Privacy Policy

Depending on the type of service, we collect the following data:

WHEN PLACING AN ORDER:

• First and last name
• Email address
• Phone number
• Delivery address (street, postal code, city, country)
• Company name and Tax ID (optional, for invoices)

WHEN REGISTERING AN ACCOUNT:

• First and last name
• Email address
• Password (stored in encrypted form)

WHEN SUBSCRIBING TO NEWSLETTER:

• Email address

AUTOMATICALLY COLLECTED DATA:

• IP address
• Browser and operating system type
• Preferred language and currency
• Browsing history of products
• Cart and wishlist contents

Providing data is voluntary; however, providing the data marked as required is necessary to conclude and perform the contract (e.g., to process an order or create an account). Failure to provide such data makes it impossible to use these services.

We process your data for the following purposes:

CONTRACT PERFORMANCE (Art. 6(1)(b) GDPR):

• Accepting and processing orders
• Contact regarding orders
• Issuing invoices or receipts
• Handling returns and complaints

LEGITIMATE INTEREST (Art. 6(1)(f) GDPR):

• Conducting statistics and analysis
• Pursuing or defending against claims
• Detecting fraud and ensuring security

CONSENT (Art. 6(1)(a) GDPR):

• Sending newsletters with promotional information
• Direct marketing

LEGAL OBLIGATION (Art. 6(1)(c) GDPR):

• Maintaining accounting documentation
• Processing complaints in accordance with consumer law

We use analytics and marketing tools that may profile your activity in the Store (e.g., analyze your behavior on the website and tailor content and advertising). Profiling is carried out on the basis of your consent (analytics and marketing cookies) or our legitimate interest.

We do not make decisions concerning you that are based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

You may withdraw your consent to analytics and marketing cookies at any time (the "Cookie settings" link in the footer) and object to the processing of your data for marketing purposes.

The website uses cookies. These are small text files stored on your device.

TYPES OF COOKIES USED:

Necessary cookies (required for the website to function):

• Session identifier – maintaining login state
• Shopping cart – storing products in the cart
• Cookie consent – remembering your cookie preferences

Preference cookies (with consent):

• Currency and language preferences
• Display settings

Analytics cookies (with consent):

• Microsoft Clarity – heatmaps and session recordings (cookies: _clck, _clsk)

Visit statistics are collected using Umami, which does not use cookies and does not require consent.

MANAGING COOKIES:

On your first visit, we display a banner asking for consent. You can change your preferences at any time by clicking the Cookie settings link in the footer. You can also manage cookies in your browser settings. Disabling necessary cookies may prevent some store features from working (e.g., the cart).

Your data may be transferred to the following entities:

COURIER AND LOGISTICS COMPANIES (for order delivery):

• InPost S.A. (Parcel Lockers, InPost Courier)
• DHL Parcel Polska Sp. z o.o.
• DPD Polska Sp. z o.o.
• GLS Poland Sp. z o.o.
• UPS Polska Sp. z o.o.
• FAN Courier S.R.L.
• PKN Orlen S.A. (ORLEN Paczka)
• Żabka Polska S.A. (DHL pickup points)

PAYMENT OPERATORS (for transaction processing):

• Stripe, Inc.

ANALYTICS (with consent):

• Microsoft Corporation (Clarity – heatmaps)

IT SERVICE PROVIDERS:

• Hosting and server infrastructure
• E-commerce system support

OTHERS:

• Accounting office (accounting documentation)
• Government authorities (based on legal provisions)

We do not sell or share personal data with third parties for marketing purposes.

Some of the entities whose services we use process data outside the European Economic Area (EEA), in particular in the United States:

• Stripe – payment processing;
• Microsoft (Clarity) – analytics, with your consent;
• Google – Google tools / consent mode, with your consent.

The transfer of data to these entities is carried out on the basis of safeguards required by the GDPR, in particular a European Commission adequacy decision confirming an adequate level of protection (the EU–US Data Privacy Framework) or standard contractual clauses (SCC).

You may obtain a copy of the applied safeguards by contacting us at: info@homescreen.pl.

We store your data for the following periods:

• Order-related data – 5 years from the end of the tax year (tax obligation)
• User account data – until account deletion or 3 years from last activity
• Newsletter – until unsubscription
• Cookies – according to the cookie's lifetime (from session to 1 year)
• Data for complaint purposes – until claims expire (2-6 years)

After these periods, data is permanently deleted or anonymized.

Under GDPR, you have the following rights:

• RIGHT OF ACCESS – you can obtain information about processed data
• RIGHT TO RECTIFICATION – you can correct inaccurate data
• RIGHT TO ERASURE (right to be forgotten) – you can request data deletion
• RIGHT TO RESTRICTION OF PROCESSING – you can limit the scope of processing
• RIGHT TO DATA PORTABILITY – you can receive data in a machine-readable format
• RIGHT TO OBJECT – you can object to processing for marketing purposes
• RIGHT TO WITHDRAW CONSENT – you can withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal)

To exercise these rights, contact us at: info@homescreen.pl

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

We apply appropriate technical and organizational measures to protect your data:

• Data transmission encryption (SSL/TLS)
• User password encryption
• Regular software updates
• Limited data access only for authorized persons
• Protection against unauthorized access
• Data backups

Despite applying the highest security standards, no system is 100% secure. In case of a data breach that may pose a risk to your rights, you will be promptly notified.

The Controller reserves the right to make changes to this Privacy Policy. We will inform you about significant changes through:

• A notice on the website
• Email message (for registered users)

Changes take effect on the date specified in the notice, but not earlier than 14 days from the publication date.

Using the store after changes are made constitutes acceptance of the new Privacy Policy.