Privacy policy

as of 16 October 2026

1. Controller. Proforti sp. z o.o., ul. Wawrzyńca Engeströma 10, 60-571 Poznań, Poland, e-mail: info@woodive.store. We have not appointed a data protection officer.

2. What we process and why.

a) Orders – name, addresses, e-mail, phone, order and payment data: to conclude and perform the contract, delivery, customer service (Art. 6(1)(b) GDPR); invoices and accounting – retained for the statutory period of 5 years from the end of the year (Art. 6(1)(c) GDPR).

b) Customer account (optional) – for as long as you keep the account (Art. 6(1)(b)).

c) Newsletter – e-mail address, with your consent and double opt-in (Art. 6(1)(a)); you can unsubscribe at any time via the link in each e-mail.

d) Review requests and reviews – About 14 days after shipping we may send you one e-mail inviting you to review your order, and at most one reminder 7 days later. For this we use data from your order: first and last name, e-mail address, order number, shipping date, country and language. Legal basis: our legitimate interest in feedback and in informing other customers (Art. 6(1)(f) GDPR; for Germany § 7(3) UWG – we only write to you about goods you have bought from us). You can object at any time – via the unsubscribe link in every e-mail or at info@woodive.store; so that you receive no further requests, we keep only a one-way encrypted (hashed) form of your e-mail address on our opt-out list. If you leave a review, with the consent you give in the review form (Art. 6(1)(a) GDPR) we publish on woodive.store: your rating, the text, up to 3 photos, the name you give in the form (by default your first name and the initial of your last name), country, date, the product, the note “Verified purchase” and our reply, if any. Photos are stored on our own server in Poland. Reviews are translated automatically into the other shop languages using the AI service of Anthropic PBC (USA) as our processor; the transfer is based on the EU-US Data Privacy Framework or standard contractual clauses. Reviews with 3 stars or fewer are forwarded to our customer service so that we can contact you. Some reviews are or were collected for us by eKomi and are imported from the eKomi platform with the data published there. Retention: the personal data in the invitation (name and e-mail address) for 12 months after shipping; published reviews for as long as they are displayed on woodive.store or until you withdraw your consent; the opt-out entry permanently. You can withdraw your consent and ask us to delete your review at any time.

Reviews from table4u.pl / table4u.cz – We also display reviews that customers of the Polish and Czech shops table4u.pl and table4u.cz (operated by GAPI sp. z o.o.) published there about the same products: rating, text, first name, country and date. They are marked “table4u.pl” and are included in the average rating shown with the product. Legal basis: our legitimate interest in informing our customers (Art. 6(1)(f) GDPR). If you are the author of such a review and object to it being shown on woodive.store, please write to info@woodive.store.

e) Contact (form, e-mail, chat, WhatsApp) – to answer your enquiry (Art. 6(1)(b) or (f)).

f) Website, cookies and similar technologies – technically necessary cookies (Art. 6(1)(f) GDPR; § 25(2) TDDDG); analytics and marketing (Google Analytics, Google Ads, Meta Pixel incl. conversion API via WeTracked, Privy, Trusted Shops, eKomi) only with your consent in the cookie banner (Art. 6(1)(a) GDPR; § 25(1) TDDDG). You can change your consent at any time via the cookie banner (privacy settings link at the bottom of the page).

3. Recipients. Shopify International Ltd. (Ireland) – shop platform; payment service providers Shopify Payments (cards, Apple Pay, Google Pay), PayPal; for bank transfer our bank; carriers and forwarders GLS, Zadbano, VST, Green Speed – only the data required for delivery; our accounting firm; IT and e-mail providers Microsoft 365; review translation Anthropic; analytics and advertising partners listed in the cookie banner. Some recipients are located in the USA; transfers are based on the EU-US Data Privacy Framework or standard contractual clauses.

4. Your rights. Access, rectification, erasure, restriction, data portability, withdrawal of consent with effect for the future, and objection to processing based on legitimate interests – in particular to review requests and direct marketing (Art. 15–21 GDPR). You also have the right to lodge a complaint with a supervisory authority, e.g. the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, or the authority in your country of residence.

5. Obligation to provide data. Data marked as required in the checkout are necessary to conclude the contract; without them we cannot accept the order.

6. Automated decision-making. We do not make decisions based solely on automated processing that produce legal effects for you.