PRIVACY POLICY

I. Personal Data Controller

The controller of personal data is P.W. TOMEX mgr inż. TOMASZ TRACZ, ul. Karola Namysłowskiego 32, 20-709 Lublin, Poland, NIP: 7120250312, REGON: 430060740.

​

​

​

II. Purpose of Personal Data Processing

The Controller processes the User’s personal data for the proper fulfillment of orders.

The User may give consent to receive information about news and promotions, in which case the Controller will also process the personal data to send commercial information, including but not limited to new products or services, special offers, or sales.

Personal data is also processed to comply with legal obligations imposed on the Controller and to carry out tasks in the public interest, such as matters related to security, defense, or tax documentation storage.

​

​

​

III. Type of Data

The Controller processes the following personal data, which is necessary for order fulfillment:

• full name,

• delivery address,

• phone number,

• email address.

​

​

IV. Legal Basis for Data Processing

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).

The Controller processes personal data only after obtaining the User’s prior consent, which is equivalent to placing an order and/or creating a personal account in the Calva Studio store.

Providing consent for data processing is entirely voluntary.

​

​

​

V. User Rights

The User has the right to request information at any time regarding the scope of personal data processing.

The User has the right to request the correction or rectification of their personal data at any time.

The User has the right to withdraw consent to the processing of their personal data at any time, without providing a reason. Such withdrawal may apply to a specific purpose of data processing (e.g., withdrawal of consent to receive marketing communications) or to all purposes. Withdrawing consent for all purposes will result in the deletion of the User’s account from the website along with all personal data previously processed by the Controller. Withdrawal of consent does not affect processing activities carried out prior to the withdrawal.

The User has the right to request, at any time and without providing a reason, that their personal data be deleted. Such a request will not affect any actions taken prior to the deletion. Deletion of personal data will also result in the deletion of the User's account and all personal data stored and processed up to that point by the Controller.

The User may object to the processing of their personal data at any time, either with respect to all data processed or only to specific purposes. The objection will not affect prior processing. Filing an objection will result in the deletion of the User’s account along with all previously stored and processed personal data.

​

​

​

VI. Data Processing by Third Parties

The Controller may entrust the processing of personal data to third parties cooperating with the Controller, to the extent necessary for the execution of the transaction — for example, for order preparation, delivery, or sending commercial information on behalf of the Controller.

Except as specified in this Privacy Policy, Users’ personal data will not be shared with third parties or transferred to other entities for the purpose of third-party marketing.

Users’ personal data will not be transferred outside the European Union.

This Privacy Policy complies with the provisions of Article 13(1) and (2) of the GDPR.