Last updated: 13 October 2026

Dear User,

We care about your privacy and want you to feel comfortable while using our services. Below you will find the most important information about how we process your personal data and about the cookies used by our online store at https://hdwrglobal.com (the “Store”). This information has been prepared in accordance with the GDPR – the General Data Protection Regulation (EU) 2016/679.

Data controller

HDWR Global sp. z o.o., ul. Dmowskiego 28, 63-000 Środa Wielkopolska, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 9th Commercial Division, under KRS number 0000527575, EU VAT number PL7861700636, REGON 302852637, share capital PLN 3,005,000.

If you would like to contact us regarding the processing of your personal data, please write to: [email protected].

Your rights

You have the right to request:

access to your personal data, including a copy of your data (Art. 15 GDPR),
rectification of your data (Art. 16 GDPR),
erasure of your data (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
transfer of your data to another controller (Art. 20 GDPR).

You also have the right to object at any time to the processing of your data:

on grounds relating to your particular situation – to processing based on Art. 6(1)(f) GDPR (our legitimate interests), including profiling (Art. 21(1) GDPR);
where your personal data are processed for direct marketing purposes, including profiling, to the extent that the processing is related to such direct marketing (Art. 21(2) GDPR).

Contact us if you wish to exercise your rights. You can object to our use of cookies (described below) in particular through the cookie settings in the Store or your browser settings.

If you believe that your data are being processed unlawfully, you may lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) or the data protection authority in your EU member state.

Personal data and privacy

Below you will find detailed information about the processing of your data depending on the actions you take.

1. Placing an order in the Store

Purpose: fulfilment of your order, including delivery, invoicing and verification of your EU VAT number (for business customers).
Legal basis: the sales contract (Art. 6(1)(b) GDPR); legal obligations, in particular relating to accounting, taxes and product safety, which require us to process your data (Art. 6(1)(c) GDPR).
How long: for the duration of the contract; until our legal obligations expire; and additionally until the end of the period in which claims may be asserted – by you or by us (see “Claims” below).
If you do not provide the data: you will not be able to place an order.

2. Placing an order – review request

Purpose: improving the quality of our services and products thanks to reviews submitted by customers; after your purchase we may send you an e-mail asking you to rate the Store or the product you bought.
Legal basis: our legitimate interest in researching your satisfaction with our services (Art. 6(1)(f) GDPR).
How long: if you do not submit a review – for 60 days after your purchase or until we accept your objection; if you submit a review – until it is deleted or until we accept your objection; and additionally until the end of the period in which claims may be asserted.
If you do not provide the data: we will not take your opinion into account in the further development of our services.

3. Creating an account in the Store

Purpose: performance of the contract for the provision of the account service in the Store.
Legal basis: the contract for the provision of services (Art. 6(1)(b) GDPR).
How long: for the duration of the contract; and additionally until the end of the period in which claims may be asserted.
If you do not provide the data: you will not be able to create an account and use its functions, such as viewing your order history or checking the status of your order.

4. Contacting us (e.g. to ask a question)

Purpose: handling your enquiries or requests.
Legal basis: a contract or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) – where your enquiry concerns a contract to which we are or may become a party; our legitimate interest in communicating with you (Art. 6(1)(f) GDPR) – where your enquiry is not related to a contract.
How long: for the duration of the contract binding us or – if no contract is concluded – for 10 years or until we accept your objection; and additionally until the end of the period in which claims may be asserted.
If you do not provide the data: we will not be able to respond to your enquiry.

5. Browser settings or similar actions allowing marketing activities

Purpose: direct marketing consisting in displaying personalised advertisements (see “Profiling” and “Cookies” below).
Legal basis: our legitimate interest in processing data for the above purpose (Art. 6(1)(f) GDPR); marketing cookies are only used with your consent given in the cookie settings.
How long: until the cookies used for marketing purposes expire or are deleted by you.
If you do not provide the data: you will not receive suggestions of products or services that may interest you.

6. Browser settings or similar actions allowing analytical activities

Purpose: analysing how you use and navigate the Store’s website in order to improve its functionality (see “Analytics” and “Cookies” below).
Legal basis: our legitimate interest in processing data for the above purpose (Art. 6(1)(f) GDPR); analytical cookies are only used with your consent given in the cookie settings.
How long: until the cookies used for analytical purposes expire or are deleted by you.
If you do not provide the data: we will not take into account the way you use the Store’s website when developing it.

7. Subscribing to the newsletter or consenting to receive marketing content from us

Purpose: sending the newsletter and information about special offers; analysing the effectiveness of the messages we send in order to establish general rules for effective mailings in our business (see “Analytics” below).
Legal basis: the contract for the provision of the newsletter service (Art. 6(1)(b) GDPR) or your consent to our marketing activities (Art. 6(1)(a) GDPR); our legitimate interest in processing data for the above purpose (Art. 6(1)(f) GDPR).
How long: until you unsubscribe from the newsletter or withdraw your consent – you can do so at any time, and processing carried out before the withdrawal remains lawful; until we accept your objection; and additionally until the end of the period in which claims may be asserted.
If you do not provide the data: you will not receive information about the Store and our offers.

8. Claims

Purpose: establishing, asserting or defending possible claims related to the contract concluded or the services provided.
Legal basis: our legitimate interest in processing personal data for the above purpose (Art. 6(1)(f) GDPR).
How long: until the limitation period for claims expires (as a rule 6 years for consumer contracts and 3 years for claims related to business activity under Polish law) or until we accept your objection.
If you do not provide the data: it will not be possible to establish, assert or defend claims.

Publishing data

If you decide to publish a product review, its content and the name you provide will be visible to other users of the Store. We do not disclose your e-mail address to other users – unless you do so yourself.

Profiling

We carry out profiling in the Store – this will apply to you if you allow such activities. Profiling consists in automatically assessing which products or services you may be interested in, using information about the content you view. As a result, advertisements for products or services displayed within the online services you use will be better suited to you and your needs.

The profiling we carry out does not result in decisions which produce legal effects concerning you or similarly significantly affect you.

Analytics

We carry out analytical activities on the Store’s website in order to make it more intuitive and accessible – this will apply to you if you allow such activities. The analysis takes into account the way you navigate the Store – e.g. how much time you spend on a given page or where in the Store you click. This allows us to optimise the layout, appearance and content of the Store when developing it.

In addition, if you have agreed to receive marketing messages or the newsletter from us, we may analyse the effectiveness of our mailings – for example, whether and how they influenced activity in the Store. This helps us establish general rules for such mailings in our business, e.g. the best sending times or effective wording.

Matching advertising audiences (customer lists)

If you are our customer (you have made a purchase from us) or have subscribed to our newsletter, we may use the e-mail address and telephone number you provided to target or limit the display of our advertisements in the advertising systems we use: Google Ads (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland – “Customer Match” feature), Meta Ads (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland – “Custom Audiences” feature) and Microsoft Advertising (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland).

We transfer the data exclusively in a one-way encrypted form (SHA-256 hash). The provider of the advertising system compares them with the hashes of its users’ data and deletes them after matching – it does not receive the data from us in plain text and does not use them for its own purposes. On the basis of the matched users, the provider may also create audiences with similar characteristics (“lookalike audiences”) for us, without providing us with information about individual persons. We refresh the lists weekly and remove persons who have unsubscribed from the newsletter or objected, as well as customers who have not made a purchase from us for more than 24 months.

The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in direct marketing of our own products to our customers and newsletter subscribers and in limiting the display of advertisements to persons who are already our customers. You may object to this processing at any time (Art. 21 GDPR) by writing to [email protected] – we will then remove your data from the lists at the next refresh, no later than within 7 days.

Data security

When processing your personal data, we apply organisational and technical measures in accordance with the applicable law, including encryption of the connection using an SSL/TLS certificate.

Cookies

Our Store, like most websites, uses cookies. These files are stored in the memory of your device (computer, phone, etc.) and do not change its settings. In this Store, cookies are used to remember your session, for statistical and marketing purposes, and to provide the Store’s functions.

Cookies other than those necessary for the operation of the Store (in particular analytical and marketing cookies) are used only with your consent. You can give, refuse or change your consent at any time in the cookie settings available in the Store. Detailed information about the cookies we use and their providers can be found in our Cookie Policy.

To learn how to manage cookies, including how to disable them in your browser, you can use your browser’s help file. Using the appropriate options of your browser, you can delete cookies at any time and block their use in the future – in such cases we will no longer process them.

External services / data recipients

We use the services of external entities that support us in running our business. We entrust them with your data for processing – these entities process the data only on our documented instructions. The recipients of your data are:

Every activity related to the Store: hosting provider; provider of network security and content delivery services (CDN); entity providing technical/IT support; persons cooperating with us under civil law contracts; provider of the software used to run the Store and manage orders – no transfer outside the European Economic Area (EEA), except for the network security provider (USA**).
Using the Store with settings allowing marketing activities: providers of marketing and advertising services (Google, Meta, Microsoft) – yes, USA**.
Using the Store with settings allowing analytical activities: provider of website analytics (Google) – yes, USA**.
Placing an order in the Store: payment service provider; courier companies delivering the product to you; provider of accounting and warehouse software; provider of standard office software (including e-mail); accounting office – no transfer outside the EEA, except for the payment service provider (USA**).
Subscribing to the newsletter or consenting to marketing messages: entity providing the newsletter mailing system – no transfer outside the EEA.
Using the services provided to us in connection with the Store by social media platforms: social media platforms – yes, USA**.
Taking part in a satisfaction survey or submitting a review: entities enabling the publication and comparison of reviews of the Store or products (e.g. Google Customer Reviews) – yes, USA**.
Contacting us: provider of standard office software (including e-mail) – no transfer outside the EEA.

In addition: competent public authorities to the extent that we are obliged to provide them with data.

Transfer of personal data outside the European Economic Area

** In connection with the above, your personal data may also be processed by entities outside the European Economic Area. An appropriate level of protection of your data, including through the use of appropriate safeguards, is ensured by:

the participation of these entities in the EU-U.S. Data Privacy Framework, i.e. the programme established by an implementing decision of the European Commission as a set of rules guaranteeing adequate protection of your privacy – in the case of entities from the United States of America;
standard contractual clauses adopted by the European Commission – where the recipient is not a participant in the above programme.

Changes to this Privacy Policy

We may update this Privacy Policy when our services or the applicable law change. The current version is always available on this page, together with the date of the last update.