Privacy
Policy

General Information

This Privacy Policy describes how personal data is processed in connection with the website and online store available at en.akri-global.eu.

The Data Controller is APK Digital – Pavlo Prysiazhniuk, ul. Krakowska 7, 39-200 Dębica, Poland, NIP 8181737492, REGON 528820929.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, commonly referred to as the General Data Protection Regulation or GDPR, as well as other applicable Polish and European data protection laws.

This Policy applies to visitors to the website, customers of the online store and people who contact AKRI.

The English AKRI Store does not require customers to create a user account in order to place an order.

What Personal Data We Collect

Depending on how you use the Store, we may process the following categories of personal data.

Identification Data

• first name and surname,
• company name,
• tax identification details where required for invoicing.

Contact Data

• email address,
• telephone number,
• billing address,
• delivery address.

Order Data

• products ordered,
• selected product configuration,
• selected upholstery colour,
• order number,
• order value,
• payment status,
• delivery and shipment information.

Communication Data

• information provided in the contact form,
• email correspondence,
• information submitted in connection with complaints, returns or customer service requests.

Technical Data

When you visit the website, certain technical data may be collected automatically, including:

• IP address,
• date and time of access,
• browser type and version,
• device and operating system information,
• server logs,
• cookie identifiers,
• information necessary to ensure website security and proper operation.

Why We Process Personal Data

We process personal data only where there is a valid legal basis for doing so.

Online Orders

When you place an order, we process the personal data necessary to conclude and perform the sales contract.

This normally includes your name, email address, telephone number, billing address, delivery address, ordered products, selected product options, order value and payment status.

Where an invoice is required, we may also process company information and tax identification data.

Providing data marked as required during checkout is necessary to process and deliver the order.

If you do not provide the necessary information, we may be unable to enter into or perform the sales contract.

The Store is based on WooCommerce technology, which provides the technical functionality necessary for the cart, checkout and order management processes.

Payments

Online payments in the Store are processed using payment services provided by Stripe.

Depending on your country, device and eligibility, available payment methods may include payment cards, Apple Pay, Google Pay, Klarna, Link or other methods made available by the payment provider.

In connection with payment processing, Stripe may process information such as:

• transaction amount,
• payment method,
• payment status,
• billing information,
• device and network information,
• information necessary for fraud prevention and security.

Payment providers process certain information in accordance with their own legal obligations, security requirements and privacy rules.

AKRI does not store complete payment card credentials.

Delivery

Orders are delivered using DPD.

In order to deliver your parcel, we may provide the courier with personal data necessary to perform the delivery, including:

• name and surname,
• delivery address,
• telephone number,
• email address,
• shipment information.

These details are provided only to the extent necessary to prepare, transport, deliver and track the shipment.

Contact Form & Communication

When you contact AKRI through the contact form, email or telephone, we process the information you voluntarily provide.

Through the website contact form, this normally includes:

• your name,
• email address,
• selected subject,
• message content,
• technical information necessary for security.

The information is used to answer your enquiry and, where relevant, to take steps at your request before entering into a contract.

Messages sent through the form are delivered using the website’s email infrastructure and SMTP service.

Google reCAPTCHA

The contact form is protected using Google reCAPTCHA v3.

reCAPTCHA helps us determine whether a form submission is likely to come from a real user or from automated software.

reCAPTCHA v3 operates in the background and normally does not require the user to solve a visible challenge.

When reCAPTCHA is used, Google may process technical and interaction information, which may include:

• IP address,
• browser and device information,
• website interaction information,
• security-related identifiers and signals.

We use reCAPTCHA to protect the website against spam, automated submissions, abuse and malicious activity.

This processing is based on our legitimate interest in maintaining the security and integrity of the website pursuant to GDPR Article 6(1)(f).

Where applicable law requires consent for the use of cookies or similar device technologies, the appropriate consent requirements also apply.

Cookies & Similar Technologies

The Store uses cookies and similar technologies to provide website functionality, maintain security and support the shopping process.

Necessary Cookies

Necessary cookies may be used without which parts of the Store would not function correctly.

They may be used for purposes such as:

• maintaining the shopping cart,
• remembering checkout information during a session,
• protecting forms and website sessions,
• fraud and abuse prevention,
• maintaining website security,
• processing payments.

Optional Cookies

If the Store uses optional analytics, advertising or other non-essential technologies that require consent, they should only be activated in accordance with the choices made through the website’s cookie consent mechanism.

Managing Cookie Preferences

You can manage your cookie preferences through the cookie consent settings available on the website.

You may also configure your browser to block or delete cookies. However, disabling necessary cookies may prevent some Store functions from operating correctly.

The exact cookies used by the Store may change when technical services are updated. The current cookie consent tool provides information about the categories and services active on the website.

Who May Receive Your Data

Personal data is not sold to third parties.

Data may be disclosed only where necessary for operating the Store, fulfilling orders, complying with legal obligations or protecting legitimate interests.

Categories of recipients may include:

• hosting and website infrastructure providers,
• email and SMTP service providers,
• payment service providers, including Stripe,
• courier and logistics providers, including DPD,
• accounting and tax service providers,
• IT and technical support providers,
• Google in connection with reCAPTCHA,
• banks and financial institutions where required for payment processing,
• public authorities where disclosure is required by law,
• legal or professional advisers where necessary to establish, exercise or defend legal claims.

Where another entity processes data on our behalf, appropriate data processing arrangements are used where required by law.

Transfers Outside the European Economic Area

Some technology providers used by the Store, including payment and security providers, operate internationally.

As a result, certain personal data may be processed or transferred outside the European Economic Area, including to the United States.

Where such transfers take place, they must be based on an appropriate legal transfer mechanism required by GDPR.

Depending on the recipient, these mechanisms may include:

• an adequacy decision of the European Commission,
• the EU-U.S. Data Privacy Framework where applicable,
• Standard Contractual Clauses approved by the European Commission,
• another transfer mechanism permitted under GDPR.

Service providers may also implement additional technical and organisational safeguards for international data transfers.

How Long We Keep Personal Data

Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.

Order Data

Data connected with orders may be stored for the duration necessary to perform the contract and afterwards for periods necessary to deal with complaints, warranties, legal claims and statutory obligations.

Accounting & Tax Data

Accounting, invoice and transaction information is retained for the period required under applicable Polish tax and accounting law.

Contact Enquiries

Contact form messages and correspondence are generally retained for as long as necessary to answer and complete the enquiry.

They may be kept longer where necessary in connection with an order, complaint or potential legal claim.

Technical Logs

Technical and security information may be retained for a limited period necessary to protect the Store, investigate incidents and prevent abuse.

Consent

Where processing is based on consent, data is processed until consent is withdrawn or until the relevant processing purpose ends, subject to the need to retain evidence demonstrating that consent was lawfully obtained.

Your GDPR Rights

Subject to the conditions provided by GDPR, you may have the following rights.

Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.

Some rights are not absolute. For example, we may be required to retain certain information because of tax, accounting or legal obligations.

To exercise your rights, contact us at:

info@akri-global.eu

Right to Lodge a Complaint

If you believe that your personal data is being processed in breach of applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

In Poland, the competent supervisory authority is:

If you live in another European Economic Area country, you may also have the right to contact the supervisory authority in your country of residence, workplace or place of the alleged infringement.

Data Security

We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Measures used in connection with the Store may include:

• SSL/TLS encrypted connections,
• secured administrative access,
• website and server security measures,
• anti-spam and anti-bot protection,
• access controls,
• software and security updates,
• backups where appropriate.

No internet transmission or storage system can be guaranteed to be completely secure, but we take reasonable measures appropriate to the nature of the information processed.

Automated Processing & Fraud Prevention

AKRI does not independently make decisions that produce legal or similarly significant effects for customers solely through automated processing.

However, technology providers used for payments and website security may use automated systems to detect fraud, abuse or suspicious activity.

Google reCAPTCHA v3, for example, automatically evaluates website interaction signals in order to assess whether activity is likely to be legitimate or automated.

Payment providers may also use automated security and fraud prevention systems in accordance with their own legal obligations and privacy policies.

External Services & Links

The Store may contain links to external websites or services operated by third parties.

When you leave the AKRI website and visit an external service, the processing of your data is governed by that provider’s own privacy rules.

This may include, for example, payment providers, courier services, Google services or social media platforms.

We encourage you to review the privacy information provided by those services when you use them.

Changes to This Privacy Policy

We may update this Privacy Policy when necessary, for example because of:

• changes in applicable law,
• changes to the Store,
• introduction or removal of technical services,
• changes to payment or delivery providers,
• changes in the way personal data is processed.

The current version will always be published on this page.

The date shown at the top of the Policy indicates when it was last updated.