[vc_row][vc_column][vc_column_text]

Privacy and cookies policy

Information duty pursuant to Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).

1. Data controller

The controller of personal data is Arkadiusz Trąbski, VAT ID (NIP): 8512986273, ul. Juliana Ursyna Niemcewicza 24H/1, 71-520 Szczecin, Poland (the “Controller”, “Seller”).
Contact on data protection matters: info@digitaltrinity.pl (correspondence: ul. Juliana Ursyna Niemcewicza 24H/1, 71-520 Szczecin).
The Controller has not appointed a Data Protection Officer (not mandatory given the scale of the business); all DPO matters are handled at the above address.

2. Scope and purposes of processing — Store data

Data	Purpose	Legal basis (GDPR)	Retention
Name (company name), e-mail, telephone, delivery address, invoicing data (VAT ID)	order fulfilment, contact, accounting documents	Art. 6(1)(b) (contract)	5 years from the end of the calendar year in which the tax obligation arose; until expiry of claims, if longer
Invoicing data, order value	accounting and tax obligations	Art. 6(1)(c) (law)	5 years from the end of the tax year
Print files	printing service; AV scan before production	Art. 6(1)(b)	3 months from completion of the order (automatic deletion); earlier on the Customer’s request (§6)
Order history in the customer account	account operation, repeat orders	Art. 6(1)(b)	until account deletion / expiry of claims
Newsletter (e-mail, name, IP, sign-up time)	newsletter and offers (lead: PDF + 10% discount)	Art. 6(1)(a) (consent)	until consent withdrawal (unsubscribe link / e-mail to info@)
IP and newsletter form metadata	anti-spam and abuse protection (rate limit, honeypot)	Art. 6(1)(f) (legitimate interest)	up to 30 days (rate limit); lead copies until consent withdrawal

3. Data recipients (processors)

Autopay S.A. — online payment processing (BLIK, cards, electronic transfers); payment data is processed solely by the operator;
InPost sp. z o.o. and courier operators (including oversized and pallet shipments) — deliveries;
cyber_Folks sp. z o.o. — Store and e-mail hosting;
e-mail service provider (info@ mailbox) and banking services (traditional transfers, cash on delivery);
accounting providers (invoices, under separate processing agreements);
public authorities entitled by law (e.g. tax authorities, Polish DPA) — to the extent and under the rules provided by law.

Data is not transferred outside the EU/EEA; processors operate under processing agreements (Art. 28 GDPR) or legal obligations. We do not make automated decisions (including profiling) with legal effects.

4. Print files and security

Print files are transferred via a one-time link form (valid 7 days) or e-mail; stored outside the server’s public directory (no public URLs).
Every file is automatically scanned for malware (local antivirus scanner); uploaded files linked to the order number are visible only to the Customer (via the e-mail link) and the Seller.
Print files are automatically deleted 3 months after completion of the order; the Customer may request earlier deletion (§6).

5. Cookies and similar technologies

The Store uses only necessary (first-party, session and persistent up to 12 months) cookies:

cart and checkout session (WooCommerce) — keeping the cart contents between steps;
account login — maintaining the logged-in Customer’s session;
language selection (Polylang) — remembering the language version;
security (nonces, anti-spam form protection — honeypot, limits).

We do not use third-party analytics or marketing cookies (no Google Analytics, ad pixels or profilers). Necessary cookies do not require consent; they may be blocked in the browser, but the cart and ordering will not work correctly. Details on cookie management: browser settings.

6. Your rights

Under the GDPR you have:

access to data and a copy thereof (Art. 15);
rectification (Art. 16);
erasure (“right to be forgotten”, Art. 17) — limited where data must be kept for tax obligations or defence of claims;
restriction of processing (Art. 18);
data portability (Art. 20);
objection to processing based on Art. 6(1)(f) (Art. 21);
withdrawal of consent at any time (without affecting the lawfulness of processing before withdrawal);
lodge a complaint with the President of the Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warsaw, Poland; www.uodo.gov.pl) if you believe processing violates the GDPR.

We respond to requests without undue delay, within 30 days; for complex requests we will inform you of the extension (up to 2 months) and its reasons. A request may require identity verification (e.g. from the e-mail address assigned to the order).

7. Security measures

HTTPS (SSL certificate) on all connections;
passwords stored only in encrypted form (bcrypt);
customer files outside the web root + antivirus; server backups at the hosting provider;
data access only for persons authorised by the Controller;
server security event logging (hosting logs).

8. Newsletter

Newsletter sign-up (lead: PDF + 10% discount) requires an e-mail address (name optional). We use the data solely to send our own commercial information about the Store and printing offers; we do not sell or share mailing lists with third parties. Every message includes an unsubscribe path; you may also unsubscribe or request deletion via info@digitaltrinity.pl. Sign-ups are kept in the Store’s secure database (up to 500 most recent entries) and forwarded to the contact mailbox for operational purposes.

9. Third-party data / print files with images

If you submit files containing third parties’ personal data (e.g. images, delivery addresses for direct shipping), ensure you have a legal basis to transfer it (e.g. those persons’ consent). The Seller processes it solely to complete the order.

10. Policy changes

The Policy may change (new Store features, legal requirements). The current version is always available on this page; we will inform Customers of material changes by e-mail or a notice in the Store.

Version effective from: 26 September 2026

[/vc_column_text][/vc_column][/vc_row]

Privacy Policy