The website bus256.com is operated by Jonasz Maczyński, a natural person acting as the administrator of the website and online store operating under the name “bus256”. Contact with the administrator is possible exclusively by e-mail studio@bus256.com

The above person is the Data Controller within the meaning of the GDPR.

a) Automatically collected data:

• IP address,
• browser type and operating system,
• device information,
• pages visited and time spent on the website.

Data is collected via Google Analytics (GA4) for statistical and analytical purposes.

b) Data provided by users:

• name and surname,
• email address,
• phone number,
• billing address,
• shipping address,
• order details.

Providing personal data is voluntary but necessary to conclude and perform a sales contract.

Personal data is processed for the following purposes:

• conclusion and performance of sales contracts,
• order fulfillment and delivery,
• payment processing,
• customer communication,
• compliance with accounting and tax obligations,
• website analytics and security,
• establishing, pursuing or defending legal claims.

No automated decision-making or profiling is carried out.

• 4.1 Art. 6(1)(b) GDPR
• 4.2 Art. 6(1)(c) GDPR
• 4.3 Art. 6(1)(f) GDPR
• 4.4 Art. 6(1)(a) GDPR

Personal data may be shared with trusted service providers strictly to the extent necessary:

• order management system,
• payment processing,
• courier companies,
• hosting providers
• IT service providers,
• website statistics.

All entities process data based on appropriate legal safeguards.

Some service providers may process data outside the European Economic Area. In such cases, data transfers are carried out based on appropriate safeguards, including Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable.

• 7.1 Accounting and tax documentation as required by Polish law.
• 7.2 Data related to potential claims up to 6 years.
• 7.3 Analytics data retention follows Google Analytics settings.
• 7.4 Data processed on the basis of consent until consent is withdrawn.

The website uses cookies necessary for proper functioning and analytical cookies.

Analytical cookies are used only based on user consent where required by applicable law. Users may manage cookie preferences via browser settings or consent management tools implemented on the website.

Under GDPR, you have the right to:

• 9.1 Access your personal data.
• 9.2 Correct inaccurate or incomplete data.
• 9.3 Request deletion of your data ("right to be forgotten").
• 9.4 Restrict or object to the processing of your data.
• 9.5 Data portability.
• 9.6 Withdraw your consent at any time.
• 9.7 Lodge a complaint with a data protection authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office (UODO)
ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland

This Privacy Policy may be amended. The current version is always available on the website.