Privacy policy

PRIVACY POLICY – SAUNADO

Last updated: 22.03.2026

1. Data Controller

The controller of your personal data within the meaning of the General Data Protection Regulation (GDPR) is:

BIELECKI GROUP BRUKMONTAŻ DOMY SZKIELETOWE SP. Z O.O.
Aleja Tysiąclecia 6
21-500 Biała Podlaska
Poland

Tax Identification Number (NIP): 5372691397

Email: sales@saunado.eu
Phone: +48 728 001 100

2. General Information

This Privacy Policy explains how we collect, use and process personal data in connection with your use of the online store saunado.eu.

The store is operated using the Shopify platform, which provides the technical infrastructure required to offer and manage online sales.

By using this website, you confirm that you have read and understood this Privacy Policy.

3. Types of Personal Data Processed

We may process the following categories of personal data:

full name
billing and delivery address
email address
phone number
order and transaction details
IP address
device and technical data
website usage data (e.g. interactions, page views)

Payment data (e.g. card details) are processed securely by external payment providers and are not stored by us.

4. Purposes of Data Processing

Your personal data is processed for the following purposes:

order processing and contract performance
payment processing
delivery of goods
customer service and communication
compliance with legal obligations
ensuring the security and proper functioning of the website
marketing activities (only where consent has been given)

5. Legal Basis for Processing

Personal data is processed on the basis of:

Article 6(1)(b) GDPR – performance of a contract
Article 6(1)(c) GDPR – compliance with legal obligations
Article 6(1)(f) GDPR – legitimate interests (e.g. security, analytics, optimization)
Article 6(1)(a) GDPR – consent (marketing purposes)

6. Data Recipients

Your personal data may be shared with:

courier and logistics companies
payment service providers
IT and hosting service providers (including Shopify)
marketing and analytics service providers

All such entities process data only to the extent necessary to provide their services and, where applicable, under data processing agreements.

7. Shopify and Third-Party Services

Our online store is hosted on Shopify Inc., which provides the e-commerce platform we use to sell our products.

As part of providing its services, Shopify may process and store personal data on servers located outside the European Economic Area (EEA).

Such transfers are carried out in accordance with applicable data protection laws and are safeguarded by appropriate legal mechanisms (e.g. Standard Contractual Clauses).

More information is available at:
https://www.shopify.com/legal/privacy

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

ensure proper functioning of the website
analyze traffic and usage
support marketing activities

You can manage or disable cookies through your browser settings at any time.

9. Data Retention

We retain personal data only for as long as necessary:

to fulfill contractual obligations
to comply with legal requirements (e.g. tax regulations)
until consent is withdrawn (for marketing purposes)

10. Your Rights

You have the following rights under the GDPR:

right of access to your data
right to rectification
right to erasure (“right to be forgotten”)
right to restrict processing
right to data portability
right to object to processing
right to withdraw consent at any time

To exercise your rights, please contact us at:
sales@saunado.eu

11. Complaints

You have the right to lodge a complaint with a supervisory authority.

In Poland, the competent authority is:
President of the Personal Data Protection Office (UODO).

12. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or disclosure.

13. Transfers Outside the EEA

Where personal data is transferred outside the European Economic Area (EEA), such transfers are carried out in compliance with applicable laws and are protected by appropriate safeguards (e.g. Standard Contractual Clauses).

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes.

The current version is always available on our website.

15. Contact

If you have any questions regarding data protection, you may contact us at: