Privacy Policy

This Privacy Policy describes how Assopet Sp. Z o.o. collects, processes, and protects your personal data in accordance with the European General Data Protection Regulation (GDPR – Regulation EU 2016/679).

1. Data Controller

Company: Assopet Sp. Z o.o.
Address: Ul. Reymonta 19/7, 45-065 Opole – Poland
NIP (VAT ID): 9910501703
Email: info@assopet.com

2. Personal Data We Collect

- Full name, contact information (email, phone), and address
- Billing and shipping information
- Purchase and order details
- Communications and customer service inquiries
- Technical data such as IP address, device information, and browser type
- Cookies and usage data collected through analytics tools (see our Cookie Policy)

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:
- To fulfill orders and provide customer support (Art. 6(1)(b) GDPR)
- To comply with legal obligations (e.g. tax and accounting) (Art. 6(1)(c) GDPR)
- To manage shipping, returns, and warranties
- To send marketing and promotional materials, only with your prior consent (Art. 6(1)(a) GDPR)
- To improve our website, services, and user experience (based on legitimate interest, Art. 6(1)(f) GDPR)

4. Data Retention

We retain your data only for as long as necessary to fulfill the purposes for which it was collected, including legal, tax, and accounting obligations. Data related to orders is generally stored for at least 6 years.

5. Data Sharing and Transfers

We do not sell your data. Your data may be shared with trusted third parties such as:
- Payment providers (e.g., Stripe, PayPal)
- Logistics and shipping companies
- IT service providers and cloud storage

All transfers are encrypted and all third parties are contractually obliged to comply with GDPR.

6. Your Rights Under GDPR

You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (right to be forgotten)
- Withdraw consent at any time for processing based on consent
- Request data portability
- Object to processing based on legitimate interests
- File a complaint with a Supervisory Authority (e.g., UODO in Poland or other EU data protection authorities)

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes HTTPS encryption, firewalls, and access control policies.

8. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
📧 info@assopet.com