Privacy policy
Last updated: February 4, 2026
1. Data Controller
The controller of personal data within the meaning of Regulation (EU) 2016/679
of the European Parliament and of the Council of 27 April 2016
(General Data Protection Regulation – GDPR) is:
Trade name: Dessert Boutique Vladyslav Mykolaichuk
Tax ID (NIP): 8952252693
Registered address: ul. Św. Mikołaja 43/1, 50-136 Wrocław, Poland
Phone number: +48 517 605 917
E-mail address: dessertboutique.wroclaw@gmail.com
The Data Controller is responsible for ensuring that personal data are processed in compliance with applicable laws.
2. Scope of This Privacy Policy
This Privacy Policy defines the rules for processing personal data of users of the online store Dessert Boutique, available at https://dessertboutique.pl, including in particular:
- customers of the store,
- users visiting the website,
- persons contacting the Data Controller by e-mail or phone.
3. Types of Personal Data Processed
The Data Controller may process the following categories of personal data:
3.1 Identification and contact data
- first and last name,
- residential or delivery address,
- e-mail address,
- phone number.
3.2 Transaction data
- order details,
- payment information,
- purchase history,
- invoicing data.
3.3 Technical data
- IP address,
- browser and device data,
- cookies,
- statistical data related to website usage.
The Data Controller does not store payment card details – such data are processed exclusively by payment service providers.
4. Sources of Personal Data
Personal data are obtained:
- directly from the user (e.g. when placing an order or contacting the store),
- automatically when using the website (cookies, technical data),
- from entities involved in service delivery (e.g. payment providers, courier companies).
5. Purposes and Legal Bases of Processing
Personal data are processed for the following purposes:
5.1 Performance of a contract
based on Article 6(1)(b) GDPR:
- order handling,
- payment processing,
- product delivery,
- handling complaints and returns.
5.2 Compliance with legal obligations
based on Article 6(1)(c) GDPR:
- accounting and tax obligations,
- obligations arising from applicable laws.
5.3 Legitimate interests of the Data Controller
based on Article 6(1)(f) GDPR:
- ensuring website security,
- preventing fraud and abuse,
- communication with customers,
- improving service quality.
5.4 User consent
based on Article 6(1)(a) GDPR:
- marketing activities,
- sending commercial information (if applicable).
6. Recipients of Personal Data
Personal data may be transferred to the following entities:
- payment service providers (e.g. Przelewy24),
- courier and delivery companies,
- accounting and IT service providers,
- Shopify, the e-commerce platform on which the store operates.
Personal data are not sold or shared with third parties for marketing purposes without user consent.
7. Transfer of Data Outside the EU
Due to the use of Shopify infrastructure, personal data may be transferred outside the European Economic Area (EEA).
Such transfers are carried out in accordance with the GDPR, based on standard contractual clauses approved by the European Commission.
8. Data Retention Period
Personal data are stored for the period:
- necessary to perform the contract,
- required by tax and accounting regulations,
- until consent is withdrawn — in the case of data processed on the basis of consent.
9. User Rights
Users have the right to:
- access their personal data,
- rectify inaccurate data,
- erase personal data (“right to be forgotten”),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time,
- lodge a complaint with the supervisory authority
(President of the Personal Data Protection Office in Poland – Prezes UODO).
10. Cookies
The store uses cookies to:
- ensure proper operation of the website,
- collect statistical data,
- improve service quality.
Users may manage cookie settings via their web browser.
11. Data Security
The Data Controller applies appropriate technical and organizational measures to protect personal data against loss, unauthorized access, disclosure or unlawful processing.
12. Changes to the Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy.
Changes take effect upon publication on the store’s website.
13. Contact
For matters related to personal data protection, please contact:
📧 dessertboutique.wroclaw@gmail.com
📞 +48 514 980 147
📍 ul. Św. Mikołaja 43/1, 50-136 Wrocław, Poland