Privacy policy

The controller of your personal data is Jakub Wolak trapcode, ul. Dworskie Ogrody 1/5, 35-214 Rzeszów, Poland, tax ID (NIP) 8133932416.

For anything related to personal data, write to kontakt@peg-works.com.

The controller has not appointed a data protection officer.

• –Order data: name, delivery address, email address, phone number and, optionally, a company VAT ID or Polish NIP for the invoice.
• –Contact form data: name, email address and the content of the message.
• –Email address from the back-in-stock notification form.
• –Payment data limited to the transaction identifier and amount. We do not receive or store your card number, the payment operator handles it.
• –Anonymised visit statistics, without cookies and without identifying you.

• –Concluding and performing the sales contract, Article 6(1)(b) GDPR.
• –Issuing and keeping accounting documents, Article 6(1)(c) GDPR.
• –Handling complaints and returns, and establishing and defending claims, Article 6(1)(f) GDPR.
• –Replying to a message from the contact form, Article 6(1)(f) GDPR.
• –Back-in-stock notification, Article 6(1)(a) GDPR, based on consent.
• –Visit statistics without cookies, Article 6(1)(f) GDPR.

We share data with providers who run the technical and logistics side of the shop.

• –Stripe Payments Europe, Limited, payment processing.
• –InPost Spółka Akcyjna, delivery within Poland.
• –DPD Polska sp. z o.o. and Poczta Polska S.A., delivery to other EU countries, together with their delivery partners in the recipient’s country.
• –Klarna Bank AB (publ), if you choose to pay with Klarna.
• –Resend, sending emails.
• –Vercel, website hosting.
• –Neon, order database, instance located in the European Union.
• –Plausible Analytics, visit statistics without cookies.
• –An accounting office, bookkeeping and tax settlements.

Data may be transferred to the United States, where Vercel, Resend, Neon and companies of the Stripe group are based.

Such transfers are based on the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, to the extent the recipient is certified under it, and otherwise on standard contractual clauses approved by the European Commission and included in the data processing agreements with these providers.

• –Order data and accounting documents: 5 years from the end of the calendar year in which the tax payment deadline passed.
• –Data needed to defend against claims: until the limitation period expires.
• –Messages from the contact form: 3 years from the last message in the matter.
• –Email address from the back-in-stock notification: until the notification is sent or consent is withdrawn.

• –Access to your data and a copy of it.
• –Rectification of inaccurate data and completion of incomplete data.
• –Erasure of data if we no longer have a basis to process it.
• –Restriction of processing.
• –Portability of data processed on the basis of a contract or consent.
• –Objection to processing based on legitimate interest.
• –Withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.

You may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, or with the supervisory authority in the EU member state where you live or work.

• –The payment operator sets its own cookies on its page during payment.

The Shop does not set cookies of its own. Visit statistics work without cookies and without profiling, so they do not require consent.

Providing data is voluntary, but without delivery and contact details we cannot fulfil the order.

We update this policy when the way we process data or the list of providers changes. The current version is always available on this page.