hello@balconycat.comGet a quote →

Privacy Policy

www.balconycat.com

Last updated: 25 March 2026

1. Introduction

This Privacy Policy explains how Dzmitry Pliachko KREAL ("we", "us", "our") collects, uses, stores, and protects the personal data of users visiting and making purchases on www.balconycat.com (the "Website").

We are committed to protecting your privacy and handling your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Polish law, including the Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000).

By using the Website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

Dzmitry Pliachko KREAL — Owner / Sole Trader: Dzmitry Pliachko

NIP (Tax ID): 8992909337

Registered address: Stanisława Drabika 63/19, 52-131 Wrocław, Poland

Website: www.balconycat.com

Contact e-mail: hello@balconycat.com

For all matters related to the processing of your personal data, please contact us using the e-mail address above.

3. What Personal Data We Collect

3.1 Data you provide directly

When you place an order, create an account, or contact us, we may collect: full name, e-mail address, delivery address (street, city, postal code, country), phone number (optional, for delivery purposes), payment data — note: card details are processed exclusively by our payment service provider; we do not store card numbers, and order history and correspondence with us.

3.2 Data collected automatically

When you visit the Website, we may automatically collect certain technical data through cookies and similar technologies: IP address and approximate location (country/city), browser type and device information, pages visited, time spent, and referral source, and cookie identifiers (see Section 9 on Cookies).

3.3 Data from third parties

If you complete a purchase or log in via a third-party service (e.g., PayPal, Google), we may receive certain data from that service in accordance with their privacy policy and your settings.

4. Purposes and Legal Bases for Processing

We process your personal data only where we have a valid legal basis under Article 6 GDPR:

Contract performance (Art. 6(1)(b) GDPR): Processing your order, arranging delivery, handling returns and complaints, managing your account.

Legal obligation (Art. 6(1)(c) GDPR): Issuing VAT invoices, fulfilling tax and accounting obligations under Polish law, complying with consumer protection regulations.

Legitimate interests (Art. 6(1)(f) GDPR): Fraud prevention, IT security, improving website functionality, responding to customer enquiries, defending legal claims.

Consent (Art. 6(1)(a) GDPR): Sending marketing communications (newsletters) and placing non-essential cookies — only where you have given explicit consent. You may withdraw consent at any time.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Policy:

Order and transaction data: 5 years from the end of the tax year in which the transaction occurred (required under Polish tax law — Art. 70 of the Tax Ordinance Act).

Customer account data: for the duration of the account and up to 3 years after its closure.

Marketing communications: until you withdraw your consent.

Technical logs and cookies: as specified in Section 9.

After the retention period expires, your data is permanently deleted or anonymised.

6. Who We Share Your Data With

We do not sell or rent your personal data to third parties. We may share your data with trusted service providers acting as data processors on our behalf:

Courier and logistics companies (e.g., DPD, InPost, DHL) — for delivery of your order.

Payment processors (e.g., PayU, Stripe, PayPal) — for secure payment handling.

E-commerce platform providers — for hosting and operating the online shop.

E-mail service providers — for sending order confirmations and newsletters.

Accounting and tax advisors — for fulfilment of our legal obligations.

IT support providers — for maintaining website security and functionality.

All processors are bound by data processing agreements. We do not transfer your data outside the European Economic Area (EEA) unless appropriate safeguards are in place (e.g., Standard Contractual Clauses approved by the European Commission).

7. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access (Art. 15) — request a copy of the personal data we hold about you.

Right to rectification (Art. 16) — request correction of inaccurate or incomplete data.

Right to erasure / “right to be forgotten” (Art. 17) — request deletion of your data where it is no longer necessary, or where you withdraw consent.

Right to restriction of processing (Art. 18) — ask us to limit how we use your data.

Right to data portability (Art. 20) — request a copy of data you provided to us in a structured, machine-readable format.

Right to object (Art. 21) — object to processing based on legitimate interests or for direct marketing.

Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@balconycat.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO)

ul. Stawki 2, 00-193 Warsaw, Poland

Website: www.uodo.gov.pl

E-mail: kancelaria@uodo.gov.pl

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for all data transmitted between your browser and our Website.

Access controls limiting who can access personal data within our organisation.

Regular security assessments and software updates.

Use of reputable, GDPR-compliant processors with appropriate security standards.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours and, where required, inform you directly.

9. Cookies and Similar Technologies

9.1 What are cookies?

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies to ensure the Website functions correctly and to improve your experience.

9.2 Types of cookies we use

Strictly necessary cookies: Essential for the Website to function (e.g., shopping cart, login session). These cannot be disabled. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Analytical cookies: Help us understand how visitors use the Website (e.g., Google Analytics). Legal basis: your consent.

Marketing/advertising cookies: Used to show you relevant advertisements (e.g., Facebook Pixel, Google Ads remarketing). Legal basis: your consent.

Functional cookies: Remember your preferences (e.g., language). Legal basis: your consent.

9.3 Managing cookies

When you first visit the Website, a cookie consent banner will allow you to accept or reject non-essential cookies. You can change your preferences at any time via the cookie settings link in our website footer.

You can also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Website.

10. Minors

Our Website is not directed to persons under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us at privacy@balconycat.com and we will delete it promptly.

11. Third-Party Links

Our Website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any external site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or the services we offer. The updated version will be published on this page with a revised “Last updated” date. Where changes are significant, we will notify you by e-mail or a prominent notice on the Website.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Dzmitry Pliachko KREAL

Stanisława Drabika 63/19, 52-131 Wrocław, Poland

E-mail: privacy@balconycat.com

Website: www.balconycat.com