Last updated: October 2026
1. Data Controller
Konstantin Jendrikowski
conducting unregistered business activity (działalność nierejestrowana)
Mieczysława Karłowicza 61B/m1
80-275 Gdańsk
Poland
E-mail: Konstantin@yogimalas.eu
2. What personal data we collect
When you visit our website or place an order, we may collect the following data:
- Name and surname
- Billing and shipping address
- E-mail address
- Phone number (if provided)
- Order details and purchase history
- IP address and browser/device information
- Payment-related data (processed by the payment provider – we do not store full credit card details)
3. Purpose of processing and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing and fulfilling orders | Performance of a contract (Art. 6 (1) b) |
| Customer communication | Performance of a contract / Legitimate interest |
| Legal and tax obligations | Legal obligation (Art. 6 (1) c) |
| Improving the website | Legitimate interest (Art. 6 (1) f) |
| Marketing (only with consent) | Consent (Art. 6 (1) a) |
4. Hosting
Our website is hosted by Strato.
The servers are located in Germany (European Union).
Strato processes data on our behalf under a Data Processing Agreement in accordance with Art. 28 GDPR.
5. Cookies
We use necessary cookies that are required for the website and the shopping cart to function (WooCommerce).
These cookies do not require consent.
If we use additional cookies in the future (e.g. analytics or marketing), we will ask for your consent via a cookie banner.
6. Sharing of data
We only share your data with third parties when it is necessary to fulfil the order, for example:
- Payment service providers
- Shipping/courier companies
- Hosting provider (Strato)
We do not sell your personal data.
7. Data retention
- Order and invoice data: kept for the period required by Polish tax law (usually 5–6 years)
- Account data: until you delete your account or request deletion
- Other data: only as long as necessary for the purpose for which it was collected
8. Your rights
Under the GDPR you have the following rights:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
To exercise any of these rights, please contact us at:
Konstantin@yogimalas.eu
You also have the right to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office – UODO).
9. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse or unauthorised access.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version will always be available on this page.