Privacy Policy

PRIVACY AND COOKIES POLICY OF NOKO.BAND

§ 1. Personal Data Controller

The personal data controller of the data collected through the noko.band online store is Michał Jan Ciesielski, conducting business activity under the company name Michał Jan Ciesielski Production, ul. Miraua 4/4, 80-318 Gdańsk, Poland, NIP: 5851436929, REGON: 529115185 (hereinafter referred to as the “Controller“). Contact regarding matters related to data processing is possible via the email address: shop@noko.band.

§ 2. Purposes, Legal Grounds, and Period of Data Processing

Personal data of Users and Clients are processed in accordance with the GDPR (General Data Protection Regulation) for the following purposes:

  1. Order fulfillment and processing (including shipping physical merch and records, delivering tickets, and digital files) – the legal basis is the necessity of data for the performance of a contract (Art. 6(1)(b) GDPR). Data are stored for the period necessary to perform the contract.
  2. Compliance with legal, tax, and accounting obligations (issuing proofs of purchase, invoices without VAT, keeping financial reports) – the legal basis is a legal obligation binding on the Controller (Art. 6(1)(c) GDPR). Data are stored for a period of 5 years from the end of the calendar year in which the tax payment deadline expired.
  3. Handling complaints, inquiries, and returns – the legal basis is a legal obligation (Art. 6(1)(c) GDPR) and the legitimate interest of the Controller consisting in defense against potential claims (Art. 6(1)(f) GDPR). Data are stored until the expiry of the limitation periods for claims.
  4. Ongoing contact (handling email inquiries) – the legal basis is the legitimate interest of the Controller consisting in communication with website users (Art. 6(1)(f) GDPR).

§ 3. Recipients of Personal Data

To ensure the proper functioning of the Store and the fulfillment of orders, the Controller may share Clients’ personal data with third parties, strictly to the extent necessary. Data recipients may include:

  • Electronic payment operators (e.g., Stripe, PayU, Przelewy24, Tpay) handling financial transactions in the Store;
  • Courier companies and postal operators (e.g., InPost, DPD, Poczta Polska) delivering the ordered merchandise and records;
  • Entities providing accounting or legal services to the Controller;
  • The provider of hosting services and IT systems used to operate the online Store.

§ 4. Rights of Data Subjects

Every individual whose data is processed by the Controller has the right to:

  • Access their personal data and receive a copy thereof;
  • Rectify (correct) their data if they are incorrect or incomplete;
  • Erasure of data (“the right to be forgotten”) – if there are no longer legal grounds for their further processing;
  • Restriction of data processing;
  • Data portability to another controller (within the scope of automated processing based on a contract);
  • Object to the processing of data based on the legitimate interest of the Controller;
  • Lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland), if they consider that their data is processed unlawfully.

§ 5. Cookies and Operational Data

  1. The noko.band Store uses cookies, which are small text files stored on the User’s terminal device (computer, tablet, smartphone).
  2. Cookies are used for:
    • Ensuring the proper operation of the Store (e.g., maintaining the contents of the shopping cart, remembering the session);
    • Statistical and analytical purposes (collecting anonymous data about website traffic).
  3. The User can change the settings regarding cookies in their web browser at any time, including completely blocking their storage. However, restricting the use of cookies may affect some functionalities available in the Store (e.g., making it impossible to add a product to the cart).