Information on the protection of personal data (GDPR)

Data Controller
The controller of your personal data is:
Optiwriting Sp. z o.o.
ul. Zygmunta Augusta 5/2, 31-504 Kraków, Poland
KRS: 0001055905
NIP (Tax ID): 6751787340
REGON (Business ID): 526268913
E-mail: hello@sloy.pl
Tel.: +48 690 640 002

 

Purposes and Legal Bases for Data Processing

Purpose of Processing	Legal Basis	Retention Period
Order fulfillment (sales agreement)	Art. 6(1)(b) GDPR (performance of a contract)	5 years from the end of the year in which the transaction occurred (tax obligations), 6 years - in accordance with the statute of limitations for claims (pursuit of claims)
Issuing an invoice	Art. 6(1)(c) GDPR (legal obligation)	5 years from the end of the tax year
Handling complaints	Art. 6(1)(b) GDPR (performance of a contract)	Until the statute of limitations for claims expires (max. 6 years)
Direct marketing (newsletter)	Art. 6(1)(a) GDPR (consent)	Until consent is withdrawn
Contact (e-mail, phone, Instagram, Facebook)	Art. 6(1)(f) GDPR (legitimate interest)	Until correspondence is concluded or an objection is raised
Analytics (Google Analytics)	Art. 6(1)(a) GDPR (consent – cookie)	In accordance with the cookie policy

 

Data Recipients
Your data may be transferred to:
● Courier companies (InPost, DPD, DHL, etc.) – for the purpose of order delivery
● Payment operators (PayPal, bank, etc.) – for the purpose of payment processing
● Accounting office – for bookkeeping purposes
● Hosting provider (server of the sloy.pl website)
● Law firm – in the event of pursuing claims
● Google LLC, Meta Platforms Inc., etc. – analytical and marketing tools (Google Analytics, Meta Pixel, Microsoft Clarity)
● IT tool providers - providers of email marketing tools, CRM systems, and multi-channel sales management tools

 

Data Transfer Outside the EEA
In connection with the use of Google and Meta services, your data may be transferred to the USA. The transfer is based on:
● Standard Contractual Clauses (SCCs) approved by the European Commission
● An adequacy decision by the European Commission (Data Privacy Framework – if applicable)

 

Rights of the Data Subject
You have the right to:
● Access your data (obtain a copy)
● Rectify (correct) inaccurate data
● Erase data ("right to be forgotten") – if there are no grounds for further processing
● Restrict processing
● Data portability (to another controller)
● Object to processing based on legitimate interest (e.g., marketing)
● Withdraw consent (at any time – without affecting the lawfulness of processing before withdrawal)
To exercise these rights, please contact us at: hello@sloy.pl

 

Complaint to a Supervisory Authority
If you believe that the processing of your data violates GDPR regulations, you have the right to lodge a complaint with:
The President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
https://uodo.gov.pl

 

Voluntary Provision of Data
Providing personal data is voluntary, but necessary to:
● Place and fulfill an order (no data = inability to fulfill)
● Receive the newsletter (no consent = no newsletter)

 

Automated Decision-Making
We do not use automated decision-making (including profiling) that would have legal or similarly significant effects on you.