PRIVACY POLICY

Website: shiba-inu.pl

Last updated: 4 November 2026

1. General Information

  1. This Privacy Policy sets out the rules for processing personal data of individuals using the website available at https://shiba-inu.pl, hereinafter referred to as the “Website”.
  2. The controller of personal data is Mukashibanashi FCI Kennel, Edyta and Maciej Gajewscy, ul. Piękna 14, 05-205 Michałów, Klembów Municipality, Poland, hereinafter referred to as the “Controller”.
  3. The Controller can be contacted:
    • by email: kontakt@shiba-inu.pl;
    • by telephone: +48 601 420 119 or +48 691 423 242;
    • by post at the address indicated above.
  4. The Controller processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
  5. The Controller has not appointed a Data Protection Officer, as there is no legal obligation to do so. Questions concerning personal data may be addressed directly to the Controller.

2. Scope and Purposes of Personal Data Processing

The Controller may process personal data for the following purposes:

2.1. Contact and Handling of Enquiries

When an individual contacts the Controller through the contact form, email, telephone or other available communication channels, their data may be processed to respond to the enquiry, conduct correspondence and handle the matter.

The data may include, in particular, the individual’s name, email address, telephone number, message content and any other information voluntarily provided.

The legal basis for processing is:

  • Article 6(1)(b) GDPR, where the enquiry concerns steps taken at the request of the individual prior to entering into a contract;
  • Article 6(1)(f) GDPR, namely the Controller’s legitimate interest in conducting correspondence and handling enquiries.

2.2. Enquiries About the Kennel and Puppies

Where an enquiry concerns breeding plans, puppy availability, reservations or the purchase of a dog, personal data may be processed to provide information, conduct discussions, handle reservations and take steps towards entering into and performing a contract.

The legal basis is Article 6(1)(b) GDPR. Where necessary to establish, pursue or defend legal claims, the legal basis is Article 6(1)(f) GDPR.

2.3. Entering into and Performing a Contract

Where a contract is concluded, in particular for the sale of a puppy, the Controller may process data necessary to conclude and perform the contract, contact the purchaser and fulfil obligations relating to the transfer of the dog and its documentation.

The legal basis is Article 6(1)(b) GDPR.

2.4. Compliance with Legal Obligations

Personal data may be processed to comply with legal obligations, in particular tax and accounting obligations.

The legal basis is Article 6(1)(c) GDPR.

2.5. Security and Legal Claims

Personal data may be processed to ensure the security of the Website, detect misuse, investigate technical errors and establish, pursue or defend legal claims.

The legal basis is Article 6(1)(f) GDPR, namely the Controller’s legitimate interest.

3. Voluntary Provision of Data

  1. Providing personal data is voluntary; however, certain data may be necessary to handle an enquiry, conduct correspondence or enter into and perform a contract.
  2. Failure to provide data required in a form or necessary for contact may prevent the Controller from responding or fulfilling the relevant purpose.
  3. The Controller does not require individuals to provide data that is not necessary for handling their enquiry or matter.

4. Recipients of Personal Data

Personal data may be disclosed to entities supporting the Controller in operating the Website or conducting business, solely to the extent necessary for the relevant purposes.

Recipients may include, in particular:

  1. CyberFolks S.A. – provider of hosting services and technical infrastructure, to the extent necessary to maintain the Website and support related services;
  2. email service providers – for handling correspondence;
  3. IT and technical service providers – for maintaining, updating and securing the Website;
  4. accounting, legal or advisory service providers – where necessary to fulfil the Controller’s obligations;
  5. public authorities – where disclosure is required by law.

Personal data is not sold to third parties.

5. Transfers of Personal Data Outside the European Economic Area

  1. The Controller does not intend to transfer personal data outside the European Economic Area (“EEA”), unless such transfer results from the use of specific third-party services available on the Website.
  2. If services provided by entities located outside the EEA, or using infrastructure outside the EEA, are activated on the Website, any transfer of personal data will be carried out in accordance with GDPR requirements, in particular on the basis of an adequacy decision or other legally permitted safeguards.
  3. Information about third-party services and related cookies is available in the cookie consent settings panel, where applicable.

6. Data Retention Period

Personal data is retained for no longer than necessary to fulfil the purpose for which it was collected.

In particular:

  1. data relating to enquiries and correspondence – for the period necessary to handle the matter and subsequently for the period required to safeguard potential legal claims;
  2. data relating to reservations or contracts – for the duration of discussions and contract performance, and for the period required by law;
  3. accounting and tax documents – for the period specified by applicable law;
  4. technical data and server logs – for the period necessary to ensure security, proper operation and diagnostics of the Website;
  5. data processed on the basis of consent – until consent is withdrawn, subject to any period necessary to establish, pursue or defend legal claims.

7. Rights of Data Subjects

Individuals whose personal data is processed have the following rights, subject to the conditions and limitations set out in the GDPR:

  1. the right of access to their personal data;
  2. the right to obtain a copy of their data;
  3. the right to rectification;
  4. the right to erasure;
  5. the right to restriction of processing;
  6. the right to data portability, where processing is based on consent or a contract and carried out by automated means;
  7. the right to object to processing based on the Controller’s legitimate interests;
  8. the right to withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal;
  9. the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

To exercise these rights, please contact the Controller using the contact details provided in this Privacy Policy.

8. Cookies and Similar Technologies

8.1. What Are Cookies?

Cookies are small text files stored on the device of an individual visiting the Website. They may be read by the Website or by systems operated by third parties whose services are used on the Website.

The Website may also use similar technologies, such as browser local storage or tracking pixels, where these are used by active Website features.

8.2. Categories of Cookies

The Website may use the following categories of cookies:

  1. Strictly necessary cookies – required for the proper operation of the Website, security, basic functionality and storage of cookie consent preferences.
  2. Preference cookies – enable the Website to remember selected settings or preferences, where such features are available.
  3. Statistics cookies – help analyse how visitors use the Website, where the Controller uses analytics tools.
  4. Marketing cookies – may be used to measure the effectiveness of promotional activities or personalise advertising, where such tools are active.

The exact list of cookies, their providers, purposes and retention periods is displayed in the cookie settings panel, where available.

8.3. Consent to Cookies

  1. Strictly necessary cookies may be used without consent, in accordance with applicable law.
  2. Cookies that are not strictly necessary are activated after the visitor has given consent, where such consent is required by law.
  3. Consent may be changed or withdrawn at any time through the cookie settings panel available on the Website.
  4. Refusing optional cookies should not prevent access to the basic functions of the Website.

8.4. Managing Cookies

Visitors may also manage cookies through their web browser settings, including blocking cookies or deleting those already stored.

Restricting the use of certain cookies may affect the operation of some Website features.

9. Hosting and Server Logs

  1. The Website is hosted on infrastructure provided by CyberFolks S.A.
  2. When using the Website, technical information may be automatically recorded in server logs.
  3. Such logs may include, in particular:
    • the IP address of the device;
    • the date and time of the request;
    • the requested resource address;
    • information about the browser and operating system;
    • the address of the referring website, if provided;
    • information about errors and technical events.
  4. This data is used to ensure the proper operation and security of the Website, perform diagnostics and prevent misuse.
  5. Server logs are retained for the period resulting from the hosting service configuration and the needs associated with security and maintenance of the Website.

10. Data Security

The Controller implements appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised access, disclosure or alteration.

These measures may include, in particular:

  • use of an encrypted HTTPS connection;
  • securing access to the administration panel;
  • updating Website software;
  • using security tools;
  • limiting access to data to individuals who need it to perform their duties;
  • creating backup copies.

11. Links and Third-Party Services

The Website may contain links to websites or services operated by other entities, including social media platforms.

After leaving the Website, the privacy and data processing rules of the external website operator apply. The Controller is not responsible for the content or privacy practices of external websites.

If third-party content or tools are embedded on the Website, they may involve data processing by those providers. Where such features require consent, they should be activated in accordance with the cookie consent settings.

12. Automated Decision-Making and Profiling

The Controller does not make decisions concerning visitors solely by automated means, including profiling, that produce legal effects or similarly significantly affect them.

If analytics or marketing tools involving profiling are introduced in the future, information about their operation will be updated accordingly.

13. Changes to This Privacy Policy

  1. The Controller may update this Privacy Policy in the event of changes in law, Website functionality or data processing practices.
  2. The current version of this Privacy Policy is published at https://shiba-inu.pl/polityka-prywatnosci/.
  3. The date of the latest update is indicated at the beginning of this document.

14. Contact

For questions concerning this Privacy Policy or the processing of personal data, please contact the Controller:

Mukashibanashi FCI Kennel – Edyta and Maciej Gajewscy
ul. Piękna 14
05-205 Michałów, Klembów Municipality
Poland
Email: kontakt@shiba-inu.pl
Telephone: +48 601 420 119 / +48 691 423 242