Who is responsible for your data?
ASPANEL Sp. z o.o., ul. Gdyńska 52, 80-297 Miszewko, Poland, KRS 0000917210, operates the online shop and is the controller for its operation. Write to [email protected] or the postal address above. If another ASPanel business issues your quote or invoice, check the seller’s name on it and its separate notice under the general terms of sale.
Enquiries, quotes and orders
When you request a quote for yourself, we use your contact details and enquiry to prepare the offer at your request (Article 6(1)(b) GDPR). For other correspondence, including enquiries from company representatives, our legitimate interest is keeping in touch and responding (point (f)). Providing details is voluntary, but we need a way to reply. Do not include national identification numbers, health information or card details in your message.
To fulfil an order we need buyer and contact details, the products ordered and, where applicable, delivery or invoicing details (point (b)). Without the required information we cannot provide the relevant service. We keep tax records for the statutory period (point (c)); correspondence for the time needed to handle the matter. We retain material needed for claims until the relevant limitation period expires or the dispute ends (point (f)).
Visiting the site and recipients
Serving the shop securely requires technical data such as IP address, request time and browser details. Protecting the site and investigating incidents are legitimate interests; relevant data are kept as long as needed to detect and investigate an incident. Consent (point (a)) is the basis for optional analytics and advertising that use personal data. The cookie policy describes providers, observed storage and how to change your choice.
Depending on the matter, recipients may include hosting, website security, email, enquiry management and payment providers, carriers, accountants and claims advisers. Loading embedded services such as Google Maps or YouTube may disclose your IP address and information about the page and device to their provider. You can contact the shop without using a map or player.
Providers and transfers outside the EEA
Consent to analytics is not consent to a transfer outside the European Economic Area. Yandex identifies Russia as a possible processing location. Russia has no EU adequacy decision. Yandex says it uses standard contractual clauses and provides a copy on request. Google describes transfer mechanisms that vary by service. For safeguards applicable to your data and a copy, write to [email protected].
Your rights
You may request access to your data and a copy, rectification, erasure or restriction. Portability covers data you provide that are processed automatically under consent or a contract. You can withdraw consent at any time without affecting the lawfulness of earlier processing. You may complain to the President of the Polish data protection authority (UODO) or a competent supervisory authority, including where you usually live.
Right to object
You may object to processing based on legitimate interests on grounds relating to your particular situation. You may always object to direct marketing without giving reasons; your data must then no longer be used for that purpose. Email [email protected] and describe your request. Please do not send a copy of your identity document unless requested.