Privacy policy

Updated: 16.10.2026.

1. Data controller and contact

The data controller is JURASSIC LURES TOMASZ KOTARSKI, ul. Grunwaldzka 18, 42-226 Częstochowa, Poland, NIP 9492069455, REGON 540829915. For privacy matters, contact us at: tom@tkart.eu, tel. +48 669 218 576, or by post at the address above.

2. What data we process and why

Orders, payments, delivery, customer accounts and participation in the Hunter’s Club: identification and contact details, address, ordered products, payment and fulfilment statuses, points history and submitted photos. The basis is entering into and performing a contract or taking steps before entering into one (Article 6(1)(b) GDPR).
Sales documents, accounting and statutory obligations relating to complaints: processing is necessary to comply with legal obligations (Article 6(1)(c) GDPR).
Replies to enquiries, prevention of misuse, security, and the establishment and defence of claims: the basis is the controller’s legitimate interest (Article 6(1)(f) GDPR).
The newsletter, if you subscribe, and optional advertising measurement: the basis is voluntary consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by contacting us; this does not affect the lawfulness of earlier processing.
Product reviews and approved Hunter’s Club photos are published under the rules of the relevant feature. Photo, licence and consent rules for identifiable likenesses are set out in the programme’s separate terms. We do not publish the email address of the person submitting a photo.

Providing order and delivery details is necessary to complete a purchase. Creating an account, subscribing to the newsletter and submitting a photo are voluntary. Do not submit special-category data or unnecessary data about other people.

3. Who receives your data

Data is received only to the extent necessary by authorised shop staff and providers of hosting, backups, email, maintenance and website security. For purchases, data is received by the selected payment provider and carrier, accounting service providers and authorised authorities where required by law. We do not store full payment card details in the shop.

If you use links or embedded content from external services such as YouTube, Facebook or Instagram, the provider may process device and service-usage data under its own policy. These services may process data outside the EEA; their providers supply information about locations, transfer grounds and user rights. Visiting a social network is subject to its own rules.

4. Cookies and measurement

The shop uses essential session mechanisms and cookies for the basket, login, security and remembering your language and currency choices. Optional statistical and advertising tools requiring consent may be activated only after consent is given. Refusing consent does not prevent purchases. You can also delete and block cookies in your browser; blocking essential cookies may hinder the basket or account.

5. How long we retain data

We retain account data while the account is maintained, newsletter data until consent is withdrawn, and correspondence until the matter is closed. Order and accounting data is kept for the period required by tax and accounting laws. Data needed to pursue or defend claims is retained until the applicable limitation period expires, generally up to 6 years from the end of the year in which the matter or contract ended. Security logs are generally retained for up to 12 months, and longer only where a specific record is needed to investigate an incident or protect claims. Retention periods for submissions, licences and points history are set out in the Hunter’s Club terms.

6. Your rights

Under the conditions of the GDPR, you have rights of access to your data and a copy, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent. Erasure does not cover data we must continue to retain for legal obligations or the protection of claims. Send your request to tom@tkart.eu; we may ask you to confirm your identity to the extent necessary to protect the data.

You may lodge a complaint with the President of the Polish Personal Data Protection Office: uodo.gov.pl, or with the competent supervisory authority in the country of your habitual residence.

7. Automation and safe publication

The shop automatically calculates prices, delivery costs and points under the available rules. Hunter’s Club photos are reviewed manually. We do not make decisions producing legal effects or similarly significantly affecting users based solely on automated processing within the meaning of Article 22 GDPR. Before adding a photo, remove unnecessary location metadata and ensure you may share the people visible in it.