Privacy Policy (Polityka Prywatności) for KovalType.com

Last updated: 08.10.2025

Koval Type values your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.

1

Data Controller (Administrator danych)

Controller: Aliaksei Koval (Koval Type)
Registered address: ul. Sobieskiego 13/2 81-761 Sopot, Poland
Email: aliaksei.koval@gmail.com
Website: https://www.kovaltype.com

For the purposes of GDPR and Polish law, Koval Type is the data controller responsible for processing your personal data collected through this website.

2

Scope and Purpose of Data Processing

We process personal data only for specific, lawful purposes, in accordance with Article 6 of the GDPR.

Purpose of Processing

Legal Basis

Fulfilling orders, providing digital products, processing payments

Article 6(1)(b) – performance of a contract

Responding to inquiries and customer communication

Article 6(1)(f) – legitimate interest

Sending newsletters and marketing information (if you subscribed)

Article 6(1)(a) – consent

Website analytics, improvement of UX/UI, and security

Article 6(1)(f) – legitimate interest

Fulfilling legal obligations (e.g., tax and accounting requirements)

Article 6(1)(c) – legal obligation

 

3

Categories of Data Collected

We may collect:

• Identification and contact data: name, email, phone, address.
• Transaction data: purchase details, payment status, invoice information.
• Technical data: IP address, browser, OS, device type, geolocation (country level).
• Usage data: page visits, time spent, referring URLs, actions on site.
• Marketing preferences: subscription status, communication preferences.
• Cookies: session cookies, analytics cookies, marketing cookies (if consented)

4

Cookies and Similar Technologies

Koval Type uses cookies in accordance with the Polish Telecommunications Law (Prawo telekomunikacyjne, art. 173) and the ePrivacy Directive.

Necessary cookies: essential for site function and checkout.
Analytical cookies: used to analyze website performance (Google Analytics or similar).
Marketing cookies: used for advertising and social media integration (only with your consent).

You can manage or withdraw cookie consent anytime using your browser settings or via the cookie banner displayed on the site.

5

Data Retention

We store your personal data only for as long as necessary:

Order and accounting data: up to 6 years (required by Polish tax law).
Marketing and newsletter data: until consent is withdrawn.
Customer correspondence: up to 3 years (for defending potential claims).

Technical and analytics data: typically up to 14 months or as defined by third-party tools

6

Data Recipients (Data Sharing)

We share data only with trusted service providers under GDPR-compliant agreements:

Hosting and IT services: secure servers within the EU.
Payment processors: Stripe, PayPal, or other EU-compliant services.
Analytics providers: e.g., Google Analytics (IP anonymization enabled).
Email/newsletter tools: compliant with GDPR and EEA data transfer rules.
Legal and accounting partners: only as required by Polish law.

We do not sell or rent personal data to third parties.

If data is transferred outside the EEA, we ensure protection through Standard Contractual Clauses (SCCs) or adequacy decisions under Article 45 GDPR.

7

Security Measures

We apply technical and organizational measures as required under Article 32 of the GDPR, including:

SSL/TLS encryption for all website communications.
Access control and secure authentication for staff.
Regular backups and security audits.
Limited access to personal data based on role necessity.
Hosting in secure EU-based data centers.

8

Your Rights under GDPR

You have the following rights regarding your data:

Access (Art. 15): to know what data we hold and how it’s used.
Rectification (Art. 16): to correct inaccurate or incomplete data.
Erasure (Art. 17): to request deletion (“right to be forgotten”).
Restriction (Art. 18): to limit processing in certain cases.
Data portability (Art. 20): to receive your data in a portable format.
Objection (Art. 21): to object to processing based on legitimate interest or direct marketing.
Withdraw consent (Art. 7(3)): at any time, without affecting prior lawful processing.

To exercise your rights, contact us at [Insert Contact Email].
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Warsaw:
📍 ul. Stawki 2, 00-193 Warszawa, Poland
🌐 https://uodo.gov.pl

9

Data Protection Officer (Inspektor Ochrony Danych)

Koval Type is not legally required to appoint a DPO, but privacy inquiries can be directed to aliaksei.koval@gmail.com

10

Updates to the Policy

We may update this policy periodically to reflect changes in law, technology, or our operations.
All updates will be published on this page with a new “Last Updated” date. Substantial changes will be announced on the website or by email.

11

Contact Information

For questions, privacy requests, or complaints:
Koval Type
✉️ aliaksei.koval@gmail.com
🌐 https://www.kovaltype.com