This Privacy Policy describes the principles of processing personal data and the use of cookies within the online store available at www.bluble.eu (hereinafter: “Online Store”). The processing of personal data under this Privacy Policy is conducted in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).
I. Data Controller
The data controller of personal data processed in connection with the use of the Online Store is Katarzyna Piechocka conducting business under the name “Bellumi Katarzyna Piechocka” VAT UE (NIP): PL9552234781, (hereinafter: “Controller”).
Contact with the Controller is possible via email at hello@bluble.eu .
II. What kind of data can be processed?
In connection with the use of the Online Store by Users, the following personal data of Users may be processed:
a) Data provided by Users when using our store services, including name, surname, address, email address, phone number, bank account number, tax identification number and other billing information;
b) IP address or other identifiers and information collected through cookies or other similar technologies in connection with browsing content on the website bluble.eu .
III. When do we collect the personal data?
Personal data is collected in the following cases:
a) Creating a User account in the Online Store;
b) Placing an order by a User in the Online Store without account registration;
c) Direct contact with the Controller via email
d) Browsing content in the Online Store through the collection of cookies;
Providing required personal data by Users is voluntary, however, it constitutes a necessary condition for proper provision of services through the Online Store.
IV. Why do we process personal data?
1. To process and fulfill orders, customer service, to handle returns and complaints.
2. To issue invoices.
3. To create user accounts.
4. For Website operations and analytics.
5. To prevent fraud, ensure payment security, to protect our rights.
V. Data sharing
- Collected personal data will not be transferred to third parties as a general rule, unless it is necessary for proper contract performance or service provision.
- Personal data may be entrusted to third parties for the purpose of providing services on behalf of the Controller, particularly:
a) Technical services: Website hosting, IT support, data storage;
b) Payment processing: Payment gateways, banks, financial institutions;
c) Shipping and logistics: Courier services, postal services, logistics providers;
d) Professional services: Legal, accounting, audit services;
e) Marketing services: Email service providers, analytics platforms;
f) Authorities: When required by law or legal process. - International transfers: Some of our service providers may be located outside the European Economic Area. In such cases, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses approved by the European Commission
- Binding Corporate Rules or certification mechanisms
- Third-party services we use:
- WooCommerce/WordPress: E-commerce platform
- PayPal, mBank: Payment processing
- DPD (Geopost): Delivery services
- Google Analytics: Website analytics (anonymized data)
VI. How long will the data be stored?
- The period of data processing depends on the legal basis and purpose of processing:
a) Consent-based processing: Until consent is withdrawn by the User;
b) Contract performance: Until the contract expires or until the User objects to processing;
c) Legitimate interest: Until the purpose is achieved or until the User objects to processing;
e) Marketing data: Until consent is withdrawn or 3 years from last interaction;
f) Account data: Until account deletion is requested or 2 years of inactivity.
VII. Your rights
As a data subject, you have the following rights:
a) You have the right to obtain confirmation of data processing and access to your personal data, including information about processing purposes, data categories, recipients, and retention periods.
b) You have the right to correct inaccurate personal data and complete incomplete data.
c) You have the right to request erasure of your personal data in certain circumstances, such as when data is no longer necessary or you withdraw consent.
d) When processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
e) You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or where the alleged violation occurred.
European supervisory authorities:
- Poland: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, phone: +48 22 531 03 00
- Other EU countries: Contact your local data protection authority.
If you wish to exercise your rights related to processing of your personal data, please contact us via email: hello@bluble.eu
VIII. Security Measures
- The Controller ensures the security of personal data through implementation of appropriate technical and organizational measures to prevent unauthorized processing, accidental loss, destruction, or damage.
- We implement the following security measures:
- SSL encryption for data transmission
- Secure payment processing through certified providers
- Access controls and user authentication
- Security updates and monitoring
- Data backup and recovery procedures
- We do not conduct automated decision-making, including profiling, based on provided personal data.
IX. Cookies Policy
Cookies are small text files stored on your device when you visit our website. They help us provide you with a better browsing experience and remember your preferences.
Types of cookies we use:
- Essential cookies (necessary for website function):
- Session management
- Shopping cart functionality
- Functional cookies (enhance user experience):
- Language preferences
- User interface customization
- Remember login status
- Analytics cookies (help us improve our service):
- Google Analytics (anonymized)
- Website usage statistics
- Performance monitoring
- Marketing cookies (personalized advertising):
- Social media integration
- Targeted advertising
- Campaign effectiveness
Managing cookies:
- You can control cookies through your browser settings
- You can withdraw consent for non-essential cookies at any time
- Disabling essential cookies may affect website functionality
- For more information about cookies, you can visit www.allaboutcookies.org
XI. Data Breach notification
In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay, as required by GDPR Article 34.
XII. Changes to this Privacy Policy
The Controller reserves the right to modify this Privacy Policy, particularly due to possible new technical solutions implemented in the Online Store, changes in legislation, or other important circumstances.
Updated versions of the Privacy Policy will be available on the Online Store website. We may notify users of significant changes through:
- Email notification to registered users
- Updated effective date at the bottom of this policy
Date of last modification: 27.06.2025