This document is a faithful English translation of the Polish Privacy Policy. In the event of any discrepancies, the Polish version shall prevail and remain legally binding.

This Privacy Policy defines the rules for processing personal data of users of the sepsis.com.pl website and customers purchasing the Sepsis CD album.

1. Data controller

The controller of personal data is: Rafał Cioroń Sepsis
Website: https://sepsis.com.pl
Contact e-mail: rafcio@sepsis.com.pl

2. Scope of processed data

Depending on how the website is used and whether a purchase is made, the following data may be processed:

• e-mail address,
• first and last name,
• delivery address,
• telephone number (if required),
• transaction data provided by the payment operator.

3. Purposes of data processing

• order processing and product shipment,
• payment handling and settlements,
• customer contact regarding orders,
• handling complaints and returns,
• fulfillment of legal obligations.

4. Payments

Payments are processed via the external payment operator Stripe. The controller does not process or store payment card details. Information on data processing by Stripe is available in Stripe’s privacy policy.

5. Legal basis for processing

• Article 6(1)(b) GDPR – performance of a contract,
• Article 6(1)(c) GDPR – legal obligation,
• Article 6(1)(f) GDPR – legitimate interest of the controller.

6. Data retention period

Personal data is stored for the period necessary to fulfill the order, and subsequently for the period required by law or until possible claims become time-barred.

7. User rights

The data subject has the right to:

• access their data,
• rectify their data,
• erase or restrict processing,
• object to processing,
• lodge a complaint with the President of the Personal Data Protection Office.

8. Data sharing

Personal data may be shared only with entities cooperating in payment processing and delivery (e.g. payment operators, postal or courier services).

9. Changes to the Privacy Policy

The controller reserves the right to amend this Privacy Policy. The current version is always published on the website.

Last update: 2026-03-16