Privacy and Cookies Policy of PrzyciskZwrotu.eu
Last updated: 24.05.2026
This Privacy and Cookies Policy explains how personal data is processed and how cookies and similar technologies are used in the online store available at https://przyciskzwrotu.eu, operated on PrestaShop. The Store sells only digital products, in particular modules, add-ons, plug-ins, documentation, licence keys and other digital content intended for PrestaShop stores.
1. Data Controller
The controller of personal data is EuroTrade Jan Walczak, ul. Stanisławowska 47, 54-611 Wrocław, Polska, NIP: 6671048534, VAT-EU: PL6671048534, REGON: 527800600.
You may contact the Controller by e-mail at info@przyciskzwrotu.eu, by telephone at +48 882 648 543, through the contact form at https://przyciskzwrotu.eu/kontakt, or in writing to the address above. The Controller has not indicated a Data Protection Officer; all data protection matters should be addressed directly to the Controller.
2. Scope
This Policy applies to visitors of the Store, customers placing orders, persons creating customer accounts, persons contacting the Store, persons submitting complaints or withdrawal statements, and persons using the cookie consent tools. It does not apply to third-party websites or services, such as payment operators, messaging tools, anti-spam systems or social media platforms, which apply their own privacy policies.
3. Categories of data
- identification and contact data: name, company name, address, country, VAT number, e-mail address, telephone number;
- customer account data: login, e-mail address, order history, account settings and status;
- order data: order number, digital products, price, currency, payment and delivery status, date of purchase and consents submitted during checkout;
- payment and invoice data: selected payment method, transaction identifier, accounting documents; as a rule, the Controller does not store full payment card data;
- digital product and licence data: licensed domain, licence key, activation limits, activation date, module version and compatibility information;
- technical support data voluntarily provided by the customer, including PrestaShop version, PHP version, theme, modules, server configuration, error messages, screenshots or attachments;
- correspondence, complaint and withdrawal data;
- server logs and security data: IP address, date and time of connection, URL, browser and operating system information, session identifiers;
- cookie consent data: consent ID, visitor ID, consent status, categories, date of consent, date of change or withdrawal, cryptographic hash of IP address and user agent.
4. Purposes and legal bases
| Purpose | Legal basis | Examples of data |
|---|---|---|
| Handling pre-contract enquiries | Art. 6(1)(b) and Art. 6(1)(f) GDPR | name, e-mail, message, technical data included in the enquiry |
| Creating and maintaining a customer account | Art. 6(1)(b) GDPR | account data, e-mail, order history |
| Accepting and performing orders for digital products | Art. 6(1)(b) GDPR | customer data, order, payment, digital delivery, licence |
| Accounting, invoicing and tax obligations | Art. 6(1)(c) GDPR | invoice data, VAT number, accounting documents |
| Handling payments | Art. 6(1)(b), Art. 6(1)(c) and Art. 6(1)(f) GDPR | order ID, payment status, payment operator data |
| Delivering files, licence keys or activations | Art. 6(1)(b) GDPR | e-mail, download link, licence key, licensed domain |
| Complaints, technical support and withdrawals | Art. 6(1)(b), Art. 6(1)(c) and Art. 6(1)(f) GDPR | order data, correspondence, technical data, attachments |
| Establishing, pursuing or defending claims | Art. 6(1)(f) GDPR | contract data, correspondence, payment evidence, logs |
| Security and fraud prevention | Art. 6(1)(f) GDPR | server logs, IP address, session identifiers, security events |
| Newsletter or commercial information, if enabled and consented to | Art. 6(1)(a) GDPR and electronic communications rules | e-mail address, consent, subscription date |
| Non-essential preference, analytics and marketing cookies | user consent: Art. 6(1)(a) GDPR and ePrivacy rules | cookie identifiers, behaviour data, preferences |
| Recording and demonstrating cookie consents | Art. 6(1)(c) and Art. 6(1)(f) GDPR | consent ID, date, status, IP hash, user-agent hash |
5. Digital products, licences and technical data
Because the Store sells PrestaShop digital products, the Controller may process licensed domain data, module version, licence key, activation date and basic technical environment data in order to perform the contract, operate licence restrictions, protect against unauthorised redistribution, provide support and protect legal claims.
6. Recipients
Data may be disclosed only where necessary for the operation of the Store or legal obligations, in particular to hosting, server, e-mail and IT providers; PrestaShop module and security tool providers; payment operators selected at checkout, such as card/BLIK operators, PayPal, Klarna, banks or other operators indicated in the checkout; accountants, tax advisers, lawyers or debt collection entities; analytics, advertising and marketing providers only within the scope of the user's consent or another applicable legal basis; and public authorities where required by law.
7. Transfers outside the EEA
The Controller seeks to use providers processing data within the European Economic Area. If data is transferred outside the EEA in connection with analytics, advertising, communication or payment tools, such transfer shall take place in accordance with the GDPR, in particular on the basis of an adequacy decision, standard contractual clauses or other lawful mechanisms.
8. Retention
- Account data is kept for the duration of the account and then for claim limitation or legal obligations.
- Order and contract data is kept for the contract period and then for the limitation period for claims.
- Accounting and tax data is kept for the period required by tax and accounting law.
- Complaint, withdrawal and support data is kept for handling the matter and for possible claims.
- Server logs and security data are kept for a period justified by security, abuse detection and claims.
- Cookie consent records are kept as long as necessary to demonstrate consent, refusal, change or withdrawal, generally no longer than the retention period set in the consent module unless longer storage is justified by claims or law.
- Data processed on the basis of consent is kept until consent is withdrawn, unless earlier deletion follows from the purpose or law.
9. Data subject rights
You have the right of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, withdrawal of consent at any time and lodging a complaint with a supervisory authority. In Poland the supervisory authority is the President of the Personal Data Protection Office (UODO). You may also contact the supervisory authority of your habitual residence, place of work or place of the alleged infringement.
10. Voluntary provision of data
Providing data is voluntary but may be necessary to conclude and perform a contract, create an account, deliver a digital product, issue an invoice, process payments, complaints, withdrawals or contact requests.
11. Automated decision-making
The Controller does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect users within the meaning of Art. 22 GDPR. Analytics or advertising tools may be used to measure campaigns or adapt marketing content only where consent or another lawful basis applies.
12. Cookies and similar technologies
The Store uses cookies, localStorage, sessionStorage and similar technologies. Some are necessary for operation; others are used for preferences, analytics or marketing only after consent.
| Category | Purpose | Consent required? |
|---|---|---|
| Necessary | cart, login, session, security, cookie choices, form protection and core PrestaShop functions | no, if strictly necessary |
| Preferences | language, currency, display settings or other choices | yes, unless technically necessary |
| Analytics | traffic measurement, traffic sources, page popularity, errors and Store performance | yes |
| Marketing | remarketing, campaign measurement, ad personalisation and advertising integrations | yes |
Examples include PrestaShop session cookies, cart identifiers, security tokens, language and currency settings and the consent cookie pslc_consent. The actual cookie list depends on active modules, PrestaShop version, payment method and user choices.
13. Managing cookie consents
During the first visit the user may accept all optional cookies, reject optional cookies or choose categories. Optional consents are not pre-selected. Consent can be changed or withdrawn at any time using the “Privacy settings” button in the Store or browser settings. Withdrawal does not affect processing carried out before withdrawal.
14. Cookie consent register
For accountability, the Controller may maintain a cookie consent register including the date and time of the event, event type, consent categories, consent ID, visitor ID, consent version, source, previous and current consent state and cryptographic hashes of IP address and user agent. The register is used solely to demonstrate consent, refusal, change or withdrawal.
15. Browser settings
You may block or delete cookies in your browser. Restricting necessary cookies may affect cart, login, payments, forms or other essential Store functions.
16. WhatsApp, social media and external links
If you use links to WhatsApp, social media, payment operators or other external services, your data may be processed by those providers under their own privacy policies.
17. Security
The Controller applies organisational and technical measures to protect data against unauthorised access, loss, alteration or disclosure, including access controls, backups, software updates, administrative account protection, security monitoring and encrypted connections where available.
18. Changes
This Policy may be amended due to changes in law, Store functionality, cookies tools, service providers, payment methods, digital products or Controller data. The current version is available in the Store.