Privacy Policy

Last update date: May 22, 2025

This Privacy Policy describes how the ZLNU online store (hereinafter referred to as the "Store", "we", "us") collects, uses and protects your personal data in connection with the use of our website www.zlnu.eu (hereinafter referred to as the "Website") and the services provided through it.

1. Personal Data Administrator

The administrator of your personal data is Pixellen - Przemysław Prętki with its registered office at ul. Komornicka 39/2, 62-069 Dąbrówka, with the Tax Identification Number (NIP) 7811576996. You can contact us in matters concerning the protection of personal data at the e-mail address: kontakt@zlnu.eu or in writing to the address of our registered office.

2. What Personal Data Do We Collect?

We collect various types of personal data depending on your interaction with our Store, including:

Identification data: name, address, email address, phone number.
Order data: order history, product details, delivery address, billing information, shopping preferences.
Payment data: payment method information (however, we do not store full payment card details - they are processed by external payment operators).
User account data: login, password (in encrypted form), login history.
Technical data: IP address, browser type, operating system, device data, cookies and similar technologies.
Marketing data: newsletter and other marketing information preferences.
Contact and inquiry form data: message content, contact details.

3. Purposes of Personal Data Processing and Legal Basis

We process your personal data for the following purposes and on the following legal bases:

Performance of the sales contract: (Article 6, paragraph 1, letter b of the GDPR) – in order to accept and fulfill your order, deliver products, process payments, and handle any complaints.
Maintaining a user account: (Article 6, paragraph 1, letter b of the GDPR) – in order to enable you to set up and manage your account, view your order history, and save your preferences.
Customer service: (Article 6, paragraph 1, letter b and f of the GDPR) – in order to answer your questions, solve problems, and provide support. Our legitimate interest is to provide high-quality customer service.
Direct marketing: (Article 6, paragraph 1, letter f of the GDPR) – to inform you about our products, promotions and special offers, unless you object. Our legitimate interest is to promote our business. In the case of electronic marketing (e.g. newsletter), we rely on your voluntary consent (Article 6, paragraph 1, letter a of the GDPR).

Conducting analyses and statistics: (Article 6, paragraph 1, letter f of the GDPR) – to improve our Website, offer and business processes. Our legitimate interest is to develop our business and adapt it to the needs of our customers.
Ensuring the security of the Website: (Article 6, paragraph 1, letter f of the GDPR) – to detect and prevent fraud and abuse. Our legitimate interest is to protect our Website and our customers.
Fulfilling legal obligations: (Article 6, paragraph 1, letter c of the GDPR) – e.g. for accounting and tax purposes.

4. Recipients of Personal Data

We may share your personal data with the following categories of recipients:

Entities providing payment services: to process payments for your orders.
Courier and postal companies: to deliver the ordered products.
Providers of marketing and analytical tools: to conduct marketing activities and analyze traffic on the Website.
Accounting office: for accounting purposes.
Public authorities: to the extent and on the basis of applicable law (e.g. courts, law enforcement agencies, tax authorities).

5. Transfer of Personal Data Outside the European Economic Area (EEA)

In some cases, your personal data may be transferred outside the EEA to countries that do not provide the same level of data protection as in the EEA. In such situations, we will provide appropriate safeguards, such as standard contractual clauses approved by the European Commission, to ensure the security of your data.

6. How Long Do We Store Your Personal Data?

The period for which your personal data is stored depends on the purpose of their processing:

Data related to the performance of the sales contract: we store it for the period necessary to perform the contract and the limitation period for claims arising from it.
Data regarding the user's account: we store it until the user deletes the account or until the account becomes inactive for a specified period (in accordance with our internal rules).
Data processed on the basis of consent: we store it until the consent is withdrawn.
Data processed for marketing purposes: we store it until an objection is filed or consent is withdrawn (if granted).
Data processed for accounting and tax purposes: we store it for the period required by law.

7. Your Rights

You have the following rights related to the processing of your personal data:

Right to access data: you have the right to obtain information about whether we process your personal data, what data we process, for what purposes and to whom we share it.
Right to rectify data: you have the right to request the rectification of incorrect or the completion of incomplete personal data.
Right to erasure of data ("right to be forgotten"): you have the right to request the deletion of your personal data in certain situations (e.g. when the data is no longer necessary for the purposes for which it was collected).
Right to restriction of processing: you have the right to request the restriction of the processing of your personal data in certain situations (e.g. when you question the accuracy of the data).
Right to data portability: you have the right to receive your personal data in a structured, commonly used machine-readable format and to transfer this data to another controller.
Right to object: you have the right to object to the processing of your personal data based on our legitimate interest, including profiling, and to the processing of data for direct marketing purposes.
Right to withdraw consent: If we process your personal data based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the law.

To exercise any of the above rights, please contact us by e-mail at kontakt@zlnu.eu or in writing to our registered office address.

8. Personal Data Security

We make every effort to ensure the security of your personal data. We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, change or unauthorized disclosure. These measures are regularly reviewed and updated.

9. Cookies and Similar Technologies

Our Website uses cookies and other similar technologies (e.g. local storage) to improve its functionality, personalize content, analyze traffic and for marketing purposes.

10. Changes to the Privacy Policy

We reserve the right to change this Privacy Policy at any time. Any changes will be published on our Website, and we may additionally inform you about significant changes by e-mail. We encourage you to regularly read the current version of the Privacy Policy.

100% natural and Polish linen | Made in Poland | Fast shipping | 14-day returns

GET INSPIRED