Last updated: 13 October 2026
The controller of personal data processed in connection with the online store available at mdlabels.shop is:
MD LABELS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ SPÓŁKA KOMANDYTOWA
ul. Chocimska 2
62-800 Kalisz
Poland
VAT ID: PL6182154260
E-mail:
sklep@mdlabels.pl
In this Privacy Policy, “MD Labels”, “we”, “us” and “our” refer to the data controller identified above.
This Privacy Policy explains how we collect, use, store and disclose personal data when you use our Store, place an order, contact us or otherwise interact with us.
Depending on how you use the Store, we may process the following categories of personal data:
We generally receive personal data directly from you, including when you place an order, create an account, contact us or use the Store.
We may also receive certain information automatically through the Store or from service providers involved in processing payments, orders, deliveries and operation of the Store.
We process personal data for the following purposes:
We process your personal data to accept and fulfil orders, receive payments, arrange delivery, issue sales documents, process returns and communicate with you regarding your order.
The legal basis is the performance of a contract or taking steps at your request before entering into a contract pursuant to Article 6(1)(b) GDPR.
We process information contained in invoices, accounting records and other documentation where required by tax, accounting or other applicable laws.
The legal basis is compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.
We process personal data when you contact us with questions concerning Products, orders, deliveries, complaints or other matters.
Where communication relates to a contract or a potential order, processing is based on Article 6(1)(b) GDPR.
In other cases, processing may be based on our legitimate interest in communicating with Customers and responding to enquiries pursuant to Article 6(1)(f) GDPR.
We process personal data in order to handle complaints, returns and warranty or conformity claims.
Processing may be necessary to perform a contract, comply with legal obligations or pursue our legitimate interest in establishing, exercising or defending legal claims.
We may process technical, transaction and account information to maintain the security of the Store, prevent fraud, misuse and unauthorised access, and protect our rights and the rights of Customers.
The legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR.
Where required by applicable law, analytics technologies that are not necessary for operation of the Store are used only after you provide consent through our cookie consent mechanism.
The legal basis for such processing is your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time through the available cookie or privacy settings.
We may use your contact details to send marketing communications where you have consented to receive them or where such communication is otherwise permitted by applicable law.
Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR.
You may unsubscribe from marketing communications at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Providing personal data required to place and fulfil an order is necessary to conclude and perform the sales contract.
If you do not provide the information required to process an order, we may be unable to accept or fulfil that order.
Providing personal data for marketing purposes is voluntary.
We may disclose personal data where necessary to entities that provide services supporting the operation of our Store and our business.
These may include:
Only the information necessary for the relevant service is disclosed.
Depending on the delivery method selected by the Customer, personal data necessary to deliver the order may be disclosed to carriers such as DHL, UPS, InPost or Orlen Paczka.
Our Store is operated using Shopify technology.
Shopify processes certain personal data in order to provide and secure its e-commerce services.
Depending on the particular Shopify service or functionality involved, Shopify may process personal data on our behalf or act as an independent controller for certain processing activities.
Further information concerning Shopify's processing of personal data is available in Shopify's own privacy documentation.
The Store uses cookies and similar technologies.
Some cookies are necessary for the Store to operate correctly, for example to maintain the shopping cart, checkout, security functions and language or market settings.
Other cookies may be used for analytics, personalisation or marketing.
Where consent is legally required, non-essential cookies are not used until you provide consent.
You can manage or withdraw your cookie preferences using the cookie consent settings available in the Store.
Further information may be provided in our Cookie Policy or cookie settings.
We retain personal data only for as long as necessary for the purposes for which it was collected and as required by applicable law.
In particular:
After the applicable retention period expires, personal data is deleted or anonymised unless further storage is required or permitted by law.
Some of our service providers, including technology providers used to operate the Store, may process personal data outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, we use or rely on safeguards required by applicable data protection law.
Depending on the recipient and destination country, these safeguards may include:
Subject to the conditions provided by applicable law, you have the right to:
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
These are among the core rights provided by the GDPR. European Commission
To exercise your rights, contact us at:
We may need to verify your identity before responding to a request.
If you believe that your personal data is being processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
For MD Labels in Poland, the competent supervisory authority is the:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).
UODO confirms that individuals may lodge a complaint with the President of UODO if they believe their personal data is being processed unlawfully. UODO
We encourage you to contact us first so that we have an opportunity to address your concerns.
We do not make decisions concerning Customers that produce legal effects or similarly significantly affect them solely on the basis of automated processing, unless otherwise clearly communicated and permitted by applicable law.
Certain Store functions may use automated tools to personalise content, recommend Products, prevent fraud or support advertising.
Where such processing requires consent, it will be performed only after the required consent has been obtained.
The Store is not directed specifically at children.
We do not knowingly request personal data from children for marketing purposes.
If you believe that a child has provided us with personal data in circumstances where such processing is not permitted, please contact us at sklep@mdlabels.pl.
We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
However, no method of transmission or electronic storage can guarantee absolute security.
The Store may contain links to websites or services operated by third parties.
MD Labels is not responsible for the privacy practices of independent third-party websites.
We recommend reviewing the privacy information provided by those services before providing personal data.
We may update this Privacy Policy where necessary, including to reflect changes in law, our business activities, Store functionality or the services we use.
The current version of the Privacy Policy will be published in the Store together with the date of the latest update.
For questions concerning this Privacy Policy or the processing of your personal data, or to exercise your data protection rights, contact:
MD LABELS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ SPÓŁKA KOMANDYTOWA
ul. Chocimska 2
62-800 Kalisz
Poland
VAT ID: PL6182154260
E-mail:
sklep@mdlabels.pl