Privacy Policy

Acting on the basis of Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR, General Data Protection Regulation), we hereby provide you with the following information regarding the processing and protection of your personal data, as well as our use of cookies.

This Privacy Policy (hereinafter referred to as "Policy") is informational in nature, meaning that it is not a source of obligations for Customers (it is not a contract or terms of service).

§ 1. Personal Data Administrator

The administrator of personal data:

  • obtained through the Online Store (including the use of cookies or similar technology) or other communication channels with the Customer;
  • obtained based on the Customer's activity on the Internet

is the company Aronpharma Spółka z ograniczoną odpowiedzialnością, headquartered in Gdańsk, at Trzy Lipy 3, 80-172 Gdańsk (which also serves as the delivery address), entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Gdańsk – Północ in Gdańsk, VII Commercial Division of the National Court Register, under KRS number 0000762145, NIP 9571111921, REGON 382009686, with a share capital of 6,550.00 PLN, fully paid-up.

Email address: office@aronpharma.pl

Contact phone number: (+48) 58 55 18 545 (charged as per standard rates – according to the relevant operator’s price list)

hereinafter referred to as the "Administrator."

The personal data of our Customers (hereinafter referred to as "Personal Data") is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ EU L 119, p. 1) (also referred to as "GDPR") and other currently applicable legal provisions on data protection.

The Administrator takes particular care to protect the interests of persons whose data is processed, ensuring that the data collected is:

  • processed lawfully, fairly, and transparently for the person concerned;
  • collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
  • adequate, relevant, and limited to what is necessary for the purposes for which it is processed;
  • accurate and, where necessary, kept up to date;
  • stored in a form that permits the identification of the person concerned for no longer than is necessary for the purposes for which the data is processed;
  • processed in a manner that ensures appropriate security of Personal Data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

§ 2. Purposes of Personal Data Processing

Possible purposes for processing the Personal Data of our online store's Customers include, in particular:

  • enabling our Customers to set up a Customer Account (your data is processed to maintain your Account, allowing you to enjoy the benefits it offers, such as placing orders without having to fill out forms each time, accessing order history, managing your consents on the website, etc., and using other services available on our site);
  • accepting orders, concluding, and executing Sales Agreements or taking actions at the request of a future Customer before concluding it (your personal data is necessary for fulfilling your order and performing the concluded contract – in particular, confirming its submission, reserving or sending the selected product(s) to you, as well as contacting you if necessary);
  • accepting and processing complaints;
  • presenting advertisements, offers, or promotions by the Administrator and its partners intended for all or some recipients, especially for executing the Newsletter service agreement;
  • maintaining a blog;
  • assessing and analyzing Customer activity and information, including within the framework of automated Personal Data processing (profiling), to present general advertisements, offers, or promotions related to products offered by the Administrator or its partners in a manner tailored to the interests of the given Customer (without significantly influencing their decisions), especially for executing the Newsletter service agreement, as well as for market and statistical analysis purposes;
  • pursuing claims and defending against claims, including third-party claims;
  • fulfilling legal obligations arising from regulations, especially tax and accounting regulations, issuing legally required documentation;
  • corresponding with Customers, including responding to Customer inquiries.

The Administrator may process the following Personal Data of Customers, in particular:

  • personal data provided in the registration form when setting up an Account, placing Orders (especially: first and last name; email address; contact phone number; address [street, house number, apartment number, postal code, city, country], residence/business address/headquarters [if different from the delivery address], bank account number, and for non-consumer Customers, additionally the company name and tax identification number [NIP]) and other data collected during the use of our Online Store;
  • personal data provided to use the Newsletter service, provided when using the contact form, or provided when submitting complaints;
  • personal data provided via the blog;
  • other data, including in particular data obtained based on Customer activity on the Internet, in mobile applications, including those obtained via the Online Store or other communication channels with the Customer, using cookies and similar technology.

Providing Personal Data is generally voluntary, but it is necessary to place an Order and its proper settlement, i.e., to conclude and perform a Sales Agreement, register an Account, sign up for the Newsletter service, or use other options offered by our store.

The consequence of not providing Personal Data may be the inability to perform the above actions.

§ 3. Legal Bases for Processing Personal Data

The legal basis for processing the Customer's Personal Data is primarily:

  • the performance of a contract to which they are a party or the need to take action at their request before its conclusion (legal basis: Art. 6(1)(b) GDPR) – this primarily concerns Personal Data provided in registration forms, when placing orders and concluding sales contracts, submitting complaints for the purpose of handling the complaint process, as well as when signing up for the Newsletter service;
  • the fulfillment of legal obligations imposed on the Administrator in connection with concluded and performed contracts, as well as in connection with conducted activities, including, in particular, in the field of tax obligations, accounting, i.e., preparing accounting and tax documentation or other in accordance with applicable regulations, providing information at the request of authorized institutions and authorities (legal basis: Art. 6(1)(c) GDPR);
  • pursuing any potential claims and compensations (including debt collection activities), conducting legal disputes, as well as defending against claims, which constitutes the realization of the Administrator's legitimate interest (legal basis: Art. 6(1)(f) GDPR);
  • gathering evidence in the event of the need to demonstrate facts, which constitutes the realization of the Administrator's legitimate interest (legal basis: Art. 6(1)(f) GDPR);
  • conducting marketing activities, including acquiring and retaining customers, contractors, business partners, offering products by the Administrator or entities cooperating with the Administrator in handling transactions/contracts in accordance with applicable regulations, which constitutes the realization of the Administrator's legitimate interest or is done based on the consent given (legal basis: Art. 6(1)(f) and (a) GDPR);
  • creating statistics, market and business analyses, as well as reporting, which constitutes the realization of the Administrator's legitimate interest (legal basis: Art. 6(1)(f) GDPR);
  • voluntarily given consents (legal basis: Art. 6(1)(a) GDPR);
  • necessity for other purposes not mentioned above resulting from the legitimate interests pursued by the Administrator or by a third party, particularly for the purpose of establishing, pursuing, or defending claims, corresponding with Customers, responding to Customer inquiries, also through contact forms (legal basis: Art. 6(1)(f) GDPR).