Privacy Policy
Updated: September 8, 2026
This Privacy Policy explains what personal data the Velours website collects, how we use, store and protect it, and what rights you have under the GDPR.
Data controller
The controller of your personal data is the workshop, whose details are listed in the “Data controller” section at the end of this page.
What data we collect
We may collect the following personal data:
- data you provide in the request form on the site: name, phone number, comment about the order;
- data you provide when contacting us by email, phone or messengers;
- technical data when visiting the site: IP address, device and browser type, site usage statistics — subject to your consent to analytics cookies.
Purposes and legal grounds for processing
We process your data for the following purposes:
- handling requests and correspondence, preparing an offer — based on actions taken prior to concluding a contract (Art. 6(1)(b) GDPR);
- fulfilling the order and providing services — based on the concluded contract (Art. 6(1)(b) GDPR);
- website traffic analytics and personalized advertising — based on your consent (Art. 6(1)(a) GDPR) expressed via the cookie banner;
- compliance with tax and accounting obligations — based on legal requirements (Art. 6(1)(c) GDPR).
Who we share data with
Access to your data may be granted to: workshop employees and contractors involved in processing the order; courier and logistics services — for delivering finished items; providers of analytics and advertising services (Google, Meta, TikTok, Hotjar, Plerdy) — only with your consent to the relevant cookies; government authorities — in cases required by law.
Some of our service providers may process data outside the European Economic Area. In such cases we ensure an adequate level of data protection, including through standard contractual clauses approved by the European Commission.
Data retention period
Request data is stored no longer than necessary to process the request, and for a reasonable period afterward. Data related to contract fulfillment and tax accounting is stored for the periods required by law. Cookie consent is stored for 180 days or until withdrawn.
Your rights
Under the GDPR you have the right to:
- access your personal data;
- correct inaccurate data;
- erase data (“the right to be forgotten”);
- restrict processing;
- data portability;
- object to processing, including for marketing purposes;
- withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal;
- lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Data security
We apply technical and organizational measures to protect your data from unauthorized access, loss or disclosure.
Policy changes
We may update this Privacy Policy from time to time. The current version is always available on this page along with the date of the last update.
You can find detailed information about the use of cookies in our Cookie Policy.
Data controller
Velours Atelier
NIP 1231610058 · REGON 545552170
Warsaw, Poland