1. Data Controller
The controller of your personal data is Monolith Digital Kacper Elert, ul. Daniszewska 22/18, 03-230, Warsaw], NIP: 5214142473. Contact for all data-related matters: kontakt@lumzy.pl.
2. What data we collect
- data required to fulfill the order: name and surname, delivery address, email address, phone number;
- order and payment data (we do not store card numbers or bank login details – these are handled by the payment processor);
- data from correspondence with us (email, complaints, returns);
- technical data collected using cookies and similar technologies: IP address, device and browser information, activity in the Store (if you consent).
3. Purposes and legal bases for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| concluding and performing the sales contract, order fulfillment, delivery | Art. 6(1)(b) |
| handling inquiries, returns and complaints | Art. 6(1)(b) and (f) |
| tax and accounting obligations | Art. 6(1)(c) |
| establishment, exercise or defense of legal claims, fraud prevention, Store security | Art. 6(1)(f) (legitimate interest) |
| analytics and marketing (cookies, tracking pixels) | Art. 6(1)(a) (your consent) |
4. How long we store data
- order data – until the statute of limitations for claims related to the contract expires (generally 6 years);
- accounting and tax documents – for the period required by law (5 years from the end of the tax year);
- data processed on the basis of consent – until it is withdrawn;
- correspondence – until the matter is resolved and any potential claims expire.
5. Who we share data with
We share data only with entities that are essential for the operation of the Store:
- the store platform provider – Shopify (Shopify International Limited, Ireland);
- payment processors – Przelewy24 and the BLIK operator;
- courier and postal companies – DPD Polska, InPost, Poczta Polska (Pocztex);
- the Goods supplier and logistics partner fulfilling the shipment (only to the extent necessary for shipping: name and surname, delivery address, phone number);
- accounting and legal advisors;
- analytics and marketing tool providers (after you consent): Google, Meta Platforms Ireland, TikTok Technology Limited;
- IT and email service providers;
- public authorities, if required by law.
6. Data transfers outside the European Economic Area
Some of our providers (e.g., Shopify, Google, Meta, TikTok) may transfer data to countries outside the EEA, including the USA. This is done on the basis of an adequacy decision by the European Commission (e.g., the EU–US Data Privacy Framework) or standard contractual clauses.
[CHECK WITH THE SUPPLIER: is the shipment fulfilled from a warehouse in China or another country outside the EEA? If so, leave this paragraph; if not, remove it.] The Goods may be shipped from a warehouse located outside the EEA (in China). In that case, the data necessary for shipping (name and surname, address, phone number) is transferred there on the basis of Art. 49(1)(b) of the GDPR, as it is necessary to perform the contract concluded with you.
7. Your rights
You have the right to: access your data, have it rectified, erased, have processing restricted, have your data ported, and object to processing based on legitimate interests. If we process data on the basis of consent, you can withdraw it at any time (this does not affect the lawfulness of processing carried out before withdrawal). To exercise these rights, write to kontakt@lumzy.pl.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).
8. Voluntary provision of data
Providing the data required to fulfill the order is voluntary, but necessary to conclude and perform the contract. Without it, we cannot fulfill the order. Consent to analytical and marketing cookies is entirely voluntary.
9. Automated decision-making
We do not make decisions about you automatically that produce legal effects or similarly significantly affect you. Marketing tools used with your consent may analyze your behavior to tailor advertising content.
10. Cookies
The rules for using cookies are described in the Cookie Policy available in the Store.
11. Policy changes
We may update the policy, e.g., due to changes in laws or the tools used in the Store. The current version is always available in the Store.