Privacy Policy

Privacy Policy

Effective Date: March 19, 2026
Data Controller: DEWO GROUP Małgorzata Bałdyga - Słonina
Address: Cicha 2, 83-050 Lublewo Gdańskie, Poland
NIP: PL5792204777 | REGON: 220876408
Email: office@bestcatholicshop.com

1. Data Controller

The controller of your personal data is DEWO GROUP Małgorzata Bałdyga - Słonina, a legally registered business in Poland. We are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Polish law.

2. Data We Collect

We collect personal data necessary to process your order:

  • Identity data: Name and surname
  • Contact data: Email address, phone number (optional)
  • Delivery data: Shipping address, billing address
  • Transaction data: Order history, payment information (processed securely by PayPal and Stripe — we do not store card details)
  • Technical data: IP address, browser type, device information

3. Purpose of Processing

Your data is processed for:

  • Order fulfillment and delivery
  • Communication regarding your order (order confirmations, shipping updates)
  • Legal and tax documentation (invoices, customs declarations)
  • Customer service and support
  • Marketing communications (only with your explicit consent)
  • Website security and fraud prevention

4. Legal Basis for Processing

Processing is based on:

  • Contract performance (Art. 6(1)(b) GDPR) — to fulfill your order
  • Legal obligations (Art. 6(1)(c) GDPR) — tax records, customs
  • Legitimate interests (Art. 6(1)(f) GDPR) — security, fraud prevention
  • Your consent (Art. 6(1)(a) GDPR) — marketing communications

5. Data Retention

Personal data is retained for:

  • Order data: Duration of contract + 5 years (tax requirements)
  • Marketing data: Until consent withdrawal
  • Technical data: 2 years maximum

6. Your Rights Under GDPR

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit processing of your data
  • Portability: Receive your data in a structured format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Withdraw marketing consent at any time
  • Complaint: Lodge a complaint with a supervisory authority (in Poland: UODO — Urząd Ochrony Danych Osobowych)

To exercise these rights, contact us at office@bestcatholicshop.com.

7. Data Sharing and Recipients

We share your data only with:

  • Shipping carriers: FedEx, DHL, UPS, Polish Post — for delivery
  • Payment processors: PayPal, Stripe — for payment processing
  • Legal authorities: When required by law (tax, customs)

We do not sell your personal data to third parties.

8. International Data Transfers

For orders outside the EU/EEA, your data may be transferred to:

  • Shipping carriers (FedEx, DHL, UPS) — under Standard Contractual Clauses
  • Payment processors (PayPal, Stripe) — under EU-US Data Privacy Framework or SCCs

All transfers comply with GDPR Chapter V requirements.

9. Cookies

We use cookies to improve your experience. Cookies are small files stored on your device.

Types of Cookies We Use:

  • Essential cookies: Required for website functionality (session, cart, checkout)
  • Preference cookies: Remember your settings (language, currency)
  • Analytics cookies: Help us understand how visitors use our site (anonymous)

Managing Cookies:

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

10. Data Security

We implement appropriate technical and organizational measures:

  • SSL/TLS encryption for all data transmission
  • Secure servers with access controls
  • Regular security assessments
  • Staff training on data protection

11. Digital Services Act (DSA) Compliance

In accordance with EU Regulation 2022/2065 (Digital Services Act), we provide:

  • Transparent terms and conditions
  • Clear information about our identity and contact details
  • Accessible complaint-handling mechanisms
  • Information about how we process your data

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. Continued use of our website after changes constitutes acceptance.

13. Contact

For privacy inquiries, data requests, or to withdraw consent:

Email: office@bestcatholicshop.com
Address: Cicha 2, 83-050 Lublewo Gdańskie, Poland

Polish Data Protection Authority (UODO): uodo.gov.pl