Privacy Policy

1. In connection with the operation of the Store available at www.peptomed.pl along with its functionalities, we hereby inform you about the protection and use of Personal Data for purposes related to the requirements of Article 13 of the GDPR.

2. The Personal Data Administrator is Pepto Med Spółka z ograniczoną odpowiedzialnością with its registered office in Białystok, ul. M. Skłodowskiej-Curie 3 lok. 63, 15-094 Białystok, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court in Białystok, XII Commercial Division of the National Court Register under KRS number 0000965574, NIP 5423447260, REGON 521725139.

3. The processing of personal data is carried out in accordance with the principles set out in the Act of May 10, 2018, on the protection of personal data, the Act on the provision of electronic services, and the provisions of these Terms and Conditions, while maintaining appropriate technical and organizational measures that meet the requirements of Polish law.

4. The basis for data processing is always the consent given by the Customer.

5. The collected personal and address data include: a) first name and last name; b) residential address, correspondence address, delivery address; c) phone number; d) email address; e) NIP, Regon, KRS number; f) bank account number; g) transactional data - payments made to and from the account, h) contractual data - concluded agreements, i) communication data - conducted communications, j) transactional data;

6. Personal and address data are collected during the use of the Store, for example: a) Using the functionalities of the Service, b) registration in the Service when creating an Account, c) verification and identification (e.g., during login), d) concluding agreements for the provision of Services and Transport Services, e) implementation of agreements concluded using the Store; f) compliance with legal regulations; g) for the purposes of promotional and commercial activities of the Operator, only after receiving additional consent.

7. The reason for collecting personal and address data is to enable the provision of services, primarily including: a) using the functionalities of the Store (including logging in); b) concluding and performing agreements for the provision of Services, which are concluded using the Store; c) sending information about changes in the terms of service provision, particularly changes in the price list and Regulations; d) handling receivables and claims related to concluded agreements, including the complaint and debt collection process; e) enabling communication between the Seller, Carrier, and Customer; f) conducting correspondence; g) preparing accounting documentation, including issuing invoices; h) preparing documentation of concluded agreements; i) conducting statistical studies for archival purposes; j) fulfilling other obligations arising from universally applicable law; k) only with additional consent - sending commercial information electronically, informing about promotions.

8. The legal basis for the processing of Personal Data is: a) the performance of a service agreement specified by the Regulations of the Store operated by Pepto Med Sp. z o.o. with its registered office in Białystok (pursuant to Article 6(1)(b) GDPR); b) compliance with a legal obligation of the Seller (pursuant to Article 6(1)(c) and (3) GDPR); c) pursuing or securing claims (pursuant to Article 6(1)(f) GDPR); d) only with additional consent, marketing of own products or services (pursuant to Article 6(1)(f) GDPR).

9. Personal Data is stored and processed using the required legal technical and organizational measures to ensure their protection. Personal data is protected against unauthorized acquisition and modification in accordance with the Seller's internal procedures. For the provision of Services, the recipients of Personal Data are: a) Carriers selected by Service Recipients (Couriers), such as InPost Paczkomaty, InPost Kurier (and their subcontractors); b) banks and payment system operators ensuring payment processing, refunding (cash on delivery); c) entities providing accounting services; d) persons and entities performing commissioned services, including senders known to Clients providing them with dedicated discount codes; e) entities dealing with claim enforcement and legal services; f) entities providing or mediating teleinformatics services, including hosting providers; g) persons, bodies, and institutions authorized to access personal data based on applicable regulations.

10. Personal Data collected in connection with the operation of the www.peptomed.pl Store and the conclusion of Agreements will be stored: a) for the duration of the concluded agreement - until its completion, and thereafter for the period required by universally applicable law, b) in connection with the fulfillment of all obligations arising from the agreement - until the expiration of the limitation period for claims, c) in the scope of fulfilling legal obligations related to the conduct of business and performance of agreements - until these obligations are fulfilled, d) in case of consent to receive information about current promotions and offers, and/or to receive commercial information - until the consent is withdrawn.

11. The Customer always has the right to: a) request access to their personal data, rectification, deletion, and restriction of processing, as well as data portability. b) withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. c) object to the processing of personal data at any time. d) file a complaint with the supervisory authority (GIODO). e) in case of consent to the processing of personal data for receiving commercial information, this consent can be withdrawn at any time.

12. Providing personal and address data is voluntary, but failure to provide or incomplete provision of personal data may prevent the use of the Store's functionalities.

13. In case of placing an order using the Store, the Seller may, for the purpose of improving the service process, send messages to the Customer's provided electronic address or contact by phone at the provided phone number, as well as contact in other forms using remote communication means for: a) responding to the Customer's messages; b) providing the Customer with information about the order; c) clarifying payment issues for the order; d) explaining and correcting any errors or ambiguities.

14. We do not use profiling and automated decision-making processes.

15. In the event of information about a data protection breach or any situation constituting a data security breach, please inform us immediately. This will allow us to determine the cause of the breach and take all necessary actions to eliminate the breach and adequately protect personal data from further breaches.

16. After the deletion or blocking of the Account, the Seller processes the Customers' Personal Data in accordance with applicable law and these Regulations for the purpose of: a) proper settlement of ordered Products; b) proper completion of services for the Customer; c) handling complaints; d) own financial and tax reporting.

17. In case of transfer of rights related to the Store to another entity, the data, including the Customer's personal data along with the Store, will be transferred to the purchaser of the Store's rights, which the Customer agrees to by accepting these Regulations.