Information about your rights under the General Data Protection Regulation.
Last updated: August 2026
Ceramika Kraków is the data controller responsible for your personal data collected through this website. Our contact details are:
Address: ul. Zabłocie 23/5, 30-701 Kraków, Poland
Email: [email protected]
The General Data Protection Regulation (GDPR) is a European Union regulation that came into effect on 25 May 2018. It governs how organizations collect, store, use, and protect personal data of individuals within the EU and EEA. It also regulates the transfer of personal data outside these areas.
As a data subject, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.
Also known as the "right to be forgotten," you may request that we delete your personal data when there is no compelling reason for its continued processing. This right applies in specific circumstances, including when the data is no longer necessary for its original purpose.
You have the right to request that we limit the processing of your personal data. When processing is restricted, we may continue to store your data but will not use it without your consent except in certain circumstances.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. We do not currently engage in such automated decision making.
To exercise any of your rights, please contact us using the details provided above. We may need to verify your identity before processing your request. We aim to respond to all legitimate requests within one month, though this period may be extended by two further months where necessary, depending on the complexity and number of requests.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warsaw
Poland
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
We process personal data only where we have a lawful basis to do so. The legal bases we rely on include:
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. The current version will always be available on this page with the date of the last update.