Data controller
The controller of personal data is Jacek Jenczelewski, trading as Subverix Jacek Jenczelewski, with its fixed place of business and address for service at Radańska 5, 86-150, Osie municipality, Poland, tax number (NIP): 8481144773, business register number (REGON): 340750002. Privacy contact: biuro@subverix.com.
Data we process
Depending on the function used, we may process identity and contact details, company and delivery information, message content, order, payment and complaint information, and basic technical data required for service security.
Purposes and legal bases
- handling enquiries and forms — consent or legitimate interest in conducting correspondence,
- accepting and fulfilling orders — steps prior to and performance of a contract,
- settlements and legal duties — compliance with a legal obligation,
- complaints and legal claims — legal obligation or legitimate interest,
- protecting forms against spam and abuse — the controller’s legitimate interest,
- optional website analytics — your consent, which may be withdrawn at any time.
Recipients and transfers
Data may be entrusted to hosting, email, IT, payment, accounting and delivery providers only to the extent necessary to provide the service. If a provider processes data outside the EEA, the controller applies the safeguards required by the GDPR, including an adequacy decision or standard contractual clauses, where applicable.
Retention periods
Correspondence data is retained as long as needed to handle the matter and protect legal claims. Order and settlement data is retained for periods required by tax, accounting and liability law. Consent-based data is retained until consent is withdrawn unless another legal basis applies.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability, object to processing and withdraw consent. You may also lodge a complaint with the President of the Polish Personal Data Protection Office.
Cookies, analytics and browser storage
The service uses necessary browser storage to remember the cart, language, navigation position and cookie choice. These mechanisms are required for functions expressly requested by the user. Only after your consent, Cloudflare Web Analytics and PostHog Cloud EU measure visits, page views, navigation, traffic sources, browser and device type, website performance and approximate location derived from the network connection. PostHog assigns a pseudonymous visitor identifier. Customer names, email addresses, product names, order numbers, delivery addresses, telephone numbers, notes and form content are not sent to PostHog, and session recording is disabled. You can withdraw or change your choice at any time using “Cookie settings” at the bottom of the page. Location may be approximate, especially when using mobile networks or a VPN.
Voluntary provision of data
Providing data is voluntary, but fields marked as required are necessary to handle a form, order or response. Do not submit medical data or other special categories of personal data through the forms.
Verified customer reviews
To register a review account, we match the email address and order number with an order in our records and send a one-time verification code. We store an account identifier, session identifier, purchased-product eligibility and the submitted public name, rating and review. Email addresses and order numbers are never displayed with a review. A necessary, secure session cookie keeps the reviewer signed in for up to 30 days. Reviews are processed to operate a trustworthy customer-review system, prevent abuse and present customer experience.
Customer accounts and order history
A customer may create or access an account using a one-time code sent to the provided email address. We store the account identifier, optional name, email, role, secure session identifier and sign-in timestamps. Orders made with the same verified email address are shown in the account history. A necessary HttpOnly session cookie keeps the customer signed in for up to 30 days. Account data is used to provide the requested account, order history and abuse protection; it is not shared with other customers.
Google Customer Reviews
After an order is submitted, the Google Customer Reviews opt-in module may be displayed. To operate the programme, the order number, customer email address, delivery country and estimated delivery date are transmitted to Google. If the customer voluntarily opts in, Google may send one survey email after the estimated delivery date. Google may use cookies, web beacons or similar technologies in connection with this service. Details, including options for managing cookies and personal data, are set out in Google’s privacy policy. Participation in the survey is voluntary and does not affect order handling.