Privacy Policy

This Privacy Policy explains how we process personal data in connection with the online store at everestaudiolabs.com (the "Store"), in accordance with Regulation (EU) 2016/679 ("GDPR" / "RODO") and applicable Polish law.

1. Data Controller

The controller of your personal data is:

We have not appointed a Data Protection Officer. In all matters concerning your personal data, please contact us by email at the address above.

2. Categories of data we process

Depending on how you interact with us, we may process:

• Identification and contact data — first and last name, delivery and billing address, email address, telephone number; for business customers, company name and NIP/VAT ID.
• Order and transaction data — products ordered, configuration, order number, amounts, correspondence relating to the order, complaints and returns.
• Payment data — payment confirmation and status. Card payments are processed by PayPal; we do not receive or store your full card number.
• Correspondence — the content of messages you send us (e.g. enquiries, complaints).
• Technical and usage data — IP address, device/browser information, and cookie‑related data (see the Cookie Policy).
• Marketing data — your email address and preferences, if you sign up for the newsletter or marketing.

Providing data is voluntary but necessary to conclude and perform a contract, handle enquiries, or issue accounting documents — without the required data we cannot process your order.

3. Purposes and legal bases

We process personal data for the following purposes and on the following legal bases:

• To conclude and perform the Sales Contract (process and deliver your order, handle returns/complaints) — Art. 6(1)(b) GDPR (performance of a contract).
• To comply with legal obligations, in particular tax and accounting (issuing and storing invoices) — Art. 6(1)(c) GDPR.
• To respond to enquiries sent by email or form — Art. 6(1)(f) GDPR (our legitimate interest in handling correspondence).
• To establish, exercise or defend legal claims, and to ensure the security of the Store — Art. 6(1)(f) GDPR (legitimate interest).
• Direct marketing of our own products/services (including newsletter) — based on your consent, Art. 6(1)(a) GDPR, and/or our legitimate interest where permitted, Art. 6(1)(f).
• Cookies and similar technologies — essential cookies on the basis of our legitimate interest / necessity to provide the service; non‑essential (analytics, marketing) cookies on the basis of your consent. See the Cookie Policy.

4. Recipients of data

We share personal data only as necessary, with:

• Payment provider — PayPal (Europe) S.à r.l. et Cie, S.C.A. — payments are processed by PayPal; we do not store your full card data.
• Website development, IT support and plugins — We Can More (wecanmore.com.pl) — creator of the website, providing development, the cookie‑consent plugin and ongoing IT and maintenance support.
• Hosting provider — for hosting the Store.
• Courier / logistics providers — for shipping orders.
• External accounting office — for issuing and storing accounting documents.
• Email provider — for handling correspondence and messages sent from our addresses (mailer@everestaudiolabs.com, info@everestaudiolabs.com).
• Analytics / SEO — Google services (e.g. Google Analytics) and the Rank Math SEO plugin, where you have consented.
• Where required by law — authorised public authorities.

Each processor acts under a data‑processing agreement and only on our documented instructions.

5. International data transfers

Where a recipient processes data outside the European Economic Area (EEA) — for example certain payment, IT or analytics providers — such transfers take place only on the basis of appropriate safeguards under the GDPR, in particular an adequacy decision of the European Commission or Standard Contractual Clauses, with additional safeguards where necessary. You may request information about these safeguards by contacting us.

6. Retention periods

We keep personal data only as long as necessary for the purposes above:

• Contract/order data — for the duration of the contract and afterwards until the relevant limitation periods for claims expire.
• Accounting and tax documents — for the period required by law (in Poland, generally 5 years counted from the end of the calendar year in which the tax obligation arose).
• Correspondence and enquiries — for the time needed to handle the matter and to defend against potential claims.
• Marketing data — until you withdraw consent or object, after which data are deleted or anonymised.
• Cookies — for the periods indicated in the Cookie Policy.

7. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy;
• rectification of inaccurate or incomplete data;
• erasure ("right to be forgotten"), where applicable;
• restriction of processing;
• data portability, where processing is based on consent or a contract and is carried out by automated means;
• object to processing based on our legitimate interest, including objecting to direct marketing at any time;
• withdraw consent at any time, where processing is based on consent (without affecting the lawfulness of processing before withdrawal).

To exercise your rights, contact us at info@everestaudiolabs.com.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00‑193 Warsaw, Poland — if you consider that the processing of your data infringes the GDPR.

8. Automated decision‑making and profiling

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing, and we do not carry out profiling that would have such effects.

9. Cookies

The Store uses cookies and similar technologies. Detailed information — including categories, purposes, retention and how to manage consent — is provided in the separate Cookie Policy.

10. Changes to this Policy

We may update this Privacy Policy (e.g. due to changes in law, our tools or processing operations). The current version is always published on the Store website with an updated effective date.