Privacy Policy

1. Data controller

The controller of your personal data is Kohls RCM · Paweł Kohls, Kohls RCM · Paweł Kohls, ul. Lechicka 59, 61-695 Poznań, Poland, VAT ID PL5542524133. Contact for any privacy matter: [email protected].

2. Purposes and legal bases

• performing the sales contract — orders, payments, delivery, returns (Art. 6(1)(b) GDPR);
• legal obligations, e.g. tax and accounting (Art. 6(1)(c) GDPR);
• handling complaints, inquiries and exercising/defending claims — our legitimate interest (Art. 6(1)(f) GDPR);
• newsletter and marketing — only with your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time;
• running your optional account and order history (Art. 6(1)(b)/(f) GDPR);
• analytics and audience measurement — only with your cookie consent (Art. 6(1)(a) GDPR).

3. Is providing data required?

Providing data is voluntary, but the data needed to conclude and perform the contract (e.g. name, address, email) is necessary to place an order — without it we cannot process your purchase.

4. Recipients

We share data only as needed to run the store: carriers and fulfilment brokers (e.g. Apaczka, GlobKurier and the chosen courier); payment providers; hosting, IT and email/newsletter providers; our accountant; and — subject to your consent — analytics/advertising tools. These act as processors under data-processing agreements or as independent controllers where required by law.

5. Transfers outside the EEA

Some providers may process data outside the European Economic Area (e.g. the USA). Such transfers rely on appropriate safeguards — primarily the European Commission's Standard Contractual Clauses and/or adequacy decisions. You may request a copy of the safeguards by writing to [email protected].

6. Retention

Order and accounting data: for the period required by tax law (in Poland, 5 years from the end of the relevant year). Account data: until you delete the account. Data processed on consent: until consent is withdrawn. Data for claims: until claims are time-barred. Afterwards data is deleted or anonymised.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

8. Cookies & profiling

The site uses cookies and similar technologies: strictly necessary ones for the site to work, and — only after your consent — analytics and marketing cookies. You manage consent via the cookie banner and your browser settings. We do not take decisions that produce legal effects on you based solely on automated processing.

9. Contact

For any request regarding your data, write to [email protected].