Who is responsible

The data controller is Ivan Vyshenskyi, a sole trader operating under the name Barvinok, ul. Mazowiecka 28B/3, 30-019 Kraków, Poland, NIP 9452283917, REGON 527211200. Contact: +48 733 061 838, kontakt@barvinok.live.

What we collect and why

• A shop order — your name and phone number and, for delivery, the recipient’s name and phone, the address and time, because without them the flowers do not arrive. Basis: GDPR art. 6(1)(b) (performance of a contract). The number you give gets a text with the confirmation and a link to the order, and if you cancel it yourself, a note confirming that. This is part of fulfilling the order, not advertising. Same basis.
• Consent to messages about offers — separate, optional and ticked by hand. Basis: GDPR art. 6(1)(a). Without it your order is handled just the same.
• Site visits — the fact a page was opened, which page, and where you came from. No IP address, no browser identifier, no cookies — none of it can identify a person, which is why this site does not ask for statistics consent.

Google Ads cookies — only with your consent

We advertise on Google. If you click “Accept”, the site loads the Google tag (Google Ireland Limited) and stores the _gcl_au and _gcl_aw cookies. This tells us whether someone who clicked our ad then opened the site, called, wrote on WhatsApp or placed an order in the shop — only the event itself, not the conversation and not the order details. Basis: your consent (GDPR art. 6(1)(a)). We do not use this data to show you ads on other sites.

The cookies last up to 90 days. Google also processes this data under its own terms: policies.google.com/privacy. Without consent the site works just the same and nothing reaches Google Ads. You can change your mind at any time: cookie settings.

Google Maps — only after a click

The map showing the way to the shop and the flower machine does not load by itself. Only when you click “Show the map” does your browser connect to Google (Google Ireland Limited), which sets its own cookies and sees your IP address, under its own terms. The site remembers that click in your browser so it does not ask on every page; clearing the site’s data undoes it.

How long

Order data — until the order is fulfilled and settled (accounting records are kept as long as tax law requires). Marketing consent — until you withdraw it.

Who else sees it

Nobody, commercially. Technically the data sits in a Firebase database (Google Ireland Limited), our processor — a hosting provider that does not use it for its own purposes. Order texts are sent for us by the SMS operator SMSAPI (LINK Mobility Poland sp. z o.o., Gliwice): it receives the phone number and the message text, nothing more, and is also our processor. You pay for a shop order on the Stripe payment page (Stripe Payments Europe, Limited, Dublin, Ireland): it receives the amount, the order number and whatever you enter there yourself — a card or a BLIK code. We never see or store your card number; Stripe handles payment data under its own policy: stripe.com/privacy. When you enter a delivery address in the shop, we check which price zone it falls in: the address alone — without your name or phone — goes to the Nominatim map search of the OpenStreetMap Foundation (United Kingdom, a country with a European Commission adequacy decision). Like any server, the Foundation also sees your IP address; its privacy policy sets out how it handles it.

Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to processing, and to data portability. You can withdraw marketing consent at any time — barvinok.live/stop, one field, no phone call and no explaining. Withdrawal does not affect what was lawfully done before it.

If you believe we are handling this badly, you may complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.

What we do not do

• Without your consent we use no cookies and no advertising trackers. The site remembers your chosen language, light/dark theme, your cookie choice and, in the shop, your basket, your orders from the past year (number, day, what and for how much — for your order history and “Order again”) and your first name so it can greet you. All of it stays in your own browser: it never reaches us and disappears when you clear it.
• We do not profile you and make no automated decisions.
• We neither buy nor sell contact lists.

Last updated: 27 October 2026.