Privacy Policy

This Privacy Policy explains how we process personal data in the online shop available at https://3dmiracles.eu (the "Shop") and how the Shop uses cookies and similar technologies.

The controller of personal data is Mariia Lytvynova (the "Controller"). For any matter concerning personal data, the Controller can be contacted at: [email protected].

We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR") and the Polish Electronic Communications Law of 12 July 2024.

We process personal data for the following purposes:

• fulfilling your order and the sales contract, including payment, delivery and order status notifications by email and text message – name, surname, delivery address, email address, phone number and order details (Art. 6(1)(b) GDPR);
• running your customer account – the data provided at registration and your order history (Art. 6(1)(b) GDPR);
• handling complaints, returns and withdrawals from the contract (Art. 6(1)(b) and (c) GDPR);
• complying with legal obligations, in particular tax obligations (Art. 6(1)(c) GDPR);
• replying to messages sent through the contact form or by email – name, email address and message content (Art. 6(1)(f) GDPR – our legitimate interest in responding);
• publishing product reviews – we publish the name or nickname, rating, text and photos you provide; your email address is never published and is used only to contact you about the review (Art. 6(1)(f) GDPR – showing reviews to other customers);
• protecting the Shop's forms against spam and abuse (Art. 6(1)(f) GDPR);
• establishing, pursuing or defending legal claims (Art. 6(1)(f) GDPR);
• statistics on how the Shop is used – only after you consent to analytics cookies (Art. 6(1)(a) GDPR).

Providing data is voluntary, but it is required to place an order, create an account, send a message or post a review – without it these are not possible.

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

We share data only to the extent necessary for the purposes described above, with the following categories of recipients:

• providers of hosting and IT infrastructure on which the Shop runs;
• the email delivery service provider;
• the text message (SMS) notification provider;
• the payment operator – to process payment for your order;
• courier companies and pickup point operators – to deliver your order;
• the spam protection service provider – when you use the contact form or post a review;
• the analytics tool provider – only after you consent to analytics cookies;
• providers of accounting or legal services to the Controller;
• public authorities – only where disclosure is required by law.

Entities processing data on behalf of the Controller do so under a data processing agreement, only on the Controller's instructions and with appropriate security measures.

The Shop and its database are hosted on servers in the European Economic Area (EEA), and the email delivery provider also operates in the EEA.

The payment operator, the analytics tool provider and the spam protection provider may also process data outside the EEA, in particular in the United States. In that case the transfer is based on a European Commission adequacy decision (the EU-U.S. Data Privacy Framework) or on standard contractual clauses adopted by the European Commission.

Information about these safeguards, and a copy of them, is available from the Controller on request.

We keep data for the following periods:

• order data – for the duration of the contract and then until claims arising from it become time-barred;
• data required by tax law – for 5 years from the end of the calendar year in which the tax payment deadline passed;
• customer account data – until the account is deleted;
• contact form messages and email correspondence – until the matter is closed and then until any claims become time-barred;
• product reviews – until removed by the Controller or at your request;
• data processed on the basis of consent – until consent is withdrawn;
• data processed on the basis of legitimate interest – until you successfully object.

You have the following rights:

• the right of access to your data and to receive a copy;
• the right to rectification (correction) of your data;
• the right to erasure of your data;
• the right to restriction of processing;
• the right to object to processing based on legitimate interest;
• the right to data portability;
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise your rights, simply write to [email protected]. We will reply without undue delay and within one month at the latest.

You can change or withdraw your consent to analytics cookies at any time using the "Cookie Settings" link in the page footer.

We use appropriate technical and organisational measures to protect personal data, including:

• encrypted connections (SSL/TLS) for data transmission;
• internal data protection procedures;
• restricted access to data and authentication mechanisms;
• monitoring and updating of security measures;
• regular data backups;
• periodic risk assessment.

Security measures are reviewed and updated regularly in line with technological developments.

The Shop uses cookies and browser storage (local storage) – small pieces of data saved on your device.

Essential – stored without consent because the Shop cannot work without them (Art. 399(3) of the Polish Electronic Communications Law). They are used to:

• remember the contents of your basket and wishlist;
• keep you signed in to your customer account;
• remember your chosen delivery method and pickup point;
• remember your cookie choice – for 6 months;
• keep payments secure and prevent fraud – the payment operator's cookies, set during payment;
• protect the contact and review forms against spam – the spam protection provider's cookies, set when you use those forms.

Analytics – stored only with your consent. They help us understand how the Shop is used (for example which pages are visited and how checkout goes) so we can improve it. The analytics tool keeps its cookies for up to 2 years.

We ask for consent on your first visit. You can change or withdraw it at any time using the "Cookie Settings" link in the page footer – when you withdraw it, we delete the analytics cookies. We will ask again after 6 months, and whenever the rules described in this section change.

You can also delete or block cookies in your browser settings. Blocking essential cookies may, however, prevent you from placing an order.

This Privacy Policy may be updated, for example when the law or the Shop's features change. The current version is always available on this page, with the date of the last update shown at the top.

We will announce significant changes on the Shop's website. If a change concerns cookies, we will ask for your consent again.