Privacy policy

Effective from July 10, 2024.

On this page you can review the most current versions of the Privacy & Cookies policies. Please read them carefully before accessing or using the Website/Store.

 

Privacy policy of personal data (GDPR)

 

Section 1 - Identity of the data administrator

  1. The administrator of personal data provided while using the Website and/or the online Store operated under the name www.fabricwanderland.com is a civil law partnership MMXX J. Bonk M. Matysiak, at 2/31 Chmielna Street, 00-020 Warsaw, NIP: 525 282 09 23, REGON: 385902046, email address: contact@fabricwanderland.com.
  2. The data is processed in accordance with the currently applicable legal provisions, i.e., Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), the Act of May 10, 2018, on data protection, as well as the Act of July 12, 2024, on Electronic Communications Law.
  3. This Privacy Policy covers the principles of processing data of Users of the Store, as well as individuals entering into agreements with the Data administrator, including those related to the execution of Orders in the Store, as well as data collected through contact with the Data administrator (via email or phone) or traditional correspondence, and individuals who like and/or follow the Data administrator’s fanpage on social media, if applicable.


Section 2 - Applied definitions

  1. In this policy, the following definitions apply:
    • Data administrator – the entity that decides on the purpose and means of data processing; in this policy, it refers to: a civil law partnership MMXX J. Bonk M. Matysiak, at 2/31 Chmielna Street, 00-020 Warsaw, NIP: 525 282 09 23, REGON: 385902046.
    • Personal data – any information that, without excessive time and cost, can lead to the identification of a natural person, including their identification, address, and contact details.
    • Third country – a country outside the European Economic Area (EEA).
    • Website – a website available at www.fabricwanderland.com, through which the User can browse its content, subscribe to the newsletter, or contact the Data administrator via the contact details or forms available on the website.
    • Store – the online shop available at www.fabricwanderland.com, through which the User can purchase specified Goods and/or Digital products.
    • User/Data subject – a natural person whose data is processed and who uses the services available on the Website/Store.

 

Section 3 - Purposes of personal data processing

  1. The Data administrator processes personal data only when permitted by currently applicable laws, including for the following purposes:
    • Preparation and execution of the concluded sales agreement, including entering into a distance contract via the online store (Order), to which the person is a party to, and the exercise of rights arising from it (non-conformity with the agreement, withdrawal from the agreement, etc.). This processing is based on Article 6(1)(b) of the GDPR.
    • Documenting contract execution, including issuing an invoice or receipt to an individual, and maintaining accounting and tax records, based on Article 6(1)(c) of the GDPR, i.e., to fulfill legal obligations imposed on the Administrator of personal data, according to Article 70 of the Act of 29 August 1997, Tax Ordinance.
    • Taking actions at the request of the data subject, including responding to inquiries made through electronic means of communication or handling traditional correspondence. This processing is based on Article 6(1)(b) of the GDPR.
    • Marketing the Administrator's own products and services through traditional means, based on Article 6(1)(f) of the GDPR, i.e., to pursue the legitimate interests of the data administrator or the data subject.
    • Sending an email requesting a review of the Store and/or Goods/Products, based on Article 6(1)(f) of the GDPR, for a justified purpose of the data administrator (Seller), which is to improve the offer and/or Goods/Products and/or the Store by collecting reliable opinions about them by the Store owner.
    • Asserting rights and claims by the Administrator of personal data or the data subject, based on Article 6(1)(f) of the GDPR, and conducted for a legally justified purpose.
  2. Providing personal data is necessary for the performance of a distance contract, including the shipment of Goods/Products or the provision of a Digital product and the issuance of an accounting document, pursuing claims, as well as responding to User inquiries. Providing personal data in other respects is voluntary.
  3. Failure to provide the required data prevents the execution of a distance contract, issuing an invoice or receipt, or initiating contact at the request of the data subject.

 

Section 4 - Methods of data collection

  1. The User's personal data is collected directly from the data subjects, specifically through:
    • filling out the contact form when submitting an inquiry via the form available on the Website,
    • filling out the order form in the Store,
    • providing data for the preparation, conclusion and execution of a contract (Order) through available contact channels,
    • direct contact with the Data administrator using the contact details available on the Website or in traditional form at the place of business operation.

 

Section 5 - Scope of processed data

  1. The scope of processed personal data is limited to the minimum necessary to provide services, including:
    • submitting an inquiry via the contact form or using the contact details available on the Website: name, email address, phone number, and any other data voluntarily provided by the data subject,
    • placing an order in the Store: name and surname or entity name, email address, phone number, payment confirmation, billing address, delivery address, tax identification number (NIP),
    • issuing a personal invoice, VAT invoice, or other accounting document: name and surname or entity name, billing/delivery address or registered office address, tax identification number (NIP),
    • preparation, conclusion, and execution of the contract: name and surname, address, ID card number, etc.

 

Section 6 - Data processing period

  1. The period of data processing depends on the purpose for which the data was collected and includes the following durations:
    • for the conclusion and execution of the sales contract, including distance sales (Order) – for the period necessary to document the execution of the contract, including issuing an invoice or receipt, which is five years from the end of the calendar year in which the tax payment deadline expired, based on Article 112 of the Act of March 11, 2004, on the Goods and Services Tax, in connection with Article 70 of the Act of August 29, 1997 - Tax Ordinance,
    • for responding to inquiries submitted via the contact form or by phone – for the period necessary to provide a response, but no longer than six months, unless the person decides to enter into a contract with the Data administrator,
    • for the purpose of pursuing claims – based on Article 118 of the Act of April 23, 1964 – Civil Code. Unless a specific provision states otherwise, the limitation period is six years, and for periodic claims and claims related to business activity, it is three years.

 

Section 7 - Data recipients

  1. The User's personal data may be entrusted to other entities to perform services on behalf of the Data administrator, particularly entities supporting the Data administrator's business activities in the following areas:
    • hosting of the Website and/or Store,
    • hosting of email services,
    • maintenance and support of IT systems where data is processed, including automation of the newsletter, issuance of accounting documents, order processing, etc.,
    • accounting and financial services,
    • legal services, including debt collection,
    • office administration,
    • courier service brokerage,
    • statistical analyses,
    • advertising and marketing activities,
    • dropshipping and/or logistical order fulfilment.
  2. The User's personal data may also be shared with entities supporting the Data administrator, including entities providing courier and postal services, banks, and/or electronic payment operators on the Website and/or in the Store, as specified in the Terms of service.
  3. In the case of contests, the personal data of winners may also be disclosed/transferred to entities responsible for awarding prizes, including those issuing vouchers or gift cards, to the extent necessary for the execution of the contest and the awarding of prizes.

 

Section 8 - Transfer of data outside the European Economic Area (EEA)

  1. The User's personal data will be processed by service providers whose headquarters and/or servers are located in a third country, i.e., the United States of America (USA).
  2. For providers listed by the U.S. Department of Commerce, such as Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Meta Platforms, Inc., Menlo Park, California, USA; Stripe Payments Europe Limited and Stripe Technology Europe Limited, headquartered respectively at 3 Dublin Landings, North Wall Quay, Dublin 1, Ireland, and The One Building, 1 Lower Grand Canal Street, Dublin 2, Ireland, the transfer of data to the USA is based on the European Commission's decision of July 10, 2023, establishing an adequate level of data protection provided by the so-called "EU-US Data Privacy Framework.".
  3. In the case of Pinterest Europe Ltd. and Pinterest, Inc., headquartered respectively at Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irlandia and 651 Brannan St., San Francisco, CA 94107, USA, the transfer of data outside the European Economic Area (EEA) is based on Standard Contractual Clauses (SCCs) agreed upon between the Data administrator and the service provider.
  4. When using the PayPal’s payment methods, the User's personal data may be transferred to the following countries:
    • USA – based on Standard Contractual Clauses (SCCs).
    • Israel, Japan, Switzerland, the United Kingdom, Argentina, Canada – based on the European Commission's adequacy decision regarding the level of data protection in the respective country.
    • Taiwan, Turkey, British Virgin Islands, Australia, China, Hong Kong, India, Indonesia, South Korea, Malaysia, Mauritius, the Philippines, Russia, Singapore, Brazil, and Mexico – based on Standard Contractual Clauses (SCCs).

 

Section 9 - Data administrator's fanpages on social media

  1. The Data administrator is also a joint administrator of the data of its followers on social media, particularly those who use electronic communication on the fanpages - Facebook - “@fabricwanderland” and/or Instagram under the account name “@fabricwanderland” and/or YouTube under the account name “@fabricwanderland” and/or Pinterest under the account name “@fabricwanderland,” managed by the Data administrator on these social media platforms.
  2. In other respects, the administrators of the Users’ data of these social media platforms are, respectively, Meta Platforms, Inc. (formerly Facebook Inc., headquartered at 1 Hacker Way, Menlo Park, CA 94025, USA), Google LLC. (headquartered in Mountain View, California), Pinterest Europe Ltd. and Pinterest, Inc. (headquartered at Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, and at 651 Brannan St., San Francisco, CA 94107, USA, respectively), and the processing of these data is carried out under the terms described in the terms and privacy policies of these services, available at: Facebook Privacy Policy, Google Privacy Policy, Pinterest Privacy Policy.
  3. The User's personal data, who likes and/or follows the Administrator's fanpages on social media, will be processed outside the European Economic Area in a so-called third country, specifically in the United States of America (USA), due to the use of IT solutions which servers are located outside the European Economic Area.
  4. The User's personal data will be processed in a third country, i.e., the United States of America (USA). For suppliers listed by the U.S. Department of Commerce, such as Meta Platforms, Inc., Menlo Park, California, USA, Google LLC., Mountain View, California, USA, the transfer of data to the USA is based on the European Commission's decision of July 10, 2023, which establishes an adequate level of data protection provided by the so-called "EU-US Data Privacy Framework.". In the case of Pinterest Europe Ltd. and Pinterest, Inc., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irlandia and 651 Brannan St., San Francisco, CA 94107, USA respectively, the transfer of data contained in cookies, particularly the user's IP address, outside the European Economic Area (EEA) is based on Standard Contractual Clauses (SCCs) agreed upon between the Data administrator and the service provider.

 

Section 10 - Rights of data subjects

  1. Individuals whose data is processed have the right to:
    • Access the content of their personal data, including receiving the first copy of their personal data for free.
    • Correct data that is inaccurate or has been changed.
    • Delete their data, provided there are no other legal provisions that require the Data administrator to archive the data for a specified period.
    • Transfer their data, provided that the basis for data processing is a contract or the consent of the data subject, and the data is processed automatically.
    • Withdraw consent for data processing, if the processing is based on the consent of the data subject. Withdrawal of consent does not affect the legality of processing carried out prior to its withdrawal.
    • Object to data processing on grounds related to their particular situation, if the processing of personal data is based on Article 6(1)(e) or (f) of the GDPR, as well as the right to restrict processing.
    • Not to be subject to automatic profiling if the Data administrator makes decisions based solely on automated profiling that have legal effects on the data subject or similarly affect them.
    • Review data processing and obtain information about who the Data administrator is, as well as information on the purpose, scope, and method of data processing, the content of the data, the source of the data, and the method of data sharing, including information on the recipients or categories of recipients of the data.
  2. To exercise the right to information, access to data content, correction, and other rights, the data subject can contact the Data Administrator.
  3. The data subject also has the right to lodge a complaint with the Office for Personal Data Protection (UODO) if the data processing violates the provisions of the General Data Protection Regulation (GDPR). The complaint can be submitted electronically or traditionally to the address: Office for Personal Data Protection, at 2 Stawki Street, 00-193 Warsaw.

 

Section 11 - Final provisions

  1. In the event of a change in the applicable privacy policy, especially if it is necessitated by technical solutions implemented or changes in privacy laws concerning the data subjects, appropriate modifications will be made to this Privacy Policy. These modifications will come into effect within 14 days of their publication on the Website/Store website.

 

Cookies policy


Section 1 - General provisions

  1. The owner of the Website/Store and the Data administrator provided during the use of the Website and/or Store operated at www.fabricwanderland.com is the civil partnership MMXX J. Bonk M. Matysiak, at 2/31 Chmielna Street, 00-020 Warsaw, NIP: 525 282 09 23, REGON: 385902046, email address: contact@fabricwanderland.com.
  2. The principles of personal data processing are provided in the Privacy policy, available above.
  3. The Website and/or Store uses cookies to deliver services and functionalities tailored to the preferences and needs of the Users of the site. In particular, cookies allow for the recognition of the User's device and display the website accordingly, adapted to their individual needs.
  4. Cookies may be temporary, meaning they are deleted upon closing the browser, or persistent.
  5. Permanent cookies are stored even after the User has finished using the Website and/or Store pages and are used to store information such as passwords or logins, which speeds up and simplifies the use of the site, as well as enables the User's selected settings to be remembered.
  6. The purposes of using cookies in the Website and/or Store and the access to them by other entities are outlined in the subsequent sections of this document.
  7. The information is processed in accordance with the currently applicable legal regulations, including the Act of July 12, 2024, on Electronic Communication, Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and the repeal of Directive 95/46/EC (hereinafter: GDPR), as well as the Act of May 10, 2018, on the protection of personal data.

 

Section 2 - Definitions used

  1. Cookies – small files that are downloaded and stored on the User’s computer or other device, linked to information about how the website is used.
  2. Personal data – any information that, without excessive time and cost, can lead to the identification of a natural person, including their identification, address, and contact details.
  3. Third country – a country outside the European Economic Area (EEA).
  4. Website – a website available at www.fabricwanderland.com, through which the User can browse its content, subscribe to the newsletter, or contact the Data administrator via the contact details or contact forms available on the website.
  5. Store – the online shop available at www.fabricwanderland.com, through which the User can purchase specified Goods and/or Digital products.
  6. User/Data subject – a person who voluntarily uses the services and content available in the Website and/or Store, such as browsing the pages of the Website/Store, placing an order in the Store, registering, subscribing to the free newsletter, or contacting the owner of the Website/Store via the contact form or available details.
  7. End user – an entity using a publicly available electronic communication service or requesting the provision of such a service to meet their own needs. The User/Data subject may also be an End user.

 

Section 3 - Purposes of storing and accessing information contained in cookies

  1. The Website/Store uses cookies for the following purposes:
    • To enable the use of services available within the Store.
    • To ensure security.
    • To customise the content of the Website pages to the User's individual preferences and to optimise the use of the website (display tailored to needs - functional cookies).
    • To perform analyses and statistics that provide information on how the User interacts with the pages, which allows for the improvement of their structure and content.
    • For marketing and/or remarketing purposes, including directing targeted content, particularly to Users who have visited the website or the Data administrator’s fanpage on the social media platforms Facebook, Instagram, Pinterest, and YouTube.
  2. The data contained in cookies will be archived and used for statistical analysis and to assess the overall traffic of the Website/Store’s users.
  3. The data contained in cookies is not combined with the personal data provided by the User during the conclusion of a contract or contact with the Data administrator.


Section 4 - Tools related to the collection or sharing of cookies

  1. The Website and/or Store is hosted on the Shopify Inc. platform. Detailed information about the cookies used to operate the Website and/or Store through Shopify can be found at this website.
  2. To analyse traffic on the Website, the sources of traffic, and to optimise marketing activities, the following tools have been installed on the Website:
    • Google Analytics: A tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which allows for the analysis of User traffic on the Website and its subpages (country/city, number of visits, pages viewed, duration of visits, etc.). The main cookie used by Google Analytics, "_ga", allows the service to distinguish individual Users and operates for 2 years. Each "_ga" cookie is unique to a particular service, so it cannot be used to track a user or browser across unrelated sites. Privacy settings in Google services can be adjusted by the User, with more information available here. To permanently block cookies collected by Google Analytics, the User can use the browser add-on developed and provided by Google LLC here.
    • Facebook Pixel: A tool provided by Meta Platforms, Inc., Menlo Park, California / Meta Platforms Ireland Limited (formerly Facebook Inc.), which allows for measurement, optimisation, and creation of custom audiences, enabling the collection of information about the User's use of the Website and directing dedicated content to them on the social media platform Facebook. To control privacy settings on this social media platform, the User can change their preferences and settings at any time. More information here. The Facebook Pixel allows the creation of custom audiences and/or similar audiences to those who have already interacted with the Website or the Data administrator's materials shared on social media platforms Facebook and/or Instagram. The retention of data provided by the Facebook Pixel is as follows: Website/Store - a maximum of 180 days from the interaction with the website; Facebook fanpage - a maximum of 365 days from the interaction with the account; Video shared on the Data administrator's Facebook fanpage - a maximum of 365 days from the interaction with the material; Events organised or co-organised by the Data administrator on the Facebook fanpage - a maximum of 365 days from the interaction with the material.
    • Facebook Messenger: A tool provided by Meta Platforms, Inc., Menlo Park, California / Meta Platforms Ireland Limited (formerly Facebook Inc.), which allows the User to contact the Website owner via Messenger on the social media platform Facebook/Instagram. Using Facebook chat on the Website is voluntary. The User can conduct the conversation as a guest or log into their account on this service. More information here.
    • Facebook/Instagram Plugin/Widget: A tool that allows the User to directly navigate to the Data administrator's fanpage on the social media site Facebook/Instagram, operated by Meta Platforms, Inc., Menlo Park, California / Meta Platforms Ireland Limited (formerly Facebook Inc.). Upon navigating to the Facebook and Instagram social media services, Users are also subject to the privacy rules described on those services, particularly here.
    • YouTube Plugin/Widget: A tool that allows the User to directly navigate to the Data administrator's channel on the social media site YouTube, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Upon navigating to the YouTube social media services, Users are also subject to the privacy rules described on those services, particularly here.
    • Pinterest Plugin/Widget - A tool that allows the User to directly navigate to the Data administrator's fanpage on the social media site Pinterest, operated by Pinterest, Inc. (USA), and outside the USA by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Users who navigate to Pinterest through the widget are additionally subject to the privacy policies outlined on that platform, particularly here.

 

Section 5 - Transfer of data outside the European Economic Area (EEA)

  1. The processing of data contained in cookies by providers whose headquarters and/or servers are located in a third country, i.e., in the United States of America (USA), will involve the transfer of data contained in cookies outside the European Economic Area (EEA).
  2. With respect to providers listed in the US Department of Commerce, such as Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Meta Platforms, Inc., Menlo Park, California, USA, the transfer of data contained in cookies, particularly the user's IP address, is based on the European Commission's decision of July 10, 2023, determining an adequate level of protection for personal data provided by the "EU-US Data Privacy Framework".
  3. With respect to Pinterest Europe Ltd. and Pinterest, Inc., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irlandia and 651 Brannan St., San Francisco, CA 94107, USA respectively, the transfer of data contained in cookies, particularly the user's IP address, outside the European Economic Area (EEA) is based on Standard Contractual Clauses (SCCs) agreed upon between the Administrator of personal data and the service provider.

 

Section 6 - Acceptance, rejection, or modification of cookie settings

  1. Upon entering the Website/Store, the User can accept the use of cookies for the aforementioned purposes, reject them, or consent only to selected cookies.
  2. In accordance with Article 399(2) of the Act of July 12, 2024, on Electronic Communications, the User may provide consent through the settings of the software installed on their telecommunications end device or through the configuration of the service.
  3. The User’s consent to the installation, storage, and sharing of cookies is voluntary. Consent can be withdrawn at any time. The User may delete and/or disable cookies in the web browser they use while browsing the Website/Store or select appropriate cookie settings on the Website/Store website through tools or other functionalities provided by the owner of the Website/Store for managing cookies.
  4. To manage cookies, the User can also use the functions available in the browser currently in use. Instructions for managing cookies are available on the websites of internet browser providers, including:
  5. The User’s consent is not required if the storage of or access to information contained in cookies is necessary for the transmission of an electronic communication via a public telecommunications network or for the provision of a telecommunications service or an electronically supplied service requested by the end user.
  6. Entities providing electronic services may install software on the telecommunications end device of a subscriber or end user intended for using such services or use that software, provided that the subscriber or end user:
    • Is informed directly, in a clear, easy, and understandable manner, prior to the installation of the software, about the purpose for which the software will be installed and how the service provider will use the software;
    • Is informed directly, in a clear, easy, and understandable manner, about how to remove the software from the user’s telecommunications end device;
    • Provides consent for the installation and use of the software prior to its installation.
  7. Deleting or disabling cookies may result in difficulties or limited functionality in certain parts of the Website and/or Store (this applies to functional cookies). Some cookies may be essential for the proper functioning of the Website/Store pages, including remembering the User's settings and/or displaying content on the specific type of device the User is using.

 

Section 6 - Final provisions

  1. In the event of changes to the current Cookie policy, especially when required by the applied technical solutions or changes in legal regulations regarding User privacy, appropriate modifications to the above provisions will be made, which will take effect 14 days from the date of their publication on the Website/Store pages.