Privacy Policy

Detailed Information on Data Processing

Who is the Administrator of Your Personal Data?

Juicy Marketing Bartosiewicz Malinowska Spółka Jawna, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for Wrocław-Fabryczna, VI Commercial Division under KRS number: 0000359871, NIP: 8992697361, REGON: 021296903, operating the online store at https://wonderaffair.com

Email: iod@wonderaffair.com

Data Protection Officer of Juicy Marketing Bartosiewicz Malinowska Spółka Jawna and Contact Information

The company has appointed a Data Protection Officer (DPO) who can be contacted regarding all matters related to the processing of personal data and the exercise of data protection rights.

If you wish to contact the DPO, please use the following contact details:
Address: Data Protection Officer, Juicy Marketing Bartosiewicz Malinowska Spółka Jawna, ul. Zasłuczańska 4/9, 55-010 Żerniki Wrocławskie, Poland

E-mail: iod@wonderaffair.com

For What Purposes Are Your Personal Data Processed?

Your personal data are processed for the purpose of fulfilling orders you place. Data may also be processed to provide additional services by the Administrator, including electronic services, or for organizing and conducting competitions.

Your data may also be processed to handle complaints or other claims you make against the Administrator. They may be processed to determine or pursue claims related to a contract or to defend against such claims, as well as for archival (evidentiary) purposes to secure information in case of legal necessity.

Your personal data may also be processed to fulfill legal obligations of the Administrator related to your orders.

With your voluntary consent to receive commercial information from the Administrator electronically (newsletter), your data may also be processed for direct marketing of the Administrator’s own products and services.

Additionally, your data may be processed to tailor the store to your needs, detect bots and abuse, and for statistical measurements and improvement of the Administrator’s services.

Personal data processed by the www.wonderaffair.com store include: first and last name, company name, tax identification number (NIP), address of residence or business, delivery address, phone number, and email address.

How Long Will Your Personal Data Be Stored?

Personal data provided for registration of an account in the online store will be processed as long as the account remains active.

For the sale of products, organization of contests, or handling complaints or other claims, your data will be processed for the period necessary to fulfill the contract, handle complaints, or pursue claims, and thereafter only as required by applicable law (e.g., accounting and tax purposes).

Data for marketing purposes will be processed until you withdraw your consent or object to such processing.

For tailoring the store to your needs, detecting bots and abuse, and statistical and service improvement purposes, your data will be processed until you object or stop using the store services.

Legal Basis for Processing Your Personal Data

Processing necessary to fulfill a contract (e.g., for order fulfillment, complaint handling, or contest participation) is based on Article 6(1)(b) GDPR.

Processing for accounting, tax, or other legal obligations is based on Article 6(1)(c) GDPR.

Processing for direct marketing of the Administrator’s products and services is based on the legitimate interest of the Administrator (Article 6(1)(f) GDPR), provided your consent for electronic communication (newsletter) has been given.

Processing for establishing or pursuing claims, defending against claims, archival purposes, store customization, bot detection, abuse prevention, statistics, and service improvement is based on Article 6(1)(f) GDPR (legitimate interest of the Administrator).

The Administrator’s legitimate interest includes pursuing claims, securing information for legal purposes, tailoring the store, ensuring security, and improving services.

Providing Your Data

Providing personal data is voluntary but necessary for order fulfillment, additional services, participation in contests, receiving electronic commercial information, and handling complaints or claims. Failure to provide data will prevent the Administrator from performing these actions.

If data is provided for contract purposes with the online store, providing the data is required to conclude the contract. Failure to provide it will prevent contract conclusion.

Recipients of Your Personal Data

Your data may be shared with courier companies and entities processing data on behalf of the Administrator (e.g., IT service providers, payment operators) under contract and only according to the Administrator’s instructions.

Your data may also be shared with authorities entitled to access it under applicable law (e.g., law enforcement for ongoing criminal proceedings).

Will Your Data Be Transferred Outside the EEA?

No, your data will not be transferred to countries outside the European Economic Area.

Automated Decision-Making and Profiling

We do not make automated decisions or profiling.

Your Rights Regarding Personal Data

You have the following rights:

  • Access your data, including obtaining a copy
  • Rectify inaccurate data
  • Delete your data (in certain situations)
  • Lodge a complaint with a supervisory authority
  • Restrict data processing
  • Object to data processing

If data is processed based on contract or consent, you also have:

  • Right to withdraw consent (without affecting prior lawful processing)
  • Right to data portability (receive your data in a structured, machine-readable format and transfer it to another controller)

Cookies

Your browser may store cookies on your device to ensure proper store functionality, especially for authentication.

Cookies are used to:

  • Maintain user sessions (e.g., stay logged in, preserve cart contents)
  • Tailor the store to user needs

Types of cookies:

  • Session cookies: temporary, removed after logout or closing the browser
  • Persistent cookies: stored for a set period or until deleted by the user

Cookie purposes:

  • Necessary for store operation (e.g., cart)
  • Security (e.g., fraud detection)
  • Performance (e.g., usage statistics)
  • Functional (e.g., remembering language or preferences)
  • Statistical (e.g., website analytics)

Third-party cookies may also be used for advertising and services provided by trusted partners, e.g., the Wirtualna Polska group.

You can configure your browser to block cookies, but some store functions (login, cart) may not work. Using the store with cookies enabled constitutes consent to their use.

Other Information

Social media plugins (Facebook, Instagram, Pinterest) may be used. Using these plugins exchanges data with the social network. We do not process this data or know what the platforms collect. Please consult the privacy policies of these social networks before using plugins.

Online Payments

For online payment processing, your data may be shared with recipients such as:

1. MBank S.A.

Data may be shared with mBank in connection with:

1. Providing the store with online payment infrastructure
2. Processing and settling online payments via payment instruments
3. Verifying proper execution of contracts, ensuring protection of payers’ interests in case of complaints

Providing data to the bank is voluntary but necessary to complete online payments and to confirm transactions with the store.