Privacy Policy

PRASKA.shop, Privacy Policy (United States)

1. Who is responsible for your data

1. The controller of personal data of users and customers of the PRASKA.shop online store at praska.shop (the Store) is Eco Cats Collection Sp. z o.o., ul. Ignacego Łukasiewicza 5, 43-502 Czechowice-Dziedzice, Poland, NIP: 6521747271, KRS: 0000848261 (we, us).
2. Contact for privacy matters: e-mail office@praska.shop, phone +48 514 003 790, or by mail to the address above.
3. We are a European Union company, and we process all personal data, including US customers' data, to the standard of the EU General Data Protection Regulation (GDPR), one of the strictest privacy laws in the world. For you, that means data minimization, defined purposes and retention periods, contractual safeguards with our service providers, and enforceable rights over your data by default.
4. Capitalized terms (Customer, Order, Account) have the meaning given in the Terms of Service.

2. What we use your data for

We process personal data for the following purposes:

1. Concluding and performing your contract: processing your Order and the sales contract, creating and running your Account, handling delivery and payment, and handling returns, refunds, and defect reports.
2. Complying with legal obligations: in particular tax and accounting duties under Polish and EU law (issuing and retaining invoices and accounting records).
3. Our legitimate interests: handling inquiries and correspondence (including the contact form and pre-sale questions), establishing, pursuing, or defending legal claims, internal analytics and statistics used to improve the Store, and keeping the Store secure (including server logs).
4. Your consent: sending our newsletter (including discount information, such as a sign-up discount), other marketing that requires consent, and non-essential cookies (analytics, marketing). You can withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

3. What data we collect

We process the data you provide in the Store's forms: name, e-mail address, phone number, delivery address, billing/residence address (if different), and, for business customers, company name and tax ID; plus data about your Orders and payments, and, automatically, technical data related to your use of the Store (IP address, device and browser data, server logs, cookie data, see Section 9).

4. Providing data is voluntary

Providing personal data is voluntary, but data marked as required is necessary to place an Order, conclude a sales contract, or create an Account, without it, we cannot do those things. Providing data for marketing purposes (such as the newsletter) is always entirely optional.

5. Who we share data with

Personal data may be shared with the following categories of recipients, only to the extent necessary for the given purpose:

1. Store platform and hosting provider: the Store runs on the Shoper e-commerce platform (SaaS), and the Store's data is kept on the platform provider's servers: Shoper S.A., ul. Pawia 9, 31-154 Kraków, Poland, Polish commercial register (KRS): 0000395171, Tax ID (NIP): 9452156998.
2. Payment processors: your data goes only to the processor you choose for a given transaction; the processors currently available for your delivery country are shown at checkout. For orders shipped outside Poland these are:
   • a. Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (payment cards, Apple Pay, Google Pay);
   • b. PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
3. Carriers and postal/courier operators delivering your Order, the ones you select from the delivery methods available at checkout.
4. Providers of accounting and tax services to us: to the extent necessary to fulfill our accounting obligations.
5. Analytics and marketing tool providers: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), Google Analytics; Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland), Facebook/Instagram tools. These tools run only with your consent (see Section 9).
6. Public authorities: only where the law obliges us to disclose data.

Entities processing data on our behalf act under data-processing agreements (Article 28 GDPR) and may not use the data for their own purposes.

We do not sell your personal data, and we do not share it with third parties for cross-context behavioral advertising, within the meaning of the California Consumer Privacy Act (CCPA/CPRA).

6. Where your data is processed, international transfer

Because we are based in Poland, personal data you provide when ordering is transferred to and processed in the European Economic Area (EEA), where it is protected by the GDPR, a legal framework providing safeguards at least equivalent to, and in most respects stronger than, US state privacy laws. In connection with the Google and Meta tools (Section 5.5), certain data (in particular cookie data) may also be processed in the United States by Google and Meta group companies; within the GDPR framework those transfers rely on the EU-US Data Privacy Framework (for certified entities) or standard contractual clauses approved by the European Commission. You can obtain a copy of the applicable safeguards by contacting us. Data is also transferred where necessary to perform your contract, for example, passing your delivery address to a carrier shipping to the US.

7. How long we keep data

1. Data connected with concluded contracts (Orders, returns, defect reports, correspondence), for the duration of the contract and then until the expiry of limitation periods for contract claims.
2. Data in accounting and tax records (invoices), for 5 years from the end of the calendar year in which the relevant tax was due (a Polish tax-law requirement).
3. Data processed on the basis of consent (newsletter, marketing, non-essential cookies), until you withdraw consent; permanently deleting your Account also counts as withdrawing consent to Account-related processing.
4. Data processed on the basis of our legitimate interest, until you raise an effective objection or the interest ceases (for claims, until limitation periods expire).
5. Account data, for as long as the Account exists; after deletion, Order-related data is kept only to the extent and for the periods in points 1–2.

8. Your rights

1. We grant every customer, including every US customer, the following rights over their data: voluntarily where no law requires it, because GDPR-standard processing is how we operate: the right to access your data (and get a copy), to correct it, to delete it, to restrict its processing, to receive it in a portable format, to object to processing based on our legitimate interest, including an objection to direct marketing, which we always honor, and to withdraw consent at any time (without affecting prior processing). As stated in Section 5, we do not sell or share your personal data, so there is nothing to opt out of in that respect, but if that ever changed, we would provide an opt-out first.
2. How to exercise your rights: e-mail office@praska.shop or write to our registered address. We respond without undue delay, at the latest within one month (extendable by two further months for complex requests, in which case we will tell you). We do not discriminate against you for exercising any of these rights.
3. California and other US state privacy laws: based on our size and the volume of our US sales, we do not currently meet the thresholds that make the CCPA/CPRA (or similar state privacy laws) applicable to us. We nevertheless honor the practical substance of those laws for all US customers as described in point 1.
4. Our lead data-protection supervisory authority as an EU controller is the President of the Polish Personal Data Protection Office (Prezes UODO, uodo.gov.pl). If you are a US customer and have a privacy concern, the fastest route is to contact us directly at office@praska.shop, we take these requests seriously and resolve them ourselves.
5. We do not make decisions about you based solely on automated processing, including profiling, that would produce legal or similarly significant effects. Analytics and marketing tools (Section 9) may use data about your activity in the Store for statistics and content personalization, only with your consent.

9. Cookies and similar technologies

1. The Store uses cookies, small text files stored on your device. We use:
   • a. essential cookies: enabling core Store functions (session, cart, login, security); these require no consent;
   • b. functional cookies: remembering your settings;
   • c. analytics cookies: usage statistics (Google Analytics, Google Ireland Limited);
   • d. marketing cookies: ad personalization (Meta Platforms Ireland Limited tools).
2. Cookies other than essential ones (analytics, marketing, and functional cookies beyond what is necessary) are used only with your consent, given via the consent banner shown on your first visit. You can withdraw or change your consent at any time in the consent settings available in the Store. We apply this consent-first approach to all visitors, including US visitors, even where US law does not require it.
3. Independently, you can manage cookies in your browser settings (Chrome, Firefox, Safari, Edge, Opera and others), including blocking and deleting them. Restricting essential cookies may make some Store functions, including ordering, difficult or impossible to use.
4. Server-level logs of user activity may be kept; they are used solely to administer and secure the Store.

10. Newsletter

Subscribing to the newsletter is voluntary and requires your e-mail address and consent to receive commercial communications. You can unsubscribe at any time, via the unsubscribe link in every message or by e-mailing office@praska.shop; your data will then be removed from the newsletter mailing list.

11. Data security

We apply technical and organizational measures appropriate to the risk, including encryption of data in transit (SSL/TLS), access controls, and data-processing agreements with our processors, to protect data against unauthorized access, loss, or destruction.

12. Changes to this Privacy Policy

We may update this Privacy Policy, in particular when laws, the tools we use, or data recipients change. The new version is published in the Store with a notice of the change and its effective date; Account holders and newsletter subscribers will additionally be notified of significant changes by e-mail with reasonable advance notice. Changes do not reduce rights you have already acquired and do not retroactively change the basis on which previously collected data was processed.

Questions about this Privacy Policy: office@praska.shop.