The administrator of personal data of users of the online store www.chilldog.pl is ERRAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Aleja Jana Pawła II 27, 00-867 Warszawa, Polska, NIP: 5273058751, REGON: 525425598, KRS: 0001038822, e-mail: info@chilldog.pl, tel. +48 781 844 878.
This privacy policy sets out the rules for processing personal data in connection with the use of the online store www.chilldog.pl, including creating an account, processing orders, handling complaints, returns, customer contact, and marketing activities.
The Administrator takes special care to protect the interests of the persons whose data is processed, in particular ensuring that the data is processed lawfully, collected for specific purposes, not further processed in a way incompatible with these purposes, and stored in a manner enabling the identification of the persons concerned no longer than necessary for the purpose of processing.
The Administrator applies technical and organizational measures to ensure the protection of processed personal data, in particular securing data against unauthorized disclosure, acquisition by unauthorized persons, processing in violation of applicable regulations, and alteration, loss, damage, or destruction.
The store uses an SSL certificate and regularly updates its software to protect data.
§2. Scope and purposes of processing personal data
Personal data of store users may be processed for the following purposes:
creating and managing a customer account,
receiving and fulfilling orders, handling payments, shipping products,
handling complaints, returns, and exchanges,
contacting customers (including responding to inquiries),
sending marketing information and newsletters (with consent),
fulfilling accounting and tax obligations,
personalizing content and advertising based on profiling (remarketing, automatic offer matching),
posting product reviews and comments,
maintaining statistics and analyzing the use of the online store (Google Analytics, Google Ads, Facebook Pixel).
Personal data is processed based on:
a sales contract or provision of electronic services (Art. 6(1)(b) GDPR),
a legal obligation (accounting, taxes – Art. 6(1)(c) GDPR),
the legitimate interest of the administrator (e.g., marketing, statistics – Art. 6(1)(f) GDPR),
the consent of the data subject (newsletter, marketing activities, cookies – Art. 6(1)(a) GDPR).
Providing personal data is voluntary but necessary to create an account, fulfill an order, or use selected store features. User data may be automatically processed for profiling, offer personalization, remarketing, and ad targeting – only based on consent given via the Cookiebot panel.
§3. Categories of processed data
First and last name, address of residence/delivery, phone number, email address,
Invoice data (NIP, company name, address),
Order details, payment information, purchase history,
Bank account number (for refunds),
Data regarding the use of the service (IP address, cookies, device identifiers),
Content of reviews and comments,
Age – in case of account creation by a minor (the administrator does not verify user age but recommends using the service under the supervision of an adult).
§4. Data recipients and outsourcing of processing
Personal data may be transferred to entities cooperating with the administrator only to the extent necessary to fulfill the contract and legal obligations, in particular:
courier company InPost S.A. (shipment handling),
courier company DPD (shipment handling),
courier company DHL (shipment handling),
courier company GLS (shipment handling),
payment operators: Stripe, Autopay S.A., Revolut Bank,
accounting office servicing ERRAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ,
IT service providers (hosting, Hostinger store software),
analytical and advertising service providers: Google Ireland Ltd., Meta Platforms Ireland Ltd. (Facebook), in accordance with the rules for transferring data outside the EEA,
state authorities upon request in accordance with applicable law.
All entities processing personal data operate based on relevant processing agreements and are obliged to apply security measures. User data is not transferred to other administrators for marketing purposes without explicit consent. The Administrator does not transfer personal data outside the European Economic Area (EEA), except in situations resulting from the use of Google and Meta (Facebook) tools, based on compliance mechanisms such as standard contractual clauses.
§5. Data retention period
Personal data is processed for the period necessary to achieve the purposes of processing:
in the case of contract performance – for the duration of the contract and until the expiry of claims (at least 6 years),
in the case of maintaining an account – until the account is deleted by the user or administrator,
data processed for marketing and newsletter purposes – until consent is withdrawn,
accounting documentation – for the period specified by law (minimum 5 years),
data concerning reviews and comments – for as long as the content is present on the site or until a deletion request is made.
After the above periods, data is deleted or anonymized.
§6. Rights of data subjects
Data subjects have the right to:
access their personal data,
request rectification, deletion, or restriction of processing,
object to processing,
transfer data to another administrator,
lodge a complaint with the President of the Personal Data Protection Office (UODO),
withdraw consent to data processing at any time (without affecting the lawfulness of processing before withdrawal).
To exercise the above rights, contact the administrator by email: info@chilldog.pl or by phone: +48 781 844 878.
§7. Cookies and analytical tools
The store uses cookies and similar technologies to ensure the proper functioning of the service, personalize content, compile statistics, and conduct advertising activities (remarketing). During the first visit to the store, the user is informed about the use of cookies and the ability to manage preferences via the Cookiebot panel.
The following tools are used, among others:
Google Analytics, Google Ads – for analyzing statistics and advertising activities,
Facebook Pixel – for ad personalization and remarketing campaigns.
The use of cookies and analytical data is based solely on user consent, which can be withdrawn at any time via Cookiebot. Detailed rules for using cookies are described in the Cookies Policy.
§8. Data security
The administrator uses technical and organizational measures to ensure the security of personal data, including:
encrypted transmission (SSL),
regular system and store software updates,
staff training,
application of data minimization and access control principles,
maintaining a register of personal data breaches and procedures for reporting incidents to UODO.
The administrator independently fulfills obligations related to personal data protection – no Data Protection Officer (DPO) has been appointed.
§9. Changes to the privacy policy
The privacy policy may be periodically updated. The new version of the document will be published on the store’s website, and users with an account will be notified electronically. Any changes come into effect on the date of publication on the store’s website, unless otherwise stated.
§10. Contact
All questions and requests regarding the privacy policy and the processing of personal data should be directed to: 📧 E-mail: info@chilldog.pl 📞 Phone: +48 781 844 878
