Privacy policy
1. Data controller
The controller of your personal data is AVELOR Spółka z ograniczoną odpowiedzialnością (AVELOR sp. z o.o.), with its registered office at Aleja Jana Pawła II 27, 00-867 Warszawa, NIP 5273131092, REGON 529707514, KRS 0001128524. For data matters write to [email protected].
2. What data we collect
Full name, delivery address, email and phone (to fulfil the order), order history and technical data (IP address, cookies). We do not collect or store payment card data.
3. Purposes and legal bases (GDPR)
- Order and contract fulfilment — art. 6 para. 1 point b GDPR.
- Accounting and tax obligations — art. 6 para. 1 point c GDPR.
- Handling enquiries, including B2B — art. 6 para. 1 point f GDPR (legitimate interest).
- Newsletter, if you sign up — art. 6 para. 1 point a GDPR (consent, which you can withdraw).
4. Data recipients
We pass data only to entities necessary to fulfil the order: the payment operator (Stripe), the courier company, the hosting and email provider and the accounting office. Each of them processes data on the basis of a data-processing agreement.
5. How long we keep data
Order data for the period required by tax regulations (5 years), data from enquiries until the matter is resolved, newsletter data until consent is withdrawn.
6. Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, port it and object. You may also lodge a complaint with the supervisory authority for data protection.
7. Cookies
We use cookies necessary for the operation of the basket and session and, with your consent, for statistics. You can change cookie settings in your browser.