PRIVACY POLICY AND COOKIES POLICY MRQUOKKI.PL
(Last update: 22.03.2026)
§1 Data Controller
The controller of personal data is:
Mr.Quokki Sp. z o.o.
ul. Bolesława Chrobrego 41/C
31-428 Kraków, Poland
NIP: 6762681415
Contact:
📧 mrquokki@gmail.com
📞 +48 512 039 028
§2 Nature and scope of data processing
The Controller processes users’ personal data in connection with the use of the online store mrquokki.pl.
The scope of data includes:
first name and last name
email address
phone number
delivery address
invoicing data (including NIP)
IP address
device and browser data
data on activity on the website
data related to orders and payments
§3 Purposes of data processing
Data is processed for the purpose of:
fulfilling orders and concluding a sales contract
processing payments (Stripe)
delivery of orders
handling returns and complaints
contacting the customer
issuing invoices
accounting
direct marketing (if applicable)
conducting advertising and remarketing activities
analysing website traffic
ensuring security and proper functioning of the service
§4 Legal basis for processing (GDPR)
Data is processed on the basis of:
Article 6(1)(b) — performance of a contract
Article 6(1)(c) — legal obligation
Article 6(1)(f) — legitimate interest of the Controller
Article 6(1)(a) — user consent (e.g. marketing)
§5 Profiling and marketing
User data may be used for profiling for marketing purposes.
Profiling consists of analysing user behaviour (e.g. viewed products) in order to tailor advertisements.
Profiling does not produce legal effects for the user.
§6 Data recipients
Data may be shared with:
payment operators (Stripe)
courier companies (InPost, DPD, DHL, Poczta Polska)
hosting and IT service providers (e.g. Tilda)
providers of marketing and analytical tools
accounting offices
CRM and mailing systems (e.g. Mailchimp, Klaviyo — if implemented)
§7 Transfer of data outside the EEA
In connection with the use of tools such as:
Stripe
Google (Analytics, Ads)
Meta (Facebook, Instagram)
TikTok
data may be transferred outside the European Economic Area.
Such transfers are carried out on the basis of:
Standard Contractual Clauses (SCC) approved by the European Commission
or other mechanisms compliant with GDPR
§8 Data retention period
Data is stored:
for the duration of the contract
for the period required by law (e.g. tax regulations)
until consent is withdrawn (marketing)
until an effective objection is raised
§9 User rights
The user has the right to:
access their data
rectify data
erase data
restrict processing
data portability
object to processing
withdraw consent at any time
lodge a complaint with the President of the Personal Data Protection Office (UODO)
§10 Cookies
The website uses cookies and similar technologies.
Cookies are used for:
ensuring proper functioning of the website
handling the shopping cart and orders
statistical analysis
marketing and remarketing activities
The following types of cookies are used:
necessary
analytical
marketing
Marketing cookies are used only after obtaining the user’s consent.
Users can manage cookies through:
browser settings
the cookie banner on the website
§11 Analytical and marketing tools
The website uses the following technologies:
Google Analytics
Google Ads
Meta Pixel
TikTok Pixel
Pinterest Tag
These tools may collect data about user behaviour, IP address, and activity on the website.
§12 Data security
The Controller applies appropriate technical and organisational measures to ensure data protection, including:
connection encryption (SSL)
access control
limiting access to data to authorised persons
§13 Specific recipients – children
The store is intended for adults (parents/guardians).
The Controller does not knowingly collect data from children under the age of 16.
§14 Changes to the policy
This policy may be updated. The current version is always available on the website.
