Privacy Policy

Effective from: 7 June 2026

1. Data Controller

The controller of your personal data is:

ABCDEAL Wojciech Zamarski
ul. Zawodzie 29, Ochaby Wielkie
43-430 Skoczów, Silesian Voivodeship, Poland
Tax ID (NIP): 548-001-93-37, REGON: 070450941

Data protection contact:
e-mail: sklep@abcdeal.pl
phone: +48 601 415 357

This policy describes how we process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.

2. What data we collect and for what purpose

Providing data to the extent required to complete an order, issue an invoice or set up an account is voluntary, but failure to provide it makes it impossible to conclude and perform the contract.

3. To whom we disclose your data

Your data may be transferred to the following categories of recipients, strictly to the extent necessary to achieve the stated purposes:

• Courier and postal operators – for the purpose of delivering the parcel: DHL Parcel Polska Sp. z o.o., DPD Polska Sp. z o.o., General Logistics Systems Poland Sp. z o.o. (GLS), InPost Sp. z o.o. (Parcel Lockers), FedEx Express Polska Sp. z o.o., UPS Polska Sp. z o.o., Poczta Polska S.A.
• Payment operators – PayPro S.A. (Przelewy24), ul. Pastelowa 8, 60-198 Poznań – for processing electronic and BLIK payments.
• Invoicing system – Power Media S.A. (iFirma) – for issuing VAT invoices and keeping accounting records.
• Sales integration system – BaseLinker Sp. z o.o. (currently branded as "Base") – for handling orders from various sales channels (Allegro, shop, marketplaces).
• Hosting provider – dhosting.pl Sp. z o.o. – for the operation of the server and e-mail service.
• Google Ireland Limited – for Google Analytics (traffic statistics); details in our Cookies Policy.
• Public authorities – courts, prosecutors, tax authorities – only in cases provided for by law and upon their justified request.

All recipients acting as data processors are bound by data processing agreements requiring confidentiality and GDPR compliance.

4. Transfer of data outside the European Economic Area (EEA)

In connection with our use of Google services (Google Analytics), your data may be transferred to the USA. The transfer is carried out on the basis of Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 on the adequate level of protection of personal data under the EU-US Data Privacy Framework, to which Google has acceded.

In all other cases, your data is processed exclusively within the EEA.

5. Your rights

In connection with the processing of your personal data, you have the following rights:

• Right of access to your data (Art. 15 GDPR) – you can obtain information about which data we process and receive a copy of it.
• Right to rectification (Art. 16 GDPR) – you can request correction of inaccurate or outdated data.
• Right to erasure ("right to be forgotten", Art. 17 GDPR) – subject to data whose retention is required by law (e.g. VAT invoices).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR) – receiving your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR) – to processing based on a legitimate interest, including direct marketing.
• Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

To exercise any of the above rights, please contact us at sklep@abcdeal.pl. We will respond within 30 days.

6. Profiling and automated decisions

We do not take decisions regarding you based solely on automated processing that would produce legal effects or significantly affect your situation (Art. 22 GDPR). Google Analytics statistics involve elements of automated traffic analysis, but are aggregated and not used for individual profiling.

7. Data security

We apply technical and organisational measures appropriate to the risk, in particular:

• SSL/TLS encrypted connection (256-bit certificate) between your browser and the shop.
• Customer account passwords are stored in encrypted form (one-way hash) – never in plain text.
• Access to data is restricted to authorised persons bound by confidentiality obligations.
• Regular backups and server-level access control.

8. Newsletter

We do not currently operate a newsletter. In the future – if a subscription is launched – your e-mail address will be processed only on the basis of separate, voluntary consent, which you can withdraw at any time (e.g. via an "unsubscribe" link in the message footer).

9. Cookies

We use cookies for purposes necessary for the operation of the shop, as well as for statistical and marketing purposes. Full information – including a list of specific cookies and instructions for managing them – is provided in a separate Cookies Policy.

10. AI Assistant (chat)

Our website features an AI assistant (the chat in the bottom-right corner) that helps customers find products and answers questions about shipping, returns and our offer.

What we collect during the conversation

• the content of the messages you type in the chat;
• the replies provided by the assistant;
• your IP address (to protect against abuse – a limit of 20 messages per hour);
• the date and time of the conversation;
• if you provide it yourself in the conversation – also a voluntarily shared e-mail address or phone number (e.g. when you ask our staff to call you back).

Purpose

• handling your enquiry in real time (legal basis: Art. 6(1)(b) GDPR – performance of a contract / pre-contractual steps);
• service quality control, analysis and improvement of the assistant's responses (legal basis: legitimate interest – Art. 6(1)(f) GDPR);
• calling you back – if you provide your contact details and request it (legal basis: Art. 6(1)(a) GDPR – consent).

To whom it is disclosed

The content of each of your messages is sent in real time to Anthropic, PBC (548 Market St., PMB 90375, San Francisco, CA 94104, USA) – the provider of the language model (Claude) that generates the assistant's responses. Anthropic processes the data solely to generate the response; it does not use it to train its models (under the commercial agreement via the Anthropic API). Full policy: https://www.anthropic.com/legal/privacy.

Transfer to the USA

Data sent to Anthropic is transferred outside the European Economic Area (to the United States). The transfer takes place on the basis of the European Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 (EU-US Data Privacy Framework) – Anthropic is DPF-certified.

Retention period

We store conversations with the AI assistant for 12 months from the date of the conversation, after which they are automatically deleted. Contact details voluntarily provided in the conversation (e.g. e-mail, phone) – until your enquiry is handled or your consent is withdrawn.

Your rights

At any time you may request access to your conversations, a copy of them or their deletion – simply write to sklep@abcdeal.pl. We identify conversations by IP address or by the e-mail/phone provided in the conversation.

Limitations

The AI assistant is auxiliary – its answers may contain errors. Always confirm binding information (price, availability, warranty terms) on the product pages or by e-mail: sklep@abcdeal.pl. Do not provide the assistant with special-category data (health, finances, third-party data) – use direct channels with our staff for that.

11. Telephone voice assistant (helpline) and call recording

Telephone calls to our shop may be handled by an automated voice assistant based on artificial intelligence (AI) and may be recorded. We inform you of both facts at the beginning of every call.

What we collect during the call

The call recording (audio) and its transcript (text), your phone number, and any data you provide yourself during the call (e.g. first and last name or company name, contact and address details, equipment model, order content).

Purpose and legal basis

We process the data to handle enquiries and orders placed by phone, to call you back, and to improve service quality. The legal basis is the taking of pre-contractual steps and performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in ensuring service quality and security (Art. 6(1)(f) GDPR).

To whom it is disclosed

To operate the helpline we use AI voice technology providers: Retell AI (the assistant platform) and, within it, Deepgram (speech-to-text), ElevenLabs (voice synthesis) and Anthropic, PBC (the Claude language model). These providers process the data solely on our behalf, under data processing agreements, and do not use it to train their own models.

Transfer to the USA

The above providers are based in the United States. Data is transferred on the basis of the EU Standard Contractual Clauses and, where applicable, the Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023).

Retention period

We store recordings and transcripts for no longer than 12 months. If the call resulted in an order, we process the data for the period necessary to perform the contract and as required by law (e.g. tax regulations).

Your rights

At any time you may request access to recordings of your calls, a copy of them or their deletion – write to sklep@abcdeal.pl. We identify calls by phone number or by the data provided during the call.

Limitations

The voice assistant is auxiliary – its answers may contain errors. Always confirm binding information (price, availability, warranty terms) on the product pages or by e-mail: sklep@abcdeal.pl. Do not provide special-category data (e.g. health) or third-party data over the phone.

12. Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in the law or our practices. The current version is always available at https://www.abcdeal.eu/i2,polityka-prywatnosci.html. The date of the last update appears at the top of the document.

For any questions regarding the processing of your data, please write to: sklep@abcdeal.pl.