1. Data controller
The controller of personal data is HESP Sp. z o.o. with its registered office in Poznań (ul. Święty Marcin 29/8, 61-806 Poznań), KRS: 0001178327, NIP: 7831931118, REGON: 541987705.
For matters related to personal data protection, please contact us at: biuro@hesp.pl.
2. Scope of processed data
Depending on how you use the website and Store, we may process in particular:
- first and last name,
- email address,
- phone number,
- delivery or billing address,
- order and payment data,
- correspondence data (contact form, quote requests),
- technical data (IP address, cookies, server logs).
3. Purposes and legal bases for processing
We process personal data for the following purposes:
- contract performance — Art. 6(1)(b) GDPR (orders, quotes, service delivery),
- handling enquiries — Art. 6(1)(f) GDPR (legitimate interest of the Controller),
- legal obligations — Art. 6(1)(c) GDPR (e.g. issuing accounting documents),
- own marketing — Art. 6(1)(f) GDPR or consent — Art. 6(1)(a) GDPR,
- pursuing claims — Art. 6(1)(f) GDPR.
4. Data recipients
Data may be shared with entities supporting our operations, in particular:
- hosting and IT service providers,
- payment operators,
- courier companies,
- accounting office,
- marketing and analytics providers.
Data is shared only to the extent necessary for the stated purposes and on the basis of data processing agreements where required.
5. Data retention period
- contract-related data — for the duration of the contract and the limitation period for claims,
- accounting data — for the period required by law,
- marketing data — until consent is withdrawn or an objection is raised,
- technical data — for the period necessary to ensure security and proper operation of the service.
6. Rights of data subjects
You have the right to:
- access your data,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
7. Cookies
The website uses cookies to ensure proper operation, remember user preferences, support the shopping cart and — with consent — for statistics and marketing activities.
You can manage cookies in your browser settings. Restricting cookies may affect some Store features.
8. Data security
We apply technical and organisational measures appropriate to the risk of violating the rights and freedoms of data subjects, including SSL encryption, access control and regular system updates.
9. Policy changes
This Privacy Policy may be updated. The current version is always available on this page. In case of material changes, we will inform users in a visible manner on the website.