Privacy Policy

Last updated: 20/01/2026

1. Controller

The controller of your personal data is:

Turmak sp. z o.o.
Barańczaka 3E/36
60-537 Poznań
Poland
Email: info@turmak.pl

2. Scope of This Policy

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, place an order, or contact us.

Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish and EU data protection laws.

Our online store is operated using Shopify, which acts as a data processor on our behalf.

3. Personal Data We Collect

Depending on how you use our website, we may collect the following personal data:

  • Name and surname
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment and transaction data (processed by payment providers)
  • Order history
  • IP address and technical data (browser, device, operating system)
  • Correspondence sent to us via email or contact forms

We do not knowingly collect personal data from minors.

4. Purpose and Legal Basis of Processing

a) Order processing and contract performance

We process personal data to accept and fulfil orders, process payments, ship products, and handle returns and complaints.

Legal basis: Article 6(1)(b) GDPR (performance of a contract)

b) Customer communication

To respond to inquiries and provide customer support.

Legal basis: Article 6(1)(b) and Article 6(1)(f) GDPR (contract and legitimate interest)

c) Legal and accounting obligations

To comply with tax, accounting and regulatory requirements.

Legal basis: Article 6(1)(c) GDPR (legal obligation)

d) Website operation and security

To ensure website functionality, stability and security.

Legal basis: Article 6(1)(f) GDPR (legitimate interest)

e) Marketing communications (if applicable)

To send newsletters or marketing communications only if you have given consent.

Legal basis: Article 6(1)(a) GDPR (consent)

5. Shopify

Our store is hosted on Shopify Inc., which provides the e-commerce platform that allows us to sell our products.

Your data is stored through Shopify’s data storage, databases and general Shopify applications. Shopify stores your data on secure servers behind a firewall.

More information on how Shopify processes personal data can be found here: https://www.shopify.com/legal/privacy

6. Data Recipients

Personal data may be shared only where necessary with trusted third parties, including:

  • Shopify Inc. (e-commerce platform)
  • Payment service providers
  • Courier and logistics partners
  • Accounting and IT service providers

All recipients process personal data under data processing agreements and in compliance with GDPR.

7. Data Retention

We retain personal data only for as long as necessary:

  • Order and accounting data: as required by law
  • Customer accounts: until deletion is requested
  • Marketing data: until consent is withdrawn
  • Correspondence: as long as required to handle the matter

8. Data Transfers Outside the EU

Some service providers (including Shopify) may process data outside the European Economic Area (EEA). In such cases, data transfers are carried out using appropriate safeguards, including standard contractual clauses approved by the European Commission.

9. Your Rights

You have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request deletion of your data
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time (where processing is based on consent)

Requests can be sent to: info@turmak.pl

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

President of the Personal Data Protection Office (UODO)
ul. Stawki 2
00-193 Warsaw
Poland

11. Cookies

Our website uses cookies and similar technologies to ensure proper functioning of the store and improve user experience. Detailed information is available in our Cookie Policy.

12. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website.