
The IT system and internal company procedures meet all personal data protection standards.

The ADO has thus fulfilled all legally prescribed obligations regarding the protection of personal data.

III. Personal Data, Purpose, and Storage Duration

A. Registration

During registration, we ask for data necessary to create an account, so you do not have to waste time filling out the order form again for each subsequent purchase. Registered customers also participate in the loyalty program.

During registration, we ask for:

Name and surname – necessary for issuing the sales document and addressing the shipment.
Address (street, house/apartment number, zip code, and city) – necessary for addressing the shipment.
E-mail – necessary for logging in and communication.
Phone number – necessary for certain delivery methods (required by carriers).

Data is stored for a period of 5 years from the last login.

B. Placing an Order

When placing an order, we ask for:

Name and surname or company/institution name.
Address.
E-mail.
Phone number.

If a different delivery address or different invoice details are provided, we collect the corresponding name, address, and phone number for those specific purposes.

Data is processed by the website and the following entities:

Shipping companies (name, address, phone, e-mail):
- DPD Polska Sp. z o.o.
- InPost Sp. z o.o.
- FEDEX EXPRESS POLSKA Sp. z o.o.
- DHL Sp. z o.o.
Accounting system (name, address, NIP):
- FIRMAO POLSKA SP Z O O (operator of firmao.pl).

Payment Operators: Data provided on the operator's site remains exclusively in their database. We work with:

DIALCOM24 SP Z O O (przelewy24.pl)
PAYPAL POLSKA SP Z O O (paypal.com)

Data is stored for 5 years from the end of the calendar year following the year in which the sales document was issued, in accordance with accounting regulations.

C. Marketing

If you subscribe to the newsletter, we process your e-mail address to send:

Product news and collections,
Promotions and discount codes,
Rebranding information,
Interior inspirations and educational materials,
Surveys or collaboration invitations.

You can unsubscribe at any time. Data is not transferred to third parties for their own marketing purposes.

D. Correspondence

Personal data provided to us that is not necessary for the fulfillment of the contract (e.g., in extra correspondence) will be immediately deleted or anonymized.

IV. Cookies - Data Collected Automatically

Cookies are IT data (text files) stored on the Client's end device. We use "session" (temporary) and "persistent" (stored for a specific time) cookies.

Types of cookies used:

Necessary – for using website services.
Security – to detect authentication abuses.
Performance – to collect info on how the site is used.
Functional – to remember settings and personalization.
Advertising – to provide tailored advertising content.

You can block cookies in your browser settings, though this may affect site functionality.

A. Server Logs: Our system collects data such as device type, IP, and browser type for statistical purposes and optimization. This is never combined with your personal data. (Stored for 24 months).

B. Website Cookies: Used to remember logins (30 min), cart contents (30 days), and preferences (30 days).

C. Google Analytics: Analyzes traffic sources. Data is processed for 12 months.

D. Google AdWords: Evaluates the effectiveness of advertising. Data is processed for 12 months.

E. Partner Cookies: We use scripts from Google Inc. and Facebook Inc. We recommend checking their respective privacy policies.

V. Partner Privacy Policies

Google: https://www.google.pl/intl/pl/policies
Facebook: https://www.facebook.com/about/privacy/cookies

VI. Transfer of Personal Data

We share data with state authorities only if required by law. Otherwise, data is shared only with entities necessary for contract fulfillment (banks, accounting, IT, couriers) based on entrustment agreements.

VII. Changes to the Privacy Policy

We reserve the right to change this policy due to law changes or technology updates. We will notify you of such changes via e-mail. The current text is always available at: https://crafdeco.com/polityka-prywatnosci

VIII. Your Rights

In relation to your personal data, you have the right to:

Refuse or limit processing.
Object to processing.
Access your data.
Rectify or delete data.
Data portability.
Withdraw consent.
Lodge a complaint with the President of the Office for Personal Data Protection (PUODO).

IX. Contact

For any questions regarding privacy or to update/delete your data, please contact us:

E-mail: [email protected]
Address: Crafdeco sp. z o.o., Nowy Świat 1, 33-130 Radłów