Privacy Policy

1. Personal Data Controller

The personal data controller is Web-site Paweł Więcek, ul. Skowronków 9/58, 33-100 Tarnów, Tax ID: 8732361374, REGON: 120063602.

Contact the Controller:

• e-mail: kontakt@bluedvd.pl
• phone: 660 413 432
• website: https://bluedvd.pl

2. Scope of Collected Data

The Controller may process data provided by the user when placing an order, creating an account, contacting the store, filing a complaint, or making a return, in particular:

• first and last name,
• delivery address and billing address,
• e-mail address,
• phone number,
• company details and Tax ID, if the purchase is made on behalf of a company,
• data concerning orders, payments, returns, and complaints,
• data provided in correspondence,
• IP address and technical data concerning the device and browser.

The Controller does not receive full payment card data. Such data is processed by the selected payment operator.

3. Purposes and Legal Bases for Data Processing

Personal data is processed for the following purposes:

1. Conclusion and performance of a sales contract, order processing, payment, delivery, return, or complaint handling – based on Article 6(1)(b) GDPR.
2. Maintaining a customer account and providing services electronically – based on Article 6(1)(b) GDPR.
3. Fulfillment of tax, accounting, and other legal obligations – based on Article 6(1)(c) GDPR.
4. Responding to messages and inquiries not directly related to a concluded contract – based on Article 6(1)(f) GDPR, i.e., the Controller’s legitimate interest in conducting correspondence and serving users.
5. Establishment, pursuit, or defense of legal claims – based on Article 6(1)(f) GDPR.
6. Ensuring store security, preventing abuse, and maintaining necessary technical statistics – based on Article 6(1)(f) GDPR.
7. Sending commercial information or newsletters – based on user consent, if such a service is offered, in accordance with Article 6(1)(a) GDPR and the provisions of the Electronic Communications Act.

Consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

4. Data Recipients

Personal data may be transferred to entities that assist the Controller in operating the store, in particular:

• courier, postal, and parcel locker operators,
• payment operators,
• hosting, e-mail, and technical support providers,
• store software and order management system providers,
• accounting office,
• analytical and marketing tool providers – only to the extent resulting from granted consents,
• law firms, debt collection agencies, or insurers, if necessary to pursue or defend claims,
• public authorities, if the obligation to transfer data results from legal provisions.

Entities processing data on behalf of the Controller act on the basis of appropriate agreements or other legal bases provided by law.

5. Transfer of Data Outside the European Economic Area

Some providers of IT, analytical, or marketing tools may process data outside the European Economic Area.

In such cases, data is transferred only on the basis of mechanisms permitted by GDPR, in particular European Commission adequacy decisions or standard contractual clauses.

This information applies only if the store actually uses services that result in such transfer.

6. Data Retention Period

Data is retained:

• for the time necessary to fulfill the order and perform the contract,
• data related to accounting and tax documentation – for the period required by law,
• data related to complaints, returns, and claims – until the matter is resolved and the applicable limitation period expires,
• customer account data – until the account is deleted, except for data that must be retained on the basis of legal provisions,
• correspondence data – for the time necessary to provide a response, and then until the expiry of the period for potential claims,
• data processed on the basis of consent – until its withdrawal,
• data processed on the basis of legitimate interest – until an effective objection is raised or the purpose of processing ceases.

The Controller periodically verifies whether further retention of data is necessary.

7. User Rights

The data subject has the right to:

• access their data,
• receive a copy of their data,
• rectify or supplement their data,
• erase their data, if the conditions specified in GDPR are met,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time,
• lodge a complaint with the President of the Personal Data Protection Office.

The exercise of certain rights may be limited if further data processing is required by law or is necessary to establish, pursue, or defend claims.

To exercise your rights, please contact the Controller at: kontakt@bluedvd.pl.

8. Voluntary Provision of Data

Providing data is voluntary, but providing data marked as mandatory is necessary to place and fulfill an order, create an account, or handle a complaint or return.

Failure to provide required data may prevent the performance of a given service.

9. Automated Decision-Making

The Controller does not make decisions concerning users based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.

Analytical or advertising tools may be used to personalize content and advertisements, if the user has given the required consent.

10. Cookies

The store uses cookies and similar technologies.

Necessary cookies may be used to:

• ensure proper functioning of the store,
• handle the shopping cart and order,
• maintain the user session,
• log in to the account,
• ensure website security,
• remember privacy settings.

Their use is necessary for the proper provision of services and does not require separate user consent.

Analytical, non-essential functional, and advertising cookies are used only after obtaining user consent.

The user may accept or reject individual cookie categories and change or withdraw consent at any time using the cookie settings available on the website.

Withdrawal of consent does not affect the lawfulness of actions performed before its withdrawal.

The user may also change their web browser settings. Blocking necessary cookies may cause the shopping cart, customer account, or other store functions to malfunction.

11. Data Security

The Controller applies appropriate technical and organizational measures to protect personal data against loss, unauthorized access, alteration, or disclosure.

Access to data is granted only to authorized persons and entities entrusted with data processing in accordance with the law.

12. Changes to the Privacy Policy

The privacy policy may be updated in the event of changes to legal provisions, the operation of the store, or the services and tools used.

The current version of the policy is published on the store website along with the date of the last update.

Date of last update: August 1, 2026.