Privacy policy

This document sets out the Privacy Policy and Cookies Policy for the Service available at https://furecollection.com, owned by FURE Collection Angelika Piekarz.

§1 Data Controller

The controller of your personal data is FURE Collection Angelika Piekarz, Wieniec 39, 88-300 Wieniec, NIP: 5571713440, REGON: 544557804 (hereinafter referred to as the “Controller”).

Contact details of the Controller:

  • Postal address: Wieniec 39, 88-300 Wieniec
  • Email address: info@furecollection.com
  • Phone: +48 603 034 510

Based on Article 37 of the GDPR, the Data Controller has not appointed a Data Protection Officer (DPO) and independently fulfils the obligations related to personal data protection.

§2 Definitions

Privacy and Cookies Policy

This document, hereinafter referred to as the “Policy”

GDPR (General Data Protection Regulation)

Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Controller

Data Controller: the entity which determines the purposes and means of the processing of personal data.

Personal data

This is information relating to natural persons, concerning an identified or identifiable person, directly or indirectly; personal data includes in particular identification numbers and factors defining physical, physiological, mental, economic, cultural, or social characteristics.

Service 

The website operated by the Controller at: https://furecollection.com.

Cookies:

Cookies (“ciasteczka”) are small pieces of information in the form of a text string that are placed or read by a website in the web browser used by the User.

Service User

Any natural person visiting the Service or using at least one service provided by the Controller or any function of the Service.


Self-employed entrepreneurs (JDG).

Natural persons conducting business activity based on an entry in the Central Register and Information on Economic Activity (CEIDG).

§3 General Provisions

  1. The Controller collects data of Users of the Service available at: https://furecollection.com
  2. The type of data collected by the Controller depends on the service offered by the Controller that the User uses.
  3. Personal data shall be processed by the Controller in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, known as the General Data Protection Regulation, hereinafter referred to as the “GDPR”.
  4. The provision of any personal data is voluntary and depends on the User’s decision. However, in some cases, providing certain personal data is necessary in order to meet the User’s expectations regarding the use of services offered by the Controller.
  5. The services offered by the Controller within the Service are intended for persons over 18 years of age. Therefore, the Controller does not knowingly process children’s personal data.

§4 Purpose, Legal Basis and Storage Period of Data Processing

1. Customer Account registration

1.1 Whose data is processed?

The data of persons who have registered an account on the website https://furecollection.com is processed.

1.2 What data is processed?

  • first name and surname
  • email address
  • phone number
  • delivery address
  • billing address
  • company name and tax identification number (NIP) (sole traders / JDG)

1.3 What is the purpose of data processing?

The data will be processed for the purpose of providing services related to the creation and maintenance of an account in the Service.

1.4 What is the legal basis for data processing?

  • Preparation and performance of a contract – Article 6(1)(b) GDPR.
  • Legitimate interest of the Controller, for the purpose of optimising the services provided – Article 6(1)(f) GDPR.

1.5 What is the data retention period?

The data is processed until the contract is performed (e.g. deletion of the account from the Service), and thereafter for the period necessary to establish, pursue, or defend against claims.

1.6 Is providing data necessary?

Providing data is voluntary; however, without providing the data it will not be possible to create an account.

2. Order processing in the online store:

2.1 Whose data is processed?

Data of persons who placed an order on the website https://furecollection.com .

2.2 What data is processed?

  • first name and surname
  • email address
  • phone number
  • delivery address
  • billing address
  • company name and tax identification number (NIP) (sole traders / JDG)

2.3 What is the purpose of data processing?

The data will be processed for the purpose of order fulfilment, handling complaints, pursuing or defending against claims, as well as for compliance with tax and accounting obligations.

2.4 What is the legal basis for data processing?

  • Preparation and performance of a contract – Article 6(1)(b) GDPR.
  • Legitimate interest consisting in establishing, pursuing, and defending against possible claims – Article 6(1)(f) GDPR.
  • Compliance with a legal obligation imposed on the Controller – Article 6(1)(c) GDPR.

2.5 What is the data retention period?

  • The data is processed until the contract is performed, whereas data obtained for the purpose of fulfilling legal obligations is processed until those obligations are fulfilled.
  • Data processed on the basis of a legitimate interest is processed until the purpose is achieved or until the User effectively objects. The above retention periods may be extended by the time necessary to establish, pursue, or defend against claims. After this period, personal data will be anonymised or deleted.

2.6 Is providing data necessary?

Podanie danych jest dobrowolne, jednak bez podania danych nie będzie można obsłużyć
zamówienia.

3. Contact form:

3.1 Whose data is processed?

Data of persons who contact us via the contact form.

3.2 What data is processed?

  • email address
  • first name and surname
  • phone number

3.3 What is the purpose of data processing?

Identification of the User contacting the Controller and providing a response to the inquiry.

3.4 What is the legal basis for data processing?

Legitimate interest – Article 6(1)(f) GDPR.

3.5 What is the data retention period?

Until the expiry of the limitation period for claims.

3.6 Is providing data necessary?

Providing data is voluntary, but necessary to verify the User.

4. Product availability information:

4.1 Whose data is processed?

Data of persons who wish to receive information about product availability.

4.2 What data is processed?

  • email address

4.3 What is the purpose of data processing?

Providing information about product availability.

4.4 What is the legal basis for data processing?

Providing information about product availability on the basis of consent – Article 6(1)(a) GDPR.

4.5 What is the data retention period?

Data is processed for the period necessary to provide the information or until consent is withdrawn, whichever occurs first.

4.6 Is providing data necessary?

Providing data is voluntary, but necessary to obtain the information.

5. Newsletter:

5.1 Whose data is processed?

Data of persons who have subscribed to the Newsletter.

5.2 What data is processed?

  • email address
  • name

5.3 What is the purpose of data processing?

  • Provision of the Newsletter service, informing about discounts, promotions, and new offers.
  • Customising the content of the subscribed Newsletter service to the User’s activity in the Service.

5.4 What is the legal basis for data processing?

  • Performance of the Newsletter service agreement – Article 6(1)(b) GDPR.
  • Legitimate interest in direct marketing (information about offers, new products, and content personalisation) – Article 6(1)(f) GDPR.

5.5 What is the data retention period?

Personal data will be processed until the User withdraws consent for processing, and thereafter for the period necessary to establish, pursue, or defend against claims. After this period, personal data will be anonymised or deleted.

5.6 Is providing data necessary?

Providing data is voluntary; however, without providing the data it will not be possible to subscribe to the Newsletter.

§5 Entrusting and Sharing of Personal Data

  1. The Controller may entrust the processing of Customers’ personal data to third parties only to the extent necessary to achieve the purposes related to the operation of the online Store and the performance of the sales contract.
  2. In connection with its business activity, the Controller may disclose personal data to the following entities, if necessary for the purposes of processing:

    2.1 companies providing IT services or IT solutions,

    2.2 courier and postal service providers,

    2.3 banks and other financial and payment institutions,

    2.4 public authorities receiving data in connection with the Controller’s legal obligations,

    2.5 companies providing accounting and bookkeeping services.
  3. The Controller ensures that in each case of entrusting the processing of personal data, it is carried out on the basis of an appropriate data processing agreement in accordance with Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§6 Rights of the Service User

  1. In connection with the processing of personal data, the User is entitled to the following rights:

    1.1 right of access to data – the User has the right to obtain information about the personal data stored by the Controller concerning them, including a copy of such data.

    1.2 right to rectification (correction) of data – the User has the right to request the correction of their personal data if it is incorrect or incomplete.

    1.3 right to erasure of data – the User has the right to request the deletion of their personal data stored by the Controller in the following cases: (a) the personal data is no longer necessary for the purposes for which it was collected, (b) the User has withdrawn consent on which the processing is based and there is no other legal basis for processing, (c) the User has objected to the processing and there are no overriding legitimate grounds for processing, or the objection concerns processing for direct marketing purposes, (d) the personal data has been processed unlawfully, (e) the personal data must be erased to comply with a legal obligation under Union or national law.

    1.4 right to withdraw consent at any time for processing of personal data for marketing purposes – the User has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

    1.5 right to restriction of processing – the User has the right to request restriction of processing in the following cases: (a) the User contests the accuracy of the personal data for a period allowing the Controller to verify its accuracy, (b) the processing is unlawful and the User opposes deletion and requests restriction instead, (c) the Controller no longer needs the personal data but it is required by the User for establishment, exercise or defence of legal claims, (d) the User has objected under Article 21(1) GDPR pending verification whether the Controller’s legitimate grounds override those of the User.

    1.6 right to object to processing (objection due to special situation) – if the User’s personal data is processed on the basis of the Controller’s legitimate interest, the User has the right to object at any time in accordance with Article 21 GDPR.

    1.7 right to data portability – the User has the right to receive their personal data in a structured, commonly used, machine-readable format and transmit it to another controller without hindrance, where processing is based on consent and carried out by automated means.

    1.8 right to lodge a complaint with a supervisory authority, i.e. the President of the Personal Data Protection Office. :::
  2. In order for the User to exercise the rights indicated in §6 of the Policy, the User should contact the Controller.

§7 Transfer of Personal Data to Third Countries

  1. In connection with the Controller’s use of analytical and marketing tools provided by entities established outside the European Economic Area, Users’ personal data may be transferred to third countries, in particular to the United States.
  2. The Controller uses in particular the following tools:

    2.1 Google Analytics – an analytics service provided by Google LLC, enabling the analysis of statistics regarding the use of the online Store,

    2.2 Google Ads – an advertising tool provided by Google LLC, enabling the conduct of advertising campaigns in the Google search engine and Google advertising network, as well as the analysis of the effectiveness of such campaigns,

    2.3 Meta Pixel (Facebook Pixel) – a marketing tool enabling the analysis of advertising effectiveness and remarketing activities, provided by Meta Platforms, Inc.,

    2.4 MailerLite – an e-mail marketing and marketing automation tool provided by MailerLite, enabling newsletter management, subscriber database management, sending e-mails, and analysis of mailing campaign effectiveness,

    2.5 Mailchimp – an e-mail marketing and marketing automation tool provided by Mailchimp, enabling newsletter management, subscriber database management, sending e-mails, and analysis of mailing campaign effectiveness.
  3. In connection with the use of the above-mentioned tools, Users’ personal data may be transferred to entities based in the United States of America.
  4. Transfers of data to third countries take place on the basis of mechanisms ensuring an adequate level of protection of personal data, in particular:

    4.1 an adequacy decision of the European Commission confirming an adequate level of data protection, including under the EU-US Data Privacy Framework, or

    4.2 standard contractual clauses adopted by the European Commission in accordance with Article 46 GDPR.
  5. The Administrator takes all due care to ensure that entities processing personal data in third countries provide an adequate level of protection and implement technical and organizational measures in accordance with the requirements of the GDPR.
  6. Detailed information regarding the principles of data processing by the entities indicated in this paragraph can be found in the privacy policies of those entities, available on their respective websites.

§8 Cookies Policy

1. Purpose of using cookies:

1.1 The Controller does not collect any information automatically, except for information contained in cookies.

1.2 Cookies are used in various ways.

1.3 Cookies are used for functional purposes, content personalisation, statistical, analytical, and marketing purposes.

2. Types of cookies:

2.1 The Service uses the following types of cookies:

  • “session cookies”, which are deleted from the device’s hard drive after the browser session ends or the computer or mobile device is turned off,
  • “persistent cookies”, which are stored on the computer or mobile device until they are manually deleted by the User via the appropriate browser tools or until they expire,
  • “third-party cookies”, which are information placed by scripts of other websites.

    2.2 The following types of cookies are used within the Service:
  • “necessary” cookies, enabling the use of services available within the Service,
  • “performance” cookies, enabling the collection of information on how the Service is used,
  • “functional” cookies, allowing the Service to “remember” user-selected settings and personalize the user interface, e.g., regarding the chosen language or region,
  • “advertising” cookies, enabling the delivery of advertising content more tailored to Users’ interests.

3. Google Analytics

  • The Service uses Google Analytics, a web analytics service. Its provider is Google Ireland Limited, a company registered and operating under the laws of Ireland (Registration No. 368047 / VAT No. IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland.
  • Google Analytics uses so-called “cookies”, text files stored on the User’s computer, which enable the analysis of how the User uses the Service.
  • The storage of Google Analytics cookies is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR). The Controller has a legitimate interest in analysing User behaviour both for the purpose of optimising its online offer and its advertising.
  • Users of the Service can review Google’s Privacy Policy at: https://policies.google.com/?hl=en
  • If a User of the Service does not want information about them to be collected in this way, they can, for example, change their browser settings or use the tool available at: https://tools.google.com/dlpage/gaoptout?hl=en

4. Meta Pixel (Facebook Pixel)

  • The Service uses the marketing tool Meta Pixel (Facebook Pixel), which enables the analysis of advertising effectiveness and the conduct of remarketing activities. The provider of the tool is Meta Platforms Ireland Limited, a company registered and operating under the laws of Ireland, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
  • The Meta Pixel uses tracking technologies, in particular cookies and similar technologies, which are stored on the User’s end device. These enable the analysis of how the Service is used and allow the displayed advertisements to be tailored to the User’s interests.
  • By using the above tool, it is possible in particular to measure the effectiveness of advertisements published on Meta-owned platforms, optimize advertising campaigns, and display personalized ads to Service Users within Meta’s advertising services.
  • The processing of data in connection with the use of Meta Pixel is based on the User’s consent given in accordance with Article 6(1)(a) GDPR, in particular via cookie banner settings or a consent management tool.
  • Information collected using the above tool may be transferred to Meta’s servers, including those located in the United States.
  • Detailed information regarding data processing by Meta is available in its privacy policy at: https://www.facebook.com/privacy/policy/
  • The User may manage advertising preferences at any time in their Facebook account settings: https://www.facebook.com/adpreferences/ad_settings

5. Google Ads

  • The Service uses the Google Ads tool, which is used to run advertising campaigns on the Internet. The service provider is Google Ireland Limited – a company registered and operating under Irish law (Registration No.: 368047 / VAT No.: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland.
  • Google Ads uses “cookies” and similar technologies that are stored on the User’s end device and enable the analysis of advertising effectiveness as well as the adjustment of advertising content to the User’s interests.
  • The storage of cookies within Google Ads is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR). The Controller has a legitimate interest in carrying out marketing activities and analysing the effectiveness of advertising campaigns. The User may review Google’s Privacy Policy at: https://policies.google.com/?hl=en
  • If a User of the Service does not want information about them to be collected in this way, they may change their browser settings or manage advertising preferences in their Google account: https://adssettings.google.com

6. Cookie management:

  • Most commonly, browser settings by default allow cookies and other information to be stored on the end device. If the User does not agree to such storage, appropriate changes must be made in the web browser settings. It is possible to disable their storage for all connections in a given browser or for a specific website, as well as to delete them. The method of managing cookies depends on the software used. Up-to-date information on cookie management can be found in the settings of the web browser being used.
  • Information on managing cookies on a mobile phone can be found in the User Manual of the respective device.
  • Consent to the processing of cookies is voluntary. However, it should be noted that restrictions on their use may hinder or prevent the use of some functionalities of the Service available at https://furecollection.com

§9 Data Security

  1. The User’s personal data is stored and protected with due diligence, in accordance with the Controller’s internal procedures. The Controller processes information about the User using appropriate technical and organisational measures that comply with generally applicable legal requirements, in particular data protection laws. These measures are primarily aimed at protecting Users’ personal data against access by unauthorised persons.
  2. In particular, access to Users’ personal data is granted only to authorised persons who are obliged to keep such data confidential, or to entities entrusted with the processing of personal data on the basis of a separate data processing agreement.

§10 Final Provisions

  1. The Controller reserves the right to amend this Privacy and Cookies Policy. In such a case, an updated version will be published in this location.
  2. In matters not regulated by this Privacy Policy, the provisions of data protection law shall apply.
  3. This Privacy Policy is effective as of 18 April 2026.




© COZiR Academy | This document is protected under the Copyright and Related Rights Act. Its use is permitted solely in the online store indicated in the submitted document. Copying, modifying, or publishing it elsewhere without the author’s consent is prohibited and may result in civil and criminal liability.