Privacy policy
Last updated: 14 July 2026
This Privacy Policy explains how Sekunda w Kuchni Justyna Sekunda, operating an online store, processes and protects personal data of customers and visitors of the website.
This Privacy Policy has been prepared in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and applicable data protection laws.
1. Data Controller
The controller of your personal data is:
Sekunda w Kuchni Justyna Sekunda
Address: Ul. Bysławska 10D/1, 04-993 Warsaw, Poland
Tax Identification Number (NIP): 6662032226
Email: info@justynasekunda.com
The Controller determines the purposes and means of processing personal data.
For all matters related to personal data protection, you can contact the Controller at:
Email: info@justynasekunda.com
The Controller has not appointed a Data Protection Officer (DPO). All privacy-related inquiries should be directed to the contact details above.
2. Personal Data We Process
Depending on how you use our online store, we may process the following personal data:
When placing an order:
-
first and last name,
-
email address,
-
telephone number (if provided),
-
delivery address,
-
billing address (if different from delivery address),
-
information regarding the order,
-
payment method information.
We do not store complete payment card details. Payment transactions are processed by external payment service providers.
When contacting us:
If you contact us through the contact form, we may process:
-
your name (if provided),
-
email address,
-
any information included in your message.
Technical data:
When you visit our website, certain technical information may be processed automatically, such as information necessary for the proper operation and security of the website.
3. Purposes and Legal Bases for Processing Personal Data
Your personal data may be processed for the following purposes:
Processing and fulfilling orders
Purpose:
-
accepting and processing purchases,
-
preparing and delivering orders,
-
handling payments,
-
communicating regarding your order.
Legal basis:
-
Article 6(1)(b) GDPR – processing necessary for the performance of a contract.
Compliance with legal obligations
Purpose:
-
issuing and storing accounting documentation,
-
fulfilling tax and accounting obligations.
Legal basis:
-
Article 6(1)(c) GDPR – compliance with a legal obligation.
Customer communication
Purpose:
-
responding to inquiries sent through the contact form,
-
providing information related to orders.
Legal basis:
-
Article 6(1)(f) GDPR – legitimate interest of the Controller in communicating with customers and responding to requests.
Website operation and security
Purpose:
-
ensuring proper functioning of the online store,
-
maintaining website security,
-
preventing misuse.
Legal basis:
-
Article 6(1)(f) GDPR – legitimate interest of the Controller.
4. Recipients of Personal Data
Your personal data may be shared with trusted third parties only when necessary to provide services or fulfil legal obligations.
Recipients may include:
Shopify
Our online store operates using the Shopify platform. Shopify provides the infrastructure necessary for operating the online store, including order processing and website functionality.
Payment service providers
Payment information may be processed by payment providers used within Shopify Payments, including payment methods such as:
-
BLIK,
-
payment cards,
-
Apple Pay,
-
Google Pay.
Payment providers process payment data according to their own privacy policies and security standards.
Delivery and logistics providers
To deliver your orders, we may provide necessary information to delivery companies, including:
-
InPost,
-
other courier or delivery service providers selected for order fulfilment.
The information provided may include your name, delivery address, telephone number, and other information necessary for successful delivery.
Service providers supporting the operation of the store
We may use third-party services and Shopify applications necessary for store operation, including:
-
InPost Paczkomaty integration,
-
Shopify applications supporting store functionality,
-
translation and language adaptation tools.
Only information necessary for the specific purpose is shared.
5. International Data Transfers
Some service providers used by the Controller, including Shopify and related technology providers, may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, such transfers are carried out in accordance with GDPR requirements, including appropriate safeguards such as Standard Contractual Clauses approved by the European Commission where applicable.
6. Data Retention Period
Personal data is stored only for as long as necessary for the purposes for which it was collected.
In particular:
-
order-related data is stored for the period required by applicable accounting and tax regulations;
-
communication data is stored for as long as necessary to handle the inquiry and for the period needed to protect against potential claims;
-
technical data is stored only for the period necessary to ensure website operation and security.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
-
the right to access your personal data;
-
the right to correct inaccurate or incomplete data;
-
the right to request deletion of your personal data where legally possible;
-
the right to request restriction of processing;
-
the right to object to processing based on legitimate interests;
-
the right to data portability where applicable;
-
the right to withdraw consent where processing is based on consent.
To exercise your rights, contact:
You also have the right to lodge a complaint with the competent supervisory authority, in particular the supervisory authority in the country where you reside or where an alleged GDPR infringement occurred.
For Poland, the supervisory authority is:
President of the Personal Data Protection Office (UODO)
8. Cookies
Our website uses cookies and similar technologies necessary for the proper operation of the online store.
Cookies may be used to:
-
maintain essential website functionality,
-
ensure security,
-
remember necessary technical settings.
At this time, we do not use cookies for personalised advertising or behavioural tracking.
If additional analytics, marketing tools, or advertising technologies are introduced in the future, this Privacy Policy and cookie information will be updated accordingly.
9. Account Registration
Currently, our store does not provide customer account registration functionality.
If customer accounts or additional features requiring the processing of additional personal data are introduced in the future, this Privacy Policy will be updated before such functionality becomes available.
10. Automated Decision-Making and Profiling
We do not use automated decision-making processes that produce legal effects or similarly significant effects concerning customers.
We do not currently perform customer profiling.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, for example when:
-
legal requirements change,
-
new services or functionalities are introduced,
-
the way we process personal data changes.
The current version will always be available on our website.
12. Contact
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Sekunda w Kuchni Justyna Sekunda
Email: info@justynasekunda.com
Address: Ul. Bysławska 10D/1, 04-993 Warsaw, Poland