Effective from: 24.08.2026
1. Data Controller
The controller of personal data collected via the online store https://beeboxes.eu is:
AG Partner Adam Gawroński — Beeboxes
ul. Katowicka 47, 41-605 Świętochłowice, Poland
VAT ID (NIP): PL6271073592
e-mail: biuro@beeboxes.eu · phone +48 537 901 230
(the “Controller”).
For any data protection matters, contact us by e-mail at biuro@beeboxes.eu or in writing at the Controller’s address.
2. Purposes, Legal Bases and Retention Periods
| Purpose of processing | Legal basis (GDPR) | Retention period |
|---|---|---|
| Processing the order and the sales contract (including delivery and order-related communication) | Art. 6(1)(b) | until the contract is performed, then until the expiry of limitation periods for claims (as a rule, 6 years) |
| Handling complaints and returns | Art. 6(1)(b) and (c) | until the procedure is completed, then until the expiry of limitation periods |
| Issuing and storing accounting documents | Art. 6(1)(c) (tax and accounting regulations) | 5 years from the end of the tax year |
| Responding to enquiries (contact form, e-mail, phone) | Art. 6(1)(f) (legitimate interest — handling correspondence) | until the correspondence is closed, no longer than 12 months after the last contact |
| Own marketing, statistics and traffic analytics (analytics and marketing cookies) | Art. 6(1)(a) (consent given via the cookie banner) | until consent is withdrawn or the cookies expire |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) | until the expiry of limitation periods |
Providing data is voluntary but necessary to place an order or receive a reply to an enquiry.
3. Recipients of Data
Personal data may be disclosed only to entities supporting the Controller in running the Store, to the extent necessary for the purposes listed in section 2:
- hosting and e-mail providers,
- courier companies and carriers,
- the accounting office,
- providers of the analytics and marketing tools listed in section 6 (only with the user’s consent),
- public authorities authorised under applicable law.
4. Transfers Outside the EEA
As a rule, data is processed within the European Economic Area. In connection with Google tools (Google Analytics, reCAPTCHA) and Meta (Facebook, Instagram), data may be transferred to the USA — on the basis of the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
5. Rights of Data Subjects
Every data subject has the right to:
- access their data and obtain a copy of it,
- rectification,
- erasure (“right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing based on legitimate interests (including direct marketing),
- withdraw consent at any time — without affecting the lawfulness of processing carried out before the withdrawal,
- lodge a complaint with a supervisory authority — in Poland: the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl; you may also contact the supervisory authority in your country of residence.
Requests should be sent to biuro@beeboxes.eu.
6. Cookies and Analytics Tools
- The Store uses cookies (small text files stored on the user’s device):
– essential — enable the Store to function (cart, checkout, language selection); their use does not require consent,
– analytics and marketing — used only after consent is given via the cookie banner displayed on the first visit. - Tools used with the user’s consent:
– Google Analytics 4 (Google Ireland Ltd.) — traffic statistics; the data is aggregated,
– Meta Pixel (Facebook) (Meta Platforms Ireland Ltd.) — measuring advertising effectiveness,
– Google reCAPTCHA — protecting forms against spam (necessary for security). - Consent may be withdrawn or adjusted at any time via the “Cookie settings” link in the Store’s footer and via browser settings (deleting/blocking cookies). Restricting essential cookies may impair the use of the Store.
- Cookie lifetimes: session cookies (until the browser is closed) and persistent cookies (from 1 day to 24 months, depending on the file — the full list is available in the consent panel).
7. Profiling and Automated Decision-making
The Controller does not make decisions based solely on automated processing that would produce legal effects for users. Analytics tools may create aggregate statistics and advertising audiences — only with the user’s consent.
8. Security
The Controller applies technical and organisational measures appropriate to the risk, including transmission encryption (SSL/TLS), access restrictions and regular software updates.
9. Changes to this Policy
This Policy may be updated, e.g. following changes in law or in the tools used. The current version, with its effective date, is always available at https://beeboxes.eu/polityka-prywatnosci/.
Information clause for the contact form (to be placed below the form)
The controller of the data provided in this form is AG Partner Adam Gawroński — Beeboxes, ul. Katowicka 47, 41-605 Świętochłowice, Poland. The data will be processed in order to respond to your enquiry (Art. 6(1)(f) GDPR). Details, including your rights, can be found in the Privacy Policy.