Privacy policy

§ 1. Who is the data controller

The controller of your personal data is PysiecIT, ul. Tysiąclecia 17, 98-346 Skomlin, Tax ID (NIP): 8322101053 (the “Controller”), which runs the online shop pysiec.pl.

In all matters concerning personal data you can write to sklep@pysiec.pl or by post to the Controller's address. We have not appointed a data protection officer, as we are not required to.

§ 2. What data we collect

We only process the data needed for a given purpose:

• when you order: name, delivery address, email address and phone number, and if you want an invoice - company name and tax ID,
• when you create an account: additionally a password (stored in encrypted form) and whatever you add yourself - addresses, pet profiles, wishlists and Paws programme points,
• when you contact us: email address, the message and any attachment,
• when you subscribe to the newsletter: email address,
• when you review products: your signature and the review text,
• automatically: IP address, browser and device information, and cookies (details in § 9).

Payments are handled by the operator Paynow - we never see or store your card details or bank login details.

§ 3. Purposes and legal bases

We process your data:

• to conclude and perform the sales contract: accept your order and payment, ship the parcel, handle a return or complaint (Art. 6(1)(b) GDPR),
• to run your account and the Paws programme (Art. 6(1)(b) GDPR),
• to issue invoices, keep accounts and meet other legal obligations (Art. 6(1)(c) GDPR),
• to reply to a message sent through the contact form (Art. 6(1)(a) and (f) GDPR),
• to send the newsletter - only with your consent (Art. 6(1)(a) GDPR),
• to publish your product review (Art. 6(1)(a) GDPR),
• to measure traffic in the shop and show relevant ads - only with the consent given in the cookie settings (Art. 6(1)(a) GDPR),
• to keep the shop secure and to establish, pursue and defend claims - our legitimate interest (Art. 6(1)(f) GDPR).

We do not make decisions about you based solely on automated processing that would have legal effects.

§ 4. Who we share data with

We do not sell your data. We share it only with companies that help us run the shop, and only to the extent necessary:

• the payment operator Paynow - to process payments,
• courier companies and InPost - to deliver your parcel,
• our hosting and email provider - the shop runs on its servers,
• our accounting office - for accounting documents,
• providers of analytics and advertising tools (e.g. Google) - only if you consent to this in the cookie settings.

We may also disclose data to public authorities where required by law.

§ 5. Transfers outside the EEA

As a rule, we process data within the European Economic Area. If, with your consent, we use tools from providers outside the EEA (e.g. Google), data may be transferred to third countries - only on the basis of a European Commission adequacy decision (e.g. the EU-US Data Privacy Framework) or standard contractual clauses.

§ 6. How long we keep data

We keep data:

• from orders - for the duration of the contract and then until the limitation periods for claims and tax obligations expire (usually 5 years from the end of the year in which the order was placed),
• from your account - until it is deleted,
• from the contact form - until the matter is closed, and then for as long as related claims may arise,
• for the newsletter - until you unsubscribe or withdraw your consent,
• product reviews - until we remove them or you ask us to,
• cookies - for the period given in § 9.

§ 7. Your rights

You have the right to:

• access your data and receive a copy of it,
• rectify (correct) your data,
• have your data erased,
• restrict processing,
• have your data transferred (data portability),
• object to processing based on our legitimate interest,
• withdraw your consent at any time - without affecting the lawfulness of processing before its withdrawal.

You can correct some of your data yourself under “My account” and unsubscribe from the newsletter at any time. For anything else, write to sklep@pysiec.pl - we will reply within one month at the latest.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).

§ 8. Do you have to provide data

Providing data is voluntary, but without the data needed for an order (name, address, email, phone) we cannot fulfil it. Without an email address you cannot subscribe to the newsletter and we cannot reply to your message.

§ 9. Cookies

Cookies are small text files stored in your browser. We divide them into three categories:

• necessary - the shop cannot work without them (basket, sign-in, language, currency, security, remembering your cookie choice); they do not require consent,
• analytics - help us understand how you use the shop (e.g. Google Analytics); only with your consent,
• marketing - used to show relevant ads and measure their effectiveness (e.g. Google Ads, Meta); only with your consent.

The shop currently uses necessary cookies only:

• PrestaShop-… - shop session: basket, sign-in, language and currency; up to 20 days,
• PHPSESSID - technical server session identifier,
• pysiec_consent - remembers your choice in the cookie banner; 180 days.

If we start using analytics or advertising tools, we will update this list and ask for your consent again.

You can change your choice at any time via the “Cookie settings” link at the bottom of the page. You can also delete or block cookies in your browser settings - but blocking necessary cookies will prevent you from shopping.

§ 10. Changes to this privacy policy

We may update this policy, e.g. when the law changes or we start using new tools. The current version is always on this page, and the date at the top shows when it took effect. We will announce significant changes on the shop's website.