Privacy Policy BAURUM
Donation page
Effective date: 9 September 2026
1. Data ControllerThe controller of your personal data is BAURUM sp. z o.o., a limited liability company registered in the Republic of Poland.
Registered address: ul. Nowy Świat 33/13, 00-029 Warsaw, Poland
KRS: 0001244344 · NIP: 5253091840 · REGON: 544872724
EU VAT: PL5253091840
Email: info@baurum.eu
Website: baurum.eu
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Polish Personal Data Protection Act of 10 May 2018, and the Polish Electronic Communications Law (Prawo komunikacji elektronicznej) of 12 July 2024.
For any question concerning your data, write to info@baurum.eu.
2. Our principleBaurum creates handcrafted jewellery with natural gemstones. We collect only the data required to make your piece and deliver it to you.
We do not sell personal data. We do not share it with data brokers and we do not provide it to third parties for their own marketing purposes.
3. Data we collectProvided by you: first and last name, email address, phone number or messenger contact, delivery address, order details (model, metal, stone, size, engraving), and the content of your correspondence with us. For business invoicing — company name, address and tax identification number.
Provided voluntarily, when requesting an individual selection: date, time and place of birth, along with the questions and requests discussed during the consultation.
Collected automatically when you visit the website: IP address, browser and device type, operating system, language, country, referral source, pages viewed, visit duration, and cookie identifiers.
We never receive or store payment card details. Payments are processed directly by the payment provider; we only see the amount, date and status of the transaction.
4. Birth dataDate, time and place of birth are used solely to calculate a natal chart and select a stone according to the Jyotish methodology. Such information may qualify as a special category of personal data under Article 9 GDPR. Accordingly:
6. Recipients of dataData is shared only with parties without whom an order cannot be fulfilled or the website cannot operate, and only to the extent necessary. Categories of recipients:
7. Transfers outside the EEABaurum works with clients worldwide, so data may be transferred outside the European Economic Area — for example when delivering a piece to the United States, Canada, the UAE or India, or when using services provided by non-EU vendors.
Transfers take place on the basis of a European Commission adequacy decision, Standard Contractual Clauses approved by the European Commission, or Article 49(1)(b) GDPR where the transfer is necessary to perform a contract with you. A copy of the applicable safeguards can be requested at info@baurum.eu.
8. Your rightsYou have the right to:
9. Whether providing data is mandatoryProviding data is voluntary. However, without contact and address details we cannot conclude or perform a contract, and without invoicing details we cannot meet our tax obligations.
10. SecurityWe apply technical and organisational measures proportionate to the risk: TLS encryption of connections, access control, two-factor authentication, backups and data minimisation. Should a breach occur that poses a high risk to your rights, we will notify you and the supervisory authority in accordance with Articles 33 and 34 GDPR.
11. ChildrenThe website and our services are intended for adults. We do not knowingly collect data from persons under 16. If such data has been provided to us, write to info@baurum.eu and we will delete it.
12. Social mediaWhen you contact us via Instagram, YouTube, Facebook, Pinterest, Telegram or WhatsApp, we process the publicly available data of your profile and the content of the conversation in order to respond. The platforms themselves are governed by their own privacy policies, over which we have no influence.
13. External linksThe website may contain links to third-party resources. We are not responsible for how they process data.
14. Changes to this policyWe may update this policy when legislation or our processes change. The current version is always available at baurum.eu. We will announce material changes by email or through a prominent notice on the website at least 14 days before they take effect.
Cookie PolicyEffective date: 9 September 2026
1. What cookies areCookies are small text files stored on your device when you visit the website. The term also covers similar technologies: local storage, session storage, pixels and tags.
The use of cookies that are not strictly necessary requires your consent, in accordance with Article 399 of the Polish Electronic Communications Law and Directive 2002/58/EC. Consent is freely given, specific, informed, and may be withdrawn at any time.
2. Categories of cookiesStrictly necessary. These enable the basic operation of the website: maintaining your session, saving the cart, securing forms, remembering the selected language and your cookie choice. They are set without consent because the website cannot function without them. Retention: from session length up to 12 months.
Functional. These enable embedded video, the online consultation widget and the ring size calculator. Retention: up to 24 months. Consent required.
Analytics. Google Analytics 4 — the _ga and _ga_* cookies, retained for up to 14 months. Used for visit statistics, traffic source evaluation and understanding which materials are read. Consent required.
Marketing. Meta Pixel — the _fbp and fr cookies, retained for up to 3 months. Google Ads — up to 90 days. Used to measure advertising effectiveness and to show relevant material to people who have already shown interest in our pieces. Consent required.
3. How we obtain consentCookies requiring consent are not loaded before you give it. Refusing is as easy as accepting: the "Accept all" and "Reject all" buttons appear on the first layer of the banner and are visually equivalent. Closing the banner, scrolling or remaining inactive does not constitute consent.
For Google services we use Google Consent Mode v2: prior to consent, Google tags operate in restricted mode and do not store identifiers.
4. Managing cookiesYou can change or withdraw your consent at any time through the "Cookie settings" link at the bottom of every page.
You may also manage cookies in your browser settings — blocking them entirely or deleting those already stored. You can opt out of personalised advertising at youronlinechoices.eu and optout.aboutads.info.
Blocking strictly necessary cookies may break the cart, checkout and consultation form.
5. Validity of consentYour choice is stored for 12 months, after which the banner will appear again. You can change your decision earlier at any time.
Data controller: BAURUM sp. z o.o. · info@baurum.eu · baurum.eu
1. Data ControllerThe controller of your personal data is BAURUM sp. z o.o., a limited liability company registered in the Republic of Poland.
Registered address: ul. Nowy Świat 33/13, 00-029 Warsaw, Poland
KRS: 0001244344 · NIP: 5253091840 · REGON: 544872724
EU VAT: PL5253091840
Email: info@baurum.eu
Website: baurum.eu
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Polish Personal Data Protection Act of 10 May 2018, and the Polish Electronic Communications Law (Prawo komunikacji elektronicznej) of 12 July 2024.
For any question concerning your data, write to info@baurum.eu.
2. Our principleBaurum creates handcrafted jewellery with natural gemstones. We collect only the data required to make your piece and deliver it to you.
We do not sell personal data. We do not share it with data brokers and we do not provide it to third parties for their own marketing purposes.
3. Data we collectProvided by you: first and last name, email address, phone number or messenger contact, delivery address, order details (model, metal, stone, size, engraving), and the content of your correspondence with us. For business invoicing — company name, address and tax identification number.
Provided voluntarily, when requesting an individual selection: date, time and place of birth, along with the questions and requests discussed during the consultation.
Collected automatically when you visit the website: IP address, browser and device type, operating system, language, country, referral source, pages viewed, visit duration, and cookie identifiers.
We never receive or store payment card details. Payments are processed directly by the payment provider; we only see the amount, date and status of the transaction.
4. Birth dataDate, time and place of birth are used solely to calculate a natal chart and select a stone according to the Jyotish methodology. Such information may qualify as a special category of personal data under Article 9 GDPR. Accordingly:
- you provide it voluntarily and entirely at your own initiative;
- the legal basis is your explicit consent (Art. 9(2)(a) GDPR);
- you may withdraw consent at any time, and we will delete this data;
- we never use it for advertising, never transfer it to advertising systems, and never publish it;
- you can order a piece without providing it.
Purpose | Legal basis | Retention period |
Responding to enquiries, correspondence, pre-order consultation | Art. 6(1)(b) GDPR — steps prior to entering a contract | 12 months from last contact |
Individual stone selection based on a natal chart | Art. 6(1)(a) and 9(2)(a) — explicit consent | Until consent is withdrawn, max. 3 years |
Order processing, manufacturing and delivery | Art. 6(1)(b) — performance of a contract | Duration of the contract |
Invoicing, accounting, tax obligations | Art. 6(1)(c) — legal obligation | 5 years from the end of the year in which the tax became due |
Warranty, returns, complaints | Art. 6(1)(b) and 6(1)(c) | Warranty period plus one year |
Defence against potential claims | Art. 6(1)(f) — legitimate interest | Until the statute of limitations expires |
Brand newsletter | Art. 6(1)(a) — consent | Until unsubscribed |
Website analytics | Art. 6(1)(a) — cookie consent | Up to 14 months |
Advertising and retargeting | Art. 6(1)(a) — cookie consent | Until consent is withdrawn |
Website security, fraud prevention | Art. 6(1)(f) — legitimate interest | 12 months |
- providers of hosting, domain and website infrastructure;
- payment providers and our bank;
- courier services, postal operators and customs agents;
- manufacturing and jewellery subcontractors — technical order parameters only;
- gemmological laboratories — when a stone certificate is ordered;
- our accounting firm and authorised public authorities;
- email and analytics services — within the scope of your consent;
- legal advisers — where necessary to protect our rights.
7. Transfers outside the EEABaurum works with clients worldwide, so data may be transferred outside the European Economic Area — for example when delivering a piece to the United States, Canada, the UAE or India, or when using services provided by non-EU vendors.
Transfers take place on the basis of a European Commission adequacy decision, Standard Contractual Clauses approved by the European Commission, or Article 49(1)(b) GDPR where the transfer is necessary to perform a contract with you. A copy of the applicable safeguards can be requested at info@baurum.eu.
8. Your rightsYou have the right to:
- access your data and obtain a copy of it;
- rectify inaccurate data and complete incomplete data;
- request erasure, except where the law requires us to retain the data;
- restrict processing;
- receive your data in a machine-readable format or have it transmitted to another controller;
- object to processing based on legitimate interest; an objection to direct marketing is absolute and is honoured immediately;
- withdraw consent at any time — this does not affect the lawfulness of processing carried out before withdrawal;
- lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl. You may also contact the supervisory authority in your country of residence.
9. Whether providing data is mandatoryProviding data is voluntary. However, without contact and address details we cannot conclude or perform a contract, and without invoicing details we cannot meet our tax obligations.
10. SecurityWe apply technical and organisational measures proportionate to the risk: TLS encryption of connections, access control, two-factor authentication, backups and data minimisation. Should a breach occur that poses a high risk to your rights, we will notify you and the supervisory authority in accordance with Articles 33 and 34 GDPR.
11. ChildrenThe website and our services are intended for adults. We do not knowingly collect data from persons under 16. If such data has been provided to us, write to info@baurum.eu and we will delete it.
12. Social mediaWhen you contact us via Instagram, YouTube, Facebook, Pinterest, Telegram or WhatsApp, we process the publicly available data of your profile and the content of the conversation in order to respond. The platforms themselves are governed by their own privacy policies, over which we have no influence.
13. External linksThe website may contain links to third-party resources. We are not responsible for how they process data.
14. Changes to this policyWe may update this policy when legislation or our processes change. The current version is always available at baurum.eu. We will announce material changes by email or through a prominent notice on the website at least 14 days before they take effect.
Cookie PolicyEffective date: 9 September 2026
1. What cookies areCookies are small text files stored on your device when you visit the website. The term also covers similar technologies: local storage, session storage, pixels and tags.
The use of cookies that are not strictly necessary requires your consent, in accordance with Article 399 of the Polish Electronic Communications Law and Directive 2002/58/EC. Consent is freely given, specific, informed, and may be withdrawn at any time.
2. Categories of cookiesStrictly necessary. These enable the basic operation of the website: maintaining your session, saving the cart, securing forms, remembering the selected language and your cookie choice. They are set without consent because the website cannot function without them. Retention: from session length up to 12 months.
Functional. These enable embedded video, the online consultation widget and the ring size calculator. Retention: up to 24 months. Consent required.
Analytics. Google Analytics 4 — the _ga and _ga_* cookies, retained for up to 14 months. Used for visit statistics, traffic source evaluation and understanding which materials are read. Consent required.
Marketing. Meta Pixel — the _fbp and fr cookies, retained for up to 3 months. Google Ads — up to 90 days. Used to measure advertising effectiveness and to show relevant material to people who have already shown interest in our pieces. Consent required.
3. How we obtain consentCookies requiring consent are not loaded before you give it. Refusing is as easy as accepting: the "Accept all" and "Reject all" buttons appear on the first layer of the banner and are visually equivalent. Closing the banner, scrolling or remaining inactive does not constitute consent.
For Google services we use Google Consent Mode v2: prior to consent, Google tags operate in restricted mode and do not store identifiers.
4. Managing cookiesYou can change or withdraw your consent at any time through the "Cookie settings" link at the bottom of every page.
You may also manage cookies in your browser settings — blocking them entirely or deleting those already stored. You can opt out of personalised advertising at youronlinechoices.eu and optout.aboutads.info.
Blocking strictly necessary cookies may break the cart, checkout and consultation form.
5. Validity of consentYour choice is stored for 12 months, after which the banner will appear again. You can change your decision earlier at any time.
Data controller: BAURUM sp. z o.o. · info@baurum.eu · baurum.eu