Privacy and cookie policy
Updated: 2026-09-30
1. Data controller
The controller of your personal data is FDK TRADE sp. z o.o. sp.k., ul. Wąska 4B/9, 71-415 Szczecin, NIP 8513209057, KRS 0000679677 (hereinafter: "we"). For any matters relating to personal data, you can write to or to the postal address given above.
2. What data we process and why
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Concluding and performing the sales contract (order, payment, delivery, contact about the order) | first and last name, delivery address, email, phone, invoice details, order history | Art. 6(1)(b) – contract | until the contract is performed, then for the limitation period for claims |
| Maintaining the Account and logging in (email link, password, Google account) | email, first name, order data, password in encrypted form (hash) | Art. 6(1)(b) – Account contract | until the Account is deleted |
| Accounting and taxes (invoices, sales documents) | order and invoice data | Art. 6(1)(c) – legal obligation | 5 years from the end of the tax year |
| Complaints, returns, withdrawal from the contract | order and request data | Art. 6(1)(b) and (c) | for the statutory warranty period and the limitation period for claims |
| Defending and pursuing claims | order and correspondence data | Art. 6(1)(f) – legitimate interest | for the limitation period for claims |
| Shop security (abuse prevention, login attempt limits) | IP address, technical device data | Art. 6(1)(f) – legitimate interest | briefly, usually up to a few days |
| Product availability notification | email, Product | Art. 6(1)(b) – at your request | until the notification is sent or you cancel it |
| Newsletter | email, language | Art. 6(1)(a) – consent | until consent is withdrawn |
| Visit statistics (our own) | browser identifier in a cookie, pages visited, IP address | Art. 6(1)(f) – legitimate interest (improving the Shop) | up to 12 months |
| Google Analytics, Google Ads and Meta (Facebook, Instagram) advertising | cookie identifiers, information about visits and purchases | Art. 6(1)(a) – consent given in the cookie banner | until consent is withdrawn, in line with the settings of those services |
Providing data in an order is voluntary, but without it we cannot conclude and perform the contract. We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects.
3. Who we share data with
We share data only to the extent necessary for the given purpose:
- carriers – InPost, DPD, DHL – to deliver your parcel;
- the payment operator Stripe Payments Europe Ltd. – for online payments;
- banks – for bank transfer payments and refunds;
- IT service providers: server hosting (Hetzner Online GmbH, Germany), network and website protection (Cloudflare, Inc.), email delivery;
- Google (Google Ireland Ltd.) – when you log in with a Google account and, with your consent, for Google Analytics and Google Ads;
- Meta (Meta Platforms Ireland Ltd.) – with your consent, for measuring advertising effectiveness;
- our accounting firm and advisers – for accounting and legal services;
- public authorities – where required by law.
Some of these recipients (e.g. Google, Meta, Cloudflare, Stripe) may process data outside the European Economic Area, in particular in the USA. This takes place on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the Commission.
4. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification of your data,
- erasure of your data,
- restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time – without affecting the lawfulness of processing before its withdrawal.
To exercise your rights, write to . You also have the right to lodge a complaint with the Polish data protection authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl.
5. Cookies
Cookies are small files stored in your browser. We use them in three groups:
| Group | Examples | Purpose | Consent required? |
|---|---|---|---|
| Essential | cart (cart), login session, language (lang, NEXT_LOCALE), delivery country (country), record of your cookie choice (nb_consent) | running the Shop: cart, login, language, currency | no – the Shop does not work without them |
| Statistics | nb_vid, nb_sid, Google Analytics (_ga…) | counting visits and recognising returning visitors | yes |
| Marketing | Google Ads, Meta Pixel | measuring advertising effectiveness | yes |
On your first visit we show a banner where you can accept or reject non-essential cookies or choose them in the settings. You can change your choice at any time – the "Cookie settings" link is in the page footer. Google and Meta tags are loaded only after you consent. You can also delete or block cookies in your browser settings.
6. Security
We use technical and organisational measures to protect data: an encrypted connection (HTTPS), passwords stored only as hashes, single-use login links with limited validity, and restricted staff access to data.
7. Changes to this policy
We may update this policy, e.g. when the services we use change. The current version is always available on this page. Version of 2026-09-30.