Privacy Policy

Effective from: 14 May 2026

1. Data Controller

The controller of your personal data is:

ABCDEAL Wojciech Zamarski
ul. Zawodzie 29, Ochaby Wielkie
43-430 Skoczów, Silesian Voivodeship, Poland
Tax ID (NIP): 548-001-93-37, REGON: 070450941

Data protection contact:
e-mail: sklep@abcdeal.pl
phone: +48 601 415 357

This policy describes how we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.

2. What data we collect and for what purpose

Processing purpose	Data categories	Legal basis	Retention period
Order fulfilment and delivery	first name, surname, delivery address, phone, e-mail	Art. 6(1)(b) GDPR – performance of a contract	until completion of the order + complaint period (2 years)
Invoicing and tax obligations	first name, surname / company name, address, tax ID (B2B)	Art. 6(1)(c) GDPR – legal obligation (VAT Act, Tax Ordinance)	5 years from the end of the year in which the document was issued
Setting up and maintaining a customer account	e-mail, password (hashed), order history	Art. 6(1)(b) GDPR – performance of the account service contract	until the account is deleted by the Customer
Complaint and return handling	order data, correspondence	Art. 6(1)(c) GDPR and (f) – legitimate interest (defence against claims)	until the limitation period for claims expires (usually 6 years)
Direct marketing of our own offer	e-mail, purchase history	Art. 6(1)(f) GDPR – legitimate interest of the Controller	until objection is raised
Communication via contact form / Messenger	first name, e-mail, message content	Art. 6(1)(f) GDPR – handling of the enquiry	up to 12 months from the last correspondence
Cookies and site analytics	session identifier, browser technical data, statistical data	Art. 6(1)(a) GDPR – consent (for optional cookies) and (f) (necessary cookies)	as set out in the Cookies Policy

Providing data to the extent required to complete an order, issue an invoice or set up an account is voluntary, but failure to provide it makes it impossible to conclude and perform the contract.

3. To whom we disclose your data

Your data may be transferred to the following categories of recipients, strictly to the extent necessary to achieve the stated purposes:

• Courier and postal operators – for the purpose of delivering the parcel: DHL Parcel Polska Sp. z o.o., DPD Polska Sp. z o.o., General Logistics Systems Poland Sp. z o.o. (GLS), InPost Sp. z o.o. (Parcel Lockers), FedEx Express Polska Sp. z o.o., UPS Polska Sp. z o.o., Poczta Polska S.A.
• Payment operators – PayPro S.A. (Przelewy24), ul. Pastelowa 8, 60-198 Poznań – for processing electronic and BLIK payments.
• Invoicing system – Power Media S.A. (iFirma) – for issuing VAT invoices and keeping accounting records.
• Sales integration system – BaseLinker Sp. z o.o. (currently branded as "Base") – for handling orders from various sales channels (Allegro, shop, marketplaces).
• Hosting provider – dhosting.pl Sp. z o.o. – for the operation of the server and e-mail service.
• Google Ireland Limited – for Google Analytics (traffic statistics); details in our Cookies Policy.
• Public authorities – courts, prosecutors, tax authorities – only in cases provided for by law and upon their justified request.

All recipients acting as data processors are bound by data processing agreements requiring confidentiality and GDPR compliance.

4. Transfer of data outside the European Economic Area (EEA)

In connection with our use of Google services (Google Analytics), your data may be transferred to the USA. The transfer is carried out on the basis of Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 on the adequate level of protection of personal data under the EU-US Data Privacy Framework, to which Google has acceded.

In all other cases, your data is processed exclusively within the EEA.

5. Your rights

In connection with the processing of your personal data, you have the following rights:

• Right of access to your data (Art. 15 GDPR) – you can obtain information about which data we process and receive a copy of it.
• Right to rectification (Art. 16 GDPR) – you can request correction of inaccurate or outdated data.
• Right to erasure ("right to be forgotten", Art. 17 GDPR) – subject to data whose retention is required by law (e.g. VAT invoices).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR) – receiving your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR) – to processing based on a legitimate interest, including direct marketing.
• Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

To exercise any of the above rights, please contact us at sklep@abcdeal.pl. We will respond within 30 days.

6. Profiling and automated decisions

We do not take decisions regarding you based solely on automated processing that would produce legal effects or significantly affect your situation (Art. 22 GDPR). Google Analytics statistics involve elements of automated traffic analysis, but are aggregated and not used for individual profiling.

7. Data security

We apply technical and organisational measures appropriate to the risk, in particular:

• SSL/TLS encrypted connection (256-bit certificate) between your browser and the shop.
• Customer account passwords are stored in encrypted form (one-way hash) – never in plain text.
• Access to data is restricted to authorised persons bound by confidentiality obligations.
• Regular backups and server-level access control.

8. Newsletter

We do not currently operate a newsletter. In the future – if a subscription is launched – your e-mail address will be processed only on the basis of separate, voluntary consent, which you can withdraw at any time (e.g. via an "unsubscribe" link in the message footer).

9. Cookies

We use cookies for purposes necessary for the operation of the shop, as well as for statistical and marketing purposes. Full information – including a list of specific cookies and instructions for managing them – is provided in a separate Cookies Policy.

10. Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in the law or our practices. The current version is always available at https://www.abcdeal.eu/i2,polityka-prywatnosci.html. The date of the last update appears at the top of the document.

For any questions regarding the processing of your data, please write to: sklep@abcdeal.pl.