1.Controller and contact
The data controller is Łukasz Chróśniak, carrying on business under the name Firma „Łukasz Chróśniak”, ul. 16 Pułku Ułanów Wlkp. 5, 85-319 Bydgoszcz, Poland, Tax ID (NIP) 9671175702 (the “Producer”). For matters concerning personal data: support@weizo.eu.
This policy describes the processing of data by the Producer in connection with the sale of licences, the operation of the Producer’s Products — modules for PrestaShop and associated apps — and the running of the weizo.eu website.
The terms Product, App, Shop and Licensee have the meanings given to them in the Licence Terms.
2.What we do not process
The Producer’s Products operate in the Licensee’s Shop. Orders, shop customer data, delivery addresses, amounts and stock levels remain in that Shop. If the Product works with an App, this data travels directly between the App and the Shop’s server and does not pass through the Producer’s infrastructure. We have no access to it.
3.What data we process
| Category | Details |
|---|---|
| Licence data | The Shop’s technical identifier (a random string that contains no personal data), the Shop’s domain, the Product version, the date of the last contact with the licence server, the status and expiry date of the licence. |
| Purchase data | First name and surname or company name, address, tax ID (NIP), e-mail address, the item and amount of the purchase, payment history, invoice details. |
| Record of document acceptance | The version and checksum of the accepted document, language, date and time, source of the acceptance, technical reference of the event (payment session or device identifier). |
| Correspondence | The content of support requests and complaints, together with the sender’s e-mail address. |
| Server logs | IP address, time and type of request to the licence server and to the weizo.eu website. |
4.Notifications sent by the Product
If the Product sends notifications to the Licensee’s devices, they are sent by the Licensee’s Shop, not by the Producer — through the service specified in section 13, within a project set up and run by the Licensee itself. The Producer does not run this project, does not act as an intermediary in sending the notifications and has no access to their content.
The content of a notification is deliberately limited to the data needed to open the right screen in the App. What exactly it contains is stated in section 13.
5.The Producer’s apps
- The App does not collect data or transfer it to the Producer.
- Shop login credentials are stored in the secure storage of the device’s operating system.
- If the App also checks data in the background, it queries only the Shop’s server.
6.Legal bases and purposes
| Purpose | Basis (GDPR) |
|---|---|
| Sale of licences, their activation and verification, handling of subscriptions, technical support | Art. 6(1)(b) — performance of a contract |
| Issuing and retaining accounting documents | Art. 6(1)(c) — legal obligation |
| Recording acceptance of terms, defence and pursuit of claims, security and prevention of licence abuse, server logs | Art. 6(1)(f) — legitimate interest |
| Informing about price changes and changes to the service | Art. 6(1)(b) and (f) |
Providing purchase data is voluntary but necessary to conclude the contract and issue an invoice.
7.How long we keep data
| Data | Period |
|---|---|
| Licence data | for the duration of the licence and 3 years after it expires (limitation period for claims) |
| Accounting documents | 5 years from the end of the tax year in which the tax liability arose |
| Record of document acceptance | for the duration of the contract and the limitation period for claims |
| Correspondence | 3 years from the closure of the matter |
| Server logs | up to 12 months |
8.Who we entrust data to
| Recipient | Purpose |
|---|---|
| Stripe — payment provider (Stripe Payments Europe, Ltd., Ireland) | A company that, on behalf of the Producer, accepts payments by card and other methods, manages subscriptions and provides the buyer with a portal for managing them. Payment takes place on Stripe’s website — the Producer does not receive payment card details. |
| Hosting and licence server provider | maintaining the infrastructure |
| Accounting office | accounting and tax services |
| Legal advisers, entities pursuing claims | only in the event of a dispute |
We do not sell data or share it with third parties for marketing purposes.
9.Transfers outside the EEA
Using the payment provider Stripe (section 8) may involve the transfer of data to countries outside the European Economic Area, because the Irish company belongs to a group headquartered in the United States. Such transfers take place on the basis of a European Commission adequacy decision (Data Privacy Framework) or standard contractual clauses, together with additional technical safeguards. If you would like to know what these safeguards contain, write to the address given in section 1 — we will send you a copy.
10.Your rights
You have the right of access to your data, the right to rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. The exercise of these rights is limited by the obligations set out in section 7 (accounting records, acceptance register).
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
11.Security
- All communication between the Products, the Apps and the licence server takes place over an encrypted connection (HTTPS), and requests are additionally signed cryptographically.
- If the Product works with an App, the permissions of the App’s users are set by the Licensee in the Product panel; write functions are disabled by default.
12.The weizo.eu website and cookies
This document is a static file: it does not use cookies or scripts and does not load resources from other servers.
The weizo.eu website is an information website. We do not sell on it, you do not create an account on it, and it has no forms, analytics tools or advertising tools; we do not embed content from other services on it and we do not use cookies for marketing or statistical purposes. The hosting server keeps ordinary access logs (IP address, time and type of request) — we keep them for up to 12 months to ensure the security and proper functioning of the website (Art. 6(1)(f) GDPR).
The rules applicable to the shop in which you make a purchase are set out in that shop’s policy.
13.Individual Products
Provisions specific to individual Products. The remaining sections of this policy apply to them in full.
PS Mobile Manager
| What it is | A module for PrestaShop together with a free phone app that connects directly to the Shop. |
|---|---|
| Instant notifications | Sent by the Licensee’s Shop through Google’s Firebase Cloud Messaging service, within a project set up and run by the Licensee. The feature is optional — without it, the App checks the Shop for orders by itself. |
| Notification content | The order reference assigned by the Shop (e.g. XKBKNABJK), the name of the status (e.g. “Awaiting payment”) and a technical event identifier. |
| Background operation | The App checks for new orders by querying only the Shop’s server. |
14.Changes to this policy
Each version of this policy is published at its own permanent address and marked with a version number and date; earlier versions remain available. We notify you of material changes by e-mail before they take effect.