Effective as of October 8, 2026.
1. Data controller and contact information
The controller of your personal data is SNEAKERS DEPOT spółka z ograniczoną odpowiedzialnością with its registered office in Popówko (Popówko 56, 64-606 Oborniki), KRS 0001183372, NIP 6060120685, REGON 542219262, operating the store, service center, and buy-back service at telefoniki.pl (hereinafter: "we").
For matters regarding personal data, you can contact us: via email: kontakt@telefoniki.pl, by phone: +48 503 169 256, by mail: ul. Długa 13, 61-850 Poznań.
We have not appointed a data protection officer.
This policy applies to data we process when you use the telefoniki.pl website, make a purchase from us, commission a repair, sell us a device, or contact us, including at our location at ul. Długa 13 in Poznań.
2. Purposes, legal bases, and processing periods
We process only the data necessary for a given purpose. The legal basis is the provisions of Regulation (EU) 2016/679 (GDPR).
| Purpose | Legal basis | Duration |
|---|---|---|
| Conclusion and performance of a sales contract: order, payment, delivery | Art. 6(1)(b) GDPR | until the performance of the contract, and thereafter for the periods stated in the rows regarding accounting and claims |
| Service center operations: request, valuation, repair, device collection | Art. 6(1)(b) GDPR | as above |
| Buy-back of devices, including identity verification and legal origin of the device | Art. 6(1)(b) and (f) GDPR (our interest: preventing fencing and fraud) | as above |
| Customer account | Art. 6(1)(b) GDPR | until account deletion |
| Withdrawal from contract, complaints, warranty | Art. 6(1)(c) GDPR (obligations under the Consumer Rights Act and the Civil Code) | until the case is concluded, and thereafter as per claims |
| Accounting and taxes: receipts, invoices, buy-back records | Art. 6(1)(c) GDPR in conjunction with accounting and tax regulations | 5 years from the end of the calendar year in which the tax payment deadline expired |
| Asserting and defending against claims | Art. 6(1)(f) GDPR | until the statute of limitations for claims expires |
| Answering inquiries (email, phone, chat, form) | Art. 6(1)(f) GDPR, or (b) if the inquiry concerns a contract | until the case is concluded, no longer than 12 months, unless the data is needed for claims |
| Newsletter and commercial information | Art. 6(1)(a) GDPR and consent required by the Electronic Communications Law | until withdrawal of consent |
| Post-purchase review request | Art. 6(1)(f) GDPR (our interest: obtaining customer feedback) | until an objection is raised or 3 months from the date of purchase |
| Publishing your review in the store | Art. 6(1)(a) GDPR (consent given upon adding the review) | until review deletion or withdrawal of consent |
| Store security and fraud prevention | Art. 6(1)(f) GDPR | up to 12 months |
| Statistics and marketing using cookies | Art. 6(1)(a) GDPR | until withdrawal of consent or expiration of the cookie |
| Processing notifications of illegal content | Art. 6(1)(c) GDPR (Digital Services Act) | until the case is concluded, and thereafter as per claims |
The statute of limitations for claims is generally 6 years, and 3 years for claims related to business activity, with the term ending on the last day of the calendar year.
3. Data recipients
We share data only to the extent necessary for the given purpose.
Entities processing data on our behalf:
- Shopify International Limited (Ireland) – store platform, hosting, order notification emails, chat, forms, and newsletter;
- Furgonetka.pl and the InPost integration provider – ordering and handling shipments;
- Judge.me – sending review requests and displaying reviews in the store;
- EasyReturn – handling withdrawal forms;
- email providers, IT and hosting service providers, accounting firm, and legal firm;
- service subcontractors, when a repair requires specialized work (e.g., motherboard repairs).
Entities processing data as separate controllers:
- couriers: InPost, DPD Polska, and Poczta Polska, including for cash-on-delivery payments;
- online payment operator handling payments in the store, and banks for transfers and payouts related to buy-backs;
- Trustpilot A/S (Denmark) – if you choose to post a review on the Trustpilot service;
- Shopify – regarding certain platform functions described in the Shopify privacy policy (privacy.shopify.com);
- public authorities, courts, and law enforcement agencies – when required by law, including in cases of suspected criminal origin of a device bought back.
4. Transfer of data outside the European Economic Area
Some providers, in particular Shopify and its subcontractors, may process data outside the EEA, e.g., in Canada or the United States. This is done exclusively based on a European Commission adequacy decision (applying to, among others, Canada and companies participating in the EU–US Data Privacy Framework) or standard contractual clauses adopted by the European Commission. You can obtain a copy of the safeguards by contacting us.
5. Your rights
You have the right to:
- access your data and receive a copy;
- rectify incorrect data;
- erase data if we no longer need to retain it;
- restrict processing;
- transfer data processed on the basis of a contract or consent;
- object to processing based on our legitimate interest, and in the case of direct marketing – at any time and without justification;
- withdraw consent at any time, without affecting the lawfulness of processing before its withdrawal;
- file a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
To exercise these rights, please write to kontakt@telefoniki.pl. We will respond within one month. We may request information necessary to verify your identity.
6. Cookies and similar technologies
The store uses cookies and similar technologies (browser storage, pixels). We use cookies necessary for the store to function, the shopping cart, logging in, payments, and security without prior consent, as they are essential for service provision (Art. 399 of the Electronic Communications Law, Art. 6(1)(b) and (f) GDPR). We activate functional, analytical, and marketing cookies exclusively with your consent, expressed via the privacy banner.
You may change or withdraw your consent at any time in the privacy settings available in the store and in your browser settings. Details are described in the Cookies Policy.
7. Data in devices submitted for repair and buy-back
A device submitted for repair or buy-back may contain personal data belonging to you or others. We do not view, copy, or use this content. We only access the device to the extent necessary for diagnosis, repair, and testing, and the personnel performing these tasks are bound by confidentiality.
Before handing over your device, we recommend creating a backup, and in the case of a buy-back sale, logging out of accounts and restoring factory settings. After purchasing a device through our buy-back service, we permanently erase all data from it before further sale.
For buy-backs, we also process the device's IMEI or serial number, bank account number, and, during verification at our point, the type and number of the presented ID document. We do not make copies of ID documents without your consent.
Upon request, we enter into data processing agreements with companies that submit business devices containing employee or client data for repair.
8. Voluntariness of data provision, profiling, and policy changes
Providing data is voluntary, but without the data required to conclude a contract (e.g., name, delivery address, email, and in the case of a buy-back – account number), we cannot fulfill the order, repair, or buy-back. Providing data for the newsletter and consenting to cookies other than essential ones is entirely voluntary.
We do not make decisions based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
We may update this policy, e.g., following changes to providers or legal regulations. The current version is always available in the store, and we inform those who have an account or are subscribed to the newsletter about significant changes.