Privacy and cookie policy

Effective from 20 October 2026.

1. Data controller

The controller of your personal data is ANAVENA Natalia Ciosek, ul. Księdza Jerzego Popiełuszki 13, 98-300 Wieluń, Poland, NIP (tax ID) PL6951440500, REGON 022278155, entered in the Central Register and Information on Economic Activity (Centralna Ewidencja i Informacja o Działalności Gospodarczej, CEIDG), e-mail: office@ledmesee.com, tel. +48 22 230 20 45. For matters relating to personal data, write to office@ledmesee.com.

2. What data, for what purpose and on what legal basis

• Order fulfilment (name and surname, address, e-mail, telephone, company details and VAT number, order content, link to the print file) — Article 6(1)(b) GDPR (contract).
• Invoices, accounting and taxes (invoice data, including in KSeF) — Article 6(1)(c) GDPR (legal obligation).
• Verification of the EU VAT number in VIES — Article 6(1)(c) GDPR.
• Handling of returns and complaints and pursuit of claims — Article 6(1)(b) and (f) GDPR (legitimate interest).
• Shop security (IP address, browser, protection against abuse and payment fraud) — Article 6(1)(f) GDPR.
• Newsletter and information about new products — only with your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
• Visit statistics (Google Analytics) — only after you have given consent in the cookie banner (Article 6(1)(a) GDPR).

Providing data is voluntary, but without the data needed for the order we cannot fulfil it. We do not take decisions concerning you based solely on automated processing.

3. To whom we disclose data

• Stripe Payments Europe Ltd. (Ireland) — payment processing; card details go directly to Stripe, we do not store them.
• Carriers and shipping intermediaries: InPost sp. z o.o., DPD Polska sp. z o.o., GLS Poland sp. z o.o., FedEx, Furgonetka — to the extent necessary for delivery.
• Fakturownia (invoicing system) and the Ministry of Finance (KSeF) — invoices.
• Providers of hosting, e-mail and IT services, accounting office, law firm — on the basis of data processing agreements.
• Google Ireland Ltd. — statistics, only after consent has been given.
• Public authorities — where required by law.

4. Transfers of data outside the EEA

Some providers (e.g. Stripe, Google, FedEx) may process data in the USA or other countries outside the European Economic Area. This takes place on the basis of a decision of the European Commission (EU-US Data Privacy Framework) or standard contractual clauses. For shipments outside the EU, the transfer of data to the carrier and to the customs authorities of the recipient’s country is necessary for the performance of the contract.

5. How long we store data

• Order data and invoices — 5 years from the end of the year in which the tax liability arose.
• Data needed to handle complaints and claims — until the expiry of the limitation periods.
• Print links and files — up to 12 months from fulfilment of the order.
• Newsletter data — until consent is withdrawn.
• Security logs — up to 90 days.

6. Your rights

You have the right of access to your data, rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) (ul. Stawki 2, 00-193 Warszawa) or with the supervisory authority in your country.

7. Cookies and browser storage

• Necessary — cart, selected country and currency (browser storage), Stripe payment security. These work without consent, because the shop cannot function without them.
• Analytics (Google Analytics 4) — activated only after your consent in the cookie banner. You can change your consent at any time.
• We do not use advertising cookies.

You can also change cookie settings in your browser.

Back to top