Privacy Policy

Last updated: 04.10.2025

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Website, and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Data Controller

The Data Controller of Your personal data is:
Chris Ostrowski Studio Krzysztof Ostrowski
Chmielna 2/31, 00-020 Warsaw, Poland
VATIN: PL7010176187

Email (for privacy matters): ostrowski.k91@gmail.com

Collection and Use of Personal Data

Types of Data Collected

  • Personal Data: name, billing and shipping address, email address, phone number (if provided).

  • Payment Data: payment information is processed securely by our external payment providers (e.g. PayPal). We do not have access to or store your full payment card details. We only receive confirmation of payment status and transaction references.

  • Usage Data: information on how the Service is accessed and used (IP address, browser type, pages visited).

  • Cookies and Tracking: see section Cookies below.

Purpose and Legal Basis of Processing

We process Your data for the following purposes and on the following legal bases under GDPR:

  • Order fulfillment, payment processing and delivery – to perform the contract (Art. 6(1)(b) GDPR).

  • Account management – to perform the contract (Art. 6(1)(b) GDPR).

  • Customer support – our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

  • Marketing and newsletters – based on Your consent (Art. 6(1)(a) GDPR).

  • Analytics and service improvement – our legitimate interest (Art. 6(1)(f) GDPR).

  • Compliance with legal obligations – e.g., tax and accounting rules (Art. 6(1)(c) GDPR).

Retention of Data

We retain Your personal data only as long as necessary for the purposes described above:

  • Orders and invoices: 5 years (required by Polish accounting law).

  • Marketing communications: until You withdraw Your consent.

  • Usage/analytics data: up to 14 months (depending on third-party tools).

  • Legal obligations: as long as required by law.

Data Transfers

  • EU  customers:
    Your data is processed and stored within the European Economic Area (EEA). We use EU-based subcontractors to handle order fulfillment, which ensures your data does not leave the EEA.

  • US customers:
    For playmat orders, production and shipping may be handled by our subcontractor based in the USA. In such cases, your data is processed within the USA under applicable US laws.
    For other products (such as signed Artist Proofs or sketches), your data is processed by us in the EU, and delivery details (name, address, phone number, and email) are shared with courier or postal service providers for shipping to the USA.

  • Customers outside the EU: Your data is processed by us and our EU subcontractor. However, for delivery purposes, your personal data (such as name, address, phone number, and email) will be shared with international courier or postal service providers operating outside the EEA, as necessary to perform the delivery.

These transfers are based on Article 49(1)(b) GDPR – as they are necessary for the performance of a contract between you and us (fulfilling your order).

Cookies

We use cookies and similar tracking technologies to operate and improve Our Service.

  • Essential cookies: necessary for the operation of the store (set without consent).

  • Analytics and marketing cookies: set only after You give consent through the cookie banner.

You can manage or withdraw Your cookie consent at any time via Your browser settings or the cookie banner.

Your Data Protection Rights (EEA residents)

If You are located in the EEA, under GDPR You have the following rights:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent at any time (Art. 7(3) GDPR)

You also have the right to lodge a complaint with the supervisory authority:

President of the Personal Data Protection Office (PUODO)
Stawki 2, 00-193 Warsaw, Poland
https://uodo.gov.pl/

Children’s Privacy

Our Service is not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If You are a parent or guardian and believe that Your child has provided Us with personal data, please contact Us.

Security of Data

We use appropriate technical and organizational measures to protect Your personal data against loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

Changes to This Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

Contact Us

If You have any questions about this Privacy Policy or Your personal data, please contact Us at:

Chris Ostrowski Studio Krzysztof Ostrowski
Chmielna 2/31, 00-020 Warsaw, Poland
Email: ostrowski.k91@gmail.com