Copyright

Copying, distributing, reprinting or publication in any form (including electronic) for commercial and private use, without permission is prohibited.

PRIVACY POLICY

Effective date: 2025.10.07

1. WHO WE ARE

This Privacy Policy describes how your personal data is collected, used and shared when you visit or make a purchase from our store.

Data Controller for store purchases:
MILK STUDIO Adam Jakubowski
ul. Pracy 21, 47-400 Racibórz, Poland
NIP: PL5242659194
Email: shop@karrde.pl

Data Controller for photography-related communications and portfolio inquiries:
INFINITIO Marcin Rychły
ul. Pracy 21, 47-400 Racibórz, Poland
NIP: PL6391785177
Email: shop@karrde.pl

2. WHAT PERSONAL DATA WE COLLECT

When you make a purchase or attempt to do so, we collect the following data:

  • Your name, shipping and billing address, email address, phone number
  • Payment information (processed securely by PayPal – we do not store credit card numbers)
  • IP address, browser type, device data
  • Order history and communications with us

When browsing the site, we may also automatically collect information using cookies (see section 9).

3. LEGAL BASIS FOR DATA PROCESSING

We process your personal data lawfully based on:

  • Art. 6(1)(b) GDPR – to fulfill the contract (i.e., process and deliver your order)
  • Art. 6(1)(a) GDPR – your consent (e.g., for marketing or newsletter, if applicable)
  • Art. 6(1)(c) GDPR – compliance with legal obligations (e.g., tax regulations)
  • Art. 6(1)(f) GDPR – our legitimate interest (e.g., fraud prevention, analytics)

4. HOW WE USE YOUR DATA

  • To process and deliver your order
  • To contact you regarding your purchase
  • To handle returns, complaints, and customer support
  • To comply with tax and accounting obligations
  • To send you newsletters or updates (only if you have explicitly subscribed and confirmed your consent via double opt-in)
  • To analyze website usage and improve the user experience

5. HOW LONG WE KEEP YOUR DATA

We retain your data only as long as necessary:

  • For transactional and invoicing purposes: up to 6 years (legal obligation)
  • For marketing purposes: until you withdraw your consent
  • For newsletter subscriptions: until you unsubscribe or withdraw consent. Subscription logs (date, IP, and consent record) are retained for compliance purposes.
  • For customer service: up to 2 years after your last contact

6. YOUR RIGHTS UNDER GDPR

As a data subject, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data (right to be forgotten)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where applicable)
  • Lodge a complaint with a supervisory authority (in Poland: UODO, www.uodo.gov.pl)

To exercise any of these rights, please contact us at shop@karrde.pl

7. DATA SHARING & THIRD PARTIES

We only share your personal data with:

  • Service providers such as hosting platforms, couriers, and WooCommerce tools
  • Payment providers (PayPal) – please review their Privacy Policy
  • Law enforcement or tax authorities if legally required

We never sell your data to third parties.

If you choose to purchase products via external platforms such as Blurb.com, please note that your personal data will be processed directly by that provider, according to their own privacy terms. We encourage you to read their Privacy Policy before placing your order.

Some providers may process data outside the EU. In such cases, appropriate safeguards (e.g. Standard Contractual Clauses) are applied.

8. DATA SECURITY

We follow industry best practices and take reasonable steps to protect your personal data. However, no method of online transmission or storage is 100% secure.

Payments are handled securely through PayPal’s encrypted infrastructure. We do not store your card details on our servers.

9. UPDATES NEWSLETTER

You may choose to subscribe to our updates newsletter list to receive occasional news, gallery updates, product information, and notices such as general shipping updates.

Subscription to the newsletter is entirely voluntary and based on your explicit consent (Art. 6(1)(a) GDPR).

When you subscribe, we collect and store your email address and, for security and legal compliance, also the IP address and the time of subscription. A confirmation email is sent as part of the double opt-in process — your subscription becomes active only after you confirm it by clicking the link in that email.

You can unsubscribe at any time by clicking the “unsubscribe” link in any newsletter email or by contacting us directly at shop@karrde.pl.

Newsletter data is stored securely on our web server (WordPress / Newsletter Plugin by Stefano Lissa) and is not shared with any third parties.

Your personal data related to the newsletter will be deleted immediately after unsubscribing, except for minimal technical logs kept to demonstrate lawful consent.

10. COOKIES & TRACKING

Our website uses cookies to:

  • Ensure website functionality (e.g. remembering your cart)
  • Analyze traffic and improve performance (e.g. Google Analytics)
  • Personalize content and marketing (if consent is given)

Upon your first visit, you are asked to accept or decline cookies. You may also configure your browser settings to control or delete cookies.

11. AGE OF CONSENT

By using this site, you confirm that you are at least the age of majority in your country or that you have given us your consent to allow any minor dependents to use this site.

12. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this policy as needed. Any changes will be published on this page with a revised effective date. We recommend checking it periodically.

If we make significant changes, we will notify users via email or site banner.

13. CONTACT

For questions, data access requests, complaints or to withdraw your newsletter subscription consent, please contact our Privacy Officer:

Email: shop@karrde.pl
Postal Address: MilkStudio, ul. Pracy 21, 47-400 Racibórz, Poland