Privacy policy

This policy explains what personal data the Dziabalki website (dziabalki.com) collects, why, and what your rights are.

Who is responsible for your data

The data controller is Ewa Zaród. For anything about your data, email ewa@zarod.net or write through the contact form.

Contact form

When you send a message, we receive your name, email address and message, and use them only to reply to you (legal basis: our legitimate interest in answering your inquiry, Art. 6(1)(f) GDPR). Messages are kept as long as needed to handle your inquiry.

Newsletter

If you sign up, we store your email address to send you an email whenever a new doll appears in our Etsy shop (legal basis: your consent, Art. 6(1)(a) GDPR). You first receive an email asking you to confirm; without confirmation you won't receive anything else, and an unconfirmed address is deleted after 30 days. Every email includes a link to unsubscribe, which removes your address immediately. You can withdraw your consent at any time; this doesn't affect anything sent before.

Who processes the data for us

The website, the contact form and the subscriber list are hosted by Netlify, Inc. Emails are sent through Resend. Both act on our behalf and may process data outside the European Economic Area, under the safeguards required by the GDPR (such as standard contractual clauses).

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent. You can also lodge a complaint with the supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes UODO).