{"id":905,"date":"2026-09-27T15:15:11","date_gmt":"2026-09-27T15:15:11","guid":{"rendered":"https:\/\/barbarazawadzki.com\/?page_id=905"},"modified":"2026-09-30T12:10:22","modified_gmt":"2026-09-30T12:10:22","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/barbarazawadzki.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"905\" class=\"elementor elementor-905\">\n\t\t\t\t<div class=\"elementor-element elementor-element-613562c e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no wpr-column-slider-no wpr-equal-height-no e-con e-parent\" data-id=\"613562c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-20a4a1f e-con-full e-flex wpr-particle-no wpr-jarallax-no wpr-parallax-no wpr-sticky-section-no wpr-column-slider-no wpr-equal-height-no e-con e-child\" data-id=\"20a4a1f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9a32ee9 elementor-widget elementor-widget-text-editor\" data-id=\"9a32ee9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<style>\n.bz-legal{margin:0 auto;color:#24332f;font:16px\/1.7 system-ui,-apple-system,\"Segoe UI\",sans-serif}.bz-legal h1,.bz-legal h4{color:#0F322A;line-height:1.25}.bz-legal h1{font-size:2.1rem}.bz-legal h4{font-size:1.35rem;margin-top:2rem}.bz-legal a{color:#0F322A;text-decoration:underline}.bz-legal .meta{background:#f3f6f4;border-left:4px solid #0F322A;padding:1rem 1.2rem}.bz-legal table{width:100%;border-collapse:collapse}.bz-legal th,.bz-legal td{border:1px solid #d7dfdc;padding:.7rem;vertical-align:top;text-align:left}.bz-legal th{background:#f3f6f4}\n<\/style>\n<article class=\"bz-legal\" lang=\"en\">\n  <h1>Privacy Policy<\/h1>\n  <p class=\"meta\"><strong>Effective date:<\/strong> 29 September 2026<br><strong>Applies to:<\/strong> <a href=\"barbarazawadzki.com\">barbarazawadzki.com<\/a><\/p>\n\n  <h4>1. Data controller<\/h4>\n  <p>The controller is Barbara Zawadzki, \u00d6vre Husargatan 21A, 413 14 G\u00f6teborg, Sweden, email: <a href=\"mailto:info@barbarazawadzki.com\">info@barbarazawadzki.com<\/a>, telephone: {{PHONE_NUMBER}}, identification\/organisation number: {{ORGANISATION_NUMBER_OR_NOT_APPLICABLE}} (the \u201cController\u201d).<\/p>\n\n  <h4>2. Data we collect<\/h4>\n  <ul>\n    <li>identity and contact data: name, email, telephone, billing and delivery addresses;<\/li>\n    <li>order data: products, amounts, currency, discounts, payment status, delivery history and consents required for digital content;<\/li>\n    <li>payment information returned by Stripe, such as a transaction identifier and status, payment-method type and limited card details; full card data is submitted directly to Stripe;<\/li>\n    <li>customer-account data, correspondence, complaints and support requests;<\/li>\n    <li>technical and cookie data: IP address, device, browser, security logs, cookie identifiers and use of the website;<\/li>\n    <li>where the affiliate programme is used: affiliate\/coupon identifier, clicks and attributed orders, commissions, settlement data and anti-fraud information;<\/li>\n    <li>where enabled: newsletter, analytics and marketing-campaign data.<\/li>\n  <\/ul>\n\n  <h4>3. Purposes and legal bases<\/h4>\n  <table>\n    <thead><tr><th>Purpose<\/th><th>Legal basis<\/th><\/tr><\/thead>\n    <tbody>\n      <tr><td>Orders, payment, e-book or printed-book delivery, customer account and support<\/td><td>Contract or steps requested before entering into a contract \u2014 GDPR Article 6(1)(b)<\/td><\/tr>\n      <tr><td>Accounting, tax, consumer-law and record-keeping obligations<\/td><td>Legal obligation \u2014 Article 6(1)(c)<\/td><\/tr>\n      <tr><td>Security, fraud prevention, legal claims and basic service statistics<\/td><td>Legitimate interests \u2014 Article 6(1)(f)<\/td><\/tr>\n      <tr><td>Operating the affiliate programme and settling commissions<\/td><td>Affiliate contract, legal obligation or legitimate interest in correct sales attribution, as applicable<\/td><\/tr>\n      <tr><td>Newsletter, non-essential analytics, personalisation and marketing<\/td><td>Consent \u2014 Article 6(1)(a); consent can be withdrawn at any time<\/td><\/tr>\n    <\/tbody>\n  <\/table>\n\n  <h4>4. Sources and required data<\/h4>\n  <p>Data comes from the user, the user\u2019s device, Stripe, the carrier and, for affiliate activity, a referral link, coupon or affiliate account. Fields marked as required are needed to perform a contract or comply with law. Without them, the order may not be fulfilled. Other information is voluntary.<\/p>\n\n  <h4>5. Recipients and service providers<\/h4>\n  <p>Data may be shared, as necessary, with hosting and WordPress\/WooCommerce administration providers, Stripe, email and e-book delivery providers, carriers, the affiliate-system provider, accountants, IT support and legal advisers. Public authorities receive data where the law requires it.<\/p>\n  <p>Stripe may process some data as an independent controller under its <a href=\"https:\/\/stripe.com\/privacy\" rel=\"noopener\">Privacy Policy<\/a>.<\/p>\n\n  <h4>6. Transfers outside the EEA<\/h4>\n  <p>Some technology providers may process data outside the European Economic Area. Where this occurs, the Controller relies on a GDPR-permitted mechanism, such as an adequacy decision or Standard Contractual Clauses, and applies required safeguards. Information about the relevant safeguard is available on request.<\/p>\n\n  <h4>7. Retention<\/h4>\n  <ul>\n    <li>orders and accounting records: for the period required by Swedish accounting and tax law;<\/li>\n    <li>complaints and claims: until resolution and expiry of the relevant limitation periods;<\/li>\n    <li>account data: while the account is maintained, then only as required for legal obligations and claims;<\/li>\n    <li>newsletter data: until consent is withdrawn or an objection takes effect, with a minimal suppression record retained;<\/li>\n    <li>cookies: for the duration shown in the cookie settings; security logs for a period proportionate to risk;<\/li>\n    <li>affiliate data: for the contract, settlement and required accounting\/tax periods.<\/li>\n  <\/ul>\n\n  <h4>8. Cookies<\/h4>\n  <p>The Store uses cookies needed for the cart, payment, security, language selection and customer account. Non-essential analytics, affiliate or marketing cookies are set only after consent where legally required. Choices can be changed or withdrawn at <a href=\"{{COOKIE_SETTINGS_URL}}\">{{COOKIE_SETTINGS_URL}}<\/a>. Blocking essential cookies may prevent checkout.<\/p>\n\n  <h4>9. Your rights<\/h4>\n  <p>Subject to the GDPR, individuals may request access, correction, erasure, restriction, portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Requests can be sent to the Controller. Identity verification may be required.<\/p>\n  <p>A complaint may be lodged with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), <a href=\"https:\/\/www.imy.se\/\" rel=\"noopener\">imy.se<\/a>, or the data-protection authority where the individual lives.<\/p>\n\n  <h4>10. Automated decisions and children<\/h4>\n  <p>The Controller does not make decisions based solely on automated processing that produce legal or similarly significant effects for customers. Stripe may independently use automated fraud-prevention measures under its own policy. The Store is not directed at children; a minor should act with a guardian\u2019s consent.<\/p>\n\n  <h4>11. Security, updates and contact<\/h4>\n  <p>The Controller uses appropriate technical and organisational safeguards, including access control, updates and transmission security. This Policy may be updated when services or law change; a new version will be posted with its date. Questions and requests: <a href=\"mailto:info@barbarazawadzki.com\">info@barbarazawadzki.com<\/a>.<\/p>\n<\/article>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Effective date: 29 September 2026Applies to: barbarazawadzki.com 1. Data controller The controller is Barbara Zawadzki, \u00d6vre Husargatan 21A, 413 14 G\u00f6teborg, Sweden, email: info@barbarazawadzki.com, telephone: {{PHONE_NUMBER}}, identification\/organisation number: {{ORGANISATION_NUMBER_OR_NOT_APPLICABLE}} (the \u201cController\u201d). 2. Data we collect identity and contact data: name, email, telephone, billing and delivery addresses; order data: products, amounts, currency, discounts, payment status, delivery history and consents required for digital content; payment information returned by Stripe, such as a transaction identifier and status, payment-method type and limited card details; full card data is submitted directly to Stripe; customer-account data, correspondence, complaints and support requests; technical and cookie data: IP address, device, browser, security logs, cookie identifiers and use of the website; where the affiliate programme is used: affiliate\/coupon identifier, clicks and attributed orders, commissions, settlement data and anti-fraud information; where enabled: newsletter, analytics and marketing-campaign data. 3. Purposes and legal bases Purpose Legal basis Orders, payment, e-book or printed-book delivery, customer account and support Contract or steps requested before entering into a contract \u2014 GDPR Article 6(1)(b) Accounting, tax, consumer-law and record-keeping obligations Legal obligation \u2014 Article 6(1)(c) Security, fraud prevention, legal claims and basic service statistics Legitimate interests \u2014 Article 6(1)(f) Operating the affiliate programme and settling commissions Affiliate contract, legal obligation or legitimate interest in correct sales attribution, as applicable Newsletter, non-essential analytics, personalisation and marketing Consent \u2014 Article 6(1)(a); consent can be withdrawn at any time 4. Sources and required data Data comes from the user, the user\u2019s device, Stripe, the carrier and, for affiliate activity, a referral link, coupon or affiliate account. Fields marked as required are needed to perform a contract or comply with law. Without them, the order may not be fulfilled. Other information is voluntary. 5. Recipients and service providers Data may be shared, as necessary, with hosting and WordPress\/WooCommerce administration providers, Stripe, email and e-book delivery providers, carriers, the affiliate-system provider, accountants, IT support and legal advisers. Public authorities receive data where the law requires it. Stripe may process some data as an independent controller under its Privacy Policy. 6. Transfers outside the EEA Some technology providers may process data outside the European Economic Area. Where this occurs, the Controller relies on a GDPR-permitted mechanism, such as an adequacy decision or Standard Contractual Clauses, and applies required safeguards. Information about the relevant safeguard is available on request. 7. Retention orders and accounting records: for the period required by Swedish accounting and tax law; complaints and claims: until resolution and expiry of the relevant limitation periods; account data: while the account is maintained, then only as required for legal obligations and claims; newsletter data: until consent is withdrawn or an objection takes effect, with a minimal suppression record retained; cookies: for the duration shown in the cookie settings; security logs for a period proportionate to risk; affiliate data: for the contract, settlement and required accounting\/tax periods. 8. Cookies The Store uses cookies needed for the cart, payment, security, language selection and customer account. Non-essential analytics, affiliate or marketing cookies are set only after consent where legally required. Choices can be changed or withdrawn at {{COOKIE_SETTINGS_URL}}. Blocking essential cookies may prevent checkout. 9. Your rights Subject to the GDPR, individuals may request access, correction, erasure, restriction, portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Requests can be sent to the Controller. Identity verification may be required. A complaint may be lodged with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se, or the data-protection authority where the individual lives. 10. Automated decisions and children The Controller does not make decisions based solely on automated processing that produce legal or similarly significant effects for customers. Stripe may independently use automated fraud-prevention measures under its own policy. The Store is not directed at children; a minor should act with a guardian\u2019s consent. 11. Security, updates and contact The Controller uses appropriate technical and organisational safeguards, including access control, updates and transmission security. This Policy may be updated when services or law change; a new version will be posted with its date. Questions and requests: info@barbarazawadzki.com.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"class_list":["post-905","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/pages\/905","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/comments?post=905"}],"version-history":[{"count":4,"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/pages\/905\/revisions"}],"predecessor-version":[{"id":1102,"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/pages\/905\/revisions\/1102"}],"wp:attachment":[{"href":"https:\/\/barbarazawadzki.com\/en\/wp-json\/wp\/v2\/media?parent=905"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}