PRIVACY POLICY
Last updated: 7 August 2026This Privacy Policy explains how personal data is collected and processed through the manuart.net online store.
1. Data controller
The controller of personal data is:
Manuart Stsiapan Presniakou
ul. Lipowa 16a
05-123 Dąbrowa Chotomowska
Poland
NIP: 5361929493
REGON: 526437066
Email: info@manuart.net
Telephone: +48 733 290 892
Hereinafter referred to as “MANUART”, “we”, “us” or the “Controller”.
Questions and requests concerning personal data may be sent to info@manuart.net.
2. Scope of this Privacy Policy
This Privacy Policy applies to personal data processed in connection with the use of manuart.net, including browsing the Store, creating an account, placing and fulfilling orders, payments, delivery, returns, complaints, customer service, product reviews, newsletters, website security, analytics and advertising.
Detailed information about cookies and similar technologies is provided in the Cookie Policy available on the Store website.
3. Personal data we may process
Depending on how the Customer uses the Store, we may process the following categories of personal data:
- first name and surname;
- company or business name, where provided;
- billing address and delivery address;
- email address and telephone number;
- tax identification number or VAT number, where required for an invoice;
- account login details and account settings;
- order details, purchased products, quantities, prices and discounts;
- payment method, payment status and transaction identifiers;
- delivery method, shipment status and tracking information;
- correspondence concerning orders, enquiries, returns and complaints;
- information and photographs voluntarily submitted with a product review or complaint;
- consent preferences and newsletter subscription status;
- IP address, device identifiers, browser information, language, currency, approximate location, website activity and security logs;
- information collected through cookies and similar technologies, where permitted and, where required, after consent has been given.
We do not normally receive complete payment card numbers. Card and electronic payment details are processed directly by the relevant payment service provider.
4. Sources of personal data
Most personal data is provided directly by the Customer when creating an account, placing an order, making an enquiry, requesting an invoice, subscribing to a newsletter, submitting a review, returning a product or making a complaint.
We may also receive limited information from payment providers, delivery companies, fraud-prevention services and technical service providers, such as payment confirmation, shipment status, transaction identifiers and security information.
Technical information may be collected automatically when the Store is used, subject to the user’s cookie choices and applicable law.
5. Purposes and legal bases of processing
Account registration and management
We process account details to create and maintain a Customer account, remember account settings and provide account-related functions.
The legal basis is performance of a contract or taking steps at the Customer’s request before entering into a contract under Article 6(1)(b) of the GDPR.
Processing and fulfilling orders
We process identification, contact, billing, delivery, order and payment-status information to accept, prepare, dispatch and deliver orders, communicate about order status and provide customer service.
The legal basis is performance of a contract or taking steps before entering into a contract under Article 6(1)(b) of the GDPR.
Payments
We process information required to identify payments, confirm their status, issue refunds, prevent duplicate transactions and handle payment-related enquiries.
The legal basis is performance of a contract under Article 6(1)(b) of the GDPR, compliance with legal obligations under Article 6(1)(c) of the GDPR and our legitimate interest in preventing fraud and ensuring correct accounting under Article 6(1)(f) of the GDPR.
Electronic payments may be processed by independent providers such as PayPal or the card payment provider displayed during checkout. Apple Pay or Google Pay may be available through the relevant payment provider, depending on the Customer’s device, country and eligibility.
Delivery
We process the Customer’s name, address, contact details and shipment information to arrange delivery, provide tracking information and resolve delivery problems.
The legal basis is performance of a contract under Article 6(1)(b) of the GDPR.
Invoices, bookkeeping and tax obligations
We process order, transaction, billing and tax information to issue invoices, maintain accounting records and comply with tax, accounting and other legal obligations.
The legal basis is compliance with a legal obligation under Article 6(1)(c) of the GDPR.
Returns, withdrawal from the contract and complaints
We process identification, contact, order, payment, correspondence and evidence concerning a return or complaint in order to exercise or fulfil consumer rights, investigate the matter, issue a refund, replace goods or otherwise resolve the request.
The legal basis is performance of a contract under Article 6(1)(b) of the GDPR, compliance with legal obligations under Article 6(1)(c) of the GDPR and, where necessary, our legitimate interest in documenting and defending claims under Article 6(1)(f) of the GDPR.
Enquiries and customer service
We process contact details and correspondence to answer questions, prepare an individual quotation, provide information about products and resolve service issues.
The legal basis is taking steps at the Customer’s request before entering into a contract under Article 6(1)(b) of the GDPR or our legitimate interest in communicating with Customers and operating the Store under Article 6(1)(f) of the GDPR.
Product reviews
Where the Customer voluntarily submits a product review, we may process the submitted name or nickname, review text, rating, photographs and order-verification information in order to verify, publish and manage the review.
The legal basis for publishing voluntarily submitted content is the Customer’s consent under Article 6(1)(a) of the GDPR. Verification of whether the reviewer purchased the product and prevention of fraudulent or abusive reviews are based on our legitimate interest under Article 6(1)(f) of the GDPR.
Consent may be withdrawn and a published review may be removed by contacting info@manuart.net. Withdrawal does not affect processing carried out before consent was withdrawn.
Newsletter and direct marketing
Where the user subscribes to the newsletter, we process the email address and subscription information to send commercial information about MANUART products, offers and Store updates.
The legal basis is consent under Article 6(1)(a) of the GDPR. Consent may be withdrawn at any time by using the unsubscribe link in a message or by contacting info@manuart.net.
Where permitted by law, limited direct marketing to existing Customers may also be based on our legitimate interest under Article 6(1)(f) of the GDPR, subject to the Customer’s right to object and the requirements of electronic communications law.
Website security and prevention of abuse
We process technical logs, IP addresses, device information and transaction-related information to secure the Store, detect unauthorised access, prevent fraud, protect accounts, maintain backups and investigate technical or security incidents.
The legal basis is our legitimate interest in protecting the Store, Customers and transactions under Article 6(1)(f) of the GDPR and, where applicable, compliance with legal obligations under Article 6(1)(c) of the GDPR.
Analytics and improvement of the Store
Where the user has provided the required consent, we may use analytics services, including Google Analytics and Google Tag Manager, to measure website traffic, understand how the Store is used, identify errors and improve website performance and content.
The legal basis is consent under Article 6(1)(a) of the GDPR.
Advertising and conversion measurement
Where the user has provided the required consent, we may process online identifiers and information about website interactions to measure advertising effectiveness, record conversions and create advertising audiences through services provided by Google, Meta or other advertising providers enabled on the Store.
The legal basis is consent under Article 6(1)(a) of the GDPR.
Establishment, exercise and defence of legal claims
We may retain and process information necessary to establish, exercise or defend legal claims, respond to disputes and demonstrate the proper performance of contracts and legal obligations.
The legal basis is our legitimate interest under Article 6(1)(f) of the GDPR.
6. Whether providing data is required
Providing data required in the order form is necessary to conclude and fulfil the sales contract. Without the required identification, contact, billing, delivery and payment information, we may be unable to accept or complete the order.
Providing additional information marked as optional, submitting a product review, subscribing to a newsletter and accepting non-essential cookies are voluntary.
7. Recipients of personal data
Personal data may be disclosed or entrusted only where necessary to the following categories of recipients:
- hosting, server, domain, email and IT service providers;
- providers maintaining or supporting the Store software;
- payment service providers, banks and fraud-prevention providers;
- postal operators, courier companies and other delivery providers selected for the order;
- accounting, invoicing and bookkeeping service providers;
- legal advisers, insurers, debt-recovery providers and professional consultants where necessary;
- analytics, advertising and social media providers, only in accordance with the user’s consent choices where consent is required;
- providers of customer communication, newsletter or review-management tools where such services are used;
- public authorities, courts and other authorised bodies where disclosure is required by law.
Some recipients, particularly payment providers, delivery companies, banks, Google and Meta group companies, may process personal data as independent controllers under their own privacy policies.
We do not sell Customers’ personal data.
8. Transfers outside the European Economic Area
Some technology, payment, analytics, advertising or cloud service providers may process personal data outside Poland or outside the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, the transfer is made using a mechanism permitted by the GDPR, such as an adequacy decision, participation in the EU-US Data Privacy Framework where applicable, standard contractual clauses approved by the European Commission or another legally recognised safeguard.
Information about safeguards relating to a particular provider may be requested by contacting info@manuart.net.
9. Storage periods
Personal data is stored only for as long as necessary for the purpose for which it was collected and for the periods required by law.
In particular:
- account data is normally stored while the account remains active and afterwards for the period necessary to resolve outstanding matters and defend claims;
- order, payment, delivery, return and complaint data is stored for the duration of the contract and afterwards for the period required to comply with legal obligations and establish, exercise or defend claims;
- invoices and tax documentation are generally stored for five years counted from the end of the calendar year in which the deadline for payment of the relevant tax expired, unless a longer period applies because the limitation period has been suspended, interrupted or extended;
- correspondence is stored until the enquiry is resolved and afterwards for the period reasonably necessary to document the communication or defend claims;
- newsletter data is stored until consent is withdrawn, the user unsubscribes or the service is discontinued;
- data used for direct marketing based on legitimate interest is stored until an effective objection is made or the data is no longer needed for that purpose;
- product reviews are stored while they remain published or until consent is withdrawn, unless further storage is necessary to document abuse or defend claims;
- consent records may be retained for the period necessary to demonstrate that valid consent was obtained;
- technical and security logs are stored for the period necessary to maintain security, investigate incidents and protect legal claims;
- cookie-related data is stored for the periods described in the Cookie Policy and cookie preference panel.
10. Rights of the data subject
Subject to the conditions provided by the GDPR, the data subject has the right to:
- obtain confirmation as to whether personal data is being processed and request access to that data;
- request correction of inaccurate data and completion of incomplete data;
- request deletion of personal data where there is no legal basis for further processing;
- request restriction of processing;
- receive personal data in a structured, commonly used and machine-readable format and transmit it to another controller, where the right to data portability applies;
- object to processing based on our legitimate interests, on grounds relating to the data subject’s particular situation;
- object at any time to processing for direct marketing purposes, including related profiling;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with the President of the Polish Personal Data Protection Office.
Requests may be sent to info@manuart.net. We may ask for information necessary to verify the identity of the person making the request.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
The right to deletion is not absolute and does not require us to delete data that must be retained to comply with legal obligations or establish, exercise or defend legal claims.
11. Right to object
Where personal data is processed for direct marketing purposes, the data subject may object at any time. After receiving such an objection, we will stop processing the relevant data for direct marketing purposes.
Where processing is based on our legitimate interest for another purpose, the data subject may object on grounds relating to their particular situation. We will stop such processing unless we demonstrate compelling legitimate grounds that override the data subject’s interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
12. Automated decision-making and profiling
MANUART does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect Customers.
Where the user has consented to advertising cookies, advertising providers may analyse website activity and assign online identifiers to advertising audiences or interest categories. Such advertising profiling can be disabled by withdrawing consent in the cookie settings.
13. Security
We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures may include encrypted website connections, access restrictions, backups, software updates, account security controls and cooperation with trusted technical service providers.
No method of internet transmission or electronic storage can guarantee absolute security. Customers should protect their account passwords and avoid sharing login details with other persons.
14. Links and services provided by third parties
The Store may contain links to external websites, social media platforms, payment pages, delivery tracking pages or embedded content operated by third parties.
Those third parties process personal data under their own privacy policies. MANUART is not responsible for the privacy practices of external services that it does not control.
15. Changes to this Privacy Policy
This Privacy Policy may be updated when legal requirements, Store functions, payment methods, delivery methods or data-processing technologies change.
The current version is published on manuart.net together with the date of the latest update.