Privacy & cookies policy

Privacy & Cookies Policy

The privacy policy describes the principles of processing information about you, including personal data and cookies.

  1. General Information

    • This policy applies to the website operating at the URL: https://karwowski-art.com.
    • The operator and the personal data administrator of the website is: Antoni Karwowski, ul. Grunwaldzka 2, 73-120 Chociwel.
    • Contact email: studio@karwowski-art.com.
    • The operator is the administrator of your personal data, which is voluntarily provided on the website.
    • The website uses personal data for the following purposes:
      • Running a newsletter
      • Operating a comment system
      • Conducting online chat conversations
      • Handling inquiries via form
      • Preparing, packaging, and shipping goods
      • Providing ordered services
      • Debt collection
      • Presenting offers or information
    • The website collects user information and their behavior in the following ways:
      • Through voluntarily provided data in forms entered into the operator’s systems.
      • By saving cookies on users' end devices.

  2. Selected Data Protection Methods Used by the Operator

    • Login areas and personal data input points are protected by SSL encryption, ensuring that data entered on the site is encrypted on the user’s computer and can only be read on the target server.
    • Personal data stored in the database is encrypted, accessible only with a key held by the operator, providing protection in case of a database theft.
    • User passwords are stored in a hashed form, following modern standards where the hash function is one-way and irreversible.
    • The operator regularly backs up data to ensure protection.
    • An essential element of data protection is the regular update of all software used by the operator for processing personal data, especially the regular updates of software components.

  3. Hosting

    • The website is hosted on servers provided by mydevil.net.

  4. Your Rights and Additional Information on Data Use

    • In some situations, the administrator has the right to share your personal data with other recipients, if necessary for fulfilling a contract with you or fulfilling legal obligations. This applies to the following groups of recipients:
      • Hosting companies entrusted with data
      • Couriers
      • Postal operators
      • Insurers
      • Law firms and debt collectors
      • Payment operators
      • Online chat operators
      • Authorized employees and collaborators using data for site purposes
      • Companies providing marketing services to the administrator
    • Your personal data is processed by the administrator no longer than necessary for the tasks related to the specific regulations (e.g., for accounting purposes). For marketing data, it will not be processed for more than 3 years.
    • You have the right to:
      • Access your personal data
      • Correct it
      • Delete it
      • Limit its processing
      • Transfer data
    • You have the right to object to the processing of your personal data for legitimate purposes carried out by the administrator, including profiling, as stated in point 3.3(c). However, the objection cannot be executed if there are legally justified reasons for processing, which are overriding your interests, rights, and freedoms, particularly for establishing, pursuing, or defending claims.
    • You can file a complaint to the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
    • Providing personal data is voluntary but necessary for using the website.
    • Automated decision-making, including profiling, may be carried out concerning you for providing services under the agreement and for direct marketing by the administrator.
    • Personal data is transferred to third countries, meaning outside the European Union.

  5. Information in Forms

    • The website collects information voluntarily provided by the user, including personal data, if provided.
    • The website may record connection parameters (time, IP address).
    • In some cases, the website may link data from forms to a user's email address, with the email address appearing in the form's URL.
    • Data provided in the form is processed according to the purpose of that specific form, such as handling service requests or commercial contact. The form’s context and description always clearly inform about its purpose.

  6. Administrator Logs

    • Information on user behavior on the website may be logged, and this data is used for website administration.

  7. Key Marketing Techniques

    • The operator uses Google Analytics to analyze website traffic (Google Inc., USA). No personal data is shared with the service operator; only anonymized information is used. This service is based on cookies stored on the user’s device. Users can review and modify their cookie-based information via this tool: Google Ads Preferences.
    • The operator uses remarketing techniques, allowing for customized advertising based on user behavior on the website, but no personal data is shared with advertising operators. This requires cookies to be enabled.
    • The operator uses Facebook Pixel, meaning Facebook (Facebook Inc., USA) is aware of the use of the website by its registered users. The service relies on data that Facebook processes as the data controller, and no additional personal data is shared by the operator with Facebook. This service is based on cookies stored on the user’s device.
    • The operator uses solutions to analyze user behavior, such as heatmaps and session recordings. This information is anonymized before being sent to the service operator, and no personal data, such as passwords, is recorded.
    • The operator uses automated service solutions for users, such as sending emails after visiting specific subpages, provided the user has consented to receive commercial correspondence from the operator.

  8. Information about Cookies

    • The website uses cookies.
    • Cookies are IT data, specifically text files, stored on the user’s device to enable the use of the website’s pages. Cookies usually contain the name of the website, the storage period on the user’s device, and a unique number.
    • The entity placing cookies on the user's device and accessing them is the website operator.
    • Cookies are used for:
      • Maintaining the user's session (after logging in), so the user does not need to re-enter their login and password on each subpage.
      • Purposes described above in "Key Marketing Techniques."
    • The website uses two types of cookies: "session" cookies (temporary, stored until the user logs out or closes the browser) and "persistent" cookies (stored for a defined period or until deleted by the user).
    • Web browsers usually allow cookies by default. Users can modify these settings, including blocking cookies, which may affect the functionality of some parts of the website.
    • Cookies may also be used by Google, Facebook, Twitter, and other third-party partners.

  9. Managing Cookies – How to Express and Withdraw Consent

    • Users who do not wish to receive cookies can change their browser settings. Disabling essential cookies related to authentication, security, and user preferences may hinder website functionality or make it impossible to use the site.
    • To manage cookies, select your browser from the list below and follow the instructions:
      • Edge
      • Internet Explorer
      • Chrome
      • Safari
      • Firefox
      • Opera
    • For mobile devices:
      • Android
      • Safari (iOS)
      • Windows Phone

How Google Uses Data from Websites and Apps Using Our Services

Many websites and apps use Google services to enhance their content and offer free services. These websites and apps share information with Google.

This Online store was created using Prestashop Shopping Cart Software,