Privacy policy
Version 1.0 of 14.11.2026. Applies to callance.pl and callance.eu in all language versions.
1. Controller
The controller of your personal data is Callance Sp. z o.o., ul. Jana Pawła II 27, 00-867 Warsaw, Poland, KRS 0000986258, VAT ID PL5273014073 (“we”).
Contact for data protection matters: info@callance.eu, +48 530 928 553, or by post to ul. Niedźwiedzia 16, 86-031 Osielsko, Poland. We have not appointed a data protection officer.
2. Data we process
- identification and contact data: name, e-mail address, telephone number, delivery and billing address;
- company data: company name, VAT ID, result of the VIES check;
- order data: goods ordered, prices, delivery and payment method, order history, correspondence, complaints and withdrawal statements;
- payment data: payment status, transaction ID, last digits of the card (we do not receive full card data – it is processed by the payment provider);
- technical data: IP address, browser data, information stored in cookies necessary for the shop, server logs;
- Account data: login, encrypted password, settings.
Providing data is voluntary but necessary to conclude and perform the contract; invoice data are required by tax law.
3. Purposes, legal bases and retention
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Conclusion and performance of the sales contract, delivery, payment | Art. 6(1)(b) | until the contract is performed, then as below |
| Invoicing, accounting, VAT settlements (including OSS and intra-Community supplies) | Art. 6(1)(c) – tax and accounting law | 5 years from the end of the calendar year in which the tax payment deadline expired |
| VAT ID verification in VIES | Art. 6(1)(c) and (f) | as tax documentation |
| Handling complaints and withdrawals, acknowledgements of statements | Art. 6(1)(c) (consumer law) and (f) (evidence) | until claims become time-barred, as a rule 6 years from the end of the year the matter closed |
| Account and order history | Art. 6(1)(b) | until the Account is deleted; order data then as above |
| Establishment, exercise or defence of legal claims | Art. 6(1)(f) | until claims become time-barred |
| Answering enquiries (e-mail, telephone, form) | Art. 6(1)(f) | until the matter is closed, max. 2 years |
| Shop security, fraud prevention, server logs | Art. 6(1)(f) | up to 90 days |
| Determining your country from your IP address to show the right shop version and prices (on our server, without external services) | Art. 6(1)(f) | session only |
| Migration of Accounts and order history from the previous shop platform | Art. 6(1)(b) and (f) | as for Accounts and orders |
Our legitimate interests are efficient customer service, shop security, demonstrating compliance and defending against claims.
We do not take decisions based solely on automated processing that produce legal effects. We automatically determine the display country and currency and the VAT rate based on the selected delivery country and the VIES result; you can change the country and currency at any time.
We currently do not send newsletters or carry out marketing using your data. If this changes, we will ask for consent where required.
4. Recipients
- Aftermarket.pl Limited, Chytron 3, Office 301, 1075 Nicosia, Cyprus – hosting (processor);
- BaseLinker sp. z o.o. (Base.com), Plac Solny 15, 50-062 Wrocław, Poland – order and warehouse management, Base Courier (processor);
- carriers: DPD, UPS, DHL, GLS, ORLEN Paczka and pallet carriers – delivery (independent controllers);
- Stripe (Stripe Payments Europe, Ltd., Ireland) – card payments;
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) – PayPal payments;
- payment providers act as independent controllers for payment processing, anti-money-laundering and fraud prevention under their own privacy policies;
- Google (Google Ireland Limited) – e-mail and Google Workspace (processor);
- accounting firm TaxCoach Sp. z o.o., ul. Wierzbięcice 44A/40A, 61-568 Poznań, Poland;
- the European Commission and EU tax authorities – VIES queries;
- public authorities where required by law.
5. Transfers outside the EEA
Some providers (Stripe, PayPal, Google) may process data in the United States or other countries outside the EEA. Such transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) where the recipient is certified, or on standard contractual clauses approved by the European Commission. You can obtain a copy of the safeguards by contacting us.
For deliveries outside the EEA (e.g. Ukraine) we transfer recipient data to the carrier and customs authorities of the country of destination, as this is necessary for performance of the contract (Art. 49(1)(b) GDPR).
6. Your rights
You have the right to access your data, rectification, erasure, restriction of processing, data portability (for data processed under a contract), to object to processing based on legitimate interests, to withdraw consent at any time where processing is based on consent (without affecting prior processing), and to lodge a complaint with a supervisory authority – in Poland the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) – or with the authority in your country of residence or work.
To exercise your rights, contact info@callance.eu. We will respond within one month.
7. Migration from the previous shop
Customer Accounts and order history from the previous callance.pl shop (Sky-Shop platform) have been migrated to the new shop. The controller remains Callance Sp. z o.o. The migration serves the continuation of Accounts and contracts and compliance with complaint and tax obligations. Passwords were not migrated – to use your Account, set a new password via the link in our e-mail. You can request deletion of your Account.
8. Cookies
The shop uses only cookies and similar technologies strictly necessary for its operation, in particular to: – store your shopping cart, – maintain your session and login, – remember your selected country, currency and price view (net/gross), – ensure security and prevent fraud, – process payments (Stripe may set cookies necessary for fraud prevention).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart | Callance | session, cart | up to 2 days |
| wordpress_logged_in_, wordpress_sec_, wordpress_test_cookie | Callance | account login | end of session, 14 days with “Remember me” |
| cl_country, cl_currency, cl_price_mode | Callance | country, currency, price view | 12 months |
| __stripe_mid, __stripe_sid | Stripe | payment security | 1 year / 30 minutes |
No consent is required for these cookies because they are strictly necessary to provide the service you request. You can block cookies in your browser settings, but the cart and login may then not work.
We currently do not use analytics or advertising cookies. If we introduce such tools (e.g. Google Analytics), we will ask for your consent via a banner before using them and update this policy.
9. Security
We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access control and data processing agreements with processors.
10. Changes
We may update this policy if laws, services or recipients change. The current version with its date is always available in the shop.