Privacy and Cookies Policy
This Privacy and Cookies Policy (hereinafter referred to as the "Privacy Policy") provides information about the processing of your personal data and the use of cookies in connection with your use of the website operating at the address: https://anaspero.com (hereinafter referred to as the "Website").
1. Information about the Controller of Your Personal Data
The controller of your personal data is ANASPERO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office in Warsaw (02-521) at ul. Rakowiecka 39A/6, registered in the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under the number KRS: 0001024896, holding the NIP (Tax Identification Number): 5214010300, and REGON (National Business Registry Number): 52472586100000.
Hereinafter referred to as the “Personal Data Controller” or the “Company.”
2. Contact with the Personal Data Controller
For any matters related to the protection of personal data and this Privacy Policy, you can contact the Personal Data Controller through:
• Email: contact@anaspero.com
• In writing: ANASPERO sp. z o.o., Rakowiecka 39A/6, Warsaw (02-521)
3. Purposes and Legal Basis for Data Processing
Use this text to share information about your brand with your customers. Describe a product, share announcements, or welcome customers to your store.
Purpose of Processing | Personal Data | Legal Basis |
To contact you regarding the matter you described. |
|
Article 6(1)(f) of the GDPR - processing is necessary for the purpose of the legitimate interests pursued by the Company, which, in this case, is responding to your message sent to us using the contact details provided on our website. |
To enter into or perform a sales agreement with the Company. |
|
Article 6(1)(b) of the GDPR - processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract, in this case, concerning the sale of goods. |
To ship goods. |
|
Article 6(1)(b) of the GDPR - processing is necessary for the performance of a sales contract to which the data subject is a party. |
To conduct complaint proceedings. |
|
Article 6(1)(c) of the GDPR - processing is necessary to comply with a legal obligation to which the Company is subject, i.e., responding to a complaint submitted by a Consumer based on the Consumer Rights Act; Article 6(1)(f) of the GDPR - processing is necessary for the purpose of the legitimate interests pursued by the Company, which, in this case, is considering and responding to complaints made by individuals who are not consumers. |
To send a newsletter. |
|
Article 6(1)(b) of the GDPR - processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract concerning the provision of newsletter services. |
Fulfillment of tax obligations (including issuing VAT invoices, storing accounting records). |
|
Article 6(1)(c) of the GDPR - processing is a legal obligation incumbent on the Company. |
Use of cookies other than essential cookies. |
|
Article 6(1)(a) of the GDPR - processing of personal data is based on consent provided (upon first visit to the website, a request for consent to use cookies is displayed). |
Analysis of your activity on the website. |
|
Article 6(1)(f) of the GDPR - processing is necessary for the purpose of the legitimate interests pursued by the Company, which, in this case, is understanding your activity on the website. |
Archival and evidence purposes. |
|
Article 6(1)(f) of the GDPR - processing is necessary for the purpose of the legitimate interests pursued by the Company, which, in this case, is securing information that may serve to demonstrate legally relevant facts. |
Establishing, pursuing, or defending against claims. |
|
Article 6(1)(f) of the GDPR - processing is necessary for the purpose of the legitimate interests pursued by the Company, which, in this case, is the protection of the Company's financial interests. |
Fulfillment of obligations arising from the GDPR. |
|
Article 6(1)(c) of the GDPR - processing is a legal obligation incumbent on the Company; Article 6(1)(f) of the GDPR - processing is necessary for the purpose of the legitimate interests pursued by the Company, which, in this case, includes maintaining records and documentation as well as having information about individuals who have exercised their rights under the GDPR. |
4. Obligation to Provide Your Personal Data
You are not obligated to provide us with your personal data. Providing personal data is voluntary and depends on your decision. However, providing certain personal data is necessary to meet your expectations, for example, to contact the Personal Data Controller or to enter into or perform a contract with the Personal Data Controller. Please note that if you contact us regarding any matter, providing your data may be necessary, for example, to respond to your query or to conduct complaint proceedings.
5. Right to Withdraw Consent
If the processing of personal data is based on consent, you may withdraw this consent at any time, at your discretion, by changing your settings. If your personal data has been processed based on consent, withdrawing your consent does not render the processing of personal data illegal up to that point. In other words, until the consent is withdrawn, we are entitled to process your personal data, and the withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.
6. Profiling of Data and Automated Decision-Making
We inform you that your data will not be used by us for automated decision-making, including profiling.
7. Recipients of Personal Data
Like most businesses, we rely on the assistance of other entities, which often involves the need to transfer personal data.Therefore, if necessary, we may transfer your data to external service providers.
External service providers involved in processing your personal data include:
• Hosting companies that store data on servers,
• Entities providing technical services, if the technical work covers areas where personal data is located,
• Entities related to legal services who are bound by professional secrecy and gain access to personal data due to the need for legal assistance,
• Other subcontractors who gain access to data if necessary.
In addition, there may be situations where, for example, based on the applicable law or a decision of the competent authority, we may have to disclose your personal data to other entities, whether public or private. We ensure that each request for the disclosure of personal data is carefully and thoroughly analyzed to avoid unintentionally disclosing information to unauthorized persons.
8. Transfer of Data to Third Countries
Your data will not be processed outside the European Economic Area (EEA).
9. Duration of Personal Data Retention
Please note that, in accordance with applicable law, we do not process your personal data "indefinitely," but only for the time necessary to achieve the designated purpose. After this period, your personal data will be irreversibly deleted or destroyed.
The processing periods are described below:
• Correspondence handling – data related to correspondence handling will be processed for the duration of the correspondence between us;
• Conclusion or performance of a sales contract – data related to the conclusion of a contract with the Company will be processed until the expiration of claims arising from this contract, if it is concluded;
• Shipping of goods – data related to the shipment of goods will be processed until the expiration of claims arising from the concluded sales contract;
• Conducting complaint proceedings – data related to complaint proceedings will be processed for the duration of the complaint proceedings;
• Sending newsletters – data related to the conclusion and performance of the newsletter service contract will be processed until the expiration of claims arising from this contract;
• Fulfillment of tax obligations (including issuing VAT invoices, storing accounting records) – data related to fulfilling tax obligations will be processed for 5 years from the end of the year in which the tax payment deadline for the previous year has passed;
• Use of cookies (other than essential cookies) – data related to cookies will be processed until consent is withdrawn or the processing purpose is achieved;
• Analysis of activity on the website – data related to analyzing activity on the website will be processed until you successfully object or the processing purposes are achieved;
• Archival and evidence purposes – data related to archival and evidence purposes will be processed until you successfully object or the processing purposes are achieved;
• Establishment, pursuit, and defense of claims – data related to claims will be processed until the expiration of claims, with the limitation period for claims varying under applicable law;
• Fulfillment of obligations arising from the GDPR – data related to data protection will be processed until the data is no longer useful, you successfully object, or the statute of limitations for our liability as a Data Controller expires.
10. Rights Related to the Processing of Your Personal Data
We inform you that under the GDPR, you have the right to:
• Access your personal data;
• Rectify personal data;
• Delete personal data;
• Restrict the processing of personal data;
• Object to the processing of personal data;
• Data portability;
• Lodge a complaint with a supervisory authority (if you believe that we are processing data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office or another competent supervisory authority).
As the Data Controller, we respect your rights arising from data protection regulations and strive to facilitate their exercise to the greatest extent possible. We point out that the mentioned rights are not absolute; therefore, in some situations, we may lawfully refuse to comply with them. However, if we refuse to comply with a request, it is only after thorough analysis and only when such refusal is necessary.
11. Cookies
The Personal Data Controller uses cookies on its website, similar to other entities. Cookies are short text files stored on a user's computer, phone, tablet, or other devices. These cookies can be read by our system as well as by systems belonging to other entities whose services we use. We use cookies based on your consent, except in cases where cookies are necessary for the proper functioning of the website and where they operate based on the legitimate interest of the Personal Data Controller. Cookies that are not essential for the proper functioning of the website remain blocked until you give consent to use cookies. During your first visit to the website, we display a message asking for your consent, along with options to manage cookies, allowing you to decide which cookies you agree to and which you wish to block.
Cookies perform a variety of functions on the website, most of which are useful. We will describe some of these functions below:
• Functional (essential) cookies – The use of these cookies is necessary for the proper functioning of the website. We may place these cookies without your consent.
• Creating statistics – Cookies are used to analyze how users interact with the website (e.g., how many users visit the website, how long they stay, which content attracts the most interest, etc.). This allows us to continuously improve the website and tailor its performance to user preferences. To track activity and create statistics, we use tools such as Google Analytics.
• Use of social media features – Our website contains cookies that enable redirection to our profiles on those social media platforms. However, to make this possible, we must use cookies provided by external entities.
Your web browser, by default, allows the use of cookies on your device. Therefore, during your first visit, we ask for your consent to use cookies. However, if you do not wish to use cookies while browsing the website, you can change your browser settings—completely block the automatic handling of cookies or request a notification each time cookies are placed on your device. You can change these settings at any time.
You can manage your cookie settings within your web browser. You can block all or selected cookies. You can also block cookies from specific websites. At any time, you can also delete previously stored cookies and other site data and plugins. We provide you with the option to modify cookie settings from our website.
Web browsers also offer the option to use incognito mode. You can use this mode if you do not want information about visited pages and downloaded files to be saved in your browsing and download history. Cookies created in incognito mode are deleted when all incognito windows are closed. Please be aware that disabling or limiting the use of cookies may prevent you from using some features available on our website and may cause difficulties in using the site, as well as many other websites that use cookies.
12. Types of Cookies Used
Name | Description | Expiry | Function |
CookieConsent | Third-party cookie. | Session | This cookie records the user's consent decisions regarding the use of different categories of cookies. |
_ig | Third-party cookie - Instagram. | 90 days | This cookie helps identify users who have visited the website after viewing or clicking on an Instagram ad. |
_ga | Third-party cookie - Google Analytics. | 2 years | This cookie is used by Google Analytics to collect data on the number of visits a user makes to the website and the dates of their first and last visits. |
_ga _D8KGH1819Z | Third-party cookie - Google Analytics. | 2 years | This cookie records a unique user ID that is used to generate statistical data on how the website is used by the user. |
_gcl_au | Third-party cookie - Google Analytics. | 90 days | This cookie is used to track the effectiveness of advertising campaigns and user conversions on the website. |
13. Policy Updates
We may modify the Privacy Policy, particularly due to technological changes or changes in applicable law. You will be notified of any changes made to this Privacy Policy in a manner appropriate to the method of data processing. This Privacy Policy is effective from the 1.10.2024.