Privacy Policy

Last updated: 25 August 2026

1. Introduction

This Privacy Policy explains how ORKATEK POLAND sp. z o.o. (“Orkatek Poland”, “we”, “us” or “our”) processes personal data in connection with the dsdamat.eu online store, website and related customer services.

ORKATEK POLAND is the operator of dsdamat.eu and acts as the data controller for the personal data covered by this Privacy Policy in connection with the operation of the online store and customer services.

We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

ORKATEK POLAND is established in Poland and operates dsdamat.eu as an online store serving customers in EU Member States and other jurisdictions where the store is offered. This Privacy Policy applies to all customers of dsdamat.eu. Where mandatory local consumer protection or data protection rules require additional or different information, such information will be provided separately or the relevant local requirements will be referred to.

ORKATEK POLAND sp. z o.o. is the sole operator of the dsdamat.eu website and the sole invoicing entity for orders placed through the website. ORKATEK POLAND does not operate through a branch, subsidiary or separate legal entity in the countries in which it serves customers; all contractual, invoicing and data processing decisions are made by ORKATEK POLAND in Poland and remain its responsibility.

2. Data Controller

The controller responsible for the processing of your personal data is:

ORKATEK POLAND sp. z o.o.
Registered address: ul. Młynarska 42, lok. 115, 01-171 Warsaw, Poland

Registered with the National Court Register (Krajowy Rejestr Sądowy – KRS) maintained by the District Court for the Capital City of Warsaw, XIII Commercial Division. KRS: 0001226590 (registration date: 6 March 2026).

KRS: 0001226590
REGON: 544217534
VAT / NIP: 5273209606
Email: support@dsdamat.eu
Website: dsdamat.eu

Data Protection Contact: For questions concerning the processing of your personal data, privacy and data protection matters, you may contact us at support@dsdamat.eu.

3. How We Collect Your Personal Data

We collect personal data directly from you when you use dsdamat.eu, for example when you create an account, place an order, contact customer service or otherwise use the website and related services.

We may also collect certain personal data indirectly, for example through cookies and similar technologies (see Section 15) or from payment and logistics service providers acting on our behalf.

4. Categories of Personal Data We Process

Depending on your relationship with dsdamat.eu, we may process the following categories of personal data:

  • name and surname
  • billing and delivery address
  • email address
  • telephone number
  • order and transaction information
  • purchase and return information
  • customer service communications
  • account information, where applicable
  • information necessary to process payments, where applicable
  • delivery and shipment information
  • preferences to the extent necessary to operate the online store
  • technical information about your use of the website, where applicable and in accordance with our Cookie Policy.

Unless required or permitted by applicable law, we do not intentionally request or process special categories of personal data.

5. Purposes of Processing

5.1 Operation of the Online Store

To operate and administer dsdamat.eu, including managing customer accounts, orders, deliveries, returns and related services.

5.2 Customer Service

To respond to customer questions, complaints and/or requests.

5.3 Contractual Obligations

To process and fulfil orders and perform our contractual obligations towards customers.

5.4 Legal and Regulatory Obligations

To comply with applicable legal, tax, accounting, consumer protection and other regulatory obligations.

5.5 Protection of Our Rights and Interests

Where permitted by law, to establish, exercise or defend legal claims or protect our legitimate business interests.

5.6 Website Security and Administration

To maintain the security, stability and proper functioning of our website and information systems.

5.7 Marketing Communications

Promotional emails, newsletters, special offers or information about products and services will only be sent where an appropriate legal basis exists under applicable law, including valid consent where required.

6. Legal Bases for Processing

Depending on the circumstances, we process personal data on the following legal bases under Article 6 of the GDPR:

  • Article 6(1)(b) – processing necessary for the performance of a contract or for steps taken at the request of the data subject prior to entering into a contract;
  • Article 6(1)(c) – processing necessary for compliance with a legal obligation;
  • Article 6(1)(f) – processing necessary for our or a third party’s legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject;
  • Article 6(1)(a) – consent, where required and obtained.

Where we rely on legitimate interests, these may include the proper operation and administration of the online store, customer service, fraud prevention, IT and information security, protection of legal rights and management of our business activities.

7. Recipients of Personal Data

Where necessary, your personal data may be disclosed to:

  • companies within our corporate group;
  • service providers supporting the operation of the online store;
  • payment service providers;
  • logistics and delivery providers;
  • IT and hosting service providers;
  • customer service providers;
  • accounting, tax and legal advisers;
  • competent public authorities and government bodies where disclosure is legally required;
  • other recipients where necessary for the purposes described in this Privacy Policy and permitted by applicable law.

We use the following advertising and analytics partners to support personalised advertising, conversion tracking and marketing activities, including retargeting on and outside dsdamat.eu. Depending on the circumstances, these partners may act as independent controllers or processors for the personal data they process in this context:

  • Meta Platforms Ireland Limited (Meta Pixel / Meta Ads) – 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland – used for behavioural advertising, retargeting and conversion measurement on Meta platforms (Facebook and Instagram).
  • Google Ireland Limited (Google Ads, conversion tracking) – Gordon House, Barrow Street, Dublin 4, Ireland – used for conversion tracking, remarketing and advertising on Google properties and partner networks.

You can manage your cookie and advertising preferences, including disabling non-essential tracking, through our Cookie Policy / cookie settings tool.

We require service providers processing personal data on our behalf to comply with applicable data protection requirements.

8. International Transfers

Poland, Romania and Italy are Member States of the European Union and part of the European Economic Area (“EEA”). Transfers between ORKATEK POLAND and customers, service providers or group companies located within the EEA do not constitute transfers outside the EEA and are not subject to Chapter V of the GDPR.

Where personal data is transferred outside the EEA, for example to certain IT or hosting service providers, we ensure that the transfer is carried out in accordance with applicable GDPR requirements.

In particular, our advertising and analytics partners (Meta Platforms Ireland Limited and Google Ireland Limited, see Section 7) primarily process personal data through their Irish entities within the EEA, but certain data may be transferred to group companies in the United States for the provision of advertising services. Where applicable, such transfers are safeguarded by the European Commission’s Standard Contractual Clauses and/or the recipient’s certification under the EU-U.S. Data Privacy Framework.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or otherwise processed.

Retention periods depend on the purpose of processing, our contractual relationship with you, applicable legal, tax and accounting requirements, limitation periods for potential legal claims, and legitimate business and security requirements.

After the applicable retention period expires, personal data will be deleted or anonymised unless a longer retention period is required or permitted by law.

Indicative retention periods (subject to legal review):

  • Order, invoice and accounting records: 10 years in accordance with applicable accounting and tax legislation.
  • Customer account data: while the account remains active, plus up to 3 years from the last activity or account closure for the establishment, exercise or defence of legal claims.
  • Customer service correspondence and complaints: up to 3 years after resolution, subject to applicable limitation periods.
  • Marketing consent and communication preferences: until consent is withdrawn or, where consent is not withdrawn, up to 2 years of inactivity.
  • Website technical and security logs: as specified in our Cookie Policy.

10. Your Rights

Subject to the conditions and limitations provided by applicable law, you have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing activities;
  • request data portability where applicable;
  • withdraw consent where processing is based on consent;
  • object at any time to direct marketing;
  • lodge a complaint with a competent data protection supervisory authority.

Where processing is based on your consent, withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Right to Object

Where we process your personal data on the basis of our legitimate interests, you may object to such processing on grounds relating to your particular situation.

You have an unconditional right to object to the processing of your personal data for direct marketing purposes.

12. How to Exercise Your Rights

To exercise your rights or ask questions about the processing of your personal data, please contact our Data Protection Contact at support@dsdamat.eu.

Postal address: ORKATEK POLAND sp. z o.o., ul. Młynarska 42, lok. 115, 01-171 Warsaw, Poland

When you submit a request, we may need to verify your identity to ensure that personal data is not disclosed to an unauthorised person.

We will respond to your request within the period required by applicable data protection law.

13. Source of Personal Data

In most cases, your personal data is collected directly from you as described in Section 3. Where applicable, information concerning whether personal data has been obtained from publicly available sources or third parties will be provided in accordance with applicable law.

14. Automated Decision-Making and Profiling

Unless otherwise stated, we do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.

If this changes, we will provide the information required by applicable data protection law concerning the relevant processing and your rights.

15. Cookies and Similar Technologies

dsdamat.eu may use cookies and similar technologies for website functionality, security, analytics and, where applicable, marketing purposes.

More information about the cookies used on the website and how you can manage your preferences is available in our Cookie Policy: [COOKIE POLICY LINK – TO BE INSERTED].

16. Marketing Communications

We distinguish between communications necessary for operating the online store and promotional communications.

Administrative and service-related communications may be sent where necessary for order processing, delivery, returns, customer service, account management, security or other operational matters.

Promotional communications will only be sent where an appropriate legal basis exists under applicable law.

You may object to direct marketing at any time.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements, processing activities or other relevant circumstances.

The latest version will be published on dsdamat.eu and will state the date of the latest update.

18. Supervisory Authority

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.

18.1 Lead Supervisory Authority

As ORKATEK POLAND’s main establishment in the European Union is in Poland, the competent lead supervisory authority for cross-border processing carried out by ORKATEK POLAND under the GDPR’s one-stop-shop mechanism is the Polish data protection authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO) – Personal Data Protection Office of Poland
Website: https://uodo.gov.pl/

18.2 Right to Lodge a Complaint with a Local Supervisory Authority

Without prejudice to the lead supervisory authority referred to above, under Article 77 of the GDPR you have the right to lodge a complaint with the data protection supervisory authority in the EU or EEA Member State of your habitual residence, place of work or the place where the alleged infringement took place.

Current contact details for national data protection supervisory authorities are available through the European Data Protection Board (EDPB):
EDPB – National Data Protection Authorities: https://www.edpb.europa.eu/contact/contact-dpas_en

19. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact:

ORKATEK POLAND sp. z o.o.
ul. Młynarska 42, lok. 115, 01-171 Warsaw, Poland
Data Protection Contact: support@dsdamat.eu
Website: dsdamat.eu

Last updated: 25 August 2026