Privacy policy

Privacy Policy (GDPR)

Effective from: 01.03.2026

Data Controller: ULTRASSHOP.COM Mariusz Nowak
ul. Ogrodowa 167, 33-300 Nowy Sącz, Poland
VAT ID: PL7343265753   REGON: 386985689
Email: contact@ultrasshop.com

1. Scope

This Privacy Policy explains how we process personal data when you use our website, place orders, contact us, or use our services (B2C and B2B worldwide).

↑ Back to top

2. What data we collect

  • Account data: name, email, phone, billing/shipping address.
  • Order data: products, quantities, prices, invoices, correspondence.
  • Payment data: payment status, transaction IDs (no full card data stored).
  • Technical data: IP address, device/browser data, logs.
  • Content files: designs/images you upload for production.
↑ Back to top

3. Purposes & legal bases (GDPR)

We process data based on:

  • Contract performance: fulfilling your orders.
  • Legal obligation: tax and accounting laws.
  • Legitimate interest: fraud prevention and security.
  • Consent: newsletter and marketing activities.
↑ Back to top

4. Payments

Payments are handled by external providers (Mollie, Stripe, PayPal). They act as independent controllers. We only receive payment status and transaction identifiers to confirm your order.

↑ Back to top

5. Shipping & fulfilment

We share your delivery details (name, address, phone) with our logistics partners (e.g., DPD, DHL, GLS) solely to deliver your package and provide tracking updates.

↑ Back to top

6. Marketing & analytics

We use email marketing (newsletters) only if you have given explicit consent. For website improvement, we use analytical tools (cookies) to understand how users interact with our store.

↑ Back to top

7. Sharing data

We may share data with:

  • Payment operators (processing transactions).
  • Courier companies (delivery).
  • IT & Hosting providers (store maintenance).
  • Accounting & Law firms (compliance).
↑ Back to top

8. International transfers

If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCC) approved by the European Commission.

↑ Back to top

9. Retention periods

  • Order data: 5 years from the end of the tax year (legal requirement).
  • Account data: Until you request deletion of your account.
  • Marketing: Until you withdraw your consent.
↑ Back to top

10. Your rights

  • Access, rectify, or erase your data.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time.
↑ Back to top

11. Security

We use technical and organizational measures (like SSL encryption, firewalls, and access control) to ensure a level of security appropriate to the risk of processing personal data.

↑ Back to top

12. Contact & complaints

Questions regarding your data can be sent to contact@ultrasshop.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

↑ Back to top

13. Trusted Shops (Trustmark, Trustbadge, reviews)

Our shop carries the Trusted Shops Trustmark. To display Trusted Shops services (Trustmark, collected reviews, buyer protection information) and to offer Trusted Shops products to buyers after an order, Trusted Shops widgets (Trustbadge, review widgets) are integrated into this website. This serves our legitimate interest in optimised marketing by enabling secure shopping (Art. 6(1)(f) GDPR). The Trustbadge and the services advertised with it are an offer of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, Germany (“Trusted Shops”). We and Trusted Shops are joint controllers pursuant to Art. 26 GDPR; below we inform you about the essential content of our joint controllership agreement (Art. 26(2) GDPR).

  • Trustbadge and widgets: The Trustbadge is delivered by a US content delivery network (CDN) provider. An adequate level of data protection is ensured by the adequacy decision of the European Commission for the USA (EU-U.S. Data Privacy Framework); where a provider is not certified under the DPF, standard contractual clauses have been concluded. When the Trustbadge is called up, the web server stores a log file containing your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider. The IP address is anonymised immediately after collection, and the anonymised data are used for statistics and error analysis.
  • Trustbadge AI+: When you interact with the Trustbadge AI+, session cookies store your login status and display the welcome layer (company information, reviews, buyer protection information, the #trstd secret). A cookie used to recognise logged-in users is stored for a maximum of 400 days after login; session cookies are also used for push notifications in the app, if you have enabled them. This is necessary for Trusted Shops to provide the digital service you requested; Trusted Shops is responsible for this processing.
  • Order data and review invitations (only with your consent): If you tick the box “Remind me by e-mail to leave a review after my purchase” when ordering, after your order has been marked as delivered we transmit to Trusted Shops your name, e-mail address, delivery address, phone number, order number and date, expected delivery date and the ordered products (Art. 6(1)(a) GDPR). Trusted Shops uses these data to send you, on our behalf, one e-mail invitation to review your purchase and to check whether you are already registered with Trusted Shops for buyer services; if so, further processing follows your agreement with Trusted Shops. You can withdraw your consent at any time with effect for the future, by e-mail to contact@ultrasshop.com or via the link in the invitation. Without your consent, no order data are transmitted to Trusted Shops.
  • Buyer protection: Trusted Shops buyer protection is available in the German, English, French and Dutch versions of our shop. If you register your order for buyer protection with Trusted Shops, the processing is based on your agreement with Trusted Shops (Art. 6(1)(b) GDPR) and the Trusted Shops privacy policy.
  • Service providers of Trusted Shops: Trusted Shops uses service providers for hosting, monitoring and logging (Art. 6(1)(f) GDPR, trouble-free operation). Processing may take place in third countries (USA and Israel), covered by adequacy decisions of the European Commission, DPF certification or standard contractual clauses.
  • Your rights: Within the joint controllership, please preferably contact Trusted Shops for data protection questions and to exercise your rights, using the contact details in the Trusted Shops privacy policy. You may also always contact us (section 12); your request will be forwarded to the other controller where necessary.
↑ Back to top

Questions?

Contact us: contact@ultrasshop.com