Privacy policy

1. Data Controller The administrator of your personal data is Beskid Chocolate sp. z o.o., with its registered office at ul. 3 Maja 28, 34-350 Węgierska Górka, Poland (entered into the National Court Register under KRS: 0001128913, REGON: 529739879, EU VAT ID: PL5532594149). You can contact us regarding data privacy via email at support@melangers.eu or by traditional post at our registered address.

2. Principles and Legal Basis of Processing We process personal data in full compliance with Regulation (EU) 2016/679 (GDPR). Data is processed under the following legal bases:

  • Contract Performance (Art. 6(1)(b) GDPR): Processing is necessary to execute sales agreements, manage user accounts, process orders, handle shipments, and deliver technical support or RMA claims.

  • Legal Obligation (Art. 6(1)(c) GDPR): Processing is required to fulfill statutory tax, accounting, and legal invoicing obligations under EU and Polish law.

  • Legitimate Interest (Art. 6(1)(f) GDPR): Processing is necessary for defending against legal claims, preventing fraud, and maintaining the technical security of the platform.

3. Scope of Data Collected Depending on your interaction with melangers.eu (B2B or B2C), we collect:

  • Full name or corporate entity name

  • EU VAT ID (NIP) and registration details (for business buyers)

  • Billing address and delivery address

  • Contact telephone number and email address

  • Order details, transaction history, and technical support communications

  • Technical connection data (IP address, browser type, device logs)

4. Data Processors and Recipients To fulfill transactions, we share your data strictly with trusted operational processors under formal data processing agreements:

  • Logistics & Delivery: DPD (to generate shipping labels and execute transit).

  • Order Management: BaseLinker (to process and centralize store orders).

  • Payment Gateways: PayPal (for secure online transaction processing).

  • Accounting & Legal: External certified accounting services and relevant tax authorities.

  • IT Infrastructure: Hosting, server administration, and Cloudflare WAF security providers.

We do not sell, rent, or monetize your corporate or personal data to third-party marketing brokers.

5. Data Retention Period

  • Tax & Accounting Records: Stored for 5 years following the end of the tax year in which the invoice was issued, as mandated by accounting laws.

  • Contract & Account Data: Stored for the duration of an active user account or until the expiration of the statutory limitation period for commercial/warranty claims.

  • Technical & Session Logs: Retained temporarily for server security and analytics purposes.

6. Your GDPR Rights You have the following rights regarding your personal data:

  • Right to access and receive a copy of your data

  • Right to request rectification of inaccurate data

  • Right to request erasure (“Right to be forgotten”) when legal retention periods expire

  • Right to restrict or object to data processing

  • Right to data portability

  • Right to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office – UODO).

7. Cookies and Tracking melangers.eu uses essential session cookies for core website functionality (maintaining cart contents, user authorization) and functional/analytic cookies to optimize usability. Users can manage or block cookies through their browser settings at any time.