Privacy Policy

PRIVACY POLICY (GDPR) – SPHYNXRITUALS.COM

1. Data Controller

The controller of your personal data is:
VINCI DENTAL LAB KAMIL HAJWOS
ul. Adolfa Dygasińskiego 38, 01-603 Warsaw, Poland
NIP: 1181773277
E-mail: contact@sphynxrituals.com

The data controller processes personal data in accordance with the European Parliament and Council Regulation (EU) 2016/679 (GDPR).

2. Scope of Processed Data

We process data you provide when:

• Placing an order:

• full name
• delivery address
• e-mail
• phone number
• billing information (optional)

• Contacting via e-mail:

• e-mail address
• message content
• Subscribing to the newsletter (if available):
  e-mail address

The Store does NOT process or store payment card data. Payments are handled by Stripe.

3. Purposes and Legal Basis for Processing

✔️ Contract performance (Art. 6(1)(b) GDPR)

• processing orders
• delivering products
• contacting regarding an order

✔️ Invoicing and tax obligations (Art. 6(1)(c) GDPR)

✔️ Handling complaints and returns (Art. 6(1)(b) and (c) GDPR)

✔️ Legitimate interest of the controller (Art. 6(1)(f) GDPR):

• fraud prevention
• claims enforcement
• sales statistical analysis

✔️ Marketing and newsletter (Art. 6(1)(a) GDPR) – only with your consent.

4. Data Recipients

Data may be shared with:

• courier companies
• payment operators (Stripe)
• hosting providers
• accounting services
• IT support providers for the store

We never sell your data.

5. Data Transfer Outside the EU

Some services (e.g., Stripe, hosting) may operate outside the EU.
In such cases, appropriate safeguards are applied, e.g.:

European Commission adequacy decisions
Standard Contractual Clauses (SCC)

6. Data Retention Period

Order data – 5 years (tax requirements)
Contact data – 1 year
Newsletter – until unsubscribed
Complaint data – up to 3 years

7. Your Rights

You have the right to:
✔️ access your data
✔️ rectify it
✔️ erase it (“right to be forgotten”)
✔️ restrict processing
✔️ data portability
✔️ object
✔️ withdraw consent at any time

Complaints can be submitted to:
President of the Personal Data Protection Office (UODO).

8. Cookies

The Store uses cookies for:

• store functionality
• shopping cart
• traffic analytics
• personalization

You can change cookie settings in your browser.

9. Data Security

Data is stored in protected systems using:

• SSL encryption
• access control
• server security measures

The controller implements measures in accordance with Art. 32 GDPR.

10. Final Provisions

This Policy applies from the moment of publication.
It may be updated — the current version is always available on the website.