GDPR Compliance
Last Updated: August 2026
Our Commitment to GDPR
Ceramika Mazury is committed to compliance with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union and European Economic Area.
Data Controller
The data controller responsible for your personal data is:
Ceramika Mazury
ul. Leśna 47
11-500 Giżycko
Poland
Email: [email protected]
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to obtain confirmation that we are processing your personal data and to access that data. You can request a copy of your personal data in a commonly used electronic format.
Right to Rectification
You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.
Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data under certain circumstances, including:
- The data is no longer necessary for the purposes for which it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction of Processing
You have the right to request restriction of processing your personal data when:
- You contest the accuracy of the data
- The processing is unlawful but you prefer restriction over erasure
- We no longer need the data but you need it for legal claims
- You have objected to processing pending verification
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or place of alleged infringement.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request".
Please include:
- Your full name
- The email address associated with your data
- A clear description of your request
- Proof of identity (if requested for security purposes)
We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days and will inform you of any such extension.
Data Processing Activities
Contact Inquiries
- Purpose: Responding to customer inquiries
- Legal Basis: Consent, Contract Performance
- Data Collected: Name, email, message content
- Retention: 2 years from last contact
Order Processing
- Purpose: Fulfilling product orders
- Legal Basis: Contract Performance, Legal Obligation
- Data Collected: Name, email, shipping address, order details
- Retention: 7 years for accounting and tax purposes
Website Analytics
- Purpose: Improving website functionality
- Legal Basis: Legitimate Interest
- Data Collected: Anonymized usage data, browser information
- Retention: 14 months
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Regular backups with secure storage
- Employee training on data protection
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.
International Data Transfers
We do not transfer personal data outside the European Economic Area. All data processing occurs within Poland and the EU.
Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Data Protection Officer
For questions regarding GDPR compliance or data protection, contact our data protection representative at [email protected]
Updates to This Information
We may update this GDPR information periodically. Material changes will be communicated through our website with an updated revision date.