Privacy Policy

General provisions

This Privacy Policy (hereinafter: "Privacy Policy") defines the rules for processing personal data obtained through the website https://vntg.studio (hereinafter: "Online Store") and is addressed to users of the Online Store. The owner of the Online Store and at the same time the data controller is Rafał Przyborowski/REAL WORLD ASSETS PROSTA SPÓŁKA AKCYJNA, address: ul. Hoża 86/410 Warsaw 00-682, registration data: Commercial law company: entered into the register of entrepreneurs by Real World Assets Prosta Spółka Akcyjna under KRS number 0001087639. Share capital of PLN 1000.00. NIP: 7011189772, REGON: 527798174, e-mail address: Club.vntg.studio@gmail.com, contact phone number: +48507132568 (charge as for a standard connection – according to the price list of the relevant operator), (hereinafter: "Controller"). Contact with the Controller is possible by mail, phone, or e-mail.

Personal data collected by the Controller via the Online Store are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "GDPR").

The Controller attaches great importance to protecting the privacy of Online Store users and the security of processing their personal data.

Terms written with a capital letter, used in this privacy policy, have the meaning assigned to them in the Online Store Regulations available at https://vntg.studio.

  1. PURPOSES, LEGAL BASES FOR PROCESSING, CATEGORIES OF PERSONAL DATA
    1. CONSENT

      The Controller processes your data based on your consent.

      The Controller also processes your data based on consent if you agree to the use of cookies other than those necessary for the provision of services by electronic means, including the installation of cookies by third parties and the transfer of data collected via these cookies to the aforementioned parties. You can withdraw your consent to the installation of cookies other than those necessary for the provision of services by electronic means at any time, in the settings of the web browser on the device you are using or from the Online Store footer by clicking on the "Change privacy settings" link. Withdrawal of consent does not affect the legality of data processing collected via cookies until consent is withdrawn. More information on the processing of personal data collected via the Controller's own cookies and those installed by third parties based on consent, as well as the possibility of withdrawing consent, can be found in the Cookie Policy vntg.studio™ vintage shop.

      We use tools that allow us to display personalized ads such as Google search ads, remarketing, ads displayed on YouTube and social media platforms. Dedicated ads will be displayed if the phrase you enter in the search engine matches the list of phrases we have set in the campaign; and also if the Google algorithm matches you based on so-called targeting based on the pages you visit, videos you watch on YouTube, etc. You can withdraw your consent for us to use the aforementioned tools, including Google Marketing Platform with cookies. You can do this on the Google Marketing Platform opt-out page or on the Network Advertising Initiative opt-out page.

    2. CONCLUSION AND PERFORMANCE OF THE AGREEMENT

      The Controller processes your personal data to take action at your request aimed at concluding an agreement with the Controller or when it is necessary to perform an already concluded agreement (Art. 6 sec. 1 lit. b GDPR), including, among others, when it is necessary for:

      • concluding agreements with the Controller for the provision of electronic services, as referred to in the Online Store Regulations, related to setting up an Account in the Online Store and its performance,
      • concluding a Sales Agreement for goods with the Controller and its performance,
      • sending applications to the Controller via e-mail or contact forms available on the Website.
    3. LEGAL OBLIGATION

      The Controller processes your personal data to fulfill a legal obligation incumbent on the Controller (Art. 6 sec. 1 lit. c GDPR).

      In practice, this means the need to process your personal data in connection with fulfilling obligations arising from legal provisions, in particular obligations arising from tax regulations, the accounting act, the act on providing services by electronic means, the civil code, and the act on consumer rights.

    4. LEGITIMATE INTEREST OF THE CONTROLLER OR A THIRD PARTY

      The Controller may process your personal data if it is necessary for purposes arising from the legitimate interests pursued by the Controller or by a third party (Art. 6 sec. 1 lit. f GDPR), including, among others, in the following cases:

      • Customer relationship management

        For internal purposes, the Controller analyzes your past cooperation to compile sales analyses and statistics. Based on the above information, the Controller gains knowledge helpful in preparing offers, setting price lists, better tailoring the offer to your interests, taking more targeted marketing actions, and improving the quality of services provided.

      • Pursuing claims by the Controller and defending against claims directed at the Controller.

        In the event of your non-performance or improper performance of an agreement concluded with the Controller, the Controller, within the framework of applicable law, may pursue claims against you, e.g., demand payment for sold goods.

        In the event that you direct claims against the Controller, the Controller processes your personal data to defend against such claims.

      • Enabling Customers to make payments via payment services

        If you choose an online payment method, the Controller transfers your personal data to the payment service provider to enable you to make the payment using your chosen method (payment card or bank transfer).

      • Contacting the Controller

        You can contact the Controller via e-mail, phone, or online contact forms available on the Website. In such a case, we may process your personal data to communicate with you and handle the matter you initiated.

      • Data retention for accountability purposes, i.e.,

        proving compliance with personal data processing regulations.

      • Website operation

        The Controller uses necessary cookies for the proper functioning of the Website. The use of necessary cookies may involve the processing of your personal data, the basis of which is the legitimate interest of the Controller consisting in operating the website.

      • Creating audience databases

        If you are a logged-in Client, your e-mail address stored in the Administrator's mailing database may be transferred to Facebook Ireland Ltd. to create an advertising audience group using this e-mail address. When using this feature, the e-mail address is hashed before being sent to Facebook and Instagram to create an audience group. The e-mail address will be used in the matching process conducted by Facebook and Instagram. Facebook and Instagram do not share the e-mail address with third parties or other advertisers and deletes the e-mail address immediately after the matching process is completed. Facebook and Instagram have implemented processes and procedures ensuring the confidentiality and security of the e-mail address and the set of Facebook user identifiers forming the audience group created using the e-mail address, including by applying technical and physical safeguards.

      • Profiling

        Based on the information about you collected during previous cooperation (i.e., information about your purchase history in the Online Store, your activity history in the Online Store), the Controller displays personalized advertisements to you on the Online Store website https://vntg.studio .

      • Marketing of products and services offered by the Controller

        The Controller sends you marketing information regarding goods and services offered by the Controller, provided that you have previously expressed consent on the website to be contacted by phone (SMS messages) or by e-mail, for direct marketing purposes.

        The Controller does not send spam, i.e., unsolicited commercial information.

        The Controller does not transfer any personal data, and in particular e-mail addresses or phone numbers, to third parties to enable them to carry out direct marketing activities regarding goods and services.

  2. RECIPIENTS OF PERSONAL DATA

    In connection with the processing of your personal data, for the purposes referred to in part I of the Privacy Policy, the Controller may make your data available to the following recipients or categories of recipients:

    • Entities providing services: transport, postal, marketing, accounting, payment, banks where the Controller has a bank account in connection with transferring amounts to your account in the event of returns, complaints, overpayments, litigation proxies representing the Controller, entities responsible for delivering cookies – detailed information on this can be found in the Cookie Policy vntg.studio™ vintage shop.
  3. PLANNED DATA RETENTION PERIOD

    Personal data is stored for the period necessary to achieve the purposes indicated in part I of this Privacy Policy.

    • In the case of data processed based on consent (concerning cookies), until its withdrawal or the expiry of the retention periods for individual cookies indicated in the Cookie Policy vntg.studio™ vintage shop, if this occurs before consent is withdrawn.
    • In the case of data processed for the purpose of concluding and performing a contract (part I.2 of the Privacy Policy), the Controller processes personal data until the expiration of the limitation period for civil law claims arising therefrom.
    • In the case of data processed to fulfill a legal obligation (part I.3 of the Privacy Policy), the data processing period results from legal provisions.
    • In the case of data processed for the purpose of the legitimate interest of the Controller or a third party (part I.4 of the Privacy Policy), the personal data retention period varies depending on the specific processing purpose:
      • In the case of data processing for client relationship management, data is processed until you object on the basis of Article 21(1) of the GDPR due to your particular situation, but no longer than you use the Controller's services or remain in commercial relations with the Controller;
      • In the case of processing personal data for the purpose of pursuing claims by the Controller or defending against claims directed at the Controller, the Controller processes personal data for this purpose until the pursued claim is enforced or the claims expire, whichever occurs first.
      • In the case of processing personal data for the purpose of securing claims related to the sale of goods, the Controller processes personal data indefinitely, as long as you remain in commercial relations with the Controller or there are unsatisfied claims of the Controller against you.
      • In the case of processing personal data for accountability purposes, the Controller processes personal data for as long as it is necessary to document compliance with legal requirements and enable their verification by authorized public authorities.
      • In the case of data processing for profiling purposes, data is processed until you object on the basis of Article 21(2) of the GDPR, but no longer than you use the Controller's services or remain in commercial relations with the Controller.
      • In the case of processing personal data for marketing purposes of products and services offered by the Controller, the Controller processes personal data for this purpose until you withdraw your consent to receive commercial information via e-mail, SMS or object to the processing of personal data.
  4. RIGHTS OF THE DATA SUBJECT
    1. RIGHT OF ACCESS TO DATA

      You have the right to access your data, including the right to obtain a copy of the data, including electronically.

    2. RIGHT TO RECTIFICATION OF DATA

      You have the right to request the rectification of incorrect personal data. You have the right to request the completion of incomplete personal data.

    3. RIGHT TO ERASURE OF DATA

      You have the right to request the Controller to erase your personal data if:

      1. the data are no longer necessary for the purposes for which they were collected or otherwise processed;
      2. you object, on grounds relating to your particular situation, to the processing of your personal data by the Controller based on the legitimate interest of the Controller or a third party and there are no overriding legitimate grounds for the processing.
      3. you object to the processing of your data for direct marketing purposes
      4. your personal data have been unlawfully processed;
      5. personal data must be erased for compliance with a legal obligation in Union or Member State law to which the Controller is subject. However, the Controller notes that this right is subject to significant limitations. The Controller will not be able to fulfill your request if further processing is necessary for:
      6. compliance by the Controller with a legal obligation which requires processing by Union or Member State law (e.g., the statute of limitations for tax liabilities related to the agreement concluded between the Controller and you has not yet expired, the storage period for accounting documents issued in connection with the agreement concluded between the Controller and you has not yet expired);
      7. the establishment, exercise or defence of legal claims.
    4. RIGHT TO RESTRICTION OF PROCESSING

      You have the right to request the restriction of processing of personal data if:

      • you contest the accuracy of the personal data – for a period enabling the Controller to verify the accuracy of the data;
      • the processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of their use;
      • the Controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
      • you have objected on grounds relating to your particular situation to processing of your personal data based on the legitimate interest of the Controller or a third party – pending the verification whether the legitimate grounds on the part of the Controller override the grounds of your objection.
    5. RIGHT TO DATA PORTABILITY

      You have the right to receive in a commonly used, machine-readable file format the data provided by you, which the Controller processes by automated means on the basis of an agreement concluded with you or on the basis of your consent. You also have the right to request that the aforementioned file be transmitted to another data controller if technically feasible.

    6. RIGHT TO OBJECT

      You have the right to object at any time – on grounds relating to your particular situation – to processing of personal data concerning you which is based on the Controller's or a third party's legitimate interest (part I.4 of this Privacy Policy).

      The Controller has the right to refuse to stop processing your data if it demonstrates:

      • the existence of valid legitimate grounds for the processing, which override your interests, rights and freedoms, or
      • the existence of grounds for the establishment, exercise or defence of legal claims.

      You have the right to object at any time if the Controller processes your data for direct marketing purposes, including profiling.

      Respecting your right to privacy, the Controller gives you the opportunity to independently decide on the scope of profiling applied to you in terms of displaying personalized advertisements. After logging into your Account in the Online Store, in the "Privacy" tab you have the option to uncheck the "check-box", which will result in the Controller ceasing to process data for this purpose. You can re-check the aforementioned "check-box" at any time.

  5. COMPLAINT TO THE SUPERVISORY AUTHORITY

    You have the right to lodge a complaint with the supervisory authority, i.e., the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).

  6. VOLUNTARY PROVISION OF DATA
    1. If you create an account in the Online Store as a consumer, it is necessary to provide the following data: e-mail address, account login password, first name and last name, phone number, street, house number, postal code, city. Providing the above data is voluntary, but refusal to provide them makes it impossible to create an Account in the Online Store.
  7. If you are creating an account in the Online Store as an entrepreneur (COMPANY), you must provide the following data: e-mail address, login password, first name and last name, telephone number, NIP number, name under which you conduct business activity (Field: company name), street, house number, postal code, city. Providing the above data is voluntary, but refusing to provide it makes it impossible to create an Account in the Online Store.
  8. When concluding a goods sales agreement, you may additionally provide a delivery address different from the one provided during registration. Providing the above data is voluntary.
  9. If you agree to receive VAT invoices electronically, the Administrator will send them to the address provided during account registration in the Online Store; however, you may provide a different e-mail address at the stage of placing an order in the Online Store. Providing the above data is voluntary, but refusing to provide it will result in invoices being sent by default to the e-mail address indicated when creating an account in the Online Store.
  10. If you place an order via the Online Store for the collection of returned goods from you, the Administrator processes your data to the extent necessary to fulfil this agreement, i.e. first name, last name, telephone number, e-mail address, invoice or receipt number to which the returned goods pertain, identification of the returned goods, address from which the returned goods should be collected. You also have the option to provide a bank account number to which the refund for the returned goods will be made. Providing the above data is voluntary, but refusing to provide it makes it impossible to place an order for the collection of returned goods from you via the returns form on the Online Store's website.
  11. If you wish to file a complaint regarding goods, via the complaint form available in the Online Store, you must provide the following personal data: first name, last name, company name (if applicable), correspondence address, contact telephone number, e-mail address, invoice or receipt number pertaining to the complained goods, identification of the complained goods. You also have the option to provide a bank account number to which the refund will be made. Providing the above data is voluntary, but refusing to provide it makes it impossible to file a complaint via the complaint form on the Online Store's website.
  12. If you wish to subscribe to the newsletter without creating an Account in the Online Store, you must provide an e-mail address and agree to receive commercial information to this address within the meaning of Art. 2 item 2 of the Act of 18.07.2002 on the provision of electronic services, for direct marketing purposes. Providing the above data is voluntary, but refusing to provide it makes it impossible to send you the newsletter.
  13. If you wish to receive information about promotions, new products and discounts concerning the Administrator's offer by phone (SMS), or email, you must consent to telephone contact and to sending commercial information to your phone number within the meaning of Art. 2 item 2 of the Act of 18.07.2002 on the provision of electronic services, for direct marketing purposes. Providing the above data is voluntary, but refusing to provide it makes it impossible for the Administrator to contact you by phone (SMS) or email.
  • SOURCES OF DATA ACQUISITION

    The Administrator obtains your personal data directly from you.

  • TRANSFER OF DATA TO THIRD COUNTRIES

    If you accept cookies installed on the Website by third parties, data collected through these cookies may be transferred to third countries in accordance with the information provided in the Cookies Policy vntg.studio™ vintage shop

  • COOKIES AND OTHER TRACKING TECHNOLOGIES

    Detailed information about the Administrator's use of cookies can be found in the Cookies Policy vntg.studio™ vintage shop

  • SECURITY OF PERSONAL DATA
    1. The Administrator applies technical and organizational measures to protect personal data from unauthorized access, loss or damage, appropriate to the identified risk associated with data processing.
    2. To prevent unauthorized persons from acquiring and modifying personal data transmitted by you during registration and logging in to your account in the Online Store, the Administrator ensures encryption of the connection to the Administrator's server using an SSL certificate.
    3. The measures taken by the Administrator may prove insufficient if you yourself do not observe security rules. In particular, you should keep your login and password to your account in the Online Store confidential and not disclose them to third parties. The Administrator will not ask you for them, except when logging in.
    4. To prevent unauthorized use of the Account, you should log out every time after using the Online Store.
    5. This Privacy Policy is effective from 11.09.2026