Your Rights Under GDPR

1. Right of Access (Article 15)

You have the right to obtain confirmation as to whether or not your personal data is being processed, and if so, to access your personal data and receive information about:

• The purposes of the processing
• The categories of personal data concerned
• The recipients to whom the data has been disclosed
• The retention period
• The existence of your other rights

2. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed.

3. Right to Erasure / "Right to be Forgotten" (Article 17)

You have the right to request the deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Note: Some data may need to be retained for legal obligations (e.g., tax records).

4. Right to Restriction of Processing (Article 18)

You have the right to restrict processing when:

• You contest the accuracy of the data (until verified)
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing (pending verification)

5. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This applies to data you have provided to us based on consent or contract.

6. Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests.

7. Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

Verification

To protect your privacy, we may need to verify your identity before processing your request. We may ask for:

• Confirmation of your email address
• Additional identifying information

Response Time

We will respond to your request within one month of receipt. This period may be extended by two further months if necessary, considering the complexity and number of requests. We will inform you of any extension within one month of receipt.

Fees

Requests are generally processed free of charge. However, we may charge a reasonable fee or refuse to act on manifestly unfounded or excessive requests.

What Happens After Deletion?

When you request deletion of your data:

• Your account will be deactivated
• Personal data will be deleted from active systems
• Order history may be retained in anonymized form for analytics
• Some data must be retained for legal/tax purposes (typically 5 years)
• Backup systems may retain data for up to 90 days

Data We Process

Depending on your interactions with us, we may process:

• Account information (name, email, password hash)
• Contact details (address, phone number)
• Order history and transaction data
• Payment information (processed by payment providers)
• Browsing activity and preferences
• Communication history (emails, support tickets)
• Marketing preferences

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:

Poland:
Prezes Urzędu Ochrony Danych Osobowych (PUODO)
ul. Stawki 2, 00-193 Warszawa
Website: uodo.gov.pl

You may also lodge a complaint with the supervisory authority in your country of residence or place of work.

Contact Us

For any questions about your data rights or this page:

Royal Fashion Vipol Sp. z o.o.
al. Jana Pawła II 27
00-867 Warszawa, Poland
Email: kontakt@royalfashion.pl
Phone: +48 791 133 000