Privacy Policy

ITHUTIR is the brand / trading identity of Vitaliy Panasiuk, a natural person operating under Polish działalność nierejestrowana (unregistered activity). CEIDG, KRS and REGON: not applicable.

Controller and contact

Vitaliy Panasiuk is the controller of personal data processed to operate ITHUTIR under Polish działalność nierejestrowana. Use the contact details below for privacy requests. No customer account system, active checkout or analytics service is currently provided.

Data, purposes and legal bases

• When you contact us, we receive the contact details, message and attachments you choose to send. We use them to answer your enquiry and manage correspondence on the basis of legitimate interests (GDPR Article 6(1)(f)); for steps you request before a contract or contractual support, Article 6(1)(b) applies.
• Where required, complaint handling and compliance with legal duties rely on Article 6(1)(c). Records needed to establish, exercise or defend claims rely on our legitimate interest under Article 6(1)(f).
• Future orders would require contact, order and transaction-status data for contract performance and applicable accounting obligations. No payment-card collection or order database operates on this site now.

Providing contact information is voluntary, but without a reply address and relevant details we may be unable to answer or handle a request. Do not send unnecessary sensitive information.

Current browser storage

The frontend uses localStorage for the theme preference and digital cart product IDs. It does not set cookies. These values stay in your browser; the current code does not send them to ITHUTIR. They have no programmed expiry. Selecting System removes a manually saved theme; removing cart items, clearing the cart or clearing site storage removes the corresponding selections. Browser controls may clear all site data. Disabling storage can prevent preferences or the cart from persisting.

Recipients and infrastructure

Support email is routed through Cloudflare Email Routing and handled by our mailbox service provider, Google. These providers process message content and technical metadata as needed for email delivery, storage and security. Access is limited to the operator and service providers needed for the relevant purpose, and authorities where disclosure is legally required. We do not sell your personal data.

The production website has not yet been deployed. Netlify is the planned host. When hosting is enabled, connection and security logs may include IP address, request time, requested URL and browser information, used to serve and protect the site on the basis of legitimate interests. The deployed configuration and its retention settings will be documented before launch.

Retention

We keep correspondence while needed to resolve the request and follow-up, and retain relevant evidence only for applicable legal duties or claim limitation periods. Necessity is assessed by the purpose, nature of the request and any unresolved dispute; data no longer needed is deleted. Browser storage lasts as described above. Exact future accounting, payment and hosting retention schedules will be finalized with those production workflows before processing begins.

Your rights

Subject to the GDPR conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. Where processing relies on consent, you may withdraw consent at any time without affecting earlier lawful processing. We do not currently operate consent-based analytics or marketing.

Contact us to exercise your rights. We may seek proportionate information needed to verify a request, without collecting unnecessary identification data. We normally respond within one month; legally permitted extensions will be explained within that month. You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), or another competent supervisory authority, including in your habitual residence, workplace or the place of an alleged infringement. See UODO.

International transfers and security

Email providers may process data outside the European Economic Area depending on the service and processing location. Where a transfer occurs, it must use an applicable adequacy decision or appropriate safeguards such as Standard Contractual Clauses, with additional safeguards where required. Contact us for information about safeguards applicable to your data or a copy where available. We limit access, protect service credentials and use provider security controls; no transmission or storage method is risk-free.

Future services and automated decisions

Google Analytics 4 is not active. Stripe and PayPal are not active, and Google Drive delivery is not active. The current site does not send customer data to Stripe or PayPal. Once payment integrations are activated, the selected provider will process information necessary to complete and verify payment under its own privacy terms and applicable legal bases. If enabled later, payment, protected delivery and analytics will have purpose-specific data notices, recipients, retention and transfer arrangements before use; optional analytics will require consent where applicable. The current site does not make automated decisions with legal or similarly significant effects and does not perform profiling.

Seller / contact: Vitaliy Panasiuk
al. Marszałka Edwarda Śmigłego-Rydza 29/6, 93-281 Łódź, Poland
Country: Poland
Email: support@ithutir.com
Phone: +48 668 311 169