This privacy policy explains what personal data we process in the shop annalogor.eu, why, and what rights you have. This is an informational translation; the Polish version is binding.
1. Data controller
The controller of personal data is Hanna Stepko, ul. Stanisława Przybyszewskiego 85F m. 35, 30-128 Kraków, NIP (tax ID) 6772538820, e-mail sales@annalogor.pl, phone +48 453 161 221. You can contact us at this e-mail address about anything related to your personal data.
2. What data, for what purpose and on what legal basis
- Fulfilling orders — name, e-mail, phone, delivery address, chosen parcel locker, invoice details (company, tax ID). Basis: performance of a contract (Art. 6(1)(b) GDPR) and tax and accounting obligations (Art. 6(1)(c) GDPR).
- Professional Account — registration form data, salon name, city, country and the uploaded document confirming qualifications. Basis: performance of the account contract (Art. 6(1)(b) GDPR).
- Replying to messages (consultation form) — name, phone, e-mail, message. Basis: our legitimate interest in replying (Art. 6(1)(f) GDPR).
- Complaints, returns and legal claims — order and correspondence data. Basis: legal obligation and legitimate interest (Art. 6(1)(c) and (f) GDPR).
- Shop security — IP address and technical information in server logs, limiting login attempts. Basis: legitimate interest (Art. 6(1)(f) GDPR).
Providing data is voluntary but necessary to place an order, open an account or receive a reply.
3. Recipients
We share data only with entities that help us run the shop, under data processing agreements or as separate controllers:
- hosting provider — OVH Sp. z o.o. (servers in the European Union);
- carriers — InPost and courier companies (data needed for delivery);
- the e-mail provider used to send messages from the shop;
- Telegram (the messenger in which shop staff receive notifications about orders and requests) — this may involve a transfer outside the European Economic Area, based on standard contractual clauses or other GDPR mechanisms;
- our accounting office and authorities entitled by law.
When you type an address in the order form, your browser may send the typed text to free address suggestion services (Photon / OpenStreetMap, zippopotam.us) and to the InPost parcel locker search. These services receive the typed fragment of the address and your device's IP address; we do not pass them any other data.
4. How long we keep data
- order and invoice data — for the period required by tax law (5 years from the end of the tax year) and until claims become time-barred;
- Professional Account data and the qualification document — until the account is deleted;
- form messages — up to 2 years after the correspondence ends;
- server logs — up to 12 months.
5. Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability and to object to processing based on legitimate interest. To exercise these rights, write to sales@annalogor.pl. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or the data protection authority in your country.
We do not make decisions based solely on automated processing and do not profile customers.
6. Cookies and browser storage
The shop uses only cookies and browser storage that are strictly necessary for it to work. We do not use third-party advertising or analytics cookies. The shop's fonts and scripts are served from our own server.
al-cart-v1(browser storage) — cart contents;al_cur(cookie, 1 year) — selected currency PLN/EUR;wordpress_logged_in_*,wordpress_sec_*(cookies, session / up to 14 days) — signing in to a Professional Account;al-me-v1(session storage) — information about the signed-in account;al_consent(browser storage) — remembering the cookie notice;- the last delivery address you entered (browser storage) — so you don't have to type it again.
You can delete or block cookies in your browser settings; blocking strictly necessary cookies may prevent you from placing an order or signing in. If we add analytics or marketing tools in the future, they will run only after you consent in the cookie banner, and this policy will be updated.
7. Changes
We will announce significant changes to this policy on this page. This policy applies from 04.11.2026.
