Privacy
Last updated: 24 September 2026
This policy explains what personal data we collect when you visit olshbau.art or buy from us, why we collect it and what your rights are.
Who is responsible
The data controller is OLENA OLSHEVSKA, trading as OLSHBAU, ul. Artura Grottgera 15/37, 80-311 Gdańsk, Poland, NIP 5842885970. For any privacy question, write to info@olshbau.art.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Name, email, phone, delivery and billing address, order details | To take, ship and support your order | Contract, art. 6(1)(b) |
| Invoices and payment records | To keep accounting and tax records | Legal obligation, art. 6(1)(c) |
| Messages you send us | To answer you | Contract or our legitimate interest in replying, art. 6(1)(b)/(f) |
| Email address for news (only if you subscribe) | To send studio news and new works | Consent, art. 6(1)(a). You can unsubscribe at any time |
| Technical data (device, browser, pages visited) via essential cookies | To run the site, the cart and checkout securely | Legitimate interest, art. 6(1)(f) |
| Analytics and marketing cookies (only if you allow them) | To understand how the site is used | Consent, art. 6(1)(a) |
We do not sell your data. We do not make decisions about you based only on automated processing.
Payments are handled by Shopify and its payment partners. We do not see or store your full card details.
Who receives your data
We share only what each service needs to do its job:
- Shopify (Shopify International Ltd., Ireland, and its group): hosting of the shop and checkout, order management and payment processing.
- Payment providers shown at checkout (for example, card networks, PayPal).
- Carriers and customs brokers: delivery and customs clearance.
- Email provider: our mailbox and order emails.
- Accounting office: bookkeeping and tax.
- Authorities: when the law requires it.
Some of these providers may process data outside the European Economic Area (for example, in Canada or the United States). In that case the transfer is protected by an EU adequacy decision, such as the EU–US Data Privacy Framework, or by standard contractual clauses.
How long we keep it
- Order and accounting records: 5 years from the end of the year in which the tax obligation arose, as required by Polish tax law.
- Data needed for possible claims: until the claims expire under the law.
- Newsletter: until you unsubscribe.
- Messages: up to 3 years after our last exchange, unless they are part of an order.
Cookies
- Essential cookies keep the cart and checkout working. They do not need consent.
- Analytics and marketing cookies are used only if you accept them in the cookie banner. You can change your choice at any time by clicking "Cookie settings" in the footer.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw consent at any time. This does not affect processing that took place before.
To exercise your rights, write to info@olshbau.art. We reply within one month.
You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also complain to the authority in your own EU country.
Children
The shop is not intended for people under 16. We do not knowingly collect their data.
Changes
We will publish any change on this page, with a new date at the top.