STOCKED IN POLAND · FAST SHIPPING · B2B ONLINE

Privacy policy

What data we collect, why we process it, who receives it, and what rights you have.
DOCUMENT IN PREPARATION. The description below matches how the service actually works, but the retention periods, the data protection officer details and the supervisory-authority notice still require confirmation by legal counsel and the accounting office. Those places are marked in the text.

Data controller

Controller
NASEL SP. Z O.O. · NIP PL5223188871
Address
EACC HALA B24-26, Nadrzeczna 7A, 05-552 Wólka Kosowska, Polska
Data contact
contact@i8denim.pl
Data protection officer
To be confirmed — if no DPO has been appointed, a statement to that effect will appear here.

What data we process

The visit statistics store no IP address: the session identifier is kept only as a one-way hash that cannot be reversed. We record an IP address in two cases only, as evidence of an action: when the terms are accepted on the registration form, and in the audit log of operations performed in the admin panel.

Purposes and legal bases

Contract performance
Running the account, handling orders, delivery and settlement — art. 6(1)(b) GDPR.
Legal obligation
Issuing and retaining accounting documents and validating the EU VAT number — art. 6(1)(c) GDPR.
Legitimate interest
Service security, abuse prevention, the audit log and the pursuit of claims — art. 6(1)(f) GDPR.

Data recipients

We do not sell data and do not share it with third parties for marketing purposes. Any transfer outside the European Economic Area requires legal confirmation and will be described here.

Retention period

Account data is kept for as long as the account exists. Accounting documents are kept for the period required by tax law. The audit log is append-only and cannot be modified. Exact periods will be filled in once confirmed by the accounting office.

Cookies

We use only files necessary for the service to work: session cookies (staying signed in, the cart, the language choice) and a token that protects forms against CSRF. We additionally store, in browser storage, the fact that the welcome dialog was dismissed so that it is not shown again.

We use no marketing or tracking files and no third-party analytics tools. We keep only our own anonymous counters on the server: a per-session visit counter and a counter of homepage interactions. They store nothing on your device and hold no IP address and no identifier that would link two events to the same person.

For that reason the service shows no cookie consent banner — consent is not required for strictly necessary files. The scope of that exemption is one of the points awaiting legal confirmation.

Your rights

You have the right to:

A request sent to the e-mail address above is enough. You also have the right to lodge a complaint with the supervisory authority — the exact wording of that notice will be added once legally confirmed.