Privacy policy

PRIVACY POLICY – SAUNADO

Version 2.0 · Last updated: 10 August 2026

1. Data Controller

The controller of your personal data (GDPR) is BIELECKI GROUP BRUKMONTAŻ DOMY SZKIELETOWE SP. Z O.O., registered office at Aleja Tysiąclecia 6, 21-500 Biała Podlaska, Poland; registered in the National Court Register (KRS) under no. 0001195419; NIP (Tax ID) 5372691397; REGON 542766389. The online store saunado.eu ("SAUNADO") is operated by this company.

Contact: sales@saunado.eu · privacy@saunado.eu · +48 728 001 100.

We have not appointed a Data Protection Officer; for all data-protection matters please contact privacy@saunado.eu.

2. Scope (information notice)

This Privacy Policy explains how we process your personal data. It is provided for information purposes under Articles 13–14 GDPR. It is not a contract, and consent-based processing (cookies, marketing) is always based on a separate, freely given consent and is never inferred from your use of the website. The store runs on the Shopify platform.

3. Categories of personal data

  • identification & contact: full name, billing and delivery address, email, phone;
  • business (B2B) buyers: company name, tax ID (NIP) / EU VAT number, registered address;
  • order and transaction details;
  • technical data: IP address, device/browser data, website-usage data (interactions, page views), cookie identifiers.

Payment-card data are processed solely by our payment providers and are not stored by us.

4. Purposes & legal bases

  • performing your order/contract — Art. 6(1)(b);
  • payment processing and delivery — Art. 6(1)(b);
  • invoicing, accounting and tax obligations — Art. 6(1)(c);
  • customer service and communication — Art. 6(1)(b)/(f);
  • security, fraud prevention, analytics and improvement of the store — legitimate interest, Art. 6(1)(f);
  • direct marketing of our own similar products to existing customers — legitimate interest, Art. 6(1)(f);
  • other marketing (newsletter, remarketing) — your consent, Art. 6(1)(a). Electronic and telephone marketing is additionally sent only with the consents required under Polish law (Art. 10 of the Act on Providing Services by Electronic Means; Art. 172 of the Telecommunications Law).

5. Is providing data mandatory?

Providing the data needed to place and perform an order (name, delivery/billing address, email; and company data/NIP for B2B invoices) is voluntary but necessary to conclude and perform the contract — without it we cannot process your order. Providing data for marketing is entirely voluntary.

6. Profiling

We analyse your activity in the store and your purchase/browsing history (including abandoned carts) to tailor our communication and offers. This is profiling that does NOT produce legal or similarly significant effects for you. You may object at any time to processing for direct-marketing purposes, including profiling (Art. 21(2) GDPR). We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR.

7. Recipients

Depending on the purpose, your data may be shared with: our hosting/e-commerce platform (Shopify Inc.); payment providers (Shopify Payments, PayPal, Przelewy24, Klarna); courier/logistics companies and, for cross-border orders, customs agents; the manufacturer/supplier fulfilling made-to-order products; our product-feed and analytics/marketing providers (e.g. Simprosys, Google); and accounting/IT service providers. Each processes data only as necessary and, where applicable, under a data-processing agreement.

8. International transfers (outside the EEA)

Some processors (including Shopify and certain payment/analytics/marketing providers) may process data outside the European Economic Area, including in the USA. We ensure an adequate level of protection under Chapter V GDPR, in particular through European Commission adequacy decisions (e.g. Canada; the United Kingdom; the USA under the EU-US Data Privacy Framework where the recipient is certified) and/or the Standard Contractual Clauses. You may request a copy of the safeguards at privacy@saunado.eu.

9. Cookies

We use essential cookies (required for the site to work) and, only after you give consent via our cookie banner, analytics and marketing cookies. You can withdraw or change your consent at any time via the Cookie settings on our website (and additionally through your browser). Categories, providers and lifetimes are listed in our Cookie settings / Cookie Policy.

10. Retention

  • order/contract data: for the term of the contract and thereafter until claims are time-barred (generally up to 6 years; 3 years for B2B);
  • accounting/tax documents: 5 years from the end of the relevant tax year (Polish tax law);
  • complaint/warranty data: up to 6 years;
  • marketing data: until you withdraw consent or object;
  • cookies/server logs: per each cookie’s lifetime / up to 12 months for logs.

11. Your rights

Access; rectification; erasure ("right to be forgotten"); restriction; data portability; objection (including to direct marketing and profiling); and withdrawal of consent at any time (without affecting the lawfulness of processing before withdrawal). You also have the right not to be subject to a decision based solely on automated processing. We respond within one month, free of charge. Contact: privacy@saunado.eu.

12. Complaints

You may lodge a complaint with a supervisory authority. In Poland: President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw.

13. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure.

14. Changes

We may update this Policy; the current version, with a "Last updated" date and version number, is always available on our website. Where changes are material and affect consent-based processing, we will notify you (e.g. by email or a prominent notice) before they take effect.

15. Contact

Data protection: privacy@saunado.eu · General: sales@saunado.eu · +48 728 001 100 · Aleja Tysiąclecia 6, 21-500 Biała Podlaska, Poland.