KZB Studio
PL EN
My account Let's talk

Privacy Policy

This Privacy Policy describes the rules for processing and protecting the personal data of users of the website and online store available at kzbstudio.pl.

§ 1. Data Controller

The controller of your personal data is:
KZB Bartosz Noszczyk
VAT ID (NIP): 5771918649
E-mail: kontakt@kzbstudio.pl

§ 2. Scope of Data Collected

Depending on how you use the Service, we process the following categories of data:

  1. Purchase data: first and last name or company name, e-mail address, invoice details (VAT ID, address), and data necessary to fulfil the order;
  2. Account data: e-mail address, password (stored exclusively in encrypted form), order history, and assigned license keys;
  3. Communication data: content of messages sent to the Controller via e-mail;
  4. Technical data: IP address, browser type and version, operating system, pages visited in the Service, visit duration, and traffic source.

§ 3. Purpose and Legal Basis for Processing

  1. Performance of a sales contract (Art. 6(1)(b) GDPR) — we process data necessary for concluding and performing the contract, including delivering the Product, managing the Customer’s account, and handling order-related correspondence. Data are processed for the duration of the contract and the warranty period;
  2. Compliance with legal obligations (Art. 6(1)(c) GDPR) — we process data required by tax and accounting regulations (retention of sales documents) for the period prescribed by law, no less than 5 years from the end of the tax year in which the transaction was made;
  3. Legitimate interests of the Controller (Art. 6(1)(f) GDPR) — we process data to: ensure the security of the Service and protect against misuse, pursue or defend against potential claims (for the limitation period), and conduct statistical analysis to improve the Service;
  4. Consent (Art. 6(1)(a) GDPR) — for optional cookies (analytical, functional), based on separate consent given by the user. Consent may be withdrawn at any time without affecting processing carried out before withdrawal.

§ 4. Sharing Data with Third Parties

Personal data may be shared only with trusted entities, to the extent necessary for the stated purposes:

  1. PayPal (Europe) S.à r.l. et Cie, S.C.A. — to the extent necessary for payment processing, in accordance with PayPal’s privacy policy;
  2. Hosting provider — to the extent necessary for data storage on servers;
  3. Public authorities — based on applicable law, to the extent required by those authorities.

The Controller does not sell personal data to third parties or share it for marketing purposes without the user’s explicit consent.

§ 5. Data Transfers Outside the EEA

Personal data are as a rule processed within the European Economic Area. When using PayPal services, data may be transferred outside the EEA — exclusively on the basis of mechanisms ensuring an adequate level of protection, including European Commission adequacy decisions or standard contractual clauses.

§ 6. Rights of Data Subjects

In connection with the processing of your personal data, you have the following rights:

  1. Right of access (Art. 15 GDPR) — the right to obtain information about whether your data are being processed and to receive a copy of them;
  2. Right to rectification (Art. 16 GDPR) — the right to have inaccurate data corrected or incomplete data completed;
  3. Right to erasure (Art. 17 GDPR) — the right to request deletion of data in cases provided for by law (“right to be forgotten”);
  4. Right to restriction of processing (Art. 18 GDPR) — the right to request restriction of processing in cases provided for by law;
  5. Right to data portability (Art. 20 GDPR) — the right to receive your data in a structured format where processing is based on a contract or consent;
  6. Right to object (Art. 21 GDPR) — the right to object to processing based on the Controller’s legitimate interests;
  7. Right to lodge a complaint — the right to lodge a complaint with a supervisory authority. In Poland: the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.

To exercise the above rights, contact the Controller at: kontakt@kzbstudio.pl. The Controller will respond within one month of receiving the request.

§ 7. Cookies

  1. The Service uses cookies — small text files stored on the user’s end device to ensure the proper functioning of the website and to collect statistical information.
  2. We use the following categories of cookies:
    • Necessary — essential for the proper operation of the Service (session management, shopping cart, cookie consent storage). They do not require consent and cannot be disabled;
    • Analytical — used to analyse traffic in the Service and improve its functioning. Used only after obtaining your consent;
    • Functional — remembering your preferences (e.g. language). Used only after obtaining your consent.
  3. Cookie consent is managed by a banner displayed on your first visit. You may change or withdraw your consent at any time using the cookie settings icon available on the website.
  4. You may also manage cookies through your browser settings — however, disabling necessary cookies may prevent proper use of the Store.

§ 8. Data Security

The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction, in particular: encryption of data transmission (SSL/TLS), access control to data processing systems, and regular data backups.

§ 9. Changes to This Privacy Policy

The Controller reserves the right to amend this Privacy Policy in the event of changes in law or data processing methods. Customers with an account will be notified of significant changes by e-mail. The current version of the Privacy Policy is always available at kzbstudio.pl/en/privacy-policy.

Last updated: 22 June 2026.

§ 10. Contact

For matters concerning personal data protection, please contact:
E-mail: kontakt@kzbstudio.pl