PRIVACY AND COOKIES POLICY

CARPETMAN PRIVACY AND COOKIES POLICY

1. Who manages your data?

The Data Controller of your personal data is: PMCORP Sp. z o.o., ul. Ksawerów 21, 02-656 Warsaw, Poland, NIP: 5214055745, REGON: 527609440. For any privacy-related matters, feel free to write to us at: kontakt@merchismore.pl.

2. Why and on what basis do we process your data?

Your data is safe with us. We process it to:

Fulfill your order: (Art. 6(1)(b) GDPR) – we need to know where to ship the product and how to contact you.
Comply with legal formalities: (Art. 6(1)(c) GDPR) – we issue invoices and settle taxes.
Send the Newsletter: (Art. 6(1)(a) GDPR) – only if you subscribe to it yourself.
Improve the store and ensure security: (Art. 6(1)(f) GDPR) – this is our legitimate interest (analytics and protection against claims).
Display advertisements: (Art. 6(1)(a) GDPR) – only if you consent to marketing cookies.

3. To whom do we transfer the data?

We entrust your data only to trusted partners:

Shopify International Ltd.: This is our sales platform. Shopify processes your data on our behalf as a processor, based on a Data Processing Agreement (DPA).
Couriers and Payments: Entities such as DHL, UPS, DPD, Stripe, or PayPal receive the data necessary for delivery or payment settlement.
Independent Controllers: Meta (Facebook/Instagram) and Google may process your data as separate controllers for their own purposes (e.g., ad analytics), in accordance with their own privacy policies.

4. Data transfers outside Europe (EEA)

We use tools from Shopify, Google, and Meta, which means your data may be transferred to the USA or Canada. We do this securely, relying on:

European Commission Decisions: (e.g., the Data Privacy Framework).
Standard Contractual Clauses (SCCs): which guarantee a high level of protection.

5. How long do we store the data?

We do not keep data indefinitely. We store it for the period:

Necessary to fulfill the order and until the expiration of claims resulting from the contract (in accordance with legal regulations).
Required by tax regulations (invoices – 5 years from the end of the tax year).
Until you withdraw your consent (in the case of marketing).

6. Your rights (You are in control of your data)

You have the right to: access your data, rectify it, erase it, restrict its processing, as well as the right to object.

If you have given consent (e.g., for cookies or the newsletter), you can withdraw it at any time – in a way that is as simple as giving it.
You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

7. Cookies

Our store uses cookies to function correctly and to help us with marketing.

Consent for optional cookies (analytics/advertising) is collected via a special banner during your first visit.
You can manage your settings at any time directly in your browser or through the banner on the website.