Privacy Policy

Privacy Policy of the Elektroland24.pl shop

in force from 20 October 2026. This translation is for information only; in case of any discrepancy the Polish version prevails.

This Privacy Policy contains the information required by Article 13 of Regulation (EU) 2016/679 (GDPR): who processes your personal data and why, on what legal basis, for how long, to whom it is disclosed and what rights you have.

1. Controller and contact

The controller of your personal data is Diana Kravets, a sole trader operating under the business name DIANA KRAVETS, NIP 6751633217, REGON 369225925, Rondo Mogilskie 1 lok. 03, 31-516 Kraków, Poland (the “Controller”, “we”).

For any matter concerning personal data you can contact us by e-mail at elektroland24.pl@gmail.com, by phone at +48 790 380 720 or by post at the address above. No data protection officer has been appointed, as there is no such obligation.

2. What data we process and where it comes from

We process the data you provide yourself: name and surname, e-mail address, phone number, delivery address, company details (if you buy as a business – name, address, tax ID), the content of messages and reviews, order and payment history, and technical data collected automatically while you use the shop (IP address, cookie identifiers, browser and device information, pages visited). We do not obtain data about you from third parties, except payment confirmations from the payment operator and parcel status information from the carrier.

3. Purposes, legal bases and retention periods

  1. Order fulfilment (accepting the order, handling payment, delivery, contact about the order, proof of purchase) – Art. 6(1)(b) GDPR (performance of a contract). Order data is kept for 6 years from the end of the calendar year in which the order was fulfilled – until claims become time-barred under the Polish Civil Code.
  2. Tax and accounting obligations (issuing and keeping invoices, receipts and records) – Art. 6(1)(c) GDPR. Accounting documents are kept for 5 years from the end of the calendar year in which the tax payment deadline expired, as required by the Polish Tax Ordinance and the Accounting Act.
  3. Complaints, returns and withdrawals – Art. 6(1)(b) and (c) GDPR. Documentation is kept for 6 years from the end of the year in which the matter was closed.
  4. Customer account – Art. 6(1)(b) GDPR (account agreement). Data is kept until you delete the account on request; we process the request within 30 days, subject to data we must retain under points 1–3.
  5. Replying to messages sent through the contact form, e-mail or phone – Art. 6(1)(f) GDPR (our legitimate interest in replying). Correspondence is kept for 12 months from the last message, or, if it concerns an order, as in point 1.
  6. Newsletter – Art. 6(1)(a) GDPR (your consent). The e-mail address is processed until consent is withdrawn (link in every message or by contacting us).
  7. Product reviews – Art. 6(1)(f) GDPR (legitimate interest in presenting customer reviews). A review with its signature is kept until deleted at your request or until the product is withdrawn from the shop.
  8. Internal order notifications (name, ordered goods, amount, delivery method) sent to the shop staff via the Telegram messenger – Art. 6(1)(f) GDPR (efficient order handling). Notifications are deleted no later than after 12 months.
  9. Shop security (server logs, spam and abuse protection) – Art. 6(1)(f) GDPR. Server logs with IP addresses are kept for 14 days, records of rejected (spam) submissions for 12 months.
  10. Visit statistics (Google Analytics 4, anonymised and aggregated data, cookie identifiers) – Art. 6(1)(f) GDPR (analysing how the shop works). Data in Google Analytics is kept for up to 14 months.
  11. Cookies – session cookies expire when the browser is closed, shop cookies (basket, language) after 20 days; details are in the Cookie Policy available in the shop.
  12. Establishing, exercising or defending claims – Art. 6(1)(f) GDPR, until the limitation periods expire (as a rule 6 years from the end of the year in which the claim arose).

After these periods the data is deleted or anonymised.

4. Recipients of the data

We disclose your data only to entities necessary for the purposes above:

  • the payment operator PayPro S.A. (Przelewy24), ul. Pastelowa 8, 60-198 Poznań, Poland – to process payments; PayPro is a separate controller of transaction data;
  • the shipping platform Furgonetka.pl (Furgonetka Sp. z o.o. Sp. k., ul. Inżynierska 8, 03-422 Warsaw, Poland) and the carriers InPost sp. z o.o. and DPD Polska sp. z o.o. – name, address, phone and e-mail needed for delivery;
  • Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) – as the provider of the e-mail service through which we send order confirmations, and of Google Analytics;
  • the operator of the Telegram messenger – for internal order notifications (point 3.8);
  • our accounting office and the providers maintaining the shop’s server and software – under data processing agreements;
  • public authorities, where the law requires it.

We do not sell your data and do not pass it to third parties for their own marketing purposes.

5. Transfers outside the European Economic Area

Google may also process data on servers in the United States on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework). The operator of the Telegram messenger stores data of EEA users in data centres within the European Union; to the extent any transfer outside the EEA occurred, it would take place under Art. 49(1)(b) GDPR (necessity for the performance of the contract with you). The other recipients process data within the EEA.

6. Your rights

You have the right to: access your data and obtain a copy; rectify it; have it erased (“right to be forgotten”); restrict processing; data portability for data processed under a contract or consent; object to processing based on legitimate interest; withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal).

To exercise these rights, write to elektroland24.pl@gmail.com. We reply without undue delay and no later than within one month.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl.

7. Whether providing data is required

Providing data is voluntary, but the data marked as required is necessary to place an order, create an account or receive a reply to a message. Without it we cannot conclude or perform a contract. Providing an e-mail address for the newsletter is entirely voluntary.

8. Automated decision-making and profiling

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.

9. Security

The connection to the shop is encrypted (HTTPS). Payment data (card numbers, online banking credentials) is entered only on the payment operator’s site and never reaches our server. Only authorised persons have access to the data.

10. Changes to this Policy

This Policy may be updated when the law or the way the shop operates changes. The current version with its effective date is always available on this page. Versions in other languages are for information; in case of discrepancy the Polish version prevails.

Back to top