KOPIJER.PL PRIVACY AND COOKIES POLICY

effective from 12 August 2026

1. Personal data controller

The controller of the personal data of users of the website https://kopijer.pl is:

2C CONSULTING Spółka z ograniczoną odpowiedzialnością
ul. Stanisławowska 47
54-611 Wrocław
KRS: 0000239852
NIP: 5213353759
REGON: 140203358
e-mail: pawel@kopijer.pl
tel.: +48 606 659 012

hereinafter referred to as the “Controller”.

For matters related to personal data protection, the Controller may be contacted at pawel@kopijer.pl or in writing at the Controller’s registered office address.

2. Scope of data processed

Depending on how the Store is used, the Controller may process in particular:

first and last name,
company name,
tax identification number (NIP),
billing address,
delivery address,
email address,
telephone number,
data related to the Order,
information related to the selected payment method,
purchase history,
Customer Account data,
information about purchased products,
content of correspondence,
data concerning complaints, returns and withdrawals from contracts,
IP address,
online identifiers,
information about the device and browser,
information about use of the website,
information about consents granted,
information related to cookies and similar technologies.

The Controller does not receive full payment card details processed directly by external payment service providers.

3. Purposes and legal bases of data processing

3.1. Processing Orders

Personal data may be processed for the purpose of:

accepting an Order,
entering into and performing a contract,
processing the Order,
delivering Goods,
supplying Digital Content,
processing payments,
contact related to processing the Order.

The legal basis for processing is the necessity of the data for entering into or performing a contract.

3.2. Tax and accounting obligations

Data related to sales and payments may be processed in order to comply with obligations arising from tax and accounting regulations and other legal obligations imposed on the Controller.

The legal basis for processing is the Controller’s legal obligation.

3.3. Customer Account

If a user creates an Account, their data is processed for the purpose of:

creating the Account,
enabling login,
managing Order history,
providing functions assigned to the Account.

The legal basis for processing is performance of a contract for the provision of electronic services.

3.4. Contact with the user

Data provided via a contact form, email, telephone or other communication channels may be processed for the purpose of:

providing a response,
conducting correspondence,
handling an inquiry,
providing information concerning an Order or offer.

The legal basis for processing may be:

taking steps at the user’s request before entering into a contract,
performance of a contract,
the Controller’s legitimate interest in communicating with users.

3.5. Complaints, returns and claims

Data may be processed for the purpose of:

handling complaints,
handling withdrawals from contracts,
handling returns,
establishing, pursuing or defending claims.

The legal bases for processing are the Controller’s legal obligations and its legitimate interest in protecting and enforcing its rights.

3.6. Newsletter and direct marketing

If a user subscribes to the newsletter or gives the appropriate marketing consent, their data may be used to send information concerning, in particular:

new products,
releases,
events,
offers,
promotions,
activities related to Kopijer.pl.

Consent is voluntary and may be withdrawn at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

3.7. Statistics and analytics

With the user’s consent, the Controller may use analytical tools enabling:

analysis of traffic in the Store,
analysis of how the website is used,
creation of statistics,
detection of errors,
improvement of the Store’s operation,
assessment of the effectiveness of activities carried out.

Depending on the tool used, such processing may be based on the user’s consent.

3.8. Online marketing

With the user’s consent, the Controller may use advertising tools that allow, among other things:

measuring campaign effectiveness,
creating audience groups,
conversion analysis,
displaying advertisements to users,
conducting remarketing activities.

The user may change their marketing cookie settings at any time.

4. Recipients of personal data

Personal data may be disclosed to entities supporting the Controller in operating the Store, in particular:

hosting providers,
IT infrastructure and service providers,
entities responsible for maintaining and developing the Store,
payment service providers,
banks and payment institutions,
courier and postal companies,
logistics operators and entities responsible for dispatching Orders,
accounting system and accounting service providers,
email service providers,
newsletter service providers,
analytics tool providers,
advertising technology providers,
providers of systems used to operate the Store,
law firms and advisers,
public authorities—where disclosure is required by applicable law.

Data is disclosed only to the extent necessary to achieve a specified purpose.

5. Payments and delivery

If the Customer uses an external payment service provider, the data necessary to complete the transaction may be transferred to the selected payment service provider.

The payment service provider processes data in accordance with its own personal data protection rules.

For an Order requiring delivery, the data necessary to complete the shipment, in particular the first and last name, address, email address or telephone number, may be transferred to the carrier, logistics operator or another entity handling the shipment.

The scope of data transferred is limited to the data necessary to process the payment or delivery.

6. Google and Meta tools

If the user gives the appropriate consent to optional cookies, the Store may use tools such as:

Google Analytics,
Google Tag Manager,
Google Ads or other Google advertising solutions,
Meta Pixel or other Meta solutions.

These tools may process information concerning, among other things:

pages visited,
time spent using the website,
interactions with the Store,
the device used,
the browser,
IP address,
approximate location,
the source of the visit to the website,
actions taken, e.g. adding a product to the cart or making a purchase.

Optional analytics and marketing tools should be activated only after the appropriate user consent has been obtained.

The user may change or withdraw consent using the cookie management panel available on the website.

7. Transfers of data outside the European Economic Area

Some technology service providers used by the Controller may process data outside the European Economic Area.

Where data is transferred to a third country, the transfer is carried out on the basis of a mechanism provided for by applicable personal data protection laws.

Depending on the particular provider, the basis for transferring data may include:

a European Commission adequacy decision,
the provider’s participation in an appropriate mechanism approved under European Union law,
standard contractual clauses approved by the European Commission,
another basis provided for under the GDPR.

8. Data retention period

Data is retained for the period necessary to achieve the purpose for which it was collected.

In particular:

data relating to Orders may be retained for the duration of contract performance and subsequently for the period required by law and the period necessary to establish, pursue or defend claims,
data related to tax and accounting documentation is retained for the period required by law,
Account data is retained for the period during which the Account is active and subsequently for the period necessary to comply with legal obligations or protect against claims,
data related to complaints and returns is retained for the period required to handle the matter and subsequently for the period during which claims may be pursued,
data used to send the newsletter is retained until the user unsubscribes, withdraws consent or the service is discontinued,
data processed on the basis of consent to optional cookies is retained for the period resulting from the operation of the relevant tool or until consent is withdrawn, where applicable.

After the period for which the data is necessary has expired, it is deleted or anonymized unless further retention is required by applicable law.

9. Rights of data subjects

Depending on the legal basis and nature of the processing, a data subject may have the following rights:

the right of access to data,
the right to receive a copy of the data,
the right to rectification,
the right to erasure,
the right to restriction of processing,
the right to data portability,
the right to object to processing,
the right to withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise these rights, you may contact the Controller:

e-mail: pawel@kopijer.pl

or in writing:

2C CONSULTING Sp. z o.o.
ul. Stanisławowska 47
54-611 Wrocław

10. Right to lodge a complaint

If a data subject believes that their personal data is being processed in breach of data protection laws, they have the right to lodge a complaint with the competent supervisory authority:

the President of the Personal Data Protection Office (UODO).

11. Voluntary provision of data

As a rule, providing personal data is voluntary.

However, providing certain data may be necessary to perform a specific action.

Failure to provide required data may make it impossible, in particular, to:

place an Order,
process an Order,
make a delivery,
supply Digital Content,
issue required documents,
create an Account,
handle a complaint or return,
respond to an inquiry,
subscribe to the newsletter.

12. Automated decision-making and profiling

Data may be used by analytics and marketing tools to automatically assign users to specific audience groups or tailor advertising content.

The Controller does not make decisions concerning users based solely on automated processing that produce legal effects or similarly significantly affect the user, unless the user is properly informed of such processing and an appropriate legal basis is ensured.

COOKIES

13. What are cookies?

Cookies are small files or pieces of information stored on a user’s device while using a website.

They may, among other things, enable:

maintaining the user’s session,
proper operation of the cart,
remembering settings,
analyzing website traffic,
measuring the effectiveness of advertising campaigns.

Cookies may come directly from Kopijer.pl or from external service providers used by the Store.

14. Cookie categories

The Store may use the following categories of cookies:

Necessary

Necessary cookies are required for the Store to function properly.

They may be used, among other things, to:

maintain sessions,
operate the cart,
support the Order placement process,
support login,
ensure website security,
save settings required for the Store to operate.

Where cookies are necessary to provide a service requested by the user, their use does not require consent.

Functional

They allow certain user settings to be remembered and additional website functions to be provided.

Analytics

They are used to analyze how the Store is used, measure traffic and create statistics that help improve the website.

Optional analytics cookies are used after the required user consent has been obtained.

Marketing

They may be used for the purpose of:

measuring advertising effectiveness,
creating audience groups,
conducting remarketing activities,
displaying more tailored advertisements.

Optional marketing cookies are used after the required user consent has been obtained.

15. Managing cookie consents

On the first visit, the user is given the opportunity to manage consent for optional cookies.

The user should be able to:

accept all optional cookies,
reject all optional cookies,
select individual categories,
change previously granted consents later,
withdraw consent.

Cookies other than necessary cookies should not be activated before the appropriate user consent has been obtained.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

16. Browser settings

The user may also manage cookies directly in their browser settings.

This includes the ability to:

delete cookies,
block cookies,
limit the ability to store them.

Disabling or deleting certain cookies, especially necessary cookies, may cause some Store functions to operate incorrectly.

17. Data security

The Controller applies appropriate technical and organizational measures to protect processed personal data against:

unauthorized access,
loss,
destruction,
unauthorized modification,
disclosure to unauthorized persons.

Access to data is limited to persons and entities for whom it is necessary to achieve a specific purpose.

18. Changes to the Privacy Policy

The Controller may update this Privacy Policy, in particular in the event of:

changes to applicable law,
changes in the manner of data processing,
changes to Store functionality,
launching new services,
implementing new analytics or marketing tools,
changes to service providers used by the Store.

The current version of the Privacy Policy is always available on Kopijer.pl.

This Privacy Policy is effective from 12 August 2026