What Data We Process
- Contact and delivery data: We process your first name, last name, address, email, and phone number.
- Order data: We process information about products, payment methods, delivery methods, and your order notes.
- Payment data: We receive transaction IDs and status from the payment operator. We do not store your full card data.
- Technical data: We process your IP address and cookie identifiers. These are necessary for the store to work properly.
Why We Process Data (Legal Basis)
- To fulfill your order: We process data to execute the contract, handle payment, and deliver goods (Art. 6(1)(b) GDPR).
- To follow the law: We process data for tax, accounting, and warranty obligations (Art. 6(1)(c) GDPR).
- For contact and service: We process data to answer your questions and provide after-sales service (Art. 6(1)(b) or (f) GDPR).
- For security: We process data to prevent fraud and secure the site (Art. 6(1)(f) GDPR).
We do not send newsletters. We do not use email marketing.
Who We Share Data With
- Payment operators: They process your payments. Full card data stays with them.
- Courier companies: They deliver your orders.
- Hosting providers: They maintain our store servers and email systems.
- Advisors: Accounting and legal firms help us with legal obligations.
Data Transfers Outside the EEA
Usually, we do not transfer data outside the European Economic Area (EEA). If we must transfer data (for example, to an IT provider), we will use GDPR-required mechanisms. This includes EU Standard Contractual Clauses.
How Long We Keep Data
- Orders and documents: We keep them for the duration of the contract and as required by law. This is usually 5 years for accounting and 6 years for claims.
- Customer account: We keep data until you delete the account or until we complete related orders.
- Correspondence: We generally keep emails for 36 months. We may keep them longer if needed to defend claims.
- Essential cookies: We keep them according to your browser settings and store needs.
Your User Rights
- You can access your data and get copies.
- You can correct your data.
- You can ask us to delete your data (“right to be forgotten”) if applicable.
- You can limit or object to processing.
- You can transfer your data (data portability).
- You can complain to a supervisory authority. In Poland, this is the President of UODO.
Cookies
We use only essential cookies. These are necessary for the store to operate (for example: cart, login, order completion). We do not use marketing cookies. We do not use cookies for newsletters. You can manage or delete cookies in your browser. If you disable essential cookies, the store may not work correctly.
Automated Decisions
We do not make decisions based only on automated processing. We do not use profiling that produces legal effects for you.
Voluntary Provision of Data
You provide data voluntarily. However, we need this data to place and fulfill your order. If you do not provide data, we cannot conclude the contract or deliver your products.
Who We Are
The data controller is Arttel (ArttelShop.eu Store). Our address is Gajowicka 95/112, 53-421 Wrocław, Poland. For privacy matters, contact: support@arttelshop.eu.
Contact
For questions about personal data and your rights, email us at: support@arttelshop.eu.
Effective date: 20.10.2025