1. Data Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

AntOnTop
Chrząstawska 21
51-522 Wrocław
Poland

Email: [email protected]
Phone: +48 796 220 541

Company details:
NIP: 8952221712
REGON: 387056064

2. General Information on Data Processing

We take the protection of your personal data very seriously.
Personal data is processed exclusively in accordance with the applicable provisions of the GDPR and relevant national data protection laws.

Personal data means any information relating to an identified or identifiable natural person.

3. Data Collection When Visiting the Website

3.1 Server Log Files

When you visit our website, information is automatically collected by our system and stored in so-called server log files. This information includes:

IP address
date and time of the request
name and URL of the accessed file
referring URL
browser type and operating system

Purpose of processing:
Ensuring the proper operation of the website, system security, and error analysis.

Legal basis:
Article 6(1)(f) GDPR (legitimate interest).

Retention period:
Up to 90 days.

4. Hosting

Our website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

Hetzner processes personal data solely on the basis of a data processing agreement pursuant to Article 28 GDPR.

5. Online Store and Contract Performance

When you place an order in our online store, we process personal data necessary for the performance of the contract, including:

name
billing and shipping address
email address
phone number
order details

Purpose of processing:
Order processing, delivery of goods, customer communication, and invoicing.

Legal basis:
Article 6(1)(b) GDPR (performance of a contract).

Retention period:
In accordance with tax and commercial law requirements, up to 6 years.

6. Payment Service Providers

For payment processing, we use external payment service providers. Payment data is transmitted directly to the respective provider.

6.1 Stripe

Payment provider:
Stripe Payments Europe Ltd., Ireland

Stripe processes personal data as an independent controller.
Personal data may be transferred to third countries (e.g. the United States). Such transfers are safeguarded by Standard Contractual Clauses (SCC) pursuant to Article 46 GDPR.

6.2 PayPal

Payment provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

PayPal also acts as an independent controller.
Data transfers to third countries may occur and are secured by Standard Contractual Clauses.

7. Contact

If you contact us by email, phone, or via a contact form, the data you provide will be stored for the purpose of processing your request.

Processed data:

name
email address
phone number
message content

Legal basis:
Article 6(1)(b) GDPR (pre-contractual measures) or
Article 6(1)(f) GDPR (legitimate interest in communication).

8. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited.

Google Analytics uses cookies that enable an analysis of your use of the website.
IP anonymization is enabled on this website.

Legal basis:
Article 6(1)(a) GDPR (consent).

Consent is obtained via the cookie banner and may be withdrawn at any time.

9. Google Tag Manager

We use Google Tag Manager.
Google Tag Manager itself does not process personal data but facilitates the integration of other services such as Google Analytics.

Legal basis:
Article 6(1)(a) GDPR (consent).

10. Cookies

Our website uses cookies.

Types of cookies used:

Essential cookies (required for the operation of the online store)
Analytics cookies (Google Analytics)
Marketing cookies (if enabled)

Cookies requiring consent are set only after you have provided your consent via the cookie banner.

11. Data Retention

We store personal data only for as long as it is necessary for the respective purposes or as required by statutory retention obligations.

12. Your Rights

You have the right to:

access your personal data (Article 15 GDPR)
rectification of inaccurate data (Article 16 GDPR)
erasure of your data (Article 17 GDPR)
restriction of processing (Article 18 GDPR)
data portability (Article 20 GDPR)
object to processing (Article 21 GDPR)
withdraw consent at any time (Article 7(3) GDPR)

To exercise your rights, please contact:
[email protected]

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

14. Updates to This Privacy Policy

This Privacy Policy is currently valid and may be updated if necessary.