Declaration of compliance with the GDPR

1. Scope of Application

These rules apply to the processing of personal data belonging to users located in Poland or within the European Union, particularly in connection with the provision of services or the offering of products through the website.

They cover data stored electronically or in structured filing systems. They do not apply to the processing of data carried out exclusively for personal or household purposes.

2. Fundamental Principles

When processing personal data, we adhere to the following principles:

  • Lawfulness, fairness, and transparency;

  • Using data only for specified purposes;

  • Limiting the scope of processed information to what is strictly necessary;

  • Ensuring that data remains accurate and up to date;

  • Retaining data only for as long as necessary to fulfill its intended purpose;

  • Ensuring confidentiality, integrity, and an appropriate level of security.

3. User Rights

Under the GDPR, users may exercise the following rights:

  • The right to be informed;

  • The right of access to personal data;

  • The right to rectification of personal data;

  • The right to erasure of personal data;

  • The right to restriction of processing or to object to processing;

  • The right to data portability;

  • The right to withdraw consent where consent is the legal basis for processing.

In cases where the consent of a legal guardian is required, the relevant actions should be taken by a person authorized to represent the user.

4. Obligations of Entities Involved in Data Processing

Entities involved in order fulfillment, delivery, customer service, or technical support should:

  • Process data in accordance with the instructions received;

  • Apply appropriate security measures;

  • Support the exercise of users' rights under the GDPR;

  • Report data security incidents in accordance with applicable requirements;

  • Maintain appropriate documentation relating to data processing;

  • Fulfill data protection obligations where required by applicable law.

5. Data Transfers

If data is transferred outside the European Economic Area (EEA), appropriate safeguards are applied, such as:

  • Adequacy decisions issued by the European Commission;

  • Standard Contractual Clauses (SCCs);

  • Data encryption, access controls, and other technical and organizational measures designed to enhance security.

6. Supervision and Administrative Measures

The competent supervisory authority in Poland may conduct inspections concerning compliance with the GDPR and take measures provided for under applicable law, including issuing administrative decisions regarding the manner in which personal data is processed.

7. Commitment to Compliance

We strive to maintain a high level of data protection by:

  • Respecting users' rights;

  • Maintaining transparent data processing practices;

  • Implementing appropriate technical and organizational measures to reduce the risk of privacy breaches;

  • Continuously improving our procedures.

8. Contact Us

  • Address: 1511 Pinegrove St, Dickinson, TX 77539, United States

  • Phone: +1 (254) 592-6506

  • Email: team@maisonclairex.com

  • Customer Service Hours: Monday–Friday, 09:00–12:30 and 14:00–18:00 (CET)

9. Representative Under Article 27 of the GDPR

Where the requirements set out in Article 27 of the GDPR apply, a representative will be appointed to handle requests concerning access to personal data, rectification, erasure, and other rights arising under the GDPR.