Datenschutzerklärung
Last updated: July 2026
1. Introduction & Our Commitment
Ardenfell is the data controller responsible for personal data processed through www.ardenfell.pl under the GDPR (General Data Protection Regulation), as implemented in Poland by the Polish Personal Data Protection Act (Ustawa o ochronie danych osobowych).
We are committed to protecting your privacy and handling your personal data responsibly. We never sell, rent or trade personal data to third parties.
2. Information We Collect
We may collect information provided directly by the customer, including name, email address, shipping and billing address, telephone number and payment information.
We may also collect information automatically when you use our website, including IP address, browser type, device information and pages visited.
3. How We Use Your Information
We use your personal information to process orders, provide customer support and send transactional emails necessary to fulfil our contract with you.
We may send marketing communications where you have provided consent. You may withdraw your consent at any time.
We may also use aggregated or anonymised information for analytics and to improve our website and services.
4. Cookies & Tracking Technologies
We use strictly necessary cookies to operate the website, shopping cart and checkout. These cookies cannot be disabled.
With your consent, we may use analytical and advertising cookies from Meta, Google Ads and TikTok.
A cookie consent tool is presented on your first visit so that you can manage your cookie preferences.
5. Order Fulfilment & Third-Party Services
Shopify provides our website infrastructure and checkout services and processes data on our behalf.
Payments are processed through Shop Pay, Visa, Mastercard, American Express, Diners Club, Discover, Apple Pay and Google Pay. Ardenfell does not store full payment card details.
Depending on product availability and delivery routing, orders may be fulfilled through locations including the United States, China and the closest available logistics centre. All products go through the same strict quality control regardless of origin. This network allows us to route orders efficiently, support faster delivery and use the closest available centre.
Shipping carriers receive only the customer’s name and address for delivery purposes.
Meta, Google Ads and TikTok may process information through advertising pixels and cookies where consent has been provided.
6. Data Retention
We retain personal data only for as long as necessary.
Order records are retained for 45 days.
Deletion requests are handled within one month from receipt of the request. This period may be extended by a further two months for complex requests, with notice explaining the delay.
7. Your Rights Under the GDPR
Under the GDPR, you may have the right to access your personal data, correct inaccurate information, request deletion, restrict processing, object to processing, receive your data in a portable format, withdraw consent and lodge a complaint with a supervisory authority.
You may also have rights relating to automated decision-making where applicable.
We acknowledge data requests within 48 hours and respond within one month. For complex requests, this period may be extended by a further two months, with notice explaining the delay.
8. International Data Transfers
Personal data may be transferred internationally where necessary to provide our services.
International transfers are protected through appropriate safeguards, including Standard Contractual Clauses, International Data Transfer Agreements or adequacy decisions, as applicable.
These safeguards are applied in accordance with the GDPR and the requirements of the Polish Data Protection Authority, Urząd Ochrony Danych Osobowych — UODO.
9. Data Security
We use SSL/TLS encryption to protect information transmitted through our website.
Our store uses Shopify infrastructure for website and checkout security.
Personal data breaches are handled promptly in accordance with applicable legal obligations.
10. Children’s Privacy
Our website is not directed at children under the age of 16, which is the applicable digital consent threshold under the GDPR in Poland.
If personal data relating to a minor has been submitted, contact us to request its deletion.
11. Changes to This Policy
We may update this Privacy Policy when necessary.
The latest update date is displayed at the top of this page.
Continued use of the website after changes are published constitutes acceptance of the updated policy.
12. Contact Us & Supervisory Authority
For questions about this Privacy Policy or to exercise your data protection rights, contact us at kontakt@ardenfell.pl.
You have the right to lodge a complaint with the Polish Data Protection Authority, Urząd Ochrony Danych Osobowych — UODO, through uodo.gov.pl.