Privacy Policy

The protection of personal data is a priority for us. This Privacy Policy explains how we process data in accordance with the General Data Protection Regulation (GDPR), the data protection laws applicable in Poland, and European Union regulations. This document is intended to ensure full transparency regarding the collection, use, and storage of users’ personal data.

1. Data controller
The data controller is RSH-Ecommerce, owner of the Domstylu brand, registered in the Netherlands.
Registration number: 77566793
Registered office address: De Kreijenbeek 313, 5553 BH Valkenswaard, the Netherlands
Contact regarding personal data: kontakt@domstylu.com, telephone: +31633007764.

2. What data we process
We process data necessary to provide our services, including:
- order-related data (first and last name, delivery address, email address, telephone number, payment details to the extent necessary to process the transaction),
- user account data, if an account has been created,
- data concerning use of the website (e.g. IP address, device and browser type, time and manner of using the services),
- data provided when subscribing to the newsletter – only with voluntary consent.

3. Purposes and legal bases for processing
Data is processed for the purpose of:
(a) fulfilling orders and handling deliveries,
(b) processing payments and issuing invoices,
(c) communicating with customers (answering questions and handling complaints and returns),
(d) complying with legal obligations (e.g. tax and accounting obligations),
(e) analysing website traffic and conducting marketing activities – only after consent has been obtained.
Legal bases: Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) (legal obligation), Article 6(1)(a) (consent), and Article 6(1)(f) (the legitimate interest of the controller, e.g. website security and protection against abuse).

4. Sharing data
Data may be shared only to the extent necessary to fulfil orders and provide customer service. Recipients may include payment service providers, courier companies, and IT and hosting service providers. The website operates on the Shopify platform, which may involve the processing of data outside the European Economic Area (EEA), including in Canada and the USA. Shopify applies legal mechanisms compliant with EU data protection regulations.
More information: Shopify Privacy Policy.

5. Payments
Transaction data transmitted through payment gateways is processed in accordance with security standards, including PCI-DSS. Data is stored only for the time necessary to process payments and comply with legal obligations.

6. Analytics and marketing
To analyse website traffic, we use Google Analytics, provided by Google Ireland Ltd. The data includes, among other things, anonymised IP addresses and information about user behaviour. Processing is based on consent given through the cookie banner. Consent may be withdrawn at any time.
Opt-out: Google Analytics – opt-out.

7. Cookies
The website uses cookies for basic functions (e.g. shopping cart and login). Additional analytics and marketing cookies operate only after consent has been given. Consent may be changed or withdrawn at any time through the settings in the cookie banner.
More information: Shopify Cookie Policy.

8. Data security
Data is transmitted using SSL/TLS encryption and stored on servers protected against unauthorised access. We have implemented technical and organisational security measures in accordance with the GDPR to protect data against loss, misuse, or unauthorised disclosure.

9. Retention period
Personal data is stored only for as long as necessary to fulfil the purposes specified in this Policy. The retention period may be extended in accordance with tax, accounting, and other legal obligations applicable in Poland and the EU.

10. Your rights
Under the GDPR, users have the right to access their data, rectify it, erase it, restrict its processing, transfer it, object to its processing, and withdraw consent. To exercise your rights, contact us at: kontakt@domstylu.com.

11. International transfers
If data is transferred outside the EU/EEA, we apply appropriate legal safeguards, such as European Commission adequacy decisions, standard contractual clauses, or other mechanisms provided for under the GDPR.

12. Policy changes
This Privacy Policy may be updated in connection with changes to regulations or the introduction of new services. The current version is always available on the website. We will inform customers of significant changes where required by law.