Privacy Policy (GDPR)

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we inform you that:

1. Data Controller

The controller of your personal data is:

M87 Andrzej Kowalski
ul. Botaniczna 66, 04-543 Warsaw, Poland
Tax ID (NIP): 113-127-67-20
Email: office@m87.pl
Website: m87.pl

2. Purpose and Legal Basis of Data Processing

Your personal data is processed for the following purposes:

• To fulfill orders placed via the online store (Art. 6(1)(b) GDPR);
• To issue accounting documents (e.g., receipts or invoices) (Art. 6(1)(c) GDPR);
• To handle inquiries, complaints, and customer service (Art. 6(1)(f) GDPR – legitimate interest of the controller);
• To send commercial information – only if the customer has given consent (Art. 6(1)(a) GDPR).

3. Data Recipients

Your data may be shared with:

• Courier and postal companies for order delivery;
• Payment service providers (e.g., PayPal, Revolut, credit card operators);
• Accounting and legal firms supporting the store;
• IT service providers supporting the store’s infrastructure.

4. Data Retention Period

Your data will be stored for:

• The time necessary to fulfill the contract and provide customer service;
• The period required by applicable law (e.g., 5 years under accounting regulations);
• Until the withdrawal of consent – for data processed based on consent.

5. Your Rights

You have the right to:

• Access your data and receive a copy;
• Rectify (correct) your data;
• Request deletion of data ("right to be forgotten") if there are no legal grounds to continue processing;
• Restrict the processing of your data;
• Transfer your data;
• Object to the processing of your data;
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
• Lodge a complaint with the President of the Personal Data Protection Office (PDPO).

6. Voluntary Nature of Data Provision

Providing your personal data is voluntary, but necessary to complete your order or to contact the data controller.

7. Cookies

The website m87.pl uses cookies to ensure proper functionality, gather statistics, and tailor content to user preferences. Details can be found in our Cookie Policy.

8. Data Security

We take all reasonable measures to protect personal data from unauthorized access, loss, alteration, or destruction. We use appropriate technical and organizational safeguards such as encryption, server security, antivirus systems, and access control. Data is processed only by authorized personnel.

9. Automated Decision-Making and Profiling

Your personal data is not subject to automated decision-making, including profiling, that could produce legal effects or similarly significant consequences for you.

10. Updates to the Privacy Policy

This privacy policy may be updated periodically to reflect legal or operational changes. The latest version will always be published on our website: m87.pl