Cookie Notice
Last updated: 15 October 2025
This Cookie Notice explains how the website endimade.com uses cookies and similar technologies in accordance with:
Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR),
the Polish Act of 12 July 2024 – Electronic Communications Law,
the Polish Personal Data Protection Act.
The controller of personal data is the owner of the website endimade.com.
For matters related to data processing, you may contact us at: info@endimade.com
Detailed information about the processing of personal data can be found in our Privacy Policy.
1. What are cookies?
Cookies are small text files stored on the user’s device (e.g., computer, smartphone).
They may contain personal data within the meaning of the GDPR (e.g., online identifiers, IP address) if they enable the identification of a user directly or indirectly.
2. Legal basis for the use of cookies
a) Strictly Necessary Cookies
The legal basis is Article 6(1)(f) GDPR (legitimate interest of the controller in ensuring the proper functioning and security of the website) in conjunction with the Electronic Communications Law.
These cookies do not require user consent.
b) Optional Cookies (Preferences, Analytics, Marketing)
The legal basis is Article 6(1)(a) GDPR (user consent).
These cookies are installed only after explicit consent has been given via the cookie banner.
Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
3. Purposes of Using Cookies
Strictly Necessary
operation of the shopping cart and order processing (WooCommerce),
user account login,
anti-bot and anti-DDoS security protections,
prevention of payment fraud and abuse.
Preferences
remembering the website language,
storing user interface settings.
Analytics (subject to consent)
analysis of website traffic,
improvement of website functionality and performance.
Marketing (subject to consent)
measurement of campaign effectiveness,
remarketing activities,
personalization of advertising content.
4. Data Recipients / Third Parties
Depending on the consent provided, personal data may be shared with the following categories of recipients:
payment service providers (e.g., Stripe / WooPayments),
hosting and security providers (e.g., Cloudflare),
video service providers (e.g., Vimeo),
analytics and advertising providers (e.g., Google Analytics, Google Ads, Meta).
These entities may process data as:
data processors (acting on the basis of a data processing agreement), or
independent data controllers (in accordance with their own privacy policies).
Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are applied in accordance with Articles 44–49 of the GDPR (e.g., Standard Contractual Clauses).
5. Retention Period
Cookies may be:
session cookies — deleted when the browser is closed,
persistent cookies — stored for a defined period of time (up to a maximum of 24 months).
Detailed information regarding specific retention periods is available in the cookie settings panel.
6. User Rights
In connection with the processing of personal data, users have the right to:
access your personal data,
request rectification of inaccurate data,
equest erasure of data (“right to be forgotten”),
request restriction of processing,
request data portability,
object to the processing of personal data,
withdraw consent at any time (where processing is based on consent),
lodge a complaint with the President of the Personal Data Protection Office (Poland) or with the competent supervisory authority in their country of residence.
7. Managing Cookie Settings
Users may:
accept or reject optional categories through the [Cookie Settings] panel zaakceptować lub odrzucić opcjonalne kategorie poprzez panel [Ustawienia plików cookies],
change their decision at any time,
delete cookies directly through their web browser settings.
