1. Data Controller
The Data Controller is: KAMANO KACPER NOWOSIELSKI Aleja Powstańców Wielkopolskich 80/1 Poland Tax ID (NIP): 9552557834 Email: kmnowosielski@gmail.com Phone: +48 726 824 625 hereinafter referred to as the “Controller”.
2. Data We Process
Depending on how the Website is used, we may process in particular:
- first and last name,
- email address,
- phone number,
- billing details,
- Order details,
- the name of the purchased Domain,
- information required for the Domain Transfer,
- payment information provided by the payment operator,
- IP address,
- technical browser and device data,
- server logs,
- the content of correspondence with the Seller.
The Controller does not store full payment card details.
3. Purposes and Legal Bases
Personal data may be processed for the purpose of:
concluding and performing the Domain sale/Transfer agreement – under Article 6(1)(b) GDPR;
processing payment and the Order – to the extent necessary to perform the agreement;
complying with accounting, tax and other legal obligations – Article 6(1)(c) GDPR;
conducting correspondence and handling enquiries – depending on the circumstances, under Article 6(1)(b) or (f) GDPR;
establishing, pursuing or defending claims – Article 6(1)(f) GDPR;
ensuring Website security, preventing abuse and diagnosing errors – Article 6(1)(f) GDPR.
4. Recipients of Data
Data may be disclosed to entities providing services necessary for the Website to operate, in particular:
- the Stripe payment operator,
- hosting and IT infrastructure providers,
- database providers,
- email service providers,
- accountants or legal advisers where necessary,
- domain registrars and registry operators to the extent necessary to complete a Transfer.
Depending on the relevant process, Stripe may act both as a processor acting on the Seller's instructions and as an independent controller for its own obligations, including those relating to security, fraud prevention or regulatory requirements.
5. Stripe Payments
Payments on the Website are processed using Stripe.
Information necessary to make a payment is provided directly to Stripe in accordance with the rules of that service.
The Controller does not receive or store full payment card numbers.
6. Data Retention
Data connected with an agreement and Order will be retained for the period necessary to perform the agreement and subsequently for the periods arising from tax and accounting regulations and limitation periods for claims.
Correspondence data will be retained for the period necessary to handle the matter and subsequently, where justified, until any potential claims become time-barred.
Technical logs may be retained for the period necessary to ensure the security and proper operation of the Website.
7. Data Subject Rights
Subject to the rules set out in the GDPR, a data subject may have the right to:
- access their data,
- rectify their data,
- erase their data,
- restrict processing,
- data portability,
- object to processing based on legitimate interests,
- withdraw consent where processing is based on consent,
- lodge a complaint with the President of the Personal Data Protection Office in Poland.
Requests may be sent to: kmnowosielski@gmail.com
8. Transfers Outside the EEA
Some service providers used by the Controller may also process data outside the European Economic Area.
In such cases, mechanisms provided for under the GDPR are used, in particular relevant European Commission adequacy decisions or standard contractual clauses, where applicable.
9. Cookies and Technical Data
The Website may use cookies necessary for:
- the proper operation of the Website,
- security,
- session handling,
- the purchase process.
Google Analytics 4 cookies are optional and are set only after analytics consent is given. Refusal does not restrict the Website, catalogue or purchase process.
10. Analytics
The Website uses Google Analytics 4 only after the user gives analytics consent. The tool measures traffic, visit sources and interactions with public pages and the purchase journey.
The user may refuse consent or change it later using the “Cookie settings” link in the footer. After consent is withdrawn, no further analytics events are sent and available Google Analytics cookies are removed.
Google may process technical browser and device data and Website usage data under the terms and privacy rules of its services. We do not send names, email addresses, phone numbers, Domain Transfer data, Stripe session identifiers or full payment card details to Google Analytics.
11. Voluntary Provision of Data
Providing data is voluntary; however, failure to provide data necessary to fulfil an Order or Transfer may make it impossible to perform the agreement.
12. Security
The Controller applies appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure.
13. Changes to the Privacy Policy
This Policy may be updated following changes in law, the scope of data processing or Website functionality.
The current version is published on the Website.