GDPR Information

Last Updated: August 4, 2026

Your Rights Under GDPR

The General Data Protection Regulation (GDPR) provides European Union residents with specific rights regarding their personal data. As a business operating in Poland, we are committed to upholding these rights.

Data Controller Information

Data Controller: Kawa Polska
Address: ul. Floriańska 47, 31-019 Kraków, Poland
Email: [email protected]

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you
• Consent: Where you have given explicit consent for specific purposes
• Legitimate Interests: Where processing is necessary for our legitimate business interests
• Legal Obligation: Where we must process data to comply with legal requirements

Your Rights

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

Right to Withdraw Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by two additional months, and we will inform you of any such extension.

Data Protection Officer

For any questions about how we handle your personal data, you can contact our data protection representative at [email protected].

International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority:

Polish Data Protection Authority (UODO)
ul. Stawki 2
00-193 Warsaw, Poland
Website: uodo.gov.pl

Data Retention Periods

We retain different types of personal data for different periods:

• Order information: 7 years (accounting requirements)
• Marketing consent: Until withdrawn
• Website analytics: 26 months
• Customer inquiries: 3 years

Children's Data

We do not knowingly collect or process personal data from individuals under 16 years of age without parental consent.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated date.