Privacy policy

Privacy policy

This page explains what personal data we collect in the online shop www.megadisc.pl and in our shop on Nowogrodzka Street, why we collect it, who we share it with and what rights you have. It fulfils our information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

§ 1 Data controller

  1. The controller of your personal data is MEGADISC. JACEK LEŚNIEWSKI, ul. Nowogrodzka 44 lok. U2, 00-695 Warszawa, Poland, NIP (tax ID) 526-010-22-95, REGON 011982641 ("Megadisc", "we").
  2. For any matter concerning personal data you can write to megadisc@megadisc.pl, call +48 22 826 30 43 or send a letter to the shop's address.
  3. We have not appointed a data protection officer.

§ 2 What data we process

  1. Data you provide when placing an order, creating an account, subscribing to the newsletter or writing to us: first name and surname, delivery address, e-mail address, phone number and, if you want an invoice, company name, tax ID and billing address.
  2. Order data: ordered items, amounts, delivery and payment method, order history.
  3. Technical data recorded automatically when you use the website: IP address, browser type, date and time of the visit, pages visited.

§ 3 Purposes and legal bases

  1. Processing your order (concluding and performing the sales contract, shipping, payment, contact about the order) – Article 6(1)(b) GDPR.
  2. Running your customer account – Article 6(1)(b) GDPR.
  3. Tax and accounting obligations (sales receipts, invoices, bookkeeping) – Article 6(1)(c) GDPR.
  4. Handling returns and complaints – Article 6(1)(c) GDPR (obligations under the Polish Consumer Rights Act and Civil Code).
  5. Answering questions sent via the contact form, by e-mail or by phone – Article 6(1)(f) GDPR (our legitimate interest in replying to correspondence) or, if the question concerns an order, Article 6(1)(b) GDPR.
  6. Newsletter – Article 6(1)(a) GDPR (your consent, which you can withdraw at any time using the link in the message or by writing to us).
  7. Visit statistics (Google Analytics) – Article 6(1)(a) GDPR; we only enable them after you consent in the cookie banner.
  8. Security and operation of the website (server logs, protecting forms against spam, detecting website errors) – Article 6(1)(f) GDPR (our legitimate interest in protecting the shop and its customers).
  9. Establishing, pursuing or defending legal claims – Article 6(1)(f) GDPR.

§ 4 Who we share data with

We only share your data with parties without whom we could not process your order or run the shop:

  1. carriers – Poczta Polska S.A., InPost sp. z o.o. and, for shipments to the USA, FedEx – to the extent needed to deliver the parcel;
  2. payment providers – PayPal (Europe) S.à r.l. et Cie, S.C.A. if you pay with PayPal, and the bank where we hold our account;
  3. technical service providers processing data on our behalf: Hetzner Online GmbH (shop server in Germany), Google Ireland Limited (e-mail, Google Analytics statistics, reCAPTCHA form protection), Elastic Email Inc. (newsletter delivery), Functional Software, Inc. – Sentry (website error detection);
  4. our accounting office and advisers;
  5. public authorities, where required by law.

Product pages may contain YouTube (Google) videos. The player only loads after you click the thumbnail – Google then receives information about your visit in accordance with its own policies.

We do not sell personal data and do not share it with other companies for marketing purposes.

§ 5 Transfers outside the European Economic Area

Some of the providers listed above (Google, PayPal, Sentry) may process data in the United States, and Elastic Email in Canada. Such transfers are based on a European Commission adequacy decision (for Canada and for US companies participating in the EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the European Commission. You can obtain a copy of these safeguards by writing to us.

§ 6 How long we keep data

  1. Order data – for as long as the order is being processed and then until claims under the contract become time-barred. Sales documents and invoices – for 5 years from the end of the year in which they were issued (tax law).
  2. Customer account data – until the account is deleted; data of orders placed from the account is kept as described in point 1.
  3. Newsletter – until you withdraw your consent (unsubscribe).
  4. Correspondence – for as long as needed to deal with the matter, or, if it concerns an order or complaint, as long as the order data.
  5. Server logs – 14 days. Google Analytics data – no longer than 14 months.

§ 7 Your rights

You have the right to:

  1. access your data and receive a copy of it;
  2. have your data rectified (corrected);
  3. have your data erased where we are not required by law to keep it;
  4. restrict processing;
  5. data portability for data we process on the basis of a contract or consent;
  6. object to processing based on our legitimate interest (§ 3 points 5, 8 and 9);
  7. withdraw your consent at any time – this does not affect the lawfulness of processing before the withdrawal;
  8. lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland) or with the data protection authority in your country of residence, if you believe we process your data unlawfully.

To exercise these rights, write to megadisc@megadisc.pl.

§ 8 Do you have to provide data

Providing data is voluntary, but without your name, address, e-mail and phone number we cannot process your order, and without company details we cannot issue an invoice. Subscribing to the newsletter is entirely voluntary.

§ 9 Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

§ 10 Cookies and changes to this policy

  1. The use of cookies is described in the Cookie policy.
  2. If we change how we process data, we will update this page. Last updated: 7 October 2026.