Last updated: October 2025
1. General Information
This Privacy and Cookie Policy describes how we collect, use, and protect personal data of users visiting studiolarum.com (“Website”).
The Data Controller is:
Tvórcza Sp. z o.o.
al. Rzeczypospolitej 6/40, 02-972 Warsaw, Poland
Correspondence address: Ząbkowska 37/10, 03-736 Warsaw
NIP (Tax ID): 9512534778 REGON: 521187624 KRS: 0000950907
Email: hello@studiolarum.com
This policy applies to all visitors, clients, and users of the website, including those placing orders via email or WhatsApp.
2. What Data We Collect
We may collect the following categories of personal data:
- Identification data (name, address, company name)
- Contact data (email address, phone number)
- Order data (products ordered, delivery address, payment details)
- Analytical and technical data (IP address, browser type, device ID, cookies)
- Marketing and behavioral data (interactions with our website and ads)
We collect only data necessary for:
- order and delivery processing
- communication with customers
- marketing and website analytics
- fulfilling legal and tax obligations
3. Legal Basis for Processing
We process personal data on the following legal grounds:
- necessity to perform a contract or take steps before entering into one (Art. 6(1)(b) GDPR),
- compliance with legal obligations (Art. 6(1)(c) GDPR),
- legitimate interests of the controller (marketing, analytics, website security – Art. 6(1)(f) GDPR),
- user’s consent (for cookies, marketing, or newsletter if applicable).
4. Cookies and Tracking Tools
Our website uses cookies and similar technologies to ensure proper operation, improve performance, and deliver personalized content.
We use the CookieYes consent management system. You can change or withdraw your consent at any time using the “Cookie Settings” button on the website.
Categories of cookies used:
- Essential cookies – required for the website to function properly.
- Analytical cookies – used for traffic measurement (e.g. Google Analytics).
- Marketing cookies – used for personalized advertising (e.g. Meta Pixel).
- Functional cookies – help remember user preferences, such as language or region.
Some cookie data may be transferred outside the European Economic Area (e.g. to Google or Meta), under appropriate data protection safeguards.
5. Data Recipients
Your personal data may be shared only with trusted service providers, including:
- Hosting provider (MyDevil)
- Payment and invoicing services (Stripe, Fakturownia)
- Courier and shipping companies (for order delivery)
- Marketing and analytics providers (Google, Meta)
- Accounting or legal support services (if required by law)
We ensure all partners comply with GDPR requirements.
6. Data Retention
We keep personal data for the following periods:
- Transaction and accounting data – 5 years, as required by tax law.
- Marketing and analytics data – up to 3 years or until consent is withdrawn.
- Customer communication – until the request is fulfilled or deleted upon request.
7. Data Subject Rights
You have the following rights under the GDPR:
- to access your personal data,
- to correct or update your data,
- to request deletion (“right to be forgotten”),
- to restrict or object to processing,
- to transfer your data to another controller,
- to withdraw consent at any time (without affecting prior processing),
- to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office).
To exercise your rights, contact us at hello@studiolarum.com.
8. Data Transfers Outside the EU
Some of our partners (e.g., Google, Meta) may process data outside the European Economic Area. In such cases, data transfers are secured using Standard Contractual Clauses (SCCs) or other approved mechanisms.
9. Policy Updates
We may occasionally update this Privacy Policy. The latest version is always available on this page and includes the date of the last update.