PRIVACY POLICY

What Information We Collect

• ✓ Identity & delivery: Full name, shipping address, email, phone
• ✓ Purchase records: Items ordered, payment/shipping methods, window codes
• ✓ Transaction data: Payment confirmations (never store full card details)
• ✓ Technical: IP address, session cookies for cart/checkout functionality

Why We Process Data

• ✓ Order fulfillment: Processing/payment/delivery – Art. 6(1)(b) GDPR
• ✓ Compliance: Tax/accounting/warranty – Art. 6(1)(c) GDPR
• ✓ Customer support: Complaints/returns – Art. 6(1)(b/f) GDPR
• ✓ Security: Fraud prevention – Art. 6(1)(f) GDPR
• ✗ No marketing emails/newsletters sent

Data Recipients

• ✓ Payment: PayPal, VISA/MasterCard gateways
• ✓ Shipping: DPD, GLS (delivery only)
• ✓ Technical: SiteGround hosting, email providers
• ✓ Advisors: Accounting office (invoices only)

International Transfers

Data stays within EEA where possible. PayPal (Luxembourg/USA).

Data Retention Periods

• ✓ Orders: 5 years (Polish Accounting Act), 6 years (warranty claims)
• ✓ Emails: 36 months or longer if needed for legal defense
• ✓ Session cookies: Browser session duration only

Your GDPR Rights (Art. 15-22)

• ✓ Access: Request copy of your data
• ✓ Correction: Update inaccurate information
• ✓ Erasure: "Right to be forgotten" where applicable
• ✓ Restriction: Limit processing in specific cases
• ✓ Objection: Object to legitimate interest processing
• ✓ Portability: Receive data in structured format
• ✓ Complaint: Contact UODO at uodo.gov.pl

Response time: 1 month (extendable to 3 months for complex cases). Email: shop@cortteo.com

Cookies Policy

Only essential cookies for cart, login, checkout. No tracking/analytics/advertising cookies. Manage via browser settings (disabling may block orders).

No Automated Decisions

No automated processing with legal consequences or profiling (Art. 22 GDPR).

Is Data Mandatory?

Voluntary but required for order processing. Without name/address/payment info, cannot complete purchase.