Privacy Policy

1. Data Controller

The controller of your personal data is Krystian Gacek, owner of [krystiangacek.pl].
You can contact me at: aura@krystiangacek.pl.

2. Data Collected

In the course of running this store, I only collect the data necessary to process your order:

• First and last name,
• Email address,
• Billing information required for payments/invoices (e.g., billing address, VAT ID if applicable).

I do not collect or process any data that is not required for the purchase of digital albums.

3. Purpose of Processing

Your data is used exclusively for the following purposes:

• Fulfilling orders and providing access to digital products (download links),
• Processing online payments,
• Communicating with you regarding your order,
• Sending newsletters/updates (only if you give your consent).

4. Legal Basis

Your data is processed on the following legal grounds:

• Article 6(1)(b) GDPR – performance of a contract (order processing),
• Article 6(1)(c) GDPR – legal obligations (e.g., tax and accounting),
• Article 6(1)(a) GDPR – consent (e.g., newsletter subscription).

5. Payments

All payments are processed through secure third-party providers (e.g., PayPal, Stripe, Przelewy24).
Payment card details are not stored on my servers.

6. Cookies

This website uses cookies for the following purposes:

• Ensuring the proper functioning of the store,
• Analytics (e.g., Google Analytics),
• Marketing (e.g., Facebook Pixel – only if used).

You can change or disable cookies at any time in your browser settings. If a cookie consent banner is displayed, you may also manage your preferences there.

7. Data Retention

• Order and billing data is stored for the period required by law (e.g., tax obligations – usually 5 years).
• Data used for marketing purposes is stored until you withdraw your consent.

8. Your Rights

You have the right to:

• Access your data,
• Rectify or update your data,
• Request deletion of your data (“right to be forgotten”),
• Restrict processing,
• Data portability,
• Object to data processing.

To exercise your rights, please contact me at: aura@krystiangacek.pl.
You also have the right to lodge a complaint with the supervisory authority – in Poland, this is the President of the Personal Data Protection Office (PUODO).

9. Data Sharing

Your data may be shared only with service providers necessary to operate the store:

• Payment processors,
• Hosting provider,
• Providers of analytics/marketing tools (if used).

Your personal data will never be sold or shared with unauthorized third parties.

10. Changes to this Privacy Policy

This Privacy Policy may be updated in case of legal, technical, or business changes. The latest version is always available at krystiangacek.pl.