Česká republika 
Deutschland 
Österreich 
United Kingdom 
Suomi 
France 
Magyarország 
Italia 
Polska 
România 
Україна 
Europe 
Privacy policy
Privacy Policy
as of 26.10.2026
- Who is the administrator of your personal data?
- Who can you contact regarding the processing of your personal data?
- What kind of personal data do we process?
- Where do we get your personal information from?
- Do you have to give us your personal information?
- What are the purposes, legal basis and duration of the processing of your personal data?
- Who has access to your personal information?
- Is your data transferred to third countries or international organizations?
- Do we make decisions based solely on automated processing including profiling?
- What rights do you have as we process your personal data?
- What are cookies and do we use them?
- On what basis do we use cookies?
- Can you disable/block/manage cookies?
- What do we use personal cookies for?
- What do we use third-party cookies for?
- How can you increase your privacy and control over your personal information?
- Is this complete information about the processing of personal data?
- Will we be changing the Privacy Policy?
This Policy applies to our online stores and our mobile application. When we write "our store," we mean all of these together. Where something works differently on the website than in the app, we say so explicitly.
- Who is the administrator of your personal data?
The administrator of your personal data is FHTM sp. z o.o. with its registered office at ul. Graniczna 8C, 54-610 Wrocław, Poland (hereinafter: FHTM)
- Who can you contact regarding the processing of your personal data?
We have appointed a Data Protection Officer (DPO), who is the most appropriate person to contact in matters related to the processing of your personal data. The data protection officer is Rafał Tochman. You can contact him at iod@militaria.pl.
Alternatively, you can contact us by sending a mail to our mailing address provided in the previous section.
- What kind of personal data do we process?
Personal data that we may process in connection with your use of our online store include:
- name and surname,
- e-mail address,
- data contained in email correspondence,
- information visible on social media profiles,
- date of birth,
- identity document number and series,
- delivery address,
- business address,
- VAT identification number,
- phone number,
- details of placed orders,
- bank account number,
- IP address,
- location,
- photos you attach to product reviews,
- statistics related to newsletters.
In order to optimize the performance of our online store, we use external tools that collect information about how you use our store. In particular, this includes the following data:
- information about your device (operating system, web browser and its version, screen resolution),
- information about accepting/rejecting cookies,
- user ID,
- date you visited the site,
- time spent on the site,
- behavior on the site (sub-pages visited, transitions between sub-pages, clicks/taps),
- source from which you came,
- interests.
We use external tools over which we have limited influence. Their administrators may combine information from the cookies stored by our store with other information about you that they have acquired previously and will acquire in the future. In our opinion, in this situation we do not process personal data, but only provide anonymous data, which is combined with other data by third parties and acquires a personal character.
However, since there are other interpretations of this situation, as a precaution, we inform you of this fact.
The external tools and third parties we mention are most often based on cookies. You can find detailed information about cookies later in the Privacy Policy. The tools we use are listed in the section "What do we use third-party cookies for?"
- Where do we get your personal information from?
We obtain your personal information from you. You provide it to us when:
- you register an account in our store and loyalty program,
- install our mobile application and grant it permissions, e.g., to your location or camera,
- you sign in to the app using an external account (e.g., Google, Facebook),
- placing an order,
- you file a complaint,
- you sign up for the newsletter,
- you can contact us by phone, through the contact form, via the website chat, or by email,
- you submit requests or inquiries to us regarding the processing of personal data,
- you interact with our chatbot,
- you interact with our social media profiles.
Some personal information is also collected automatically by the tools and systems we use:
- the store's software and server record your IP address in logs,
- marketing automation software records your IP address, your interactions with the messages we send (information about opening emails, clicking on links, etc.), and your interactions with our store (e.g., adding or removing a product from your cart),
- the mobile application transmits to us information about your device and how you use it,
- statistical tools collect information regarding your activities on the site.
- Do you have to give us your personal information?
You are not obliged to provide your personal data. However, if you do not provide them, the purpose of processing (e.g. creating an account, placing an order) will not be possible. n the mobile application, placing an order requires signing in to an MRC account.
- What are the purposes, legal basis and duration of the processing of your personal
data?
Purpose of processing Legal basis Processing time Customer service Article 6(1)(b) GDPR - contract entry and fulfillment. Duration of the contract. Duration of our obligations under warranty, guarantee, etc. The duration of complaint processing. Sale of goods subject to licensing Art. 6(1)(c) GDPR in conjunction with the Act of June 13, 2019 on the conduct of business activity in the field of manufacturing and trading in explosives, weapons, ammunition, and products and technology of military or police intended use,
Art. 6(1)(f) GDPR – our legitimate interest consisting in expanding the means of contact regarding the transaction being processed.For 10 years from the documentation of the sale. Bookkeeping Art. 6(1)(c) GDPR in conjunction with tax regulations. Until the expiry of the period for which we are legally required to retain accounting documentation. Handling correspondence Article 6(1)(f) GDPR - our legitimate interest in exchanging correspondence. Until we determine that the purpose of the correspondence has been achieved, or until a valid objection to the processing of your personal data is lodged. Newsletter service Art. 6(1)(a) GDPR - consent or Art. 6(1)(f) GDPR - our legitimate interest in sending the newsletter - depending on what is the basis for processing. Until you withdraw your consent or make an effective objection to the processing of your personal data. Service notifications in the app Art. 6(1)(b) GDPR – conclusion and performance of a contract, including the Military Rewards Club agreement. For the duration of the contract or for as long as you hold an account. Marketing notifications in the app Art. 6(1)(f) GDPR – our legitimate interest in sending you information about our offer, in connection with Art. 398 of the Electronic Communications Law. Until you withdraw your consent or until you file an effective objection to the processing of your personal data. Social media management Art. 6(1)(f) GDPR - our legitimate interest in maintaining social media profiles Until you remove the data from social media Analysis and statistics Article 6(1)(f) GDPR - our legitimate interest in creating and analyzing statistics to optimize store operations. Until the data ceases to be useful, or in accordance with the retention period offered by the individual tools, or until you lodge an effective objection to the processing of your personal data. Collecting reviews and survey research Art. 6(1)(f) GDPR – our legitimate interest consisting in collecting feedback used in improving. Until you lodge an effective objection, or until the purpose for which we collected the data ceases to exist — whichever occurs first. Own marketing Art. 6(1)(f) GDPR – our legitimate interest consisting in targeting advertisements or Art. 6(1)(a) GDPR – consent — depending on what constitutes the legal basis for processing. Until the data ceases to be useful, or in accordance with the retention period imposed by the individual tools, or until you withdraw your consent, or until you lodge an effective objection to the processing of your personal data. Transfer of data to entities providing financial services Art. 6(1)(f) GDPR – our legitimate interest in transferring personal data to entities indicated by you in order to facilitate your conclusion of an agreement with those entities. Duration of data transmission. Security Until the data ceases to be useful, or in accordance with the retention period imposed by the individual tools, or until you withdraw your consent, or until you lodge an effective objection to the processing of your personal data. 6 months from the moment of cookie installation or from the last interaction with the website, or until the user independently deletes the cookies. Operation and diagnostics of the mobile application Art. 6(1)(f) GDPR – our legitimate interest in ensuring the correct operation of the application and in detecting and resolving failures. In accordance with the retention period offered by the individual tools. Handling of requests or inquiries regarding the processing of personal data Art. 6(1)(c) GDPR in conjunction with the requirements of GDPR. Until the statute of limitations expires or until claims are satisfied.Pursuing claims, defending against claims, satisfying claims. Pursuing claims, defending against claims, satisfying claims. Art. 6(1)(f) GDPR – our legitimate interest consisting in defending, establishing or pursuing claims related to FHTM's business activity. Until the statute of limitations expires or until claims are satisfied. Where we process your personal data on the basis of consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing carried out before its withdrawal.
- Who has access to your personal information?
Access to your personal data may be granted to our employees and associates, as well as to service providers used in our business activity:
- hosting providers,
- provider of programming and maintenance services for the store software,
- provider of marketing automation services,
- providers of analytics services,
- provider of the in-app notification delivery service,
- providers of tools for collecting reviews and conducting surveys,
- provider of the app crash detection tool,
- provider of the tool for measuring advertising effectiveness and app install sources,
- providers of other sales support services,
- entities providing IT support services,
entities cooperating with us or acting by operation of law, which become the controller of your personal data:
- providers of postal and courier services,
- legal counsels and attorneys (where their work on our behalf requires access to personal data),
- entities providing financial services (payment intermediaries),
- banks,
- authorized public authorities.
- Is your data transferred to third countries or international organizations?
A third country is a country in which the GDPR is not applicable law. Because we use the services of entities that are based in or process data in third countries, your data may be transferred there..
The transfer of personal data to third countries takes place:
- in accordance with the European Commission decision of July 10, 2023, recognizing the adequacy of protection provided by the USA, or
- in accordance with European Commission Decision No. 2011/61/EU of January 31, 2011, recognizing the adequacy of protection provided by Israel, or
- on the basis of the so-called Standard Contractual Clauses in accordance with European Commission Decision No. 2021/914/EU of June 4, 2021.
- Do we make decisions based solely on automated processing, including
profiling?
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
The store uses mechanisms that collect data about how you use it, and about the products you browse and purchase. However, they do not affect your status as a Customer. They allow us to customize advertising and direct offers to you that are best matched to your needs.
- What rights do you have as we process your personal data?
As we process your personal data, you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request erasure of your personal data,
- request restriction of processing of your personal data,
- notification of recipients regarding changes in the processing of your personal data,
- request portability of your personal data to another controller,
- objecting to the processing of your personal data,
- lodging a complaint with the President of the Personal Data Protection Office.
Not all of the above rights are absolute and may not always be available to you. For example, we will not delete Your personal data upon your request if the law requires us to process it. If you need a broader explanation of the meaning of these rights and the rules for exercising them, you will find it in Articles 12–23 of the GDPR.
You can delete your account on your own after signing in:
- on our website by selecting "Account" > "My Account" > "Edit Account Details" > "Delete Account", or
- app by selecting "Account" > "Consents" > "Delete Account".
- On what basis do we use cookies?
Some of the cookies we use are cookies necessary for the proper functioning of our online store. Under applicable law (Art. 399(3) of the Electronic Communications Law), we may store these cookies on your device.
In other cases, we ask for your consent. Other cookies are blocked until you give your consent by accepting all remaining or selected cookies.
- Can you disable/block/manage cookies?
Yes, there are several ways to do this.
Cookie management mechanism in our online store
In our online store, we use a mechanism that blocks all cookies (except necessary ones) on your first visit. Until you accept cookies, they will not be stored on your device. If we have received your consent to cookies and you wish to withdraw it, you can do so as well. At the bottom of the page there is a link that takes you to the cookie management screen, where you can change your preferences at any time.Web browsers
All leading web browsers offer many options for managing cookies. You can block them and delete them from your device. You can use private (incognito) mode, in which cookies should be deleted when the web browser is closed.You can also use many web browser extensions that provide greater cookie management capabilities.
-
How does it work in the mobile application?
The app consists of two parts. In the native part, the role of cookies is fulfilled by your device identifiers and data stored and read by tools built into the app. The cart and order finalization open in the view of our store's website inside the app — cookies are present there, but in a narrower scope than on a page opened in a web browser. We only activate what is necessary to place an order, and what you have consented to on the consent screen in the app.
The rules we described above apply in the same way: what is necessary for operation we activate immediately, and in all other cases we ask for your consent. We display the consent screen at the first launch of the app and we ask for consent only there — when proceeding to the cart, we do not ask you for it a second time. You can change your choice at any time in the app settings. Some settings are located outside the app — in your phone's settings you decide on permissions, on the customization of ads, and on whether you want to receive notifications.
- What do we use personal cookies for?
We use personal cookies for the proper operation of the mechanisms of our store, such as sending forms, remembering your choice regarding language, country and related currency or cookie preferences.
- How can you enhance your privacy and control over personal data?
The ways to increase privacy were mentioned earlier.
We'll summarize that information, adding a few more ways to increase privacy (not just on our store's website):- use cookie management mechanisms on websites and do not allow cookies you do not want,
- install browser plugins with cookie-blocking and other tracking-blocking mechanisms in your web browser (specialists recommend Ghostery, uBlock Origin),
- use private (incognito) mode in your web browser,
- use web browsers designed to protect your privacy (e.g., DuckDuckGo Browser, Brave),
- use the available behavioral advertising settings mechanisms, e.g., youronlinechoices.eu,
- in your phone settings, check what permissions you have granted to our app and revoke those you do not need,
- in your phone settings, limit ad customization and reset your advertising identifier,
- in your phone settings, decide whether our app may send you notifications,
- use the privacy settings on your Facebook, Google, etc. accounts.
- Is this complete information about the processing of personal data?
The processing of personal data is a complex subject, especially when modern technologies are involved. We want to strike a balance between detail and comprehensiveness on the one hand, and readability of information on the other. Therefore, this document does not cover everything about the processing of your personal data. However, it contains more than what GDPR requires.
If any of the information in the Privacy Policy is unclear to you, or if you would like to obtain more information regarding the processing of your personal data, simply write to us at iod@militaria.pl. - Will we be changing the Privacy Policy?
We want to provide you with up-to-date information about the processing of your personal data. This processing changes due to the development of FHTM, technological changes in our store and in the tools we use, as well as changes in the law. Therefore, this Policy will also change. You will find the current version of the Policy on this page.
