PRIVACY POLICY

Lia Bella Sp. z o.o.

Last updated: 27 August 2026

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Lia Bella Sp. z o.o.
ul. Opolska 110 E
46-070 Domecko
Poland

Email: info@liabella.de
Telephone: +48 504 498 434

KRS: 0001079607
NIP: 9910553290

For questions regarding the processing of your personal data or the exercise of your data protection rights, please contact us using the contact details above.

2. General Information

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

Personal data means any information relating to an identified or identifiable natural person.

We only process personal data where there is a lawful basis for doing so and only for as long as necessary for the relevant purpose or as required by applicable legal retention obligations.

3. Website Hosting and Squarespace

This website is hosted and operated using services provided by Squarespace.

When you visit our website, technical information may automatically be processed in order to display the website, maintain its security and stability and provide website functionality.

This information may include, in particular:

  • IP address

  • browser type and version

  • operating system and device information

  • date and time of access

  • pages visited

  • referring website or URL

  • approximate geographic information

  • other technical connection and usage data

The processing of technically necessary information is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of our website.

Squarespace may also process website visitor information on our behalf for analytics and website administration purposes.

For users located in the European Economic Area, Squarespace services may involve Squarespace Ireland Limited and other Squarespace group companies, including Squarespace, Inc. in the United States.

Squarespace states that international data transfers are protected, where applicable, through recognised transfer mechanisms including the EU-U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Further information about Squarespace’s processing of personal data is available in the Squarespace Privacy Policy.

4. Contact Forms and Business Enquiries

If you contact us through a contact form, by email, telephone or another communication channel, we process the information that you provide to us.

Depending on the nature of your enquiry, this may include:

  • name

  • company or boutique name

  • address or business address

  • telephone number

  • email address

  • VAT identification number or company information

  • the contents of your message

  • other information voluntarily provided by you

We process this information in order to respond to your enquiry, communicate with you and, where applicable, take steps towards establishing or performing a business relationship.

The legal basis is Article 6(1)(b) GDPR where processing is necessary in connection with a contract or pre-contractual measures.

For general business enquiries and communication, processing may also be based on Article 6(1)(f) GDPR. Our legitimate interest is the efficient management of business communications and relationships.

Squarespace forms may use external or connected storage services to deliver or store form submissions. Squarespace itself may process the form data as our service provider. Squarespace confirms that form submissions can be delivered to connected storage services, including email or other third-party services.

5. Email Communication and Google Workspace

We use Google services, including Google Workspace, for business email communication.

If you communicate with us by email, personal data contained in your email and related communication data may therefore be processed by Google as our service provider.

This may include your email address, name, message content, attachments and technical communication information.

The legal basis depends on the purpose of the communication and is generally Article 6(1)(b) GDPR for contractual or pre-contractual communication or Article 6(1)(f) GDPR for other legitimate business communication.

Where personal data is transferred outside the European Economic Area, appropriate safeguards are used in accordance with applicable data protection law.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are technically necessary for the secure and proper operation of the website and cannot be disabled without affecting essential website functionality.

Other cookies, including analytics or performance cookies, may only be used where permitted by applicable law and, where required, after you have given your consent through our cookie settings.

Necessary cookies are used on the basis of our legitimate interest in operating a secure and functional website pursuant to Article 6(1)(f) GDPR and applicable rules relating to cookies and electronic communications.

Where your consent is required for non-essential cookies or similar technologies, processing is based on Article 6(1)(a) GDPR.

You may withdraw your consent or change your cookie preferences at any time using the cookie settings available on our website.

Squarespace provides mechanisms for restricting non-essential cookies until a visitor gives consent through the cookie banner.

7. Squarespace Analytics

We may use Squarespace Analytics to understand how visitors use our website and to improve the content, structure and performance of our website.

Depending on the privacy and cookie settings applied to the website, information processed for analytics purposes may include:

  • page views

  • website activity

  • referring websites

  • browser and device information

  • geographic information

  • interactions with forms or buttons

Where analytics requires the use of non-essential cookies or similar technologies, such processing takes place only on the basis of your consent pursuant to Article 6(1)(a) GDPR.

You can manage or withdraw your consent through our cookie settings.

Squarespace states that its analytics platform uses browser-based technology to collect information about website visits and usage.

8. Google reCAPTCHA

Forms on this website may use Google reCAPTCHA to protect the website and our forms against spam, automated submissions and misuse.

reCAPTCHA analyses certain technical information in order to determine whether a form submission is likely to have been made by a human user or an automated system.

Squarespace currently uses Google reCAPTCHA on many form blocks and states that reCAPTCHA is enabled by default on many Squarespace forms.

Where Google reCAPTCHA is enabled on our website, the processing serves the security and protection of our website and forms.

9. WhatsApp

Our website provides links that allow visitors to contact Lia Bella through WhatsApp.

If you choose to communicate with us through WhatsApp, information you provide through the service may be processed by WhatsApp and its affiliated companies in accordance with their own privacy terms.

This may include your telephone number, profile information, communication metadata and the contents of messages exchanged with us.

We use WhatsApp as an optional business communication channel. You are not required to use WhatsApp and may contact us by email or telephone instead.

The legal basis for our processing of messages received through WhatsApp is Article 6(1)(b) GDPR where the communication relates to a contractual or pre-contractual relationship, or Article 6(1)(f) GDPR for other legitimate business communication.

10. Social Media and External Links

Our website contains links to third-party websites and social media platforms, including services such as:

  • Instagram

  • Facebook

  • TikTok

  • Pinterest

  • WhatsApp

When you access an external website or social media platform through such a link, the respective provider may process personal data in accordance with its own privacy policy.

We have no control over the processing of personal data carried out independently by these third-party providers.

Please refer to the privacy information of the respective provider for further details.

11. B2B Online Store

Our website may provide links to the Lia Bella B2B online store operated using Shopify.

Where you access or use the B2B online store, additional personal data may be processed in connection with retailer accounts, orders, payments, deliveries and other shop functions.

The privacy information applicable to the B2B online store is provided separately within the online store.

12. Recipients and Service Providers

We may disclose or make personal data accessible to service providers where this is necessary for the purposes described in this Privacy Policy.

These may include, in particular:

  • website hosting and technology providers

  • email and communication providers

  • IT and technical service providers

  • analytics providers

  • professional advisers

  • shipping or logistics providers where necessary in connection with a business transaction

  • accounting and administrative service providers

  • public authorities where disclosure is required by law

Service providers acting as processors on our behalf are required to process personal data in accordance with applicable data protection requirements.

Personal data will not be sold to third parties.

13. International Data Transfers

Some of the service providers used by us may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the EEA, we ensure that the requirements of the GDPR regarding international data transfers are met.

Depending on the recipient and destination country, appropriate safeguards may include:

  • an adequacy decision by the European Commission

  • participation in the EU-U.S. Data Privacy Framework

  • Standard Contractual Clauses approved by the European Commission

  • another legally recognised transfer mechanism

14. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Business correspondence and information relating to contractual relationships may be retained for longer periods where necessary to comply with statutory accounting, tax, record-keeping or legal obligations or to establish, exercise or defend legal claims.

Contact enquiries that do not result in a business relationship are deleted when they are no longer required for the purpose for which they were submitted, subject to any legitimate need to retain the correspondence.

Where processing is based on consent, the relevant data will no longer be processed for that purpose following withdrawal of consent, unless another lawful basis applies.

15. Your Rights under the GDPR

Subject to the applicable legal requirements, you have the right to:

  • request access to your personal data

  • request correction of inaccurate or incomplete personal data

  • request deletion of your personal data

  • request restriction of processing

  • receive personal data you have provided to us in a structured, commonly used and machine-readable format where the right to data portability applies

  • object to processing based on legitimate interests

  • withdraw consent at any time where processing is based on consent

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact:

info@liabella.de

You also have the right to lodge a complaint with a competent data protection supervisory authority.

As Lia Bella Sp. z o.o. is established in Poland, the relevant Polish supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

16. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

The website is provided using encrypted HTTPS connections.

17. Automated Decision-Making

We do not use personal data collected through this website for automated decision-making that produces legal effects or similarly significantly affects individuals within the meaning of Article 22 GDPR.

18. Changes to this Privacy Policy

We may update this Privacy Policy where necessary due to changes in our website, services, technologies or applicable legal requirements.

The current version of this Privacy Policy is available on this website.