PRIVACY STATEMENT (EU)

Effective date: April 2025

This Privacy Statement describes how Żaneta Prządak – BALI BALI processes personal data of users residing in the European Union (EU) and the European Economic Area (EEA) in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”).

1. DATA CONTROLLER

Company: Żaneta Prządak – BALI BALI
Business Owner: Żaneta Prządak
Address: Kaszubska 51, 42-202 Częstochowa, Poland
VAT ID: PL5732827836
Email: info@balibalishop.com

2. PURPOSES OF DATA PROCESSING

We collect and process your personal data for the following purposes:

  • To fulfill and manage your purchases and orders

  • To communicate with you about our services, offers, and account

  • To comply with legal obligations (e.g., tax and consumer law)

  • To improve the functionality and security of our website

  • To provide customer support

  • To send marketing communications if you have provided consent

3. LEGAL BASIS FOR PROCESSING

Our legal bases for processing data under GDPR include:

  • Art. 6(1)(b): Performance of a contract

  • Art. 6(1)(c): Compliance with a legal obligation

  • Art. 6(1)(f): Legitimate interests (e.g. fraud prevention, statistics)

  • Art. 6(1)(a): Consent (e.g. newsletter, cookies)

4. CATEGORIES OF DATA COLLECTED

We may collect:

  • Identification data (name, email, phone number, billing and shipping address)

  • Order history and payment information

  • Technical data (IP address, browser, device, session data)

  • Marketing preferences and communication history

5. DATA SHARING

We only share data with third parties when necessary to:

  • Process your payment (e.g. PayPal, Stripe)

  • Deliver products (e.g. couriers, postal services)

  • Analyze website traffic (e.g. Google Analytics)

  • Deliver marketing communications (e.g. Klaviyo, Edrone)

  • Run targeted ads (e.g. Meta, TikTok, Pinterest)

All data recipients are contractually bound to GDPR-compliant data protection obligations.

6. TRANSFER OUTSIDE THE EEA

Some third parties we work with (e.g., Google LLC, Meta Platforms Inc.) may process data outside the EEA. In such cases, we use appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)

  • Transfers to countries with EU adequacy decisions

7. YOUR RIGHTS UNDER GDPR

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Withdraw consent at any time

  • Restrict or object to processing

  • Data portability

  • Lodge a complaint with a supervisory authority (https://uodo.gov.pl)

To exercise your rights, contact us at: info@balibalishop.com

8. DATA RETENTION

We store your data for no longer than necessary for the purposes for which it was collected. Some data may be retained for tax, legal, or contractual obligations.

9. SECURITY MEASURES

We implement industry-standard technical and organizational measures to ensure a high level of security, including:

  • SSL encryption

  • Restricted server access

  • Secure payment gateways

10. CONTACT

If you have any questions about this Privacy Statement or how we process your data, please contact:

Żaneta Prządak – BALI BALI
Kaszubska 51, 42-202 Częstochowa, Poland
Email: info@balibalishop.com