Privacy Policy

Privacy Policy

Stratus Publishing Online Store

1. Data Controller

The controller of personal data is:
Wydawnictwo Stratus sp.j. Artur Juszczak, Robert Pęczkowski
ul. Żeromskiego 6A, 27-600 Sandomierz, Poland
VAT ID (NIP): 8641866890, REGON: 260091627

Contact e-mail: office@mmpbooks.com

2. Scope and Purposes of Data Processing

We process personal data only to the extent necessary for:

• processing orders placed in the online store,
• handling payments and deliveries,
• issuing invoices and maintaining accounting records,
• contacting customers by e-mail or telephone,
• handling complaints and returns,
• sending newsletters (if the Customer has given consent).

3. Legal Basis for Processing

Personal data are processed on the basis of:

• Article 6(1)(b) GDPR – performance of a sales contract,
• Article 6(1)(c) GDPR – compliance with legal obligations (e.g. tax regulations),
• Article 6(1)(a) GDPR – consent (e.g. for newsletters or marketing),
• Article 6(1)(f) GDPR – legitimate interests of the Controller (e.g. pursuing claims).

4. Data Recipients

Personal data may be shared with:

• courier companies and postal operators,
• payment operators (PayPal, Przelewy24, banks),
• IT, hosting and accounting service providers,
• public authorities where required by law.

5. Data Retention Period

• data related to orders – stored for the period required by tax and accounting regulations (at least 5 years),
• marketing data (e.g. newsletter) – until consent is withdrawn,
• data linked to a store account – until the User deletes the account.

6. Rights of Data Subjects

Each person whose data are processed has the right to:

• access their personal data,
• rectify their data,
• erase their data (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing,
• withdraw consent (where applicable).

To exercise these rights, please contact us at: office@mmpbooks.com

7. Cookies

• The website uses cookies to ensure proper functioning of the site, improve the shopping experience, and for statistical and marketing purposes.
• Users may change cookie settings at any time in their web browser.
• Detailed rules for the use of cookies are set out in the Cookies Policy.

8. Data Security

We protect personal data using appropriate technical and organisational measures, including encrypted transmission (SSL) and secure servers and databases.

9. Complaints

If you believe that the processing of your personal data violates GDPR provisions, you have the right to lodge a complaint with the competent supervisory authority.