1. Data Controller Identification
The administrator of your personal data is GD Europe Sp. z o.o., with registered address at ul. Chabrowa 6A, 96-100 Skierniewice, Poland (KRS: 0000676216, NIP: 8361864565, REGON: 367171674). Contact: contact@chestnutfield-cards.pages.dev.
2. Purposes & Legal Grounds for Processing
Personal data (name, shipping address, email, telephone number, payment details) is processed exclusively for the purpose of concluding and executing sales contracts for certified collectibles (Article 6(1)(b) of the GDPR), complying with statutory tax and accounting obligations under Polish law (Article 6(1)(c) of the GDPR), and safeguarding legitimate commercial interests (Article 6(1)(f) of the GDPR).
3. Data Sharing & Logistics Partners
Your data is only shared with authorized logistics operators (InPost Sp. z o.o., DPD Polska sp. z o.o.) strictly for physical order fulfillment, and banking institutions (PKO Bank Polski SA) for commercial payment clearing.
4. Your Rights under RODO / GDPR
Under European data protection laws, you possess the right to access, rectify, delete, restrict processing, and demand portability of your personal data, as well as the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych - PUODO, ul. Stawki 2, 00-193 Warszawa).