Privacy policy
Privacy policy
This Privacy Policy sets out the rules for the collection, processing and use of personal data by PHU AQUATIK Aleksandra Jastrzębska.
"Personal data" is any information relating to an identified or identifiable natural person in accordance with Article 4(1) of the GDPR.
I. DATA CONTROLLER AND CONTACT DETAILS
The controller of personal data is Aleksandra Jastrzębska, conducting business activity under the business name Przedsiębiorstwo Handlowo-Usługowe AQUATIK Aleksandra Jastrzębska (Adamów 50, 05-825 Grodzisk Mazowiecki, Poland) (hereinafter: the „Controller”).
For personal data protection purposes, please contact: phone (+48) 533 241 279, sklep@aquatik.eu.
II. PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA
Server log files
Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation and security of our website as well as improving our services.
Proactive contact of the customer by e-mail
If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request. If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request.
Collection and processing when using the contact form
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact. If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request.
Customer account
When you open a customer account, we will collect your personal data in the scope given there (e.g., e-mail address and password). The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
Collection, processing, and transfer of personal data in orders
When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfilment of a contract with you.
Payment service providers
Use of the payment service provider Stripe
On our website we use the Stripe payment service of Stripe Payments Europe Ltd (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). The data processing serves the purpose of offering you payment via the payment service. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to be able to fulfil the contract with you with of the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. If required, Stripe reserves the right to obtain a credit report on the basis of mathematical-statistical procedures using credit rating agencies. For this purpose, Stripe transmits the personal data required for credit assessment to a credit rating agency and uses the obtained information on the statistical probability of payment default in order to reach a reasonable decision on the establishment, implementation or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical methods and include, among other things, address data. Your legitimate interests will be taken into account in accordance with the legal requirements. The data processing serves the purpose of a credit check for contract initiation. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default if Stripe pays in advance. For reasons that arise from your particular situation, you have the right to object to the processing of your personal data carried out on the basis of Art. 6 para. 1 lit. f GDPR at any time by notifying Stripe. The provision of the data is necessary for the conclusion of the contract with the payment method of your choice. Failure to provide such data shall mean that the contract cannot be concluded with the payment method you have selected.
All Stripe transactions are subject to Stripe Privacy Policy. You can find these at https://stripe.com/de/privacy
III. COOKIES
Our website uses cookies. Cookies are small text files which are saved in a user's internet browser or by the user's internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user's operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again.
Cookies will be stored on your computer or other device. You therefore have full control over the use of cookies. By choosing corresponding technical settings in your internet browser, you can be notified before the setting of cookies and you can decide whether to accept this setting in each individual case as well as prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. We would, however, like to point out that this may prevent you from making full use of all the functions of this website. Using the links below, you can find out how to manage cookies (or deactivate them, among other things) in major browsers:
1. Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
2. Microsoft Edge: https://support.microsoft.com/en-au/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
3. Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
4. Safari: https://support.apple.com/en-gb/guide/safari/ibrw850f6c51/mac
5. Opera: https://help.opera.com/en/latest/web-preferences/
When the user uses the website, cookies are used to identify the user's browser or device. Cookies collect various types of information which, as a rule, do not constitute personal data (they do not allow a specific user to be identified). However, some information, depending on its content and the manner of its use, may be linked to a specific person and thus be considered personal data. More information on the rules for processing personal data can be found in section II of this Privacy Policy.
Various cookies are used in the website, divided into the following categories:
By storage period:
1. session cookies - temporary files that remain on the user's device until the user logs out of the Website or closes the software. They are then automatically deleted from the user's device.
2. persistent cookies - remain on your device after the browser is closed for the period specified in the cookie parameters or until you delete them yourself.
By entity placing cookies:
1. first-party cookies - these are cookies placed by the Controller;
2. external / third-party cookies - these are cookies placed by advertising partners or other service providers. Cookies sent by these entities are intended to improve the effectiveness of presenting advertisements to the user that correspond to the user's online activity - third parties provide advertising content to users. More information on cookies used by those entities can be found in their privacy policies.
By cookie purposes:
1. technically necessary cookies
Insofar as no other information is given in the data protection declaration below we use only these technically necessary cookies to make our offering more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.Processing in regarg to cookies is carried out on the basis of art. 6 (1) lit. f GDPR due to our largely justified interest in ensuring the optimal functionality and security of the website as well as a user-friendly and effective design of our range of services.
2. preference cookies
Thanks to these cookies, the Website is more efficient and more personalised. They are used to adapt the operation of the Website to your needs. They may be set by the Controller or by external providers. If you do not allow these cookies, it is possible that some or all of these services will not work properly. These cookies may be used only on the basis of your consent.
3. statistical cookies
These cookies help us understand how users behave in the website, which subsequently affects the improvement of the content and services available on it. They help us measure the number of visitors and the source of traffic, which allows us to improve the operation of the website. These cookies may be used only on the basis of your consent.
4. marketing cookies
The purpose of these cookies is to remember your preferences and then, on that basis, display advertising content corresponding to your needs and expectations. These cookies may also be set by advertising partners. These cookies may be used only on the basis of your consent.
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the "Shopify Privacy & Compliance" consent tool from Shopify International Ltd (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is a company affiliated with Shopify Inc (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).The tool enables you to give your consent to data processing via the website, in particular the setting of cookies, and to make use of your right to withdraw consent you have already given. The purpose of data processing is to obtain and document the necessary consent for data processing and thus to comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify. You can find more information on data protection at Shopify at https://www.shopify.com/ca/legal/privacy .
Analysis
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google may have about you. Your IP address will first be truncated by us on our own servers. Google thus only receives pseudonymised data. Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies takes place with your consent.
We also use the Google Signals service in this context. Google Signals enables cross-device tracking. Hence, your data can be analysed across devices if you have enabeled "personalised advertising" in your account settings and your end devices are linked to your Google account. This makes it possible to identify which device is searching for products and then return to complete purchases on another device, such as a tablet. The cross-device reports created in this context contain only aggregated data. We therefore only receive statistics generated on the basis of Google Signals. To prevent Google Signals from collecting and storing data across devices, you can deactivate the "personalised advertising" function in your Google Account settings. For more information, please visit https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en&visit_id=639219652786195006-1627487323&rd=1&sjid=15402855164582834221-EU . For more information on data processing and data protection for Google Signals, please visit https://support.google.com/analytics/answer/7532985?hl=en
We use the extended implementation of the consent mode (Advanced Consent Mode). In this case, user data is transmitted to Google in the form of "pings" even if consent has not been granted. These pings may contain the following information, among others: IP address to derive the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website from which you accessed our website) or information about the triggering of website events such as a conversion. On the basis of this information, Google models user data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent.The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European data protection principles.
For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=en-GB&gl=de .
Use of Shopify Analytics
We use the statistical and analytical functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of an order processing. Shopify is an affiliated company of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).The processing of data serves to analyse this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and provided in reports, analyses and statistics. In the process, the following device information is collected and processed, among others: Web browser information, IP address, time zone and some of the cookies installed on your device. When you navigate the website, information is also collected on websites or products accessed, the referrer URL (website from which you accessed our website), and information on how you interact with the website. This is done using technologies such as cookies and web beacons, tags and pixels (electronic files that collect information about how you navigate the website). The use of cookies or comparable technologies is carried out with your consent. You can find more detailed information on data protection at Shopify at https://www.shopify.com/de/legal/datenschutz , information on the order processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used at https://www.shopify.com/de/legal/cookies .
Use of Google Ads conversion tracking
Our website uses the online marketing program "Google Ads", including conversion tracking (evaluation of user actions). Google conversion tracking is a service operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a different cookie. It is therefore not possible to track cookies relating to the websites of Ads customers. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. We use the extended implementation of the consent mode (Advanced Consent Mode). In this case, user data is transmitted to Google in the form of "pings" even if consent has not been granted. These pings may contain the following information, among others: IP address to derive the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website from which you accessed our website) or information about the triggering of website events such as a conversion. On the basis of this information, Google models user data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent. The use of cookies or comparable technologies is carried out with your consent. You will find more information as well as Google's data privacy policy at: https://www.google.com/policies/privacy/
Use of Google AdSense
Our website uses the AdSense function by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The data processing serves the purpose of renting out advertising space on the website and using these to address visitors to the website with targeted, interest-related advertising. This function displays personalised, interest-related adverts from the Google display network to visitors to the website. Google Analytics uses cookies, which make it possible to analyse your use of the website.On no account will Google associate your IP address with other Google data.The use of cookies or comparable technologies is carried out with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You will find more information as well as Google's data privacy policy at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/ .
Use of the remarketing or "similar target groups" function by Google Inc.
Our website uses the remarketing or "similar target groups" function by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). This application serves to analyse visitor behaviour and visitor interests. Google uses cookies to analyse website use, forming the basis for producing interest-related adverts. Cookies allow for the recording of website visits as well as anonymised data on the use of the website. The personal data of website visitors is not saved. If you then visit another website in the Google display network you will then be shown adverts which are more likely to take previous areas of product and information interest into account. The use of cookies or comparable technologies is carried out with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can find more detailed information on Google remarketing as well as the associated data privacy policy at: https://www.google.com/privacy/ads/ .
Use of Microsoft Advertising
Our website uses Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft"). The processing of data serves the purposes of marketing and advertising and the purpose of measuring the success of the advertising measures (conversion tracking). This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. It is, however, not possible to identify this user personally through this process. Microsoft Advertising uses technology such as cookies and tracking pixels which make it possible to analyse your use of the website. If you click on adverts placed by Microsoft Advertising, a cookie is placed on your computer for conversion tracking. This cookie has limited validity and cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Microsoft can recognise that you have clicked on the advert and were forwarded to this page. In this process the following information, inter alia, can be collected: IP address, identifiers (indicators) assigned by Microsoft, information on the browser and device you are using, Referrer URL (website via which you accessed our website), URL of our website. The use of cookies or comparable technologies is carried out with your consent. More information on data protection and the cookies used by Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement .
Plug-ins
Use of the Google Tag Manager
Our website uses the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). This application manages JavaScript tags and HTML tags which are used in particular to implement tracking and analysis tools. The data processing serves to facilitate the needs-based design and optimisation of our website. The Google Tag Manager itself neither stores cookies nor processes personal data. It does, however, enable the triggering of further tags which may collect and process personal data. You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/intl/de/tagmanager/use-policy.html
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves to facilitate the consistent display of fonts on our website. In order to load the fonts, a connection to Google servers is established when the page is accessed. Among other things, your IP address and information about the browser you are using will be processed and transmitted to Google. This data is not linked to your Google account. The use of cookies or comparable technologies is carried out with your consent. You can find more detailed information on the data processing and data protection at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq .
Use of Google Translate
We use the translation service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website via API integration. The data processing serves the purpose of presenting the information provided on the website in a different language. In order for the translation to be automatically displayed after you have selected a national language, the browser you are using connects to the Google servers. Cookies may be used for this purpose. Thereby, among other things, the following information can be collected and processed: IP address, URL of the page visited, date and time. The use of cookies or comparable technologies is carried out with your consent. You can find more information on the collection and use of your data by Google at: https://www.google.com/policies/privacy/ .
IV. RECIPIENTS OF PERSONAL DATA
Your personal data may be transferred to entities supporting the Controller in its business activity, as well as to entities authorised to access the data under provisions of law - the scope of data recipients may vary depending on the purposes of processing your personal data. Your personal data may be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers.
V. DURATIONS OF STORAGE
Your personal data will not be used or stored for longer than is necessary to achieve the purposes of processing, in particular:
1. in the case of processing your personal data in connection with the use of the website - personal data will be processed for the period of using the website, and in the scope of cookies - for the period of operation of a given cookie or until you delete them;
2. if your personal data is processed in connection with placing an order – the personal data may be processed for the period necessary to fulfil the order and settle the sales agreement. Information on placed orders may also be available within the user account, if created, for the period of use of the account;
3. if your personal data is processed in connection with creating a user account – the personal data will be processed until the user account is deleted;
4. in the case of processing your personal data in connection with making contact - personal data will be processed for the period necessary to handle the request and provide all explanations in this regard;
5. in the case of processing your personal data on the basis of the Controller's legitimate interest - personal data will be processed until the Controller has such legitimate interest or until an effective objection is lodged
6. in the case of processing your personal data on the basis of your consent - personal data will be processed until consent is withdrawn, the data cease to be up to date, or they are no longer useful for the specified purposes.
In each case, personal data may also be processed for the time necessary to:
1. fulfil legal obligations incumbent on the Controller - for the period resulting from applicable provisions of law;
2. establish, pursue or defend against claims - for the limitation period specified by applicable provisions of law.
Depending on the scope of personal data and the purposes of their processing, personal data may be stored for different periods. In each case, the longer retention period for personal data applies.
VI. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
As a rule, personal data are processed within the European Economic Area (hereinafter: "EEA"). However, data may be processed outside the EEA by the Controller's partners (e.g., your personal data may be transferred to Canada and United States of America). In such cases, the Controller ensures the transfer of data to countries in respect of which the European Commission has issued an adequacy decision, and in the absence of a European Commission decision, the Controller applies appropriate safeguards, e.g. standard contractual clauses. You may obtain a copy of the safeguards applied by contacting the Controller (contact details provided above).
VII. NECESSITY TO PROVIDE PERSONAL DATA
Providing personal data is generally voluntary, but it may prove necessary to achieve the purposes of processing, in particular to use the website, place an order, register a user account, establish contact or commercial relations, use marketing activities conducted.
Refusal to provide personal data may result, in particular, in the inability to use the website, place an order, register a user account, establish contact or commercial relations, use marketing activities conducted.
VIII. RIGHTS OF DATA SUBJECTS
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability.
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
Right to object
If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)f) GDPR, you have the right for reasons arising from your particular situation to object at any time to the processing of your data with future effect. If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.
Right to widraw of your consent
To the extent to which data are processed on the basis of your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
last update: 01.10.2026
