Piotr Zylbert Music – Online Store
Website: https://piotrzylbert.com
English version reflecting the Polish Privacy Policy dated 28 August 2026
We care about your privacy and want you to feel comfortable when using our Store. This Privacy Policy explains the main rules governing the processing of personal data and the use of cookies in the Piotr Zylbert Music online store. It has been prepared with regard to Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The controller of your personal data is:
Piotr Zylbert, conducting business under the name PIOTR ZYLBERT MUSIC, entered in the Polish Central Register and Information on Economic Activity (CEIDG).
Tax ID (NIP): 7712556967
REGON: 528167731
Address: Stodolna 76, 97-500 Radomsko, Poland
For matters concerning personal data, contact us at:
p.zylbert@wp.pl
2. Your Rights
Subject to the conditions provided by the GDPR, you have the right to request:
- access to your personal data, including a copy of the data;
- rectification of your personal data;
- erasure of your personal data;
- restriction of processing;
- data portability.
You may also have the right to object at any time:
- on grounds relating to your particular situation, to processing based on our legitimate interests under Article 6(1)(f) GDPR; and
- to processing of personal data for direct-marketing purposes.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact us at p.zylbert@wp.pl.
If you believe your personal data is processed unlawfully, you have the right to lodge a complaint with a competent data protection authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).
3. Placing an Order
Purpose
We process personal data in order to:
- accept and fulfil your order;
- process and document the transaction;
- meet accounting, product-safety and other legal obligations;
- establish, pursue or defend legal claims where necessary.
Legal bases
The legal bases may include:
- performance of a contract or steps taken at your request before entering into a contract – Article 6(1)(b) GDPR;
- compliance with a legal obligation – Article 6(1)(c) GDPR;
- our legitimate interest in establishing, pursuing or defending claims – Article 6(1)(f) GDPR.
Retention
Order-related data is retained for as long as necessary to perform the contract, comply with applicable legal obligations and until relevant legal claims can no longer be pursued, depending on which basis applies.
Is providing the data mandatory?
Providing data is voluntary, but the information required at checkout is necessary to conclude and perform the purchase contract. Without the required data, you cannot place an order.
4. Contacting Us
If you contact us, for example with a question or customer-service request, we process the information you provide in order to respond and handle your request.
Depending on the subject of your message, processing may be based on:
- a contract or steps taken at your request before entering into a contract – Article 6(1)(b) GDPR; or
- our legitimate interest in communicating with users and customers – Article 6(1)(f) GDPR.
The data is retained for the duration of the relevant relationship or until applicable claim periods expire, or until a valid objection is accepted where processing is based on legitimate interests.
If you do not provide the information necessary to handle your request, we may be unable to respond.
5. Analytics
We may analyse how users navigate and use the Store in order to improve its usability, layout, appearance and content.
Analytics activities relating to you take place only where the relevant settings or consent allow such activities.
The legal basis indicated in the Polish source policy is our legitimate interest in improving the functionality of the Store (Article 6(1)(f) GDPR), subject to the rules applicable to storing or accessing cookies and similar technologies on your device.
Analytics data linked to cookies is processed until the relevant cookie expires or is deleted, subject to applicable law and your choices.
6. Marketing Communications
If you consent to receive marketing communications from us, we may process your data to send information about special offers and other marketing content and to analyse the effectiveness of such communications.
The legal bases may include:
- your consent to receive marketing communications – Article 6(1)(a) GDPR; and
- our legitimate interest in analysing the effectiveness of communications – Article 6(1)(f) GDPR.
You may withdraw consent at any time. Processing carried out before withdrawal remains lawful.
If you do not provide consent, you will not receive such marketing communications.
7. Other Store Functions
Where use of a Store function requires processing personal data in order to provide an online service, processing may be based on performance of that service contract under Article 6(1)(b) GDPR.
Data is processed for the duration of the relevant service and, where applicable, until the period for pursuing legal claims has expired.
8. Establishing, Pursuing or Defending Claims
Where necessary, we may process personal data in order to establish, pursue or defend legal claims relating to the Store, purchases or services.
The legal basis is our legitimate interest under Article 6(1)(f) GDPR.
Such data is retained until the relevant limitation period expires or until a valid objection is accepted where applicable.
9. Security
We use organisational and technical measures appropriate to applicable law to protect personal data. The Store uses SSL/TLS encryption for connections.
10. Cookies
The Store uses cookies. Cookies are small files stored on your device and do not by themselves change your device settings.
Cookies are used in the Store for:
- maintaining your session, shopping cart and cookie choice; handling payments;
- marketing (measuring effectiveness in Google, embedded YouTube videos) – only after you give your consent.
The Store uses the following cookies:
| cookie name | retention period | function |
| wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart | session / up to 2 days | Shopping cart and shopping session (necessary) |
| cmplz_*, wp_consent_* | 365 days | Remembering your choice in the cookie-preference panel (necessary) |
| pll_language | 1 year | Remembering the selected language version (necessary) |
| cookies of payment providers (Stripe, PayPal, Przelewy24) | according to the providers’ policies | Handling payments and fraud prevention (necessary) |
| Google Ads cookies | according to Google’s policy | Measuring effectiveness in Google (conversions) – only after consent |
| YouTube cookies | according to Google’s policy | Playing embedded videos – only after consent |
You can delete cookies or block future cookies using your browser settings. In addition, the Store provides a cookie-preference panel that allows you to accept or reject non-essential cookies.
Non-essential marketing cookies are not activated before the required consent has been obtained.
You can change or withdraw your choice at any time using the “Cookie Preferences” link in the footer.
11. External Service Providers / Data Recipients
We use external service providers that support our business. Depending on the activity, recipients of personal data may include:
- hosting providers;
- providers of software used to operate online sales;
- payment providers;
- delivery / shipping providers;
- providers of business-support software, such as accounting software;
- accounting service providers;
- competent public authorities where disclosure is required by law.
Such service providers process data only to the extent necessary for the relevant service and under the applicable legal framework.
12. Transfers Outside the European Union
Some service providers, in particular payment-related or technology providers, may process personal data outside the European Union, including in the United States.
Where personal data is transferred outside the European Economic Area, an appropriate transfer mechanism must be used as required by applicable law.
The Polish source Privacy Policy states that, for U.S. recipients where applicable, an adequate level of protection may be ensured through participation in the EU–U.S. Data Privacy Framework established under a European Commission adequacy decision.
13. Changes to this Privacy Policy
This Privacy Policy may be updated when required by changes in law, technology or the Store’s processing activities.
The current version should always be made available on the Store website.
14. Contact
For any questions about privacy or to exercise your data-protection rights, contact:
PIOTR ZYLBERT MUSIC
Stodolna 76
97-500 Radomsko
Poland
Email: p.zylbert@wp.pl