Privacy policy

Last updated: 3 October 2026

Flieger Fields operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the User, with a tailored shopping experience (the “Services”). The Flieger Fields store is powered by Shopify technology, which enables us to offer you the Services. This Privacy Policy describes how we collect, use and disclose the personal data of the User who visits and uses the Services, makes purchases through them or otherwise communicates with us. In the event of a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies to the collection, processing and disclosure of the User’s personal information.

Please read this Privacy Policy carefully. By using and accessing the Services, the User confirms that they are familiar with this Privacy Policy and understand the rules for the collection, use and disclosure of their data described in this Privacy Policy.

Data controller

The controller of personal data is:

Maria Flieger (selling under the Flieger Fields brand)
ul. Kasztanowa 10
64-305 Bolewice
Poland
Email: biuro@fliegerfields.com
Phone: +48 696 816 998

Personal information we collect and process

By “personal information” we mean information that identifies the User or can reasonably be linked to them. Personal information does not include information collected anonymously or information that has been anonymised in a way that prevents the identification of the User or the linking of the information to the User. We may collect or process the following categories of personal information, including inferences drawn from them, depending on how the User uses the Services and on the User’s place of residence, and to the extent permitted or required by applicable law:

• Contact data includes name, address, billing address, shipping address, phone number and email address.
• Financial data includes credit card, debit card and financial account numbers, payment card data, financial account data, transaction details, payment methods, payment confirmations and other payment data.
• Account information includes username, password, security questions, preferences and settings.
• Transaction information includes items the User views, adds to the cart, adds to a wish list, purchases, returns, exchanges or cancels, as well as past transactions.
• Communications with us includes information provided in communications with us, e.g. when sending an enquiry to customer service.
• Device information includes information about the customer’s device, browser or network connection, IP address and other unique identifiers.
• Usage information includes information about the customer’s interactions with the Services, including how and when the Services are used or navigated.

Sources of personal information

We may collect personal information from the following sources:

• Directly from the customer, including when creating an account, visiting or using our Services, communicating with us or otherwise providing us with personal information.
• Automatically through the Services, including from the User’s device when using our products or services or visiting our websites, and through the use of cookies and similar technologies.
• From service providers, including where we work with them to operate certain technology and where they collect or process the User’s personal information on our behalf.
• From our partners or other third parties

How we use the customer’s personal information

Depending on how the User interacts with us and which Services the User uses, we may use the User’s personal information for the following purposes:

• Providing, personalising and improving the Services. We use the User’s personal information to provide the Services, including to perform the contract concluded with the User, process payments, fulfil orders, remember preferences and products that interest the User, send notifications related to the User’s account, process purchases, returns, exchanges or other transactions, create, maintain and manage the User’s account, arrange shipping, enable returns and exchanges, enable the posting of reviews and create personalised shopping experiences, for example by recommending products related to the User’s previous purchases. This may include using the customer’s personal information to personalise and improve the Services.
• Marketing and advertising. We may use the User’s personal information for marketing and promotional purposes, such as sending marketing, advertising and promotional communications by email, text message or post, and displaying online ads promoting products or services in our Services or on other websites, including based on items purchased or added to the cart by the User or other User activity in the Services.
• Security and fraud prevention. We use the User’s personal information to authenticate their account, ensure secure payments and purchases, detect and investigate potentially fraudulent, illegal, dangerous or malicious activity and take appropriate steps to combat it, and to protect public safety and the security of our services. If the User chooses to use the Services and register an account, the User is responsible for keeping their account credentials secure. We strongly advise against sharing your username, password and other authentication data with anyone.
• Communicating with the User. We use the User’s personal information to provide customer support, answer their questions, provide them with effective services and maintain a business relationship with them.
• Legal reasons. We use the User’s personal information to comply with applicable law or respond to legitimate legal processes, including requests from law enforcement or government authorities, to conduct investigations or participate in evidentiary proceedings in civil matters, potential or actual litigation or other adversarial proceedings, and to enforce or investigate potential violations of our terms or policies.

Legal bases for processing

We process the User’s personal data on the following legal bases (Article 6(1) GDPR):

• Performance of a contract or taking steps prior to entering into it (point (b)) – fulfilling orders, payments, shipping, returns and exchanges, account management and the reservation list.
• Legal obligation (point (c)) – keeping sales records and tax settlements.
• Legitimate interest of the controller (point (f)) – handling complaints and communication with the User, security and prevention of abuse, establishing, pursuing or defending legal claims.
• Consent (point (a)) – newsletter and marketing, and cookies and similar technologies other than strictly necessary ones. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Providing the data necessary to conclude and perform a contract is voluntary, but required to place an order.

How we disclose personal information

In certain circumstances we may disclose the User’s personal information to third parties for legitimate purposes, in accordance with this Privacy Policy. These circumstances may include:

• With Shopify, we may disclose data to vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
• With business and marketing partners, in order to provide marketing services and to show the User ads. For example, we use Shopify to provide personalised ads using third-party services based on the User’s online activity across different merchants and websites. Our business and marketing partners will use the User’s data in accordance with their own privacy notices. Depending on their place of residence, the User may have the right not to have their information shared for the purpose of displaying personalised ads and marketing based on online activity across different merchants and websites.
• When the User instructs us to disclose certain information to third parties, requests it or consents to it, for example for the purpose of shipping products or in connection with the use of social media widgets or login integrations.
• Recipients of data: depending on how the Services are used, recipients of data may include: Shopify (the store platform, including the Shopify Payments payment provider and Shopify Forms reservation forms), InPost (delivery), Google (Google Workspace/Gmail email and Google Analytics) and Meta (Meta Pixel and advertising tools).
• To comply with obligations arising from applicable law (including in response to subpoenas, search warrants and similar requests), to enforce the applicable terms of service or policies, and to protect and defend the Services, our rights, the rights of the User or the rights of others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about the User’s access to and use of the Services in order to provide and improve them. Information provided within the Services will be transferred to and shared with Shopify, as well as third parties that may be located in countries other than the User’s country of residence, in order to provide the services to the User. In addition, to secure, develop and improve our business, we use certain advanced Shopify features that include data and information obtained from the User’s interactions with our Store, with other merchants and with the Shopify platform. To provide the User with these advanced features, Shopify may use personal information collected during the User’s interactions with our Store, with other merchants and with the Shopify platform. In such circumstances, Shopify is responsible for the processing of the User’s personal information, including for responding to the User’s requests to exercise their rights relating to the use of the User’s personal information for these purposes. To learn more about how Shopify uses personal information and about any rights the User may have, please visit the Shopify Consumer Privacy Policy. Depending on their place of residence, the User can exercise applicable rights regarding their personal data here: Link to the Shopify privacy portal.

Cookies

Our store uses cookies and similar technologies. We use cookies that are necessary for the store to function without consent, while analytics and marketing cookies (including Google Analytics and Meta Pixel) are used only after consent is given in the banner displayed upon entering the website. Consent can be changed or withdrawn at any time using the settings available in the website footer.

Third-party websites and links

The Services may contain links to websites and other online platforms operated by third parties. If you move to websites that are not affiliated with us or controlled by us, please review their privacy and security policies and other terms and conditions. We do not guarantee the privacy or security of such websites and are not responsible for them. This includes, among other things, the accuracy, completeness and reliability of information found on those websites. Information the User provides in public or semi-public areas, including information shared on third-party social media platforms, may also be visible to other users of the Services and/or users of those third-party platforms without limitation as to its use by us or the third party. Our inclusion of such links does not in itself imply endorsement of the content on such platforms or of their owners or operators, except as explained in the Services.

Children’s data

The Services are not intended for use by children. We do not knowingly collect any personal information about children under the age of majority in the User’s jurisdiction. If the User is a parent or guardian of a child who has provided us with their personal information, the User may contact us using the contact details below to request its deletion. As of the effective date of this Privacy Policy, we have no actual knowledge of “sharing” or “selling” (as those terms are defined in applicable law) the personal data of persons under 16 years of age.

Security and retention of the User’s data

Please note that no security measures are perfect or impenetrable and we cannot guarantee “complete security”. Furthermore, any information transmitted to us may not be secure during transmission. We advise against using insecure channels to send us sensitive or confidential information.

How long we retain the User’s personal information depends on various factors, such as whether we need the information to maintain the User’s account, provide the Services to the User, meet legal requirements, resolve disputes or enforce other applicable contracts and policies.

In particular, we retain data for the following periods:

• Order data and sales records – 5 years from the end of the tax year in which the tax obligation arose.
• Data related to complaints, returns and pursuing claims – until the claims become time-barred.
• Reservation list sign-up – until the reservation is fulfilled or cancelled.
• Newsletter and marketing – until consent is withdrawn.
• Customer account – until it is deleted.

The User’s rights and choices

Depending on their place of residence, the User may have all or some of the following rights relating to their personal information. However, these rights are not absolute, may apply only in certain circumstances and, in some cases, we may refuse the User’s request to the extent permitted by law.

• Right of access/information. The User may have the right to access the personal information we hold about them.
• Right to erasure. The User may have the right to request deletion of the personal information we hold about them.
• Right to rectification. The User may have the right to request correction of inaccurate personal information we hold about them.
• Right to data portability. The User may have the right to obtain a copy of the personal information we hold about them and to request that it be transferred to a third party in certain circumstances and subject to certain exceptions.
• Management of communication preferences. We may send the User promotional emails, and the User may opt out of receiving them at any time using the unsubscribe option displayed in our emails to the User. If the User opts out, we may still send them non-promotional emails, for example about their account or orders they have placed.

The User may exercise any of these rights where indicated in the Services or by using the contact details below. To learn more about how Shopify uses the User’s personal information and the rights that may be available to them, including rights related to Shopify’s processing of data, please visit https://privacy.shopify.com/en.

We will not discriminate against the User for exercising any of these rights. We may need to verify the User’s identity before we proceed with their request, in accordance with applicable law. Under applicable law, the User may authorise a representative to submit requests on their behalf to exercise their rights. Before we accept such a request from a representative, we will require proof that they have been authorised by the User to act on their behalf, and we may also ask the User to confirm their identity directly. We will respond to the User’s request within the time frame required by applicable law.

Complaints

For complaints about how we process personal data, please contact us using the contact details below. Depending on their place of residence, the User may have the right to appeal our decision by contacting us using the contact details below, or to lodge a complaint with a local data protection authority. The User has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland). A list of competent data protection supervisory authorities in the EEA can be found here.

International data transfers

We may transfer, store and process the User’s personal information outside their country of residence.

If we transfer the User’s personal information outside the European Economic Area or the United Kingdom, we rely on recognised data transfer mechanisms, such as the European Commission’s standard contractual clauses or equivalent agreements issued by the relevant supervisory authority in the United Kingdom, unless the data is transferred to a country that has been deemed to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will publish the revised Privacy Policy on this website, update the “Last updated” date and notify the User of the changes in accordance with applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or wish to exercise any of the User’s rights, please contact us by phone at +48 696 816 998, by email at biuro@fliegerfields.com or by post at Maria Flieger (Flieger Fields), ul. Kasztanowa 10, 64-305 Bolewice, Poland. In accordance with applicable data protection law, the controller of the User’s personal information is Maria Flieger.