Privacy policy

Privacy Policy

Introduction

This Privacy Policy applies to all aspects of personal data processing on the website (hereinafter referred to as the "SERVICE"), operated by PROFUNDUM Dominik Schneider, located at ul. Józefa Ignacego Kraszewskiego 14/5, 30-110 Kraków, Poland, NIP: 7352883976, REGON: 383391162 (hereinafter referred to as the "ADMINISTRATOR").

PERSONAL DATA

The personal data of SERVICE users are processed in the following situations:

  1. Sending messages to email addresses provided by the ADMINISTRATOR.

  2. Storing and saving files (so-called "cookies") on the device used by the User to browse the SERVICE. Cookies allow the identification of Users during subsequent visits to the SERVICE but do not enable the ADMINISTRATOR to identify the specific individual using the device at a given time. Details of this processing are described in the Cookies Policy below.

  3. Storing Newsletter Subscribers, identified by email address, in a database and sending them informational bulletins. Details of this processing are described in the Newsletter Terms and Conditions below.

In each of the above cases of using the SERVICE, your personal data will be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR; OJ EU L 2016 No. 119, p. 1, as amended).

The ADMINISTRATOR ensures that your data is protected in compliance with applicable laws and information security standards. In particular, communication between the SERVICE and the user’s device is encrypted using the SSL protocol, ensuring secure access to the SERVICE.

The legal basis and purpose of processing your personal data depend on the specific processing situation, as described in the relevant sections below.

PLACING ORDERS

Placing an order (purchasing goods) by a SERVICE User involves the processing of their personal data. Providing data marked as mandatory is required to accept and process the order, and failure to provide such data will result in the order not being fulfilled. Providing other data is optional.

Personal data is processed:

  • To fulfill the placed order – the legal basis is the necessity of processing for the performance of a contract (Art. 6(1)(b) GDPR).

  • To comply with legal obligations imposed on the ADMINISTRATOR, particularly under tax and accounting laws – the legal basis is a legal obligation (Art. 6(1)(c) GDPR).

  • To establish, assert, or defend against claims – the legal basis is the legitimate interest of the ADMINISTRATOR (Art. 6(1)(f) GDPR), consisting of protecting its rights.

EMAIL COMMUNICATION

The purpose of processing data of Users who send emails to addresses provided by the ADMINISTRATOR is to respond to the message or present the ADMINISTRATOR’s product offers, based on consent given by sending the message (Art. 6(1)(a) GDPR). Subsequently, the data may also be processed for other purposes outside the SERVICE, about which the User will be duly informed.

WHO HAS ACCESS TO YOUR PERSONAL DATA?

Recipients of your data may include:

  • Individuals collaborating within the ADMINISTRATOR’s organizational structure.

  • Entities processing data on behalf of the ADMINISTRATOR under data processing agreements.

The implemented Shopify plugins result in data regarding the use of our website being transferred to the service provider, Shopify International Limited, outside the European Economic Area (EEA). Data transfers occur, among others, to Canada and the United States, where, under certain national security programs, public authorities may access your data.

According to the European Commission’s decision, Canada and the U.S. ensure an adequate level of personal data protection consistent with EEA standards.

HOW LONG DO WE STORE YOUR PERSONAL DATA?

The storage period depends on the processing situation:

  • Cookies: The storage time on the User’s device depends on their type and User settings (details in the Cookies Policy).

  • Newsletter Subscribers: Email addresses are stored until the Subscriber withdraws consent in a documented manner (standard withdrawal procedure is described in the Newsletter Terms and Conditions).

  • Email correspondence: Data is stored until consent is withdrawn or claims become time-barred.

  • Order-related data: Processed until order fulfillment, expiration of tax/accounting deadlines, and the limitation period for claims.

USER RIGHTS UNDER GDPR

You have the following rights (subject to the processing basis):

  • Right to access your data and receive a copy.

  • Right to rectification (correction) of your data.

  • Right to erasure ("right to be forgotten").

  • Right to restrict processing.

  • Right to object to processing.

  • Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

To exercise these rights, send a request to: info@profundum.co

You also have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office) if you believe your personal data processing violates GDPR.

COOKIES POLICY

1. Purpose of Cookies Processing

Cookies are stored to improve website functionality, analyze user interactions, and enable features such as preference memorization.

Legal basis:

  • Legitimate interest (Art. 6(1)(f) GDPR) for essential cookies.

  • User consent (Art. 6(1)(a) GDPR) for privacy-intrusive cookies.

2. What Are Cookies?

Cookies are small text files sent by a web server to the User’s device. They contain:

  • Website origin information.

  • A randomly generated unique ID for browser identification.

  • Storage duration parameters.

3. Types of Cookies Used

The SERVICE uses various cookies, including:

  • Essential cookies (for website operation).

  • Analytical cookies (anonymous usage tracking).

For details, visit: https://www.shopify.com/legal/cookies

4. Managing Cookies

Users can modify cookie settings in their browser. Blocking cookies may affect SERVICE functionality.

5. Consent to Cookies

By using the SERVICE, Users consent to cookies. Consent can be withdrawn via browser settings.

NEWSLETTER TERMS AND CONDITIONS

The Newsletter contains information about PROFUNDUM’s offers, including promotions and new products.

Subscription Requirements

A Subscriber must:

  1. Provide an email address.

  2. Confirm it by clicking the "Send" button.

Providing an email constitutes consent to process personal data for sending the Newsletter.

Data Storage

Data is stored for the subscription period (until consent withdrawal).

Withdrawal of Consent

Consent can be withdrawn by emailing the ADMINISTRATOR.

Changes to the Terms

The ADMINISTRATOR will notify Subscribers of changes via email. Amendments take effect 14 days after notification.

Data Processing for the Newsletter

The ADMINISTRATOR uses Shopify to:

  • Store Subscriber data.

  • Send marketing emails.

Shopify acts as a data processor under an agreement with the ADMINISTRATOR.

Last modified: June 15, 2025