Last updated: 4 September 2026
1. Who we are
Archeobooks is a bookseller, distributor and publisher based in Kraków, Poland, specialising in archaeology, Egyptology and the study of the ancient world.
The controller of your personal data is Studio Panopticum, ul. Zawiła 44L, 30-390 Kraków, Poland (REGON 357738611, VAT PL6761456550), trading as Archeobooks.
For any question about this policy or about your data, write to archeobooks@archeobooks.com with "Privacy" in the subject line, or to the postal address above.
2. What data we collect and why
| What we collect | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Name, e-mail, delivery and billing address, phone number | To process and deliver your order, issue an invoice, and contact you about it | Performance of a contract — Art. 6(1)(b) |
| Order history, correspondence with us | Customer service, handling returns, complaints and warranty claims | Contract — Art. 6(1)(b); legitimate interest in defending claims — Art. 6(1)(f) |
| Invoice and accounting records | Statutory bookkeeping and tax obligations under Polish law | Legal obligation — Art. 6(1)(c) |
| E-mail address, if you subscribe to our newsletter | To send you our new-acquisitions newsletter | Your consent — Art. 6(1)(a), withdrawable at any time |
| Institutional contact details (library, university, museum) sent through our enquiry form | To prepare a quotation and handle institutional orders | Contract / pre-contractual steps — Art. 6(1)(b) |
| Technical data: IP address, browser, device, pages viewed | Security, fraud prevention, keeping the shop working | Legitimate interest — Art. 6(1)(f) |
| Analytics and marketing cookies | Understanding how the shop is used and improving it | Your consent — Art. 6(1)(a) |
We do not sell your data. We do not profile you for automated decision-making.
3. Payments
Payments are processed by our payment providers — Shopify Payments, PayPal, and bank transfer. Card details are entered directly on the provider's secure page and are never stored on our servers or by us. Each provider acts as an independent controller for the payment data it handles; please see their own privacy notices.
4. Who else processes your data
- Shopify Inc. — our e-commerce platform and hosting provider (processor).
- Mailchimp (The Rocket Science Group LLC) — sending our newsletter and transactional e-mail.
- Postal and courier operators (Poczta Polska and, where applicable, other carriers) — delivery of your order.
- Our accountant and, where necessary, legal advisers — under confidentiality obligations.
Some of these providers are established outside the European Economic Area (in particular in the United States and Canada). Where that is the case, transfers are made on the basis of the European Commission's Standard Contractual Clauses and/or an adequacy decision, together with additional safeguards required by the provider's data-processing agreement. You may ask us for details of the safeguards applied.
5. How long we keep your data
- Order and invoice data: 5 years from the end of the tax year in which the transaction took place (Polish accounting and tax law).
- Data used to defend or pursue claims: until the relevant limitation period expires.
- Newsletter data: until you unsubscribe or withdraw consent, and then only a record of the withdrawal itself.
- Account data: until you ask us to close your account.
- Correspondence: normally 3 years, unless it relates to an order (then as above).
6. Your rights
Under the GDPR you have the right to: access your data and obtain a copy; ask us to correct inaccurate data; ask us to erase your data ("right to be forgotten"); restrict processing; receive your data in a portable format; object to processing based on our legitimate interest; and withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise any of these, write to archeobooks@archeobooks.com. We reply within one month.
If you believe we process your data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland — uodo.gov.pl — or with the supervisory authority in your country of residence.
7. Cookies
We use cookies and similar technologies. Strictly necessary cookies (cart, session, security) are set automatically because the shop cannot work without them. Analytics and marketing cookies are set only with your consent, which you give through the cookie banner and can change or withdraw at any time via the "Cookie settings" link in the footer.
8. Children
Our shop is not directed at children. We do not knowingly collect data from anyone under 16.
9. Changes
We may update this policy. The current version is always published at this address, with the date of the last update at the top. Material changes will be announced on our home page.