Privacy Policy
Privacy Policy
Effective from: 12.10.2026
This Privacy Policy explains which personal data we process when you use the online store available at https://euro-brand.pl/ (the “Website”), for what purposes and on what legal basis, to whom we disclose it and what rights you have. It has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”). In case of discrepancies, the Polish version prevails.
1. Data controller
The controller of your personal data is MODIGIFTS spółka z ograniczoną odpowiedzialnością, registered office: Al. Jerozolimskie 107 lok. 3, 02-011 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under no. 0000966374, VAT/NIP: PL5242938416 (the “Controller”, “we”).
Data protection contact:
- e-mail: info@euro-brand.pl,
- phone: +48 699 580 416 (Mon–Fri 9:00–17:00 CET),
- in writing to the registered office address above.
2. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering enquiries sent via the contact form, the “Call me back” form, chat, e-mail or phone; preparing quotes and visualisations | Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest – replying to correspondence) | until the matter is closed and then up to 12 months in case talks continue |
| Concluding and performing the sales contract, including order processing, branding, delivery and order-related communication | Art. 6(1)(b) GDPR | for the duration of the contract and then until the limitation period for claims expires |
| Maintaining a customer Account on the Website | Art. 6(1)(b) GDPR | until the Account is deleted |
| Issuing invoices and keeping accounting and tax records | Art. 6(1)(c) GDPR (legal obligation under tax and accounting laws) | 5 years from the end of the calendar year in which the tax payment deadline expired |
| Handling complaints; establishing, exercising or defending legal claims | Art. 6(1)(f) GDPR | until the limitation period for claims expires |
| Direct marketing of our own products (e.g. sending an offer to an existing business customer) | Art. 6(1)(f) GDPR | until you object |
| Sending the newsletter and commercial information by electronic means | Art. 6(1)(a) GDPR (consent) and the Polish Electronic Communications Law | until consent is withdrawn |
| Website statistics (Google Analytics) and measuring and displaying ads (Google Ads, remarketing) | Art. 6(1)(a) GDPR (consent given in the cookie banner) | until consent is withdrawn; Google Analytics data – 14 months |
| Website security, protection against spam and abuse (incl. Google reCAPTCHA, server logs) | Art. 6(1)(f) GDPR | server logs – up to 12 months |
| Recording and demonstrating your cookie choices | Art. 6(1)(c) in conjunction with Art. 7(1) GDPR | 12 months |
Providing data is voluntary; however, without the data necessary to process an order (e.g. company name, VAT number, address, e-mail, phone) we cannot conclude or perform the contract.
3. Data we process
- contact and company data: name and surname, company name, VAT number, address, delivery address, phone number, e-mail address;
- order data: ordered products, artwork files sent for branding, order and correspondence history;
- technical data: IP address, browser and device information, cookie identifiers, information on how you use the Website (pages visited, traffic source) – as described in the Cookies Policy.
4. Recipients
We may disclose data, only to the extent necessary, to the following categories of recipients:
- hosting and e-mail provider (Hostinger International Ltd.);
- Google Ireland Ltd. – Google Analytics 4, Google Ads, Google Tag Manager, Google Merchant Center, Google reCAPTCHA and Google Fonts;
- CookieYes Limited – cookie consent management tool;
- provider of the Bitrix24 CRM and chat system – handling enquiries and customer contact;
- courier and transport companies (e.g. DPD, DHL, TNT, UPS) – to deliver orders;
- providers of accounting, legal and IT services to us;
- public authorities – only where required by law.
Entities processing data on our behalf do so under data processing agreements and only on our instructions.
5. Transfers outside the European Economic Area
When Google services are used, data may be transferred to the United States. Google LLC participates in the EU–U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision (10 July 2023); standard contractual clauses approved by the European Commission are also applied. Data processed by CookieYes Limited may be transferred to the United Kingdom, which benefits from a European Commission adequacy decision. You may obtain a copy of the safeguards by contacting us.
6. Cookies, Google Analytics and Google Ads
The Website uses cookies and similar technologies. Analytics and advertising cookies are stored only after you consent in the cookie banner (“Accept all” or selecting categories under “Customise”). You can change or withdraw your consent at any time using the cookie settings icon displayed on the page. We use Google Consent Mode: until you consent, Google services do not store analytics or advertising cookies.
Details, including the list of cookies used, are available in the Cookies Policy.
7. Automated decision-making and profiling
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. If you consent to advertising cookies, Google Ads may tailor the ads you see to your interests (remarketing) – this is marketing profiling, which you can switch off by withdrawing consent.
8. Your rights
You have the right to:
- access your data and obtain a copy (Art. 15 GDPR);
- rectification (Art. 16 GDPR);
- erasure (Art. 17 GDPR);
- restriction of processing (Art. 18 GDPR);
- data portability (Art. 20 GDPR);
- object to processing based on legitimate interest, including direct marketing (Art. 21 GDPR);
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl) or with the supervisory authority in your EU country of residence.
To exercise your rights, please contact us at info@euro-brand.pl. We reply without undue delay and at the latest within one month.
9. Security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction, including encrypted connections (HTTPS), backups and restricted access to data.
10. Changes
This Policy may be updated if the law or the way the Website works changes. The current version, with its effective date, is always available on this page.
