In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), DAJAR protects the personal data of customers obtained in the course of the Store’s operations.
In our Privacy Policy, we inform the Customer about:
- Who is the controller of personal data
- What data is processed
- For what purpose and on what legal basis the data is processed
- How long the data will be stored
- What rights our customers have as data subjects
- Who do we share data with
1. Personal Data Controller
The controller of personal data is DAJAR Sp. z o.o., with its registered office at 6 Połtawska Street, 75-072 Koszalin, Poland. The designated contact for the Data Protection Officer is [email protected]. This is the person you can contact in all matters related to the processing of personal data and the exercise of rights associated with such processing.
2. What data is processed
We process the personal data provided by customers during the account registration process in the online store or when placing an order. This includes first name, last name, address, delivery address, phone number, and email address. We also process:
- Data collected during activity on the website through Google Tag Manager, Google Analytics, Google Ads and Meta Pixel.
- Data related to the product review process (in the case of consent): information about the purchased product, date of purchase, and the content of the opinion.
3. For what purpose and on what basis the data is processed
- Order fulfillment: The data entrusted to us when placing an order may be processed for the purpose of fulfilling that order (Article 6(1)(b) of the GDPR); no customer consent is required for such processing.
- Own marketing: Such data may also be used for the marketing and promotion of our own goods and services (Article 6(1)(f) of the GDPR).
- Newsletter and registration: The data of customers who registered but did not place an order, as well as those who subscribed to our newsletter, are processed based on consent (Article 6(1)(a) of the GDPR). Consent for data processing may be withdrawn at any time.
- Product review system: Based on the client's explicit consent (Art. 6(1)(a) GDPR), expressed by clicking the appropriate checkbox, we use the email address to send a request and a reminder to issue an opinion about the purchased product. The possibility of rating is limited in time to six months from the date of purchase. An opinion can be issued via the link in the email or in the "Orders" section of the client's account.
4. How long data will be stored
We process data as long as there is a legal basis for processing. In the case of consent, this lasts until the Customer withdraws consent. For data necessary to fulfill a contract (sales transaction), this is the period required by state authorities for keeping accounting records. If the processing is based on the legitimate interest of the controller, it continues until an objection is raised.
5. What rights our Clients have
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), each of our Customers has the right to:
- Access their personal data
- Request correction of data
- Request deletion of data
- Request restriction of processing
- Data portability
- Object to processing
- Lodge a complaint with a supervisory authority if the processing of personal data violates the law
6. To whom we share data
Data may be shared with other entities for the following purposes:
- To carry out the purchase process (courier companies operating under postal law and other entities involved in order fulfillment, with which DAJAR has concluded appropriate data processing agreements)
- To process payments via the payment operator (Adyen NV)
- To analyze website traffic (Google Ireland Limited)
- To optimize and personalize advertisements (Google Ireland Limited, Meta Platforms Ireland Limited)
- For technical provision of the rating tool; we cooperate with the service provider Yotpo, Inc. (USA); we transfer the first name, last name, email address, and information about the rated product to them to enable verification of the opinion
Data transfer to the USA: Data transfer to Yotpo in the USA is based on the EU-USA Data Privacy Framework, under which Yotpo is certified, and supplementarily on standard EU contractual clauses. This guarantees an appropriate level of data protection. More information: yotpo.com/privacy-policy/.
Publication of opinions: Opinions in the store are published with the first name and the first letter of the last name (or a nickname) to protect privacy.
Last updated: 2025-11-18
