Privacy Policy

Effective from 11 September 2026

  1. DATA CONTROLLER

The controller of personal data collected through the online store available at:

Store

is:

POXICO Marek Waligóra
ul. Rynek 60
50-116 Wrocław
Poland
NIP: 8941003029
Email: eldritchm@o2.pl
Telephone: +48 605 424 105

hereinafter referred to as the “Controller” or the “Seller”.

For all matters concerning personal data and privacy, you may contact the Controller using the email address or telephone number provided above.

  1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy explains how personal data is collected and processed when you:

  • visit the Store;
  • create or use a customer account;
  • place an order;
  • make a payment;
  • download purchased digital content;
  • contact the Seller;
  • use the language or currency selector;
  • accept or reject optional cookies.
  1. PERSONAL DATA WE PROCESS

Depending on how you use the Store, we may process the following categories of data:

  • name and surname;
  • email address;
  • telephone number;
  • billing address and country;
  • customer account information;
  • order details and purchase history;
  • selected language and currency;
  • payment method and payment status;
  • information about the purchased digital files;
  • records of accepted terms, privacy notices and consent to the immediate supply of digital content;
  • correspondence sent to the Seller;
  • IP address;
  • browser, device and operating system information;
  • date and time of visits;
  • pages visited and actions performed in the Store;
  • cookie identifiers and similar technical data;
  • information contained in server and security logs.

The Store does not directly store complete payment card numbers, online banking credentials or other complete payment credentials. Payment information is processed by the selected payment service provider.

  1. PURPOSES AND LEGAL BASES OF PROCESSING

Personal data may be processed for the following purposes:

4.1. Processing and completing orders

Data is processed to conclude and perform a sales contract, process an order, provide access to purchased digital content, handle payments and communicate with the customer.

Legal basis: Article 6(1)(b) of the GDPR – processing necessary for the performance of a contract or to take steps at the customer’s request before entering into a contract.

4.2. Customer account management

If you create a customer account, data is processed to create, maintain and secure the account and to provide access to order and download history.

Legal basis: Article 6(1)(b) of the GDPR.

4.3. Accounting and legal obligations

Order and transaction data may be processed to issue accounting documents, maintain tax and accounting records and comply with other legal obligations imposed on the Seller.

Legal basis: Article 6(1)(c) of the GDPR – compliance with a legal obligation.

4.4. Complaints, refunds and legal claims

Data may be processed to handle complaints, refunds, disputes and to establish, pursue or defend legal claims.

Legal basis: Article 6(1)(f) of the GDPR – the legitimate interests of the Controller consisting of protecting the Controller’s rights and handling customer claims.

4.5. Customer communication

Data included in emails, contact forms or other correspondence is processed to respond to questions and requests.

Legal basis: Article 6(1)(b) or Article 6(1)(f) of the GDPR, depending on the subject of the communication.

4.6. Security and operation of the Store

Technical data and server logs may be processed to ensure the proper operation and security of the Store, prevent fraud and abuse, diagnose technical problems and protect the Store and its users.

Legal basis: Article 6(1)(f) of the GDPR.

4.7. Analytics and optional cookies

Where required, analytical or marketing cookies and similar technologies are used only after obtaining the user’s consent.

Legal basis: Article 6(1)(a) of the GDPR – consent.

Consent may be withdrawn at any time using the cookie settings available on the Store. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

  1. PAYMENTS

Payments in the Store may be processed by external payment service providers, including:

  • Stripe;
  • PayPal;
  • payment methods made available through these providers, including payment cards, Apple Pay, Google Pay, BLIK and Przelewy24.

When you select a payment method, the data necessary to complete and secure the transaction may be transferred to the relevant payment provider. Payment providers may act as independent data controllers or as data processors, depending on the type of service and processing activity.

Their own privacy policies apply to data processed directly by them:

Stripe Privacy Policy:
https://stripe.com/en-pl/privacy

PayPal Privacy Statement:
https://www.paypal.com/pl/legalhub/paypal/privacy-full

The Seller receives information concerning the status and identification of the transaction but does not receive complete payment card or online banking credentials.

  1. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed, where necessary, to:

  • hosting, server and IT service providers;
  • providers of software used to operate and secure the Store;
  • payment service providers;
  • accounting, legal and advisory service providers;
  • providers of website analytics, cookie consent and translation services;
  • email and communication service providers;
  • public authorities where disclosure is required by law.

Personal data is shared only to the extent necessary for the relevant purpose and on the basis of appropriate agreements or applicable law.

  1. GOOGLE SERVICES AND ANALYTICS

The Store may use Google services, including Google Analytics, to obtain statistical information about how visitors use the Store.

Non-essential Google cookies and analytics tools are activated only where required consent has been provided through the cookie consent system.

Depending on the user’s consent and the configuration of Google services, information such as IP address, device information, browser information, visited pages and interactions with the Store may be processed.

More information about how Google processes personal data is available at:

https://policies.google.com/privacy

The Store may also provide Google with publicly available product information for the purpose of presenting products in Google services. This product feed does not intentionally contain customer personal data.

  1. COOKIES

The Store uses cookies and similar technologies.

Cookies may be used for:

  • keeping the Store and shopping cart operational;
  • maintaining a customer session;
  • remembering the selected language and currency;
  • securing customer accounts and payments;
  • recording cookie preferences;
  • enabling checkout and digital downloads;
  • measuring Store traffic and performance;
  • detecting fraud and technical problems.

Necessary cookies are required for the Store to function and do not require consent where permitted by law.

Analytical and marketing cookies are used only after consent has been provided, where such consent is required.

Cookie preferences can be changed using the cookie settings available on the Store. Cookies may also be deleted or blocked in the browser settings, although doing so may cause some Store functions to operate incorrectly.

The Store uses CookieYes to manage cookie consent. Information about CookieYes privacy practices is available at:

https://www.cookieyes.com/privacy-policy
  1. LANGUAGE AND CURRENCY SETTINGS

The Store uses language and currency tools to present content and prices in a form appropriate for the user.

These tools may store information about the selected language and currency in cookies or similar browser storage. The user may change the language and available currency using the selectors displayed on the Store.

Automated translations may be generated using external translation technologies. Such translations are provided for convenience and may not always be exact.

  1. DATA RETENTION

Personal data is stored only for as long as necessary for the purposes for which it was collected.

In particular:

  • order, payment, accounting and tax data is retained for the period required by applicable accounting and tax laws;
  • customer account data is retained while the account remains active and afterwards where required for legal or claim-related purposes;
  • complaint and correspondence data is retained until the matter is resolved and until relevant claims become time-barred;
  • data processed to establish, pursue or defend claims is retained until the relevant limitation periods expire;
  • data processed on the basis of consent is retained until consent is withdrawn or the data is no longer necessary;
  • cookies are retained for the periods specified in the cookie consent tool or until they are deleted by the user;
  • technical and security logs are retained for the period necessary to secure and maintain the Store.
  1. DATA TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA

Some service providers used by the Store may process data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, appropriate legal safeguards are used, such as:

  • an adequacy decision issued by the European Commission;
  • Standard Contractual Clauses approved by the European Commission;
  • another lawful transfer mechanism provided for under the GDPR.

Details concerning international transfers carried out by external providers can be found in their respective privacy policies.

  1. RIGHTS OF DATA SUBJECTS

Subject to the conditions provided by law, you have the right to:

  • access your personal data;
  • receive a copy of your personal data;
  • rectify inaccurate or incomplete data;
  • request erasure of personal data;
  • request restriction of processing;
  • object to processing based on the Controller’s legitimate interests;
  • receive personal data in a structured, commonly used and machine-readable format;
  • transmit data to another controller where technically feasible;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with a supervisory authority.

In Poland, the competent supervisory authority is:

President of the Personal Data Protection Office
ul. Stawki 2
00-193 Warsaw
Poland
https://uodo.gov.pl

To exercise your rights, contact the Controller at eldritchm@o2.pl.

The Controller may request additional information necessary to verify the identity of the person submitting the request.

  1. REQUIREMENT TO PROVIDE DATA

Providing data necessary to place and complete an order is voluntary but required to conclude and perform the sales contract.

Failure to provide the required information may prevent the Store from processing the order, accepting payment or supplying the purchased digital content.

Providing data for analytical or marketing purposes is voluntary and is not required to purchase products.

  1. AUTOMATED PROCESSING AND FRAUD PREVENTION

The Controller does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect customers.

Payment and security providers may use automated systems to assess transaction risk, prevent fraud and verify payments. Further information about such processing can be found in the privacy policies of the relevant payment providers.

  1. DATA SECURITY

The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, destruction or disclosure.

These measures include encrypted communication, access controls, software updates, backups and security monitoring. However, no method of transmitting or storing information on the Internet can guarantee absolute security.

  1. LINKS TO EXTERNAL WEBSITES

The Store may contain links to external websites and services. The Controller is not responsible for the privacy practices or content of external websites. Users should review the privacy policies of those services separately.

  1. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated when the Store’s functionality, service providers or applicable legal requirements change.

The current version will always be published on this page together with its effective date.

Changes that materially affect customers may also be communicated through the Store or by email where appropriate.

Select your currency
PLN Polish złoty
EUR Euro