Privacy Policy

Last updated: 28 August 2026

1. Who we are

Yan Kudrautsau, trading as MyArtKing, a sole trader registered in Poland, is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR).

• Address: ul. Bruszewska 17, 03-046 Warszawa, Poland
• NIP: 1251759071
• REGON: 527056797
• Email: myartkingcompany@gmail.com
• Phone: +48 575 029 201

If you have any questions about how we handle your data, contact us at the email address above.

We have not appointed a Data Protection Officer, as none of the conditions for mandatory appointment set out in Article 37(1) GDPR apply to us. Please direct all data protection matters to us directly.

2. What data we collect

When you place an order:

• First and last name
• Email address
• Phone number
• Delivery address or selected InPost Paczkomat locker
• Order details (products, quantity, price)
• Personalisation details you provide (e.g. a name or text to be engraved)

When you pay: payment is processed by Stripe. We receive confirmation of payment and limited transaction data. We never receive or store your full card number, CVV code, or bank credentials.

When you contact us: the content of your message and your contact details.

When you browse the site: technical data collected automatically — IP address, browser type, device, pages visited, referral source. See section 8 on cookies.

3. Why we use your data and on what legal basis

Providing your data is voluntary, but it is necessary to conclude and perform a sales contract. Without it we cannot process your order.

4. Who we share your data with

We share your data only with parties that help us run the store:

• Stripe Payments Europe, Limited (Dublin, Ireland) — payment processing. This is the Stripe contracting entity for businesses established in Poland under the Stripe Services Agreement.
• InPost S.A. — delivery of your parcel to the Paczkomat locker.
• Tilda Platform Cloud Services Co. LLC (licence 1110180, P.O. Box 452972, Dubai, United Arab Emirates), trading as Tilda Publishing — hosting and operation of this website. Its own sub-processors are Hetzner Online GmbH (servers), G-Core Labs S.A. (backup) and Google Cloud EMEA Limited (information security).
• Our accounting office (biuro rachunkowe), working remotely — tax filings and retention of sales records.

We do not use third-party analytics or advertising trackers on this site.

We do not sell your personal data and we do not share it for third-party advertising.

5. Transfers outside the European Economic Area

Some of our service providers process data outside the EEA.

Tilda, which hosts this website, is established in the United Arab Emirates. According to its published documents, it stores and processes data in the European Union (storage and information security), in the United States (backup of website projects) and in Kazakhstan (technical support and profile administration). The European Commission has not issued an adequacy decision for the United Arab Emirates or for Kazakhstan.

The transfer is therefore based on the standard contractual clauses adopted by European Commission Implementing Decision (EU) 2021/914 of 4 June 2021 (controller-to-processor module), which are an appropriate safeguard within the meaning of Article 46(2)(c) GDPR. The clauses are incorporated into Tilda's Data Processing Agreement (section 8.2), available at tilda.cc/dpa. That agreement forms an integral part of Tilda's Terms of Service and applies automatically; the Irish Data Protection Commission is named in it as the competent supervisory authority. The clauses themselves are published at tilda.cc/files/scc.pdf.

Tilda's representative in the European Union for the purposes of Article 27 GDPR is Tilda Publishing, registration number 3701272VH, Pembroke House, 28–32 Pembroke Street Upper, Dublin 2, D02 NT28, Ireland.

Stripe and InPost process data within the EEA.

You may request a copy of the safeguards that apply to any of these transfers by writing to us at the address in section 1.

6. How long we keep your data

• Order and transaction data: 5 years from the end of the tax year in which the transaction took place (Polish tax law requirement).
• Complaints and withdrawal records: for the duration of the procedure and afterwards for the limitation period for claims.
• Enquiries and correspondence: 12 months from our last exchange.
• Data processed on consent: until you withdraw your consent.

7. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy of it;
• rectify data that is inaccurate or incomplete;
• erase your data ("right to be forgotten"), where we are not required to keep it by law;
• restrict processing;
• data portability — receive your data in a structured, machine-readable format;
• object to processing based on our legitimate interest;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, write to myartkingcompany@gmail.com. We will respond within one month.

You also have the right to lodge a complaint with the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
uodo.gov.pl

8. Cookies

We use cookies — small text files stored on your device.

We currently use necessary cookies only. They keep the site and the shopping cart working, and they are required for the store to function. We do not use analytics or advertising cookies, and we do not run tracking pixels.

These cookies are set by Tilda, the platform this website runs on (domains tildacdn.net and neo.tildacdn.com), and serve to maintain your session and the contents of your basket. Cookies strictly necessary to provide the service you requested do not require consent (Article 399 of the Polish Electronic Communications Law), which is why we do not display a consent banner.

You can manage or delete cookies in your browser settings. Blocking necessary cookies may prevent the store from working correctly.

9. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects for you.

10. Changes to this policy

We may update this policy. The current version is always available on this page, with the date of the last update shown at the top.