Privacy Policy

Data controller

ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Juliusza Słowackiego 55/1, 60-521 Poznań, Poland
NIP: 7812104791 | VAT No.: PL7812104791 | KRS: 0001221796 | REGON: 543896303
E-mail: info@unitpeptides.com

§1 General information

This privacy policy relates to the website www.unitpeptides.com. The controller is ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ based in Poznań, Poland.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Polish Data Protection Act (Ustawa o ochronie danych osobowych z dnia 10 maja 2018 r.).

We are committed to protecting your privacy. Please direct any inquiries regarding data protection to info@unitpeptides.com.

§2 Purposes and legal bases of data processing

Order processing (name, address, e-mail, telephone, payment data) – Legal basis: Contract fulfillment (Art. 6 para. 1 lit. b GDPR). Storage: until fulfillment of the contract and statutory retention periods.
Account management – legal basis: fulfillment of contract (Art. 6 para. 1 lit. b GDPR). Storage until account deletion.
Complaint processing – legal basis: fulfillment of contract and legal obligation (Art. 6 para. 1 lit. b and c GDPR).
Accounting and taxes – Legal basis: legal obligation (Art. 6 para. 1 lit. c GDPR). Storage period: 5 years after the end of the tax year.
Marketing (newsletter) – Legal basis: Consent (Art. 6 para. 1 lit. a GDPR). Storage until revocation, max. 3 years.
Website analysis and optimization – Legal basis: Consent (Art. 6 para. 1 lit. a GDPR).
Assertion, exercise and defense of legal claims – legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).
Processing of inquiries via contact form or e-mail – Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR). Storage period: up to 12 months.
Age verification (18+) – Legal basis: legal obligation and legitimate interest (Art. 6 para. 1 lit. c and f GDPR).

§3 Recipients of personal data

We only pass on your data to the following categories of recipients, who in turn are bound by data processing agreements (Art. 28 GDPR) to comply with the GDPR:

Hosting provider: SiteGround (SiteGround Hosting Ltd., Bulgaria/EU)
Shipping service provider: DHL eCommerce Poland
Accounting and legal service provider: wFirma sp. z o.o. (Poland)
Order processing software: Baselinker sp. z o.o. (Poland)
Analysis and marketing services: Google LLC (Google Analytics, Google Ads, Google Tag Manager), Meta Platforms Ireland Ltd. (Facebook Pixel)
Cookie Consent Management: Complianz B.V. (Netherlands)
Banks and payment service providers for SEPA credit transfers
Payment service provider (for selected countries): Wallid (pay-by-bank via Open Banking, PSD2-compliant)
IT service provider for maintenance and support

§4 Data transfer to third countries

When using the services of Google LLC and Meta Platforms, data may be transferred to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (adequacy decision of the European Commission of July 10, 2023). Google LLC and Meta are certified under this framework.

For other third countries without an adequacy decision, we use standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. A copy of these clauses is available on request at info@unitpeptides.com

§5 Rights of the data subjects

You have the following rights under the GDPR:

Information about your processed data (Art. 15 GDPR)
Correction of incorrect data (Art. 16 GDPR)
Erasure of your data (“right to be forgotten”, Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability in a machine-readable format (Art. 20 GDPR)
Objection to processing on the basis of legitimate interests (Art. 21 GDPR)
Withdrawal of consent at any time with effect for the future (Art. 7 (3) GDPR)

Please send inquiries to info@unitpeptides.com. We will reply within 30 days.

Complaints to the supervisory authority:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
Website: uodo.gov.pl

You can also contact the supervisory authority in your country of residence.

§6 Data security

We use technical and organizational measures in accordance with Art. 32 GDPR to protect your data:

SSL/TLS encryption of the entire website
Regular updates of software and plugins
Access to data according to the principle of minimal rights assignment
Regular security backups
Encrypted data transmission for payment processing

§7 Analysis and marketing tools

7.1 Google Analytics

We use Google Analytics 4 (Google LLC, USA) to analyze website usage. Cookies are set to record usage behavior anonymously. IP anonymization is activated.

You can prevent the collection of data by installing the browser add-on to deactivate Google Analytics or by adjusting the cookie setting

7.2 Google Ads and Google Tag Manager

We use Google Ads and Google Tag Manager to measure the success of our advertising campaigns and provide relevant advertising. You can manage your advertising settings at adssettings.google.com.

7.3 Meta pixel (Facebook pixel)

We use the meta pixel (Meta Platforms Ireland Ltd.) to measure conversions and optimize advertising campaigns on Facebook and Instagram. Data processing only takes place with your consent. You can manage your advertising settings at facebook.com/settings?tab=ads.

7.4 Wetracked

We use the tracking service Wetracked.io for the internal analysis of conversions and orders. Processing is anonymized on the basis of your consent.

7.5 Google reCAPTCHA

We use Google reCAPTCHA to protect against spam and automated access to forms. Google’s privacy policy applies: policies.google.com/privacy.

All marketing and analysis tools are only activated with your express consent via the cookie banner. You can revoke your consent at any time.

§8 Cookies

8.1 What are cookies?

Cookies are small text files that are stored on your end device when you visit a website. They contain the name of the website, a unique identifier and the storage duration.

8.2 Types of cookies used

Necessary cookies: For basic website functions (shopping cart, login, language selection). Storage period: up to 12 months. No consent required (Art. 6 para. 1 lit. f GDPR).
Functional cookies: Storage of preferences (language, currency). Storage period: up to 12 months. With consent.
Analytical cookies: Google Analytics 4 for usage analysis. Storage period: up to 26 months. With consent.
Marketing cookies: Google Ads, Meta-Pixel, Wetracked for personalized advertising. Storage period: up to 13 months. With consent.

8.3 Cookie management

You can adjust your cookie preferences at any time via the cookie banner or manage them via your browser settings. Instructions for common browsers:

Deactivating necessary cookies may impair the functionality of the website.

8.4 Cookie Consent Management

We use the Complianz tool (Complianz B.V., Netherlands) to manage your cookie consents. Your consents are stored locally in your browser.

§9 Hosting

The website is hosted by SiteGround Hosting Ltd (Bulgaria/EU). The following data is recorded in server logs when the website is accessed:

Requested resource (URL)
Date and time of access
HTTP status code
Referrer URL
Browser and operating system information
IP address (anonymized after a short time)

The processing is carried out to ensure the functionality and security of the website on the basis of Art. 6 para. 1 lit. f GDPR.

§10 Shipping and payment processing

To ship your order, we transmit the necessary data (name, address, e-mail, telephone number if applicable) to DHL eCommerce Poland. The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment).

For payment processing by bank transfer, your bank details are transmitted to our banks. We do not use third-party payment service providers for payment

§11 Information collected via forms

When using the order or contact form, you voluntarily provide personal data. Mandatory fields are marked as such. We will not be able to process your order or inquiry if you do not provide this information.

Connection parameters (IP address, time stamp) are logged briefly for security purposes.

§12 Automated decision-making and profiling

We use profiling in the context of advertising services (Google Ads Remarketing, Meta Pixel) to show relevant advertisements. This processing has no legal or similarly significant effect within the meaning of Art. 22 GDPR.

Fully automated decision-making with legal effect does not take place. You can object to profiling at any time.

§13 Newsletter

If you subscribe to our newsletter, we will process your e-mail address and, if applicable, your first name on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can unsubscribe at any time using the unsubscribe link in every email or by sending a message to info@unitpeptides.com.

§14 Multilingual website (GTranslate)

Our website is multilingual. We use the GTranslate plugin to manage the languages. Cookies save your selected language to display the correct content.

§15 Changes to the privacy policy

We reserve the right to adapt this privacy policy to current legal provisions or changes in processing practices. Significant changes will be communicated on the website. We recommend that you check this declaration regularly.

ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Juliusza Słowackiego 55/1, 60-521 Poznań, Poland
NIP: 7812104791
VAT No.: PL7812104791
KRS: 0001221796
REGON: 543896303
E-Mail: info@unitpeptides.com