privacy policy

In force from 5 October 2026. This page explains what data we collect in the www.theapres.pl store, why, and what rights you have.

1. Who is responsible for your data

The data controller is Apres Tennis Małgorzata Ładyńska, ul. Legionów 119, 91-073 Łódź, Poland, NIP (tax ID) 7282603226. For anything about your personal data, email kontakt@theapres.pl or call +48 509 112 007. We have not appointed a data protection officer.

2. What data we collect and why

  • Orders and delivery. Name, shipping and billing address, email, phone number, chosen parcel locker, and the order history and payment status. We do not see or store full card details. We need this data to conclude and perform the sales contract (Art. 6(1)(b) GDPR).
  • Returns and complaints. Data from the order and from your request, to handle a withdrawal from the contract or a complaint (Art. 6(1)(b) and (c) GDPR).
  • Accounting and tax. Data on sales records that we must keep under tax and accounting law (Art. 6(1)(c) GDPR).
  • Contact. Data you give us in the contact form, by email, or by phone, so we can reply to your message (our legitimate interest, Art. 6(1)(f) GDPR).
  • Customer account. If you create one: email, profile details, and order history, so the account works (Art. 6(1)(b) GDPR).
  • Store operation and security. Technical data such as IP address, browser and device type, and pages visited, so the store works properly and is protected against abuse (Art. 6(1)(f) GDPR).
  • Legal claims. Data needed to establish, pursue, or defend claims related to an order (Art. 6(1)(f) GDPR).

Providing data is voluntary, but without the order details we cannot accept or ship your order.

3. Who we share data with

We share data only when it is needed for the purposes above:

  • Shopify, the platform that runs the store and checkout (Shopify International Limited, Ireland);
  • the payment providers you use at checkout;
  • carriers that deliver your parcel, such as DPD and InPost, and for international shipping the carrier handling the shipment;
  • service providers we use to run the store, such as email and accounting;
  • public authorities, when the law requires it.

4. Transfers outside the EEA

Shopify and some service providers may process data outside the European Economic Area, for example in Canada or the USA. This is based on a European Commission adequacy decision or on standard contractual clauses approved by the Commission. On request, we will tell you more about these safeguards.

5. How long we keep data

  • Order data: for as long as it takes to perform the contract, and then until the limitation periods for claims expire.
  • Accounting records: for the period required by tax and accounting law, usually 5 years from the end of the year in which the tax payment was due.
  • Correspondence: until the matter is resolved, and if it concerns an order, as long as that order's data.
  • Customer account: until it is deleted.
  • Cookies: for the period set for each cookie or until you withdraw consent.

6. Cookies

The store runs on Shopify, which uses cookies and similar technologies. Essential cookies handle the cart, checkout, login, security, and remembering your language and currency. The store does not work without them, so they do not require consent. We use statistics and marketing cookies only with your consent. You can also delete or block cookies at any time in your browser settings. Blocking essential cookies may make it harder to place an order.

7. Your rights

You have the right to:

  • access your data and receive a copy;
  • have your data corrected;
  • have your data erased;
  • restrict processing;
  • data portability;
  • object to processing based on our legitimate interest;
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
  • lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

To use these rights, email kontakt@theapres.pl. We will reply without undue delay, and within one month at the latest.

8. Automated decisions

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.

9. Changes to this policy

If we change how we process data, or the law changes, we will update this page and the date at the top.