Privacy policy

Last updated: 21 July 2026

1. Who is the controller of your data

The controller of personal data collected via the online store eurodieselshop.com is Jakub Burkowicz, conducting business under the name EURODIESEL JAKUB BURKOWICZ, Łąkta Dolna 257, 32-733 Trzciana, Poland, Tax ID (NIP): 868-200-37-89, REGON: 543897171 (the “Controller”, “we”, “us”).

You can contact us about personal data matters:

• by e-mail: biuro@eurodieselshop.com
• by phone: +48 728 626 259
• by post: EURODIESEL JAKUB BURKOWICZ, Łąkta Dolna 257, 32-733 Trzciana, Poland

The Controller has not appointed a Data Protection Officer.

The store is addressed to businesses (B2B sales). We process personal data of sole traders and of individuals acting on behalf of our customers (owners, employees, contact persons) — this policy applies to all of them.

We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and applicable Polish data protection laws.

2. What data we process, why and for how long

a) Orders and performance of the sales contract

Scope: name, company name, tax ID, delivery and billing address, e-mail, phone number, order history, payment-related data (we never see or store card numbers).

• Purpose: accepting and fulfilling your order, delivery, payment handling, order-related contact — Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into one).
• Purpose: issuing and storing invoices and accounting records — Art. 6(1)(c) GDPR (legal obligation — tax and accounting laws).
• Purpose: establishing, pursuing or defending claims (including complaints and returns) — Art. 6(1)(f) GDPR (our legitimate interest).

Retention: for the duration of the contract; accounting documents — 5 years from the end of the relevant tax year; data needed for claims — until the limitation periods expire (as a rule, 3 years in business-to-business transactions).

b) Customer account

When you create an account (“My account”), we process the data provided in the registration form and stored in the account (addresses, order history). Legal basis: Art. 6(1)(b) GDPR (contract for the account service). We keep the data until the account is deleted, and afterwards — to the extent and for the periods described in point a) above.

c) Contact forms, e-mail, phone and WhatsApp

When you contact us via a form on the website, by e-mail, WhatsApp or phone, we process the data included in the correspondence (at least your name, contact details and the content of the message). Legal basis: Art. 6(1)(b) GDPR (if the enquiry aims at entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest — handling correspondence).

We store form submissions for up to 2 years after the correspondence ends, unless longer storage is needed for the purposes described in point a). If you contact us via WhatsApp, communication data is also processed by the service provider — Meta Platforms Ireland Ltd. — under its own privacy policy.

d) Newsletter

If you subscribe to our newsletter, we will send information about new products and offers to the e-mail address you provide — based on your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time — via the unsubscribe link in every message or by writing to biuro@eurodieselshop.com. We process the data until consent is withdrawn. Newsletter delivery is handled by an external mailing provider — we will name it in this policy once sign-ups are launched.

e) Direct marketing

We may contact our customers and business partners to present our product offer — based on legitimate interest (Art. 6(1)(f) GDPR), and via electronic channels (e-mail, phone) only to the extent permitted by electronic communication laws, i.e. with the required consent. You may object to direct marketing at any time — we will then stop it towards you.

f) Statistics and advertising (Google)

With your consent given in the cookie banner (Art. 6(1)(a) GDPR) we use:

• Google Analytics 4 — statistics of visits and store usage,
• Google Ads — ad conversion measurement and remarketing (showing our ads to people who visited the store).

These tools are provided by Google Ireland Ltd. Data collected this way includes cookie identifiers, approximate location, device and browser information, and activity in the store. You can withdraw consent at any time in the cookie banner settings (“Cookie settings” link in the footer). See the “Cookies” section below and our Cookie Policy.

If we implement additional analytics or advertising tools in the future, we will update this policy and the cookie banner before launching them.

3. Who we share data with

We share data only with entities that support us in running the store — to the extent necessary for a given purpose:

• payment operator: PayPro S.A. (operator of Przelewy24), ul. Pastelowa 8, 60-198 Poznań, Poland — for online payments; during a transition period card payments may be handled by the previous operator, WooPayments (WooCommerce Inc. / Stripe),
• our bank — for payments by traditional bank transfer,
• courier companies and carriers: DPD, InPost, DHL, GLS and freight forwarders (pallet shipments),
• hosting provider for the store and e-mail: seohost.pl,
• our accounting office and Fakturownia sp. z o.o. (invoicing system),
• analytics and advertising providers: Google Ireland Ltd. (Google Analytics 4, Google Ads, Google Tag Manager),
• cookie consent platform provider: CookieYes Ltd.,
• Meta Platforms Ireland Ltd. — for WhatsApp communication,
• newsletter delivery provider — once sign-ups are launched (to be named in an update of this policy),
• entities authorised by law (e.g. tax authorities).

4. Transfers outside the European Economic Area

In connection with Google tools and WhatsApp, data may be transferred to the USA (Google LLC, Meta Platforms Inc.). Transfers are based on the European Commission’s adequacy decision (EU–US Data Privacy Framework), supplemented by standard contractual clauses.

We also ship abroad. For deliveries to countries outside the EEA we provide the carrier with the data necessary to deliver the shipment (name / company name, address, phone number) — the transfer is necessary for the performance of the contract concluded with you (Art. 49(1)(b) GDPR).

5. Your rights

You have the right to:

• access your data and obtain a copy of it,
• rectify (correct) your data,
• erase your data (where we have no basis to continue processing),
• restrict processing,
• data portability (data processed on the basis of a contract or consent),
• object to processing based on legitimate interest (including direct marketing),
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
• lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

To exercise these rights, write to biuro@eurodieselshop.com — we will respond within one month at the latest. Note that data contained in accounting documents (e.g. invoices) cannot be erased before the retention periods required by tax law expire.

6. Is providing data mandatory

Providing data is voluntary, but without the data marked as required in the forms we cannot fulfil an order, create an account or answer an enquiry. Data required by law (e.g. for invoices) must be collected.

7. Cookies

The store uses cookies (small files stored on your device) and similar technologies. On your first visit we display a banner (CookieYes) where you can accept or reject non-essential cookies and change your decision at any time (“Cookie settings” in the footer).

Essential (no consent required — they make the store work):

Analytics (with consent): Google Analytics 4 cookies (_ga, _ga_*) — store traffic statistics; lifetime up to 2 years.

Advertising (with consent): Google Ads cookies (_gcl_* and related) — conversion measurement and remarketing.

You can also delete and block cookies in your browser settings — this may, however, affect how the store works (e.g. the cart). See our Cookie Policy for details.

8. Automated decisions and profiling

We do not make decisions concerning you based solely on automated processing that would produce legal effects. Analytics and advertising tools may group users by activity (e.g. for remarketing) — only with your consent given in the cookie banner.

9. Security

We apply technical and organisational measures appropriate to the risk, including SSL/TLS encryption across the store, two-factor authentication for the admin panel, access to data limited to authorised persons, and data processing agreements with service providers.

10. Changes to this policy

This policy may be updated (e.g. when tools or laws change). The new version will be published on this page together with the update date.