This policy explains what personal data we collect when you use Iconquarry, why we collect it and what rights you have. It follows the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The controller of your personal data is ALTSOFT sp. z o.o. (Altsoft Limited), ul. Grochowska 207, 04-077 Warsaw, Poland, KRS 0001153485, NIP 1133158025. For anything related to your data, email hello@iconquarry.com. We have not appointed a data protection officer.
2. What we collect and why
| When | What data | Why and on what legal basis |
|---|---|---|
| You place an order | Name, email address, billing details, order contents, payment status | To conclude and carry out the contract and deliver your files (Article 6(1)(b) GDPR); to keep accounting and tax records (Article 6(1)(c) GDPR); to handle complaints and protect against claims (Article 6(1)(f) GDPR) |
| You create an account | Email address, password (stored encrypted), order history | To provide the account you asked for (Article 6(1)(b) GDPR) |
| You download files | IP address, date and time of each download | To deliver the files, prevent misuse of download links and check refund requests (Article 6(1)(f) GDPR) |
| You email us | Your email address and whatever you write | To answer you (Article 6(1)(f) GDPR, or Article 6(1)(b) where the message concerns an order) |
| You visit the Shop | Technical data in server logs, such as IP address, browser type and time of the request | To keep the Shop secure and working (Article 6(1)(f) GDPR) |
Giving us the data marked as required at checkout is necessary to conclude the contract. Without it we cannot process your order. Everything else is voluntary.
3. Who receives your data
We share data only with providers who help us run the Shop, and only as far as they need it:
- our hosting provider, Hetzner Online GmbH, Germany, whose servers for the Shop are located in the European Union;
- the payment provider you choose at checkout, which processes payment data under its own privacy rules;
- providers of email delivery and accounting services;
- public authorities, where the law requires us to share data.
4. Transfers outside the EEA
We do not transfer your data outside the European Economic Area ourselves. If a provider we use does so, the transfer is protected by an adequacy decision of the European Commission or by standard contractual clauses.
5. How long we keep data
- Order and invoice data: for 5 years from the end of the calendar year in which the related tax obligation arose, as required by Polish tax and accounting law.
- Account data: until you delete your account, and after that only as long as needed for the purposes above.
- Data needed to deal with claims: until the relevant limitation periods expire.
- Server logs: for a short period, normally no longer than 90 days.
6. Your rights
You have the right to access your data, to have it corrected, deleted or restricted, to receive it in a portable format and to object to processing based on our legitimate interests. To use any of these rights, email hello@iconquarry.com.
You also have the right to lodge a complaint with the supervisory authority in Poland: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or with the authority in the EU country where you live or work.
7. Automated decisions
We do not make decisions about you based solely on automated processing, and we do not profile you.
8. Cookies
The Shop uses only the cookies it needs to work. Details are in our Cookie policy.
9. Changes
If we change how we handle personal data, we will update this page and the date at the top.