Privacy Policy

Last updated: 2 December 2024

Entropy Studio ("we", "us", "our" or the "Company") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose and otherwise process your personal data when you visit or use https://entropystudio.pl/ (the "Website"), purchase products from us, use our services, create an account, or otherwise communicate with us in connection with the Website (collectively, the "Services").

For the purposes of this Privacy Policy, "you" and "your" means any individual using the Services, including customers, Website visitors and other individuals whose personal data we process in connection with the Services.

Please read this Privacy Policy carefully.

1. Data Controller

The controller responsible for the processing of your personal data in connection with the Website and the Services is:

Entropy Studio Olivier Nowakowski a sole proprietorship operating under the brand name entropy studio Odolańska 24/10 02-562 Warsaw Poland

NIP: 5214096922 REGON: 540332698

E-mail: entropy.studio@gmail.com

Unless expressly stated otherwise, Entropy Studio Olivier Nowakowski is the controller of the personal data described in this Privacy Policy.

2. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, the Services, applicable legislation or regulatory requirements.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice of material changes.

3. How We Collect Personal Data

We collect personal data from several sources, depending on how you interact with the Website and the Services.

We may collect personal data:

directly from you;
automatically when you use the Website;
from service providers and business partners that provide services to us; and
from payment providers and other third parties involved in processing your transactions.

4. Personal Data We Collect

The types of personal data we collect depend on your interaction with the Website and the Services.

4.1 Information You Provide Directly

Depending on how you interact with us, we may collect:

Contact information , such as:

first and last name;
e-mail address;
postal address;
telephone number.

Order and transaction information , such as:

Products purchased or ordered;
billing address;
shipping address;
order number;
payment status;
transaction information;
e-mail address and telephone number associated with the Order.

Payment card details are generally processed by the relevant payment service provider. We do not intend to store complete payment card numbers unless expressly stated otherwise.

Account information , where you create an Account, such as:

name;
e-mail address;
login information;
password or authentication information;
Order history;
Account preferences.

Where you use a third-party authentication service, such as Google Sign-In, we may receive information provided to us by that service in accordance with its applicable privacy settings and policies.

Customer support information , including information you choose to provide when you contact us, such as the content of your messages, correspondence and other information necessary to respond to your enquiry.

You may choose not to provide certain personal data. However, where such data is necessary to provide a particular Service or fulfil an Order, we may be unable to provide that Service or fulfil the relevant Order.

5. Information Collected Automatically

When you visit or use the Website, certain information may be collected automatically.

This may include:

IP address;
browser type and version;
operating system;
device type;
language settings;
approximate location derived from technical information;
information concerning your interaction with the Website;
pages visited;
Products viewed;
referring website;
date and time of access; and
other technical information relating to your use of the Website.

We may collect this information using cookies, pixels, tags, log files and similar technologies.

The precise technologies used may depend on the configuration of our Shopify store and any third- party applications or services integrated with the Website.

6. Information We Receive from Third Parties

We may receive personal data from third parties that provide services in connection with the Website and our business.

These may include:

Shopify, which provides the e-commerce platform on which the Website operates;
payment service providers;
delivery and logistics providers;
fraud prevention and security providers;
analytics providers;
customer support providers;
IT, hosting and cloud service providers;
marketing and advertising service providers; and
providers of social login or other third-party integrations.

Such third parties may process personal data in accordance with their own privacy policies and, where applicable, on our behalf as processors.

7. How We Use Your Personal Data

We may process your personal data for the following purposes.

7.1 Processing and Fulfilling Orders

We process personal data where necessary to:

process and fulfil Orders;
arrange delivery;
process returns and refunds;
provide customer support;
communicate with you about your Order;
provide invoices or other transaction documentation; and
manage our contractual relationship with you.

The legal basis for this processing is generally the performance of a contract with you, or taking steps at your request prior to entering into a contract.

7.2 Operating and Improving the Website

We may process technical and usage information in order to:

operate the Website;
maintain its security;
troubleshoot technical problems;
improve functionality;
understand how visitors use the Website; and
develop and improve our Services.

Depending on the specific processing activity, the legal basis may be our legitimate interests or, where required, your consent.

7.3 Marketing

Where permitted by applicable law, we may use your contact information to send you marketing communications concerning our Products, promotions and Services.

Where consent is required, we will send marketing communications only after obtaining your consent.

You may withdraw your consent or unsubscribe from marketing communications at any time by following the unsubscribe instructions included in the relevant communication or by contacting us at:

entropy.studio@gmail.com

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7.4 Security and Fraud Prevention

We may process personal data to:

detect and prevent fraud;
protect the Website and our systems;
investigate suspicious or unlawful activity;
prevent misuse of our Services; and
protect the rights, property and safety of the Company, our customers and other persons.

The legal basis for such processing may be our legitimate interests or compliance with a legal obligation.

7.5 Legal and Regulatory Compliance

We may process personal data where necessary to:

comply with legal and regulatory obligations;
maintain accounting and tax records;
respond to lawful requests from public authorities;
establish, exercise or defend legal claims; and
enforce our terms and conditions.

The legal basis for such processing may be compliance with a legal obligation or our legitimate interests.

8. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases under the GDPR:

Performance of a contract – where processing is necessary to enter into or perform a contract with you;
Legal obligation – where processing is necessary to comply with a legal obligation;
Legitimate interests – where processing is necessary for our legitimate interests or those of a third party, provided that those interests are not overridden by your fundamental rights and freedoms;
Consent – where you have given your consent to a specific processing activity.

Where we rely on consent, you may withdraw that consent at any time.

9. Cookies and Similar Technologies

Like many websites, we use cookies and similar technologies.

Cookies are small text files stored on your device when you visit a website.

We may use cookies to:

enable the operation of the Website;
remember your preferences;

maintain your shopping cart;
provide security;
understand how visitors interact with the Website;
analyse Website performance;
improve our Services; and
where permitted and with the required consent, support marketing and advertising activities.

Some cookies are strictly necessary for the operation of the Website and cannot be disabled through our cookie settings.

Other cookies, including analytics, marketing or advertising cookies, may require your consent under applicable law.

Where required, we will ask for your consent before placing non-essential cookies on your device.

You may manage your cookie preferences through the cookie consent mechanism made available on the Website.

You may also control or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Website.

Because our Website operates using Shopify, Shopify and third-party applications integrated with our store may place or process cookies and similar technologies.

More information about Shopify's use of cookies is available in Shopify's Cookie Policy:

Shopify Cookie Policy

10. Disclosure of Personal Data

We may disclose personal data to third parties where necessary for the purposes described in this Privacy Policy.

Recipients may include:

Shopify and other e-commerce technology providers;
payment service providers;
courier and delivery companies;
fulfilment and logistics providers;
hosting and cloud service providers;
IT and technical service providers;
customer support providers;
analytics providers;
marketing and advertising providers;
fraud prevention and security providers;
professional advisers, including accountants, lawyers and auditors; and
public authorities and courts where required by law.

Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that the processing is governed by an appropriate legal arrangement and that the processor provides appropriate safeguards.

11. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will use an appropriate transfer mechanism as required by applicable data protection law.

Depending on the circumstances, this may include:

an adequacy decision of the European Commission;
Standard Contractual Clauses approved by the European Commission; or
another legally recognised transfer mechanism.

For example, Shopify operates an international infrastructure and may process personal data in jurisdictions outside the EEA. The applicable safeguards depend on the services and configuration used by the merchant.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The retention period depends on factors including:

whether you maintain an Account;
whether we need the data to provide Services or fulfil an Order;
legal, accounting and tax requirements;
the need to establish, exercise or defend legal claims;
fraud prevention and security requirements; and
applicable statutory limitation periods.

When personal data is no longer required, we will delete it or anonymise it, unless we are legally required or otherwise permitted to retain it.

13. Data Security

We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission over the Internet or electronic storage system is completely secure.

Accordingly, while we take appropriate measures to protect your personal data, we cannot guarantee absolute security.

You should avoid sending confidential information through unsecured communication channels.

14. Your Data Protection Rights

Depending on the circumstances and subject to applicable law, you may have the following rights:

Right of access

You may request confirmation as to whether we process your personal data and, where applicable, request access to that data and information about how it is processed.

Right to rectification

You may request that inaccurate or incomplete personal data be corrected.

Right to erasure

You may request deletion of your personal data where the legal requirements for erasure are met.

Right to restriction of processing

You may request restriction of processing in circumstances provided by applicable law.

Right to data portability

Where the applicable legal requirements are met, you may request to receive personal data concerning you in a structured, commonly used and machine-readable format and, where technically feasible, request that it be transmitted to another controller.

Right to object

You may object to processing based on our legitimate interests where the statutory requirements for such an objection are met.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint

You have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

15. How to Exercise Your Rights

To exercise your rights or ask questions about the processing of your personal data, please contact us at:

entropy.studio@gmail.com

or by post:

Entropy Studio Olivier Nowakowski Odolańska 24/10 02-562 Warsaw Poland

We may need to verify your identity before fulfilling certain requests in order to protect your personal data.

We will respond to requests within the period required by applicable law.

We will not discriminate against you for exercising your statutory data protection rights.

16. Right to Lodge a Complaint with a Supervisory Authority

If you believe that we have processed your personal data unlawfully, you have the right to lodge a complaint with a competent data protection supervisory authority.

As the Seller is established in Poland, the competent supervisory authority may be the Polish data protection authority:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)

ul. Stawki 2 00-193 Warsaw Poland

The competent supervisory authority may also depend on your place of residence or the location where the alleged infringement occurred, in accordance with applicable GDPR rules.

17. Children's Data

The Services are not directed at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided us with personal data, please contact us at:

entropy.studio@gmail.com We will take appropriate steps to investigate and, where legally required, delete such information.

18. Third-Party Websites and Services

The Website may contain links to third-party websites, applications, social media platforms or other services.

We are not responsible for the privacy practices, content or security of third-party services.

We encourage you to review the privacy policies of any third-party services before providing them with personal data.

19. Shopify

Our Online Shop is powered by Shopify.

Shopify provides the technological infrastructure used to operate the Online Shop and may process personal data in connection with the provision of its services.

Shopify's privacy information is available at:

Shopify Privacy Policy

Shopify's European privacy information may also be relevant to visitors and customers located in the EEA.

The precise categories of personal data processed by Shopify may depend on how you interact with our store and which Shopify services or features are enabled.

20. Marketing and Advertising Partners

Where applicable, we may use third-party marketing, advertising or analytics services.

Such services may use cookies, pixels, tags or similar technologies to collect information about interactions with the Website.

We will obtain consent where required by applicable law before using non-essential tracking technologies.

The specific third-party providers used on the Website may change from time to time.

Where appropriate, information about such providers and the relevant purposes will be made available through our cookie consent mechanism.

21. Payment Providers

When you make a purchase, payment information is processed by the payment provider selected during checkout.

Depending on the Payment Method you choose, this may include information such as:

name;
billing address;
payment information;
transaction amount;
transaction identifier; and
information necessary to verify or process the payment.

Payment providers may process your personal data as independent controllers or processors, depending on the service and applicable legal arrangements.

Their own privacy policies may apply to the processing of your personal data.

22. Delivery and Fulfilment Providers

To fulfil your Order, we may provide delivery-related information to the courier, postal operator, fulfilment provider or other logistics provider responsible for delivering your Order.

This may include:

name;
delivery address;
telephone number;
e-mail address; and
information necessary to identify and deliver the shipment.

Such processing is necessary to fulfil the contract with you.

23. Direct Marketing

If you subscribe to our newsletter or otherwise provide consent to receive marketing communications, we may process your e-mail address and other relevant information for the purpose of sending you marketing communications.

You may unsubscribe at any time.

Each marketing e-mail will include an appropriate mechanism for unsubscribing.

Unsubscribing from marketing communications does not affect transactional or service-related communications, such as information concerning an Order.

24. Contact

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Entropy Studio Olivier Nowakowski Odolańska 24/10 02-562 Warsaw Poland E-mail: entropy.studio@gmail.com

25. Final Information

This Privacy Policy applies to the processing of personal data carried out by Entropy Studio in connection with the Website and the Services.

Where a particular processing activity is subject to additional privacy information, we may provide that information separately.