Data Erasure Request - Senti Mentals

01The right to erasure in brief

Under Art. 17 GDPR, you can request that we erase your personal data - this is the so-called right to be forgotten.

We will grant the request in particular when:

the data is no longer necessary for the purposes for which it was collected;
you withdraw the consent on which the processing was based and there is no other legal ground;
you successfully object to the processing;
the data has been processed unlawfully;
erasure is required by law.

Your request is free of charge
We do not charge a fee for handling requests. The exception is requests that are manifestly unfounded or excessive, in particular because of their repetitive character - in such cases we may charge a reasonable fee or refuse to act (Art. 12(5) GDPR).

02Other rights you can exercise

Erasure is just one of your rights. You can use the form at the bottom of the page to exercise the others as well:

RightLegal basisWhat it means

AccessArt. 15 GDPRYou will receive information about what data we process and a copy of it

RectificationArt. 16 GDPRWe will correct inaccurate data and complete incomplete data

ErasureArt. 17 GDPRWe will delete the data, unless we are required to keep it

RestrictionArt. 18 GDPRWe will suspend processing while the data is being verified

PortabilityArt. 20 GDPRWe will provide the data in a machine-readable format

ObjectionArt. 21 GDPRTo marketing - at any time and without giving reasons

Withdrawal of consentArt. 7(3) GDPRAt any time, without affecting prior processing

Withdrawing consent does not apply retroactively - it does not affect the lawfulness of processing we carried out before it was withdrawn.

03How to submit a request, step by step

Fill in the form

Use the form at the bottom of the page or simply write a message to kontakt@senti-mentals.com. A clear statement of what your request concerns is all it takes.

We confirm receipt

Usually within 1-2 business days. If we are unable to identify you, we will ask for additional information - for example your order number.

We handle your request

Without undue delay and within one month at the latest. For complex matters we may extend this period by a further two months - in that case we will inform you of the reasons for the delay.

You receive our reply

We will tell you what has been erased and what we had to retain, and on what legal basis. We reply to the same e-mail address from which the request was sent.

You do not have to use our form - any clear request is valid, regardless of its form.

04Identity verification

Before we erase any data, we must be sure that the request comes from the person to whom the data relates. This protects you from having your account or purchase history deleted by an unauthorised person.

In most cases, it is enough to send your request from the e-mail address used for your purchase or newsletter sign-up.
If we cannot identify you, we will ask for additional details - for example your order number or purchase date.
We do not ask for a scan of your ID. If you decide to send a document on your own initiative, cover all fields except your first and last name.
Where we have serious doubts about your identity, we may refuse to act on the request (Art. 12(6) GDPR), explaining the reasons.

Requests on behalf of someone else
If you are submitting a request for another person, please enclose a power of attorney. A parent or legal guardian acting for a child should state the basis for representation.

05What we cannot erase

The right to erasure is not absolute. Art. 17(3) GDPR provides for exceptions - in our case, they mainly concern accounting records and defending against claims.

Data categoryWhy it is keptFor how long

Invoices and accounting documentsTax obligation - the Polish Tax Ordinance and the Accounting Act5 years from the end of the tax year

Order data and complaint correspondenceDefence against claims, statutory warrantyUntil the limitation period for claims expires

Proof that consent was given and withdrawnDemonstrating GDPR compliance - the accountability principleUp to 3 years from withdrawal

E-mail address on the suppression listPreventing you from being re-added to the newsletterIndefinitely, in hashed form

Server and security logsWebsite security, detecting abuseUp to 12 months

Data retained on these grounds is not used for marketing or for any purposes other than those listed above. Once the period expires, we delete it automatically.

If we refuse to erase some of the data, we will always indicate the specific legal provision and the date after which the data will be deleted.

06Account, newsletter and cookies - what you can do yourself

Some data you can remove straight away, without waiting for our reply:

Newsletter - click the unsubscribe link in the footer of any message. Unsubscribing takes effect immediately.
Cookie consents - change or withdraw your choice in the cookie banner on the Website; you can also delete cookies in your browser settings.
Account details - if the Store offers a customer panel, you can edit your address, invoice details and password yourself.
Deleting your account - write to us or use the form below; we delete the account together with the related data, subject to section 05.

Deleting your account does not delete invoices issued for completed orders - we keep these for the period required by tax law.

07Data held in third-party tools

Some data is passed to providers we use to run the Store. Once we receive your request, we instruct them to delete the data.

Newsletter delivery system - we remove your address from the mailing list.
Hosting and mail server - we delete correspondence once the retention period has expired.
Google Analytics, Meta Pixel, TikTok Pixel - these providers are independent controllers for their own purposes. You can send an erasure request directly to them, using the tools described in their privacy policies.
Payment Operators and courier companies - process data on their own legal grounds, mainly accounting-related; the scope and periods are set out in their terms.

If we have made your data public, we will take reasonable steps to inform other controllers of your request (Art. 17(2) GDPR).

08Response times and how we reply

We reply without undue delay and within one month at the latest of receiving the request.
For complex matters or a large number of requests, this period may be extended by up to two months - we will inform you of this within the first month, stating the reason.
We send our reply electronically, unless you request another form.
If we do not take action on your request, we will inform you of the reasons and of the possibility of lodging a complaint with a supervisory authority.

We provide information and communications in a concise, transparent and intelligible form, using clear and plain language (Art. 12(1) GDPR).

09Complaint to a supervisory authority

If you believe that we process your data unlawfully or that we have handled your request incorrectly, you can lodge a complaint with:

The President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl

You may also lodge a complaint with the data protection supervisory authority in the EU Member State of your habitual residence or place of work (Art. 77 GDPR).

Regardless of a complaint, you have the right to an effective judicial remedy (Art. 79 GDPR).

Before you do so, please write to us - most matters can be resolved within a few days.

10Data controller

The controller of your personal data is:

Ewelina Bocian-Świątek Sentimental’s
91-610 Łódź, Poland
Tax ID (NIP): 7262515306

E-mail: kontakt@senti-mentals.com
Website: senti-mentals.com

The Controller has not appointed a Data Protection Officer, as the scope of processing does not require one under Art. 37 GDPR.

A full description of the purposes, legal grounds and retention periods can be found in our Privacy Policy.

Personal data request form