Privacy policy

PRIVACY POLICY

Effective date: 21 September 2026

1. Who we are (data controller)

The controller of your personal data (administrator danych osobowych) is:

DOMANI Sp. z o.o.
ul. Twarda 18/15p, 00-105 Warszawa, Poland
KRS: 0000804045 · NIP: 7010945823 · REGON: 384370529

We operate the Naked Car Studio online store at nakedcarstudio.eu. For any question about your personal data or to exercise your rights, contact us at kontakt@nakedcarstudio.eu.

2. What data we process, why, and on what legal basis

Orders and delivery. We process your name, email address, phone number, delivery and billing address, and order details to process your order, take payment, deliver your purchase, and provide customer service.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Returns, withdrawals, and complaints. We process your order and contact data and the details of your request to handle withdrawals, returns, and complaints.
Legal basis: performance of a contract and our legal obligations under consumer law (Art. 6(1)(b) and (c) GDPR).

Accounting and tax. We process transaction and invoice data to meet accounting and tax obligations.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Customer communication. When you contact us by email or through the contact form, we process your name, email address, and the content of your message to respond to you.
Legal basis: our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR), or steps taken at your request before concluding a contract (Art. 6(1)(b) GDPR).

Security and legal claims. We process transaction data, your IP address, and device data to keep the Store secure, prevent fraud, and establish or defend legal claims.
Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

Newsletter and marketing emails. If you subscribe, we process your email address (and name, if provided) to send you news about our products.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.

Analytics and advertising. If you accept analytics or marketing cookies, we process cookie identifiers and data about how you use the Store to understand store performance and to show you relevant advertising, including on Meta platforms (Facebook and Instagram).
Legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie banner.

Providing data needed for an order is voluntary but necessary to conclude and carry out the contract. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

3. Cookies

Strictly necessary cookies (for example, those that keep your cart, run checkout, and protect the Store) are used without consent, because the Store cannot work without them.

Analytics and marketing cookies are used only after you consent through the cookie banner. You can accept all, reject all, or choose categories. You can change or withdraw your consent at any time through the cookie settings on the website or by deleting cookies in your browser.

4. Who receives your data

We share personal data only as needed with:

  • Shopify (Shopify International Limited, Ireland), our e-commerce platform and hosting provider
  • Payment providers, which process your payment
  • Courier and postal companies, which deliver your order and returns
  • Our email service provider, if you subscribe to the newsletter
  • Meta Platforms Ireland Ltd., for advertising, only if you consent to marketing cookies
  • Accounting, legal, and IT service providers who support our business
  • Public authorities, where we are legally required to disclose data

Some of these recipients act on our instructions as processors, while others (such as payment providers and Meta) act as independent controllers under their own privacy policies.

5. Transfers outside the European Economic Area

Some providers, such as Shopify and Meta, may process data outside the EEA, including in the United States. Such transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (where the recipient is certified) or on Standard Contractual Clauses approved by the European Commission. You can request information about these safeguards by contacting us.

6. How long we keep your data

  • Order data: for the duration of the contract and then until any claims expire, generally up to 6 years.
  • Accounting data: 5 years from the end of the calendar year in which the tax obligation arose.
  • Customer correspondence: for as long as needed to handle your matter and any related claims.
  • Newsletter data: until you unsubscribe or withdraw consent.
  • Cookies: for the period shown in the cookie settings, or until you delete them.

7. Your rights

You have the right to:

  • access your personal data and receive a copy
  • rectify inaccurate data
  • erase your data ("right to be forgotten")
  • restrict processing
  • data portability
  • object to processing based on our legitimate interest
  • withdraw consent at any time, without affecting processing carried out before withdrawal

To exercise any of these rights, email kontakt@nakedcarstudio.eu. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You may also contact the data protection authority in your EU country of residence.

8. Children

The Store is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Security

The Store uses SSL encryption. We apply appropriate technical and organisational measures to protect personal data, including restricted and secured access to the store administration.

10. Changes to this policy

We may update this Privacy Policy, for example when the law or our services change. The current version is always available on this page, with its effective date at the top.