Skip to content
+48 794 041 594Quote in 24 h

Privacy policy

This Policy explains what personal data we collect in the ARIO online shop, for what purpose and on what legal basis we process it, whom we entrust it to, and what rights data subjects have.

The Polish version of this Policy is the original. This English version is provided for the convenience of our customers.

Data controller

The controller of personal data is ARIO Event sp. z o.o., ul. Mickiewicza 29, 40-085 Katowice, Poland, VAT ID PL6343035633.

Contact regarding personal data: ario.biuro@gmail.com, telephone +48 794 041 594.

We have not appointed a data protection officer – we are not required to. For all matters concerning personal data please write to ario.biuro@gmail.com.

What data we collect

Data provided when ordering – first name and surname or company name, delivery address, registered address, VAT ID, e-mail address, telephone number.

Data provided in the contact form – first name and surname, e-mail address, telephone number and the content of the message.

Artwork supplied for printing, where it contains personal data, including a person's likeness.

Technical data recorded automatically – IP address, browser type, date and time of the visit, and the address of the page from which the visit originated.

Conclusion and performance of the sales contract, including order fulfilment, delivery and handling complaints – Article 6(1)(b) GDPR. The data is necessary to conclude the contract; without it an order cannot be fulfilled.

Responding to enquiries sent through the contact form – Article 6(1)(b) GDPR, and for enquiries that do not result in a contract, Article 6(1)(f) GDPR, being our legitimate interest in conducting commercial correspondence.

Issuing and retaining invoices and accounting records – Article 6(1)(c) GDPR in connection with tax legislation and the Polish Accounting Act.

Establishing and defending claims – Article 6(1)(f) GDPR.

Ensuring the security and correct operation of the site – Article 6(1)(f) GDPR.

Newsletter and e-mail marketing – we do not run either. We do not send commercial information to people who have not approached us with an enquiry, and we do not build a mailing list for that purpose. Should this change, the basis for processing will be consent under Article 6(1)(a) GDPR, and the method of withdrawing it will be described here.

Who we entrust data to

We entrust data only to entities that genuinely take part in running the shop:

Vercel Inc. (United States) – hosting of the shop and storage of uploaded files in the Vercel Blob service.

Neon Inc. (United States) – hosting of the shop database. Data is stored in a data centre within the European Union, in Frankfurt am Main.

Resend, Inc. (United States) – handling of outgoing mail from the shop: order confirmations, quotations and replies to enquiries.

Electronic payment provider – we do not use one. We accept payment by bank transfer only, and the settlement data is processed by the bank holding the account, acting as a separate controller.

Courier companies and carriers – we choose the delivering party separately for each order, depending on the size of the consignment and the place of delivery, and we name it in the dispatch confirmation. We entrust it only with the data needed to make the delivery.

Accounting office – the firm keeping the Seller's accounting records, in respect of accounting records and tax settlements.

Google Analytics is not used in the shop, nor is any other analytics or advertising tool. We embed no tracking pixels, run no remarketing and pass no traffic data to third parties. Should such a tool be introduced, we will list it here, state its legal basis – which will be consent – and put up a banner allowing that consent to be given and withdrawn.

Transfers outside the European Economic Area

Vercel Inc. and Neon Inc. are companies established in the United States, which means data may be accessed from outside the European Economic Area. Any transfer takes place on the basis of standard contractual clauses approved by the European Commission, or on the basis of an adequacy decision where the provider has joined the relevant framework.

How long we keep data

Data relating to an order is kept for as long as needed to fulfil it and then until the limitation period for claims expires.

Accounting records are kept for 5 years counted from the end of the calendar year in which the tax obligation arose.

Commercial correspondence that does not result in a contract is kept for as long as needed to handle it, and no longer than 12 months from the last contact.

Rights of data subjects

You have the right to access your data, to rectify it, to erase it, to restrict its processing, to data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time, which does not affect the lawfulness of processing before withdrawal.

To exercise these rights please contact us at ario.biuro@gmail.com.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Cookies

The shop uses cookies, which are small text files saved on the user's device.

Essential cookies allow the shop to work, in particular by remembering the chosen language version and keeping the contents of the basket and the session in the administration panel. They are used on the basis of Article 6(1)(f) GDPR and do not require consent.

Analytics and marketing cookies – we currently use none. For that reason we display no consent banner: there is nothing to collect consent for. Should this change, the banner will appear before any such files are used, and consent will be possible to change or withdraw at any time.

Cookie settings can also be changed in the web browser. Restricting cookies may affect how some shop functions work.

Automated decision-making

Data is not used for automated decision-making producing legal effects, including profiling for such a purpose.

Changes to this Policy

We may update this Policy, in particular when the law or the way the shop operates changes. The current version is always available in the shop.

This Policy takes effect on 1 September 2026.